last executing test programs:

4.791698673s ago: executing program 1 (id=758):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x2)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="90", 0x1}], 0x1, 0x0, 0x0, 0x8801}}], 0x1, 0x20004031)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000060000000000000000010073797a30020000000900020073790001800c0001007061796c6f6164001c0002800800044000000001"], 0x84}}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060)

3.956458631s ago: executing program 0 (id=770):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xb0}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8b", 0x6}], 0x2}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'})

3.799852629s ago: executing program 0 (id=773):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1b8}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8baf00b118df1ac0", 0xd}], 0x2}}], 0x2, 0x404c041)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.543821115s ago: executing program 0 (id=777):
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000580)={'vlan0\x00', @remote})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)
ptrace$cont(0x7, r4, 0xffc0000000000000, 0x800)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.403668842s ago: executing program 3 (id=778):
unshare(0x62040200)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100)=0x5, 0xf, 0x2)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0x4)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="440000001400010000000000000000000200000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e099"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
unshare(0x62040200) (async)
socket$key(0xf, 0x3, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x14) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100)=0x5, 0xf, 0x2) (async)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000800) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="440000001400010000000000000000000200000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e099"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

3.403406411s ago: executing program 1 (id=779):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x60000)
r1 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x1, 0x80)
read$hidraw(r1, &(0x7f0000000200)=""/258, 0x102)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x2, {0x0, 0x1}, {0x61, 0x2}, @cond=[{0x5, 0xffff, 0x6, 0x8003, 0x3ecb, 0x9}, {0x0, 0xd83c, 0x4, 0x4, 0x1ab1, 0xe00}]})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140))
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

3.157023729s ago: executing program 0 (id=780):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x98}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x2}}], 0x2, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.099150335s ago: executing program 1 (id=781):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xb0}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8b", 0x6}], 0x2}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'})

3.091032975s ago: executing program 0 (id=782):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000010000)=@sack_info={r3, 0x3, 0x1}, &(0x7f0000010040)=0xc)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000060001c0"])

2.975936377s ago: executing program 0 (id=783):
prctl$PR_PAC_RESET_KEYS(0x36, 0x8)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=@newtaction={0x414, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x400, 0x1, [@m_ipt={0x2e0, 0x17, 0x0, 0x0, {{0x8}, {0x224, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xc1, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b1429edc4d6891b8d39befc710e9c75516630e3e98a6e53b1b48adfac4d6810fc87a9d1c6d5cd60950abcee1a09e607162377fc077b021b631c0ab8b4bed8215df790a00f262b9f7504ea37f3340df7ac59a8bc62113dc72af5436d9d1b4cc44423deeeb380558c602e9d5233afd99880f4662b4f5c3dfc90f1c6db7f91574cc904196c81dcac395e04cd741585c2bf17eaea"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x11c, 0x5, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x89, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1decc"}}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf114b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x414}}, 0x4000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000035c0)=ANY=[@ANYBLOB="01b8ec0000000000080000000200080001000000d8eaf623c10e0f480006004000"/44])
recvmsg$can_raw(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000b00)=""/76, 0x4c}, {&(0x7f0000000b80)=""/145, 0x91}], 0x2}, 0x40020001)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
write$sndseq(r5, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}], 0x1c)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000380)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000000)={0x200, [[0x7fff], [0x2, 0x0, 0x0, 0x0, 0x0, 0xecdc, 0x0, 0xda44], [0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0xfffffffe}, {}, {0x0, 0x1}, {0x7fb, 0x7fc}, {}, {0x0, 0x6}, {0x0, 0x2}, {}, {}, {0x4}, {}, {0xe}], '\x00', 0x0, 0x0, 0x0, 0x2})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xc1, 0xd0, 0xa3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f26f936"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xa, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xa0, 0x8b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x9, 0x22}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xd4, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x0, 0x56, 0xa, 0x2, 0x8, 0x6}, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="57d95b667b7e30f31c88c78e4de42b050f08000103104b000000000000000000000000007dfdec48c1d88111e0d53c960adbfc19a5fde1831b3b963d11094174c8fb62fefabb2f9ee7acd863c7b321eb2b38e261f2e06bdcecf57c6f198def1aad9d1407c497210714bcced7e10b5f0f817ed5eedb0a6f90c4becd0c2b7ae7f9a79d53d5677c1eea69186618cdbb05b4139b88c219a5bb79c6584d59fccb391ef4ed08488c5deb724f9b37406c8dba48026178676a7d6d80f75e1c00ac69190cad052cfa510756da48168f728b69341f22e687d4e6004ed40f78079bbbc19f4f7843af999fd2736a44ad0bfd5e"], 0x7, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x425}}, {0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="3a03d9cd8338cb35bcb79826e88c4297fc24d526970e95e481651fcc49d4894bbdd35db352e6e68f707cef4be713df588b3ffee4c2e48fa0e0dc1da94be65e2565596d080d8c67389f5d049708d2b28fdf5f2c443e823c0a36fb67cc001e4d7aa7bb3da354b498355d6fccbe4d5b891869332a557dca1f914347ffec5363e0d008382160d6325000850569e025b996ddcada7a5c2e8b95bf27f736529faadf3617ec1565dbe346024148f8447e99cb3f40df1a023a3f"]}, {0xb4, &(0x7f0000000700)=ANY=[@ANYBLOB="b403539173e3c743157242221e66d05f069d9e925db1d2f3f02627dc1575379b42041b1b957f48b2731f8d46ef6829b4c5dde5e6853c19e76222e8a34bcec787d3514467a8a72445306f9c9e15f10e264f4c8ce10fd8c4352fefed04eecc4f67085264eb4fcf5f6ae21ecaeb4e5f690635d080bd84c2b3df581c6cae0942d0c1008526e440960e41f38e38c1d36e57e9e360a47b3845a5f2aead91e206039c993cc82bce8e9ce2db3d1a36fe3e5770652da3af37"]}, {0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="9703402d7fb7e96f5225ed5726009049c26606042492deef68fcb5920fddd15176a42bbfd884090baa73413a86f1edeb16e53e2247908ceaa95cce56484fdaf71eafaeb858bee15fb5ba8d2b2dbbd7d2f1399c84ce37fffc07503194c3d5c888810163fb8f3a4896f9936a4e842838f9d485e81ebdce1e4ffa77d3817ca0cb74df76dc88f2d8e6fa5edf3554f9b320fa454f2cb433841fe32d1c7f99b00061ccae3c88922789"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x40c}}, {0x79, &(0x7f0000000e80)=@string={0x79, 0x3, "ba9897c71be2ae0d4526bc2178f395bbfd0f01697966aef42e89e0e0e2b7edcd161a850db33b92b36f5bd52392b2685a280da07ac3703cae29079255e3007d4f226e2d780298e421e9e16a74f0bd020d7eba9c2a21fa1623cc125cab8768aafc12d2f7868601b1f2e8fa78d82efb690100000000000000"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x43f}}]})
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)

2.975493375s ago: executing program 1 (id=784):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xb0}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x1}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.913588259s ago: executing program 1 (id=785):
openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0xed, 0x2}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)
ioctl(r0, 0x8b1b, &(0x7f0000000040))

2.725157045s ago: executing program 1 (id=787):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7}]}) (async)
open(0x0, 0x402801, 0x8) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0002040000080904000065d4695e000905", @ANYRESDEC], 0x0)

2.489308786s ago: executing program 2 (id=791):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0xc3, 0xfffa}, 0x3d, [0x6, 0xc95a, 0x3, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x2, 0x4d, 0xb54a, 0x5f, 0xa, 0x0, 0xffff2d37, 0x5dd2, 0x6, 0x7, 0x100, 0x80000001, 0x79, 0xb, 0x3, 0x3c57, 0x1, 0x10000, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x97, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0xa, 0xa, 0x103, 0x0, 0x6, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x7fff, 0x6, 0x0, 0x80, 0x0, 0xc, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0x3ff, 0xd, 0x2bf, 0x6c9, 0x1ff, 0x4, 0x3, 0x20000, 0x7, 0x1, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x4, 0x400, 0x1, 0x2, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176be, 0x2, 0x7f, 0x9, 0x8, 0x6, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64f, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x103, 0x4, 0x12, 0xffffffff, 0xe, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x80000002, 0x6, 0xfffffffb, 0x11fffe, 0x3, 0xe0000020, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0xd0, 0x3, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x800000, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0x103, 0xffff, 0x5, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x1ff, 0x101, 0x3, 0x80000001, 0x8, 0x2b91, 0x3, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)={{0x4, 0x0, 0x80, {0x2, 0x80a0000, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd805b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30bfdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f0050079601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5820a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac980acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de628d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00f1b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e55037859293e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b49da1b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd41d704bbdba7d282aac778b7ec769ef984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a5518b3c1de451f220c418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbe06eeacbde077cc6ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c91e0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec6002000000000000002e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122805326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
ptrace(0x10, 0x0)
r5 = fcntl$getown(0xffffffffffffffff, 0x9)
ptrace(0x4210, r5)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x3, 0x208, 0x6, 0x40, 0x2, 0x5, 0xc}, &(0x7f0000000540)=0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="402345000000451161635d2ce9daa7602630c686377369efa824c3371300000000b009001000000000007708dfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000680))
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000840)="742d78eb80d156862ed77e8182688e02b7dba94794a40664fd9596de486457f7bcbbb577b5f815fcde85fbd9f20c946b34e70ecd3fd46227fafaa98b8468e841349c9a54cd9e17cf35e69c8f41b16b5af342b2dc0eb3415896c471b9692ac5bc28faabcbbba02d815fc9e9358ea0fdd613c2d9191ce57deb7d6c4885ab9867c3437ed59cd7c315cf40eb7146a615f80202d5f0278a2e8422a79f254cb688f486454a2da2", 0xa4}, {&(0x7f0000000900)="a591e7959b7a205a98cd11c5d774b4891daef2653154d69920324952d054731aa826cd92f4e1bd916d389b346f26d39a29319b15e3577a661d9eb95ba999be8ccfce087050a2118bceccee9daa13f6099b766ecd9a367ffea4a2a295a7321b80714842add263298fd4d2fb841db44c9ca32640bd85", 0x75}, {&(0x7f0000000a00)="d29696bd457e19420330d58d2f16eccd1fe2e28662ea224787fde6f8e7c02405c1", 0x21}], 0x4}}], 0x1, 0x4000000)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x9}, 0xc)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000200)="b62590ea39", 0x5}, {&(0x7f0000000240)="c76cdaf75049d6b9f507cbfdab1ed568c6191b95e0fa489bdf21a3f019c9dc262c10647d36c055704d4525c4b9ac928f84dea9ff9e0ac863dfff326fe531e65cb40e849305c8477bab88ad69a168588f5d50567296acf5768447ce23d218e38ad3bdc01eacbf58db9327d51604ad548a6204f255704efb0588b1834fcd3bdffb3575034160", 0x85}, {&(0x7f0000000300)="86372d6ad9156bb88dd5ea32040bec24f37412a14b49f529f2e89f9a7a6336381d3d3751aeca06ddcdd2137c258cbf0a49fb3c8ed47003883524f4e563285c5e770b0d89225b68315e5c1f8063913ab08c2c6ce3b159a93a9fb421f3e1c1bf353109041275c2122e77a6da27202a687f96ae95aeadce4b88f3f3aa725d7374b9e39731fa5b2eec8364ef0946b9fb2ce9c027dfa63684a5bacafe625fef98e03b74481847738fb68824d3009bf686df93323271f5bbdbf025f5559b", 0xbb}], 0x5, 0x0, 0x118, 0x4040000}, 0x4)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2.247592327s ago: executing program 3 (id=792):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001313ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)

2.193173703s ago: executing program 3 (id=793):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xb0}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x1}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.136370621s ago: executing program 3 (id=794):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xb0}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8b", 0x6}], 0x2}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'})

2.048005255s ago: executing program 3 (id=795):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00')

761.473578ms ago: executing program 2 (id=796):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x13, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1b8}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8baf00b118df", 0xb}], 0x2}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

726.259347ms ago: executing program 2 (id=797):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2])
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) (fail_nth: 3)

235.703054ms ago: executing program 2 (id=798):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"])
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007})

122.636748ms ago: executing program 2 (id=799):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x98}}], 0x1, 0x810)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x2}}], 0x2, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

46.756083ms ago: executing program 3 (id=800):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x400003, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x3, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x9, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0xa, 0x0, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x9, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x100, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x10007, 0x1, 0xdc7a, 0xe8, 0x8, 0xfffffff7, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x3, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r4, 0x0, 0x12, 0x12022, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x40, 0xe}, 0x0, 0x0})
syz_usb_control_io(r5, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x40, 0x24, 0x44, {0x44, 0x4, "c0ac20ba86174f1b86bf82b9a479462418a15905285bccd748ad56ac3fc98c3b8bfb410b55785a189c69d625e389ed145b52fc93091aac7f87d37742871776e7bae6"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f00000005c0)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0xb, 0x0, 0x2, 0x4}, @generic={0x4, 0x10, 0x3, '3'}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x92, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x4, 0x7e4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x4, 0x12, 0x6, 0x6}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x1, 0xcb, 0x1, "fd680b2a", "564b29e4"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0xac61c5f028850eb3, 0x7, 0x6, 0x5, 0x3, 0x6}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000700)={0x20, 0xf, 0x38, "afcbbbe34c360c468dccce882fd9227724ae4dad9cce54d0eafd9ea85313d3f3d8fd9afe9ebeecf567b4d5cb02fe6efb6546c0c23bce5126"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x20, 0x80, [0x0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xc}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "12b3"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x17, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "e49a"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xe1}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0xd}})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})

0s ago: executing program 2 (id=801):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffffe, 0x133840)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9, {0x38, 0x6, 0x400, 0xfffffffe}, {0x210001, 0x80, 0x8bb4d08f, 0xfdfd}, {0x802, 0x7}})

kernel console output (not intermixed with test programs):

6913]  kmem_cache_alloc_noprof+0x88/0x700
[  109.179372][ T6913]  ? skb_clone+0x212/0x3a0
[  109.179394][ T6913]  skb_clone+0x212/0x3a0
[  109.179408][ T6913]  ? ip6_finish_output2+0x476/0x1480
[  109.179427][ T6913]  ip6_finish_output2+0x48a/0x1480
[  109.179455][ T6913]  ? __pfx_ip6_finish_output2+0x10/0x10
[  109.179472][ T6913]  ? ip6_mtu+0x7d/0x490
[  109.179492][ T6913]  ? ip6_mtu+0x38c/0x490
[  109.179514][ T6913]  ? ip6_finish_output+0x2ef/0x4e0
[  109.179536][ T6913]  ? ip6_output+0x126/0x550
[  109.179557][ T6913]  ip6_output+0x340/0x550
[  109.179584][ T6913]  ip6_mr_output+0x4e9/0x1100
[  109.179606][ T6913]  ? ip6_mr_output+0x1ca/0x1100
[  109.179623][ T6913]  ? __pfx_ip6_mr_output+0x10/0x10
[  109.179643][ T6913]  ? __ip6_local_out+0x609/0x870
[  109.179665][ T6913]  ? __ip6_local_out+0x82c/0x870
[  109.179686][ T6913]  ? __ip6_local_out+0x609/0x870
[  109.179717][ T6913]  ? skb_dst+0x4f/0xd0
[  109.179739][ T6913]  ? dst_output+0x17b/0x1c0
[  109.179755][ T6913]  ? ip6_send_skb+0x10f/0x390
[  109.179779][ T6913]  ip6_send_skb+0x1d5/0x390
[  109.179806][ T6913]  udp_v6_send_skb+0xc17/0x1830
[  109.179847][ T6913]  udpv6_sendmsg+0x1d62/0x2510
[  109.179880][ T6913]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  109.179910][ T6913]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  109.179936][ T6913]  ? __pfx___might_resched+0x10/0x10
[  109.179954][ T6913]  ? stack_depot_save_flags+0x40/0x860
[  109.179988][ T6913]  ? aa_sk_perm+0x81c/0x950
[  109.180031][ T6913]  ? inet_send_prepare+0x5c/0x270
[  109.180050][ T6913]  ? inet6_sendmsg+0xe4/0x120
[  109.180070][ T6913]  __sock_sendmsg+0xe5/0x270
[  109.180092][ T6913]  ____sys_sendmsg+0x52d/0x870
[  109.180113][ T6913]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.180139][ T6913]  ? import_iovec+0x74/0xa0
[  109.180159][ T6913]  ___sys_sendmsg+0x21f/0x2a0
[  109.180177][ T6913]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.180236][ T6913]  ? __might_fault+0xb0/0x130
[  109.180264][ T6913]  __sys_sendmmsg+0x227/0x430
[  109.180287][ T6913]  ? __pfx___sys_sendmmsg+0x10/0x10
[  109.180313][ T6913]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  109.180352][ T6913]  ? ksys_write+0x22a/0x250
[  109.180377][ T6913]  ? __pfx_ksys_write+0x10/0x10
[  109.180406][ T6913]  __x64_sys_sendmmsg+0xa0/0xc0
[  109.180426][ T6913]  do_syscall_64+0xfa/0xfa0
[  109.180445][ T6913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.180461][ T6913]  ? clear_bhb_loop+0x60/0xb0
[  109.180481][ T6913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.180496][ T6913] RIP: 0033:0x7f761238f749
[  109.180511][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.180524][ T6913] RSP: 002b:00007f76132ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  109.180542][ T6913] RAX: ffffffffffffffda RBX: 00007f76125e5fa0 RCX: 00007f761238f749
[  109.180555][ T6913] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003
[  109.180566][ T6913] RBP: 00007f76132ca090 R08: 0000000000000000 R09: 0000000000000000
[  109.180575][ T6913] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002
[  109.180585][ T6913] R13: 00007f76125e6038 R14: 00007f76125e5fa0 R15: 00007ffcd4efc8e8
[  109.180615][ T6913]  </TASK>
[  109.662694][ T6920] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.364'.
[  109.668591][ T6924] netlink: 'syz.1.366': attribute type 44 has an invalid length.
[  109.813929][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  109.873378][ T5913] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  109.943446][ T6248] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  109.951120][    T9] usb 1-1: device descriptor read/64, error -71
[  110.035113][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.050942][ T5913] usb 3-1: config 0 has no interfaces?
[  110.066311][ T5913] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  110.075432][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.083528][ T6248] usb 2-1: device descriptor read/64, error -71
[  110.090015][ T5913] usb 3-1: Product: syz
[  110.096263][ T5913] usb 3-1: Manufacturer: syz
[  110.100866][ T5913] usb 3-1: SerialNumber: syz
[  110.107814][ T5913] usb 3-1: config 0 descriptor??
[  110.193946][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  110.282139][ T6939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.370'.
[  110.321891][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'.
[  110.333663][ T6248] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  110.347248][    T9] usb 1-1: device descriptor read/64, error -71
[  110.349586][ T5881] usb 3-1: USB disconnect, device number 16
[  110.372406][ T6941] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.371'.
[  110.473401][ T6248] usb 2-1: device descriptor read/64, error -71
[  110.480450][    T9] usb usb1-port1: attempt power cycle
[  110.593678][ T6248] usb usb2-port1: attempt power cycle
[  110.823342][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  110.844297][    T9] usb 1-1: device descriptor read/8, error -71
[  110.907300][ T6951] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.375'.
[  110.933400][ T6248] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  110.955604][ T6248] usb 2-1: device descriptor read/8, error -71
[  110.993885][ T6955] Invalid logical block size (65533)
[  111.083340][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  111.103878][    T9] usb 1-1: device descriptor read/8, error -71
[  111.193371][ T6248] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  111.213771][    T9] usb usb1-port1: unable to enumerate USB device
[  111.220342][ T6248] usb 2-1: device descriptor read/8, error -71
[  111.281942][ T6962] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.380'.
[  111.337930][ T6248] usb usb2-port1: unable to enumerate USB device
[  111.643352][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  111.813365][ T5881] usb 3-1: Using ep0 maxpacket: 16
[  111.820609][ T5881] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  111.830828][ T5881] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.842248][ T5881] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.852009][ T5881] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  111.873311][ T5881] usb 3-1: config 7 interface 0 has no altsetting 0
[  111.879939][ T5881] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  111.889759][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.943883][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  112.106510][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.116811][ T5914] usb 4-1: config 0 has no interfaces?
[  112.125691][ T5914] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  112.137634][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.146074][ T5914] usb 4-1: Product: syz
[  112.150344][ T5914] usb 4-1: Manufacturer: syz
[  112.155725][ T5914] usb 4-1: SerialNumber: syz
[  112.168515][ T5914] usb 4-1: config 0 descriptor??
[  112.331987][ T5881] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0004/input/input16
[  112.345083][   T30] audit: type=1800 audit(1763669003.734:2): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.388" name="bus" dev="tmpfs" ino=438 res=0 errno=0
[  112.387797][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[  112.430119][    T9] usb 4-1: USB disconnect, device number 13
[  112.514696][ T6987] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.389'.
[  112.551078][ T5881] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  112.596056][ T5881] usb 3-1: USB disconnect, device number 17
[  113.063371][ T6248] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  113.234092][ T6248] usb 1-1: Using ep0 maxpacket: 16
[  113.250954][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.277995][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.291414][ T6248] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  113.306161][ T6248] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  113.315785][ T6248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.335434][ T6248] usb 1-1: config 0 descriptor??
[  113.546258][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.557319][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.653356][ T5881] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  113.761531][ T7035] input: syz1 as /devices/virtual/input/input17
[  113.775483][ T7035] FAULT_INJECTION: forcing a failure.
[  113.775483][ T7035] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.792085][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.2.410 Not tainted syzkaller #0 PREEMPT(full) 
[  113.792106][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  113.792115][ T7035] Call Trace:
[  113.792122][ T7035]  <TASK>
[  113.792129][ T7035]  dump_stack_lvl+0x189/0x250
[  113.792153][ T7035]  ? __pfx____ratelimit+0x10/0x10
[  113.792171][ T7035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.792191][ T7035]  ? __pfx__printk+0x10/0x10
[  113.792209][ T7035]  ? __might_fault+0xb0/0x130
[  113.792242][ T7035]  should_fail_ex+0x414/0x560
[  113.792267][ T7035]  _copy_from_user+0x2d/0xb0
[  113.792284][ T7035]  input_event_from_user+0xb2/0x280
[  113.792302][ T7035]  ? __pfx_input_event_from_user+0x10/0x10
[  113.792324][ T7035]  ? input_event+0xc7/0xe0
[  113.792346][ T7035]  uinput_write+0x279/0xfc0
[  113.792374][ T7035]  ? __pfx_uinput_write+0x10/0x10
[  113.792393][ T7035]  ? bpf_lsm_file_permission+0x9/0x20
[  113.792409][ T7035]  ? security_file_permission+0x75/0x290
[  113.792430][ T7035]  ? rw_verify_area+0x255/0x4d0
[  113.792451][ T7035]  ? __lock_acquire+0xab9/0xd20
[  113.792466][ T7035]  ? __pfx_uinput_write+0x10/0x10
[  113.792484][ T7035]  vfs_write+0x27e/0xb30
[  113.792522][ T7035]  ? __pfx_vfs_write+0x10/0x10
[  113.792546][ T7035]  ? __fget_files+0x2a/0x420
[  113.792568][ T7035]  ? __fget_files+0x2a/0x420
[  113.792583][ T7035]  ? __fget_files+0x3a0/0x420
[  113.792600][ T7035]  ? __fget_files+0x2a/0x420
[  113.792626][ T7035]  ksys_write+0x145/0x250
[  113.792652][ T7035]  ? __pfx_ksys_write+0x10/0x10
[  113.792679][ T7035]  ? do_syscall_64+0xbe/0xfa0
[  113.792702][ T7035]  do_syscall_64+0xfa/0xfa0
[  113.792721][ T7035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.792737][ T7035]  ? clear_bhb_loop+0x60/0xb0
[  113.792756][ T7035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.792771][ T7035] RIP: 0033:0x7f2f1538f749
[  113.792786][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.792799][ T7035] RSP: 002b:00007f2f135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  113.792817][ T7035] RAX: ffffffffffffffda RBX: 00007f2f155e5fa0 RCX: 00007f2f1538f749
[  113.792829][ T7035] RDX: 000000000000045c RSI: 0000200000000080 RDI: 0000000000000004
[  113.792839][ T7035] RBP: 00007f2f135f6090 R08: 0000000000000000 R09: 0000000000000000
[  113.792848][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  113.792857][ T7035] R13: 00007f2f155e6038 R14: 00007f2f155e5fa0 R15: 00007ffcb746c568
[  113.792885][ T7035]  </TASK>
[  114.051304][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.061469][ T5881] usb 2-1: config 0 has no interfaces?
[  114.069627][ T5881] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  114.078966][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.086997][ T5881] usb 2-1: Product: syz
[  114.091229][ T5881] usb 2-1: Manufacturer: syz
[  114.096804][ T5881] usb 2-1: SerialNumber: syz
[  114.105436][ T5881] usb 2-1: config 0 descriptor??
[  114.182470][ T6248] usbhid 1-1:0.0: can't add hid device: -71
[  114.189258][ T6248] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  114.199853][ T6248] usb 1-1: USB disconnect, device number 21
[  114.329496][  T860] usb 2-1: USB disconnect, device number 19
[  114.394168][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  114.543332][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  114.551424][ T5913] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  114.559823][ T5913] usb 3-1: config 0 has no interface number 0
[  114.566035][ T5913] usb 3-1: config 0 interface 184 has no altsetting 0
[  114.576792][ T5913] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  114.586071][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.594153][ T5913] usb 3-1: Product: syz
[  114.598354][ T5913] usb 3-1: Manufacturer: syz
[  114.603953][ T5913] usb 3-1: SerialNumber: syz
[  114.614682][ T5913] usb 3-1: config 0 descriptor??
[  114.623157][ T5913] smsc75xx v1.0.0
[  114.696379][ T7053] netlink: 'syz.3.419': attribute type 10 has an invalid length.
[  114.710198][ T7053] netlink: 152 bytes leftover after parsing attributes in process `syz.3.419'.
[  114.801697][ T7057] input: syz1 as /devices/virtual/input/input18
[  115.393403][ T5881] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  115.449301][ T7037] ubi31: attaching mtd0
[  115.453921][ T7037] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66)
[  115.503920][    T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  115.563324][ T5881] usb 4-1: Using ep0 maxpacket: 32
[  115.570975][ T5881] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  115.579414][ T5881] usb 4-1: config 0 has no interface number 0
[  115.587357][ T5881] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  115.596539][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.604606][ T5881] usb 4-1: Product: syz
[  115.608762][ T5881] usb 4-1: Manufacturer: syz
[  115.614507][ T5881] usb 4-1: SerialNumber: syz
[  115.621640][ T5881] usb 4-1: config 0 descriptor??
[  115.629236][ T5881] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  115.657287][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.668789][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  115.680009][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  115.690868][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64
[  115.701694][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  115.716150][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.725450][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  115.733498][    T9] usb 1-1: SerialNumber: syz
[  115.742077][ T7082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.749819][ T7082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.759462][ T7082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.832932][ T5881] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  115.851008][ T5881] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  115.869305][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  115.970565][ T7082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.978120][ T7082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.985430][ T7082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  116.237569][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  116.245514][ T5881] usb 4-1: USB disconnect, device number 14
[  116.256710][ T5881] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  116.278877][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  116.302621][ T5881] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  116.304034][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  116.325543][ T5881] quatech2 4-1:0.51: device disconnected
[  116.334484][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  116.353404][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  116.366100][ T5913] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  116.388644][ T5913] usb 3-1: USB disconnect, device number 18
[  116.411227][    T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  116.957523][ T5913] usb 1-1: USB disconnect, device number 22
[  116.982336][ T5913] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  117.303779][  T926] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  117.325518][ T7118] kvm: pic: non byte write
[  117.489196][  T926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.532415][  T926] usb 4-1: config 0 has no interfaces?
[  117.552146][  T926] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  117.560505][ T7133] @: renamed from vlan0 (while UP)
[  117.563301][  T926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.575050][  T926] usb 4-1: Product: syz
[  117.579221][  T926] usb 4-1: Manufacturer: syz
[  117.585563][  T926] usb 4-1: SerialNumber: syz
[  117.604583][  T926] usb 4-1: config 0 descriptor??
[  117.643736][ T5881] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  117.824959][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.839897][    T9] usb 4-1: USB disconnect, device number 15
[  117.854674][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  117.877303][ T5881] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  117.897891][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  117.906467][ T5881] usb 3-1: SerialNumber: syz
[  118.200038][ T7161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.453444][ T5914] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  118.462868][ T7171] FAULT_INJECTION: forcing a failure.
[  118.462868][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.477405][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(full) 
[  118.477427][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.477437][ T7171] Call Trace:
[  118.477444][ T7171]  <TASK>
[  118.477451][ T7171]  dump_stack_lvl+0x189/0x250
[  118.477475][ T7171]  ? __pfx____ratelimit+0x10/0x10
[  118.477497][ T7171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.477517][ T7171]  ? __pfx__printk+0x10/0x10
[  118.477545][ T7171]  should_fail_ex+0x414/0x560
[  118.477569][ T7171]  _copy_from_user+0x2d/0xb0
[  118.477585][ T7171]  copy_folio_from_user+0x1e4/0x320
[  118.477613][ T7171]  mfill_atomic_copy+0xfe1/0x13f0
[  118.477644][ T7171]  ? __pfx_mfill_atomic_copy+0x10/0x10
[  118.477673][ T7171]  userfaultfd_ioctl+0x2a01/0x4c80
[  118.477697][ T7171]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  118.477716][ T7171]  ? security_file_ioctl+0xcb/0x2d0
[  118.477732][ T7171]  ? __se_sys_ioctl+0x47/0x170
[  118.477750][ T7171]  ? do_syscall_64+0xfa/0xfa0
[  118.477766][ T7171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.477785][ T7171]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  118.477831][ T7171]  ? kasan_quarantine_put+0xdd/0x220
[  118.477854][ T7171]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.477880][ T7171]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  118.477903][ T7171]  ? do_vfs_ioctl+0xbe8/0x1430
[  118.477924][ T7171]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  118.477943][ T7171]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  118.478000][ T7171]  ? __fget_files+0x2a/0x420
[  118.478022][ T7171]  ? __fget_files+0x3a0/0x420
[  118.478040][ T7171]  ? __fget_files+0x2a/0x420
[  118.478067][ T7171]  ? bpf_lsm_file_ioctl+0x9/0x20
[  118.478084][ T7171]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  118.478103][ T7171]  __se_sys_ioctl+0xfc/0x170
[  118.478127][ T7171]  do_syscall_64+0xfa/0xfa0
[  118.478147][ T7171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.478162][ T7171]  ? clear_bhb_loop+0x60/0xb0
[  118.478182][ T7171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.478197][ T7171] RIP: 0033:0x7f574d38f749
[  118.478212][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.478225][ T7171] RSP: 002b:00007f574e154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  118.478242][ T7171] RAX: ffffffffffffffda RBX: 00007f574d5e5fa0 RCX: 00007f574d38f749
[  118.478254][ T7171] RDX: 0000200000000100 RSI: 00000000c028aa03 RDI: 0000000000000003
[  118.478265][ T7171] RBP: 00007f574e154090 R08: 0000000000000000 R09: 0000000000000000
[  118.478274][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  118.478283][ T7171] R13: 00007f574d5e6038 R14: 00007f574d5e5fa0 R15: 00007fff5bcee148
[  118.478310][ T7171]  </TASK>
[  118.863359][ T5914] usb 1-1: device descriptor read/64, error -71
[  119.103354][ T5914] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  119.106585][ T7190] evm: overlay not supported
[  119.233928][ T5914] usb 1-1: device descriptor read/64, error -71
[  119.323598][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  119.363610][ T5914] usb usb1-port1: attempt power cycle
[  119.453368][    T9] usb 4-1: device descriptor read/64, error -71
[  119.493349][ T5913] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  119.645088][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.655560][ T5913] usb 2-1: config 0 has no interfaces?
[  119.663157][ T5913] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  119.672338][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.680540][ T5913] usb 2-1: Product: syz
[  119.684751][ T5913] usb 2-1: Manufacturer: syz
[  119.689348][ T5913] usb 2-1: SerialNumber: syz
[  119.694035][    T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  119.704410][ T5913] usb 2-1: config 0 descriptor??
[  119.723402][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  119.745489][ T5914] usb 1-1: device descriptor read/8, error -71
[  119.833381][    T9] usb 4-1: device descriptor read/64, error -71
[  119.927905][  T926] usb 2-1: USB disconnect, device number 20
[  119.944469][    T9] usb usb4-port1: attempt power cycle
[  120.003619][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  120.023915][ T5914] usb 1-1: device descriptor read/8, error -71
[  120.133579][ T5914] usb usb1-port1: unable to enumerate USB device
[  120.258725][ T5881] usb 3-1: 0:2 : does not exist
[  120.277281][ T5881] usb 3-1: unit 5: unexpected type 0x0d
[  120.283512][    T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  120.301237][ T5881] usb 3-1: USB disconnect, device number 19
[  120.305597][    T9] usb 4-1: device descriptor read/8, error -71
[  120.342724][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.407768][ T7201] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  120.553352][    T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  120.584137][    T9] usb 4-1: device descriptor read/8, error -71
[  120.694591][    T9] usb usb4-port1: unable to enumerate USB device
[  120.823340][ T5881] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  120.913339][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  120.973392][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  120.982046][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  120.997639][ T5881] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  121.006896][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  121.015077][ T5881] usb 3-1: Product: syz
[  121.019250][ T5881] usb 3-1: Manufacturer: syz
[  121.023928][ T5881] usb 3-1: SerialNumber: syz
[  121.030428][ T5881] usb 3-1: config 0 descriptor??
[  121.036847][ T7213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  121.045468][ T5881] hub 3-1:0.0: bad descriptor, ignoring hub
[  121.051378][ T5881] hub 3-1:0.0: probe with driver hub failed with error -5
[  121.065068][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.077154][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.090903][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  121.100109][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  121.108148][    T9] usb 2-1: SerialNumber: syz
[  121.306736][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.315624][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.330682][    T9] usb 2-1: 0:2 : does not exist
[  121.357785][    T9] usb 2-1: USB disconnect, device number 21
[  121.623384][  T926] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  121.795468][  T926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.807872][  T926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.818215][  T926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  121.831536][  T926] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  121.841502][  T926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.866532][  T926] usb 1-1: config 0 descriptor??
[  121.904119][ T7226] FAULT_INJECTION: forcing a failure.
[  121.904119][ T7226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.917247][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.1.461 Not tainted syzkaller #0 PREEMPT(full) 
[  121.917269][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.917280][ T7226] Call Trace:
[  121.917287][ T7226]  <TASK>
[  121.917294][ T7226]  dump_stack_lvl+0x189/0x250
[  121.917319][ T7226]  ? __pfx____ratelimit+0x10/0x10
[  121.917336][ T7226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.917356][ T7226]  ? __pfx__printk+0x10/0x10
[  121.917388][ T7226]  should_fail_ex+0x414/0x560
[  121.917413][ T7226]  _copy_to_user+0x31/0xb0
[  121.917424][ T7226]  do_bnep_sock_ioctl+0x4c5/0x670
[  121.917437][ T7226]  ? kasan_quarantine_put+0xdd/0x220
[  121.917458][ T7226]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  121.917474][ T7226]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  121.917500][ T7226]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  121.917531][ T7226]  sock_do_ioctl+0xdc/0x300
[  121.917554][ T7226]  ? __pfx_sock_do_ioctl+0x10/0x10
[  121.917577][ T7226]  sock_ioctl+0x576/0x790
[  121.917588][ T7226]  ? __pfx_sock_ioctl+0x10/0x10
[  121.917600][ T7226]  ? __fget_files+0x3a0/0x420
[  121.917610][ T7226]  ? __fget_files+0x2a/0x420
[  121.917623][ T7226]  ? bpf_lsm_file_ioctl+0x9/0x20
[  121.917640][ T7226]  ? __pfx_sock_ioctl+0x10/0x10
[  121.917659][ T7226]  __se_sys_ioctl+0xfc/0x170
[  121.917685][ T7226]  do_syscall_64+0xfa/0xfa0
[  121.917705][ T7226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.917717][ T7226]  ? clear_bhb_loop+0x60/0xb0
[  121.917728][ T7226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.917736][ T7226] RIP: 0033:0x7f761238f749
[  121.917746][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.917754][ T7226] RSP: 002b:00007f76132ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.917765][ T7226] RAX: ffffffffffffffda RBX: 00007f76125e5fa0 RCX: 00007f761238f749
[  121.917773][ T7226] RDX: 0000200000000680 RSI: 00000000800442d2 RDI: 0000000000000004
[  121.917784][ T7226] RBP: 00007f76132ca090 R08: 0000000000000000 R09: 0000000000000000
[  121.917795][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.917805][ T7226] R13: 00007f76125e6038 R14: 00007f76125e5fa0 R15: 00007ffcd4efc8e8
[  121.917834][ T7226]  </TASK>
[  122.144137][ T5895] usb 3-1: USB disconnect, device number 20
[  122.255383][ T7232] capability: warning: `syz.3.464' uses 32-bit capabilities (legacy support in use)
[  122.281483][  T926] usb 1-1: string descriptor 0 read error: -71
[  122.301172][  T926] usbhid 1-1:0.0: can't add hid device: -71
[  122.307209][  T926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  122.321623][ T7235] ucma_write: process 353 (syz.3.464) changed security contexts after opening file descriptor, this is not allowed.
[  122.333802][  T926] usb 1-1: USB disconnect, device number 27
[  122.474504][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  122.488967][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'.
[  122.626802][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.642051][ T5913] usb 2-1: config 0 has no interfaces?
[  122.651471][ T5913] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  122.661233][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.669389][ T5913] usb 2-1: Product: syz
[  122.675403][ T5913] usb 2-1: Manufacturer: syz
[  122.680093][ T5913] usb 2-1: SerialNumber: syz
[  122.688235][ T5913] usb 2-1: config 0 descriptor??
[  122.927259][  T926] usb 2-1: USB disconnect, device number 22
[  123.005855][ T7263] input: syz1 as /devices/virtual/input/input19
[  123.167729][ T7268] FAULT_INJECTION: forcing a failure.
[  123.167729][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.181551][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.3.480 Not tainted syzkaller #0 PREEMPT(full) 
[  123.181569][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  123.181575][ T7268] Call Trace:
[  123.181580][ T7268]  <TASK>
[  123.181584][ T7268]  dump_stack_lvl+0x189/0x250
[  123.181600][ T7268]  ? __pfx____ratelimit+0x10/0x10
[  123.181611][ T7268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.181622][ T7268]  ? __pfx__printk+0x10/0x10
[  123.181634][ T7268]  ? get_sigframe+0x596/0x7d0
[  123.181651][ T7268]  should_fail_ex+0x414/0x560
[  123.181665][ T7268]  _copy_to_user+0x31/0xb0
[  123.181675][ T7268]  copy_siginfo_to_user+0x22/0xc0
[  123.181686][ T7268]  x64_setup_rt_frame+0x776/0xd40
[  123.181710][ T7268]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  123.181728][ T7268]  arch_do_signal_or_restart+0x3d1/0x7a0
[  123.181742][ T7268]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  123.181762][ T7268]  ? exit_to_user_mode_loop+0x55/0x4f0
[  123.181774][ T7268]  exit_to_user_mode_loop+0x87/0x4f0
[  123.181783][ T7268]  ? rcu_is_watching+0x15/0xb0
[  123.181797][ T7268]  do_syscall_64+0x2e9/0xfa0
[  123.181809][ T7268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.181818][ T7268]  ? clear_bhb_loop+0x60/0xb0
[  123.181829][ T7268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.181838][ T7268] RIP: 0033:0x7f574d38f747
[  123.181847][ T7268] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  123.181854][ T7268] RSP: 002b:00007f574e154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  123.181865][ T7268] RAX: 0000000000000000 RBX: 00007f574d5e5fa0 RCX: 00007f574d38f749
[  123.181871][ T7268] RDX: 0000000000002020 RSI: 0000200000004580 RDI: 0000000000000004
[  123.181877][ T7268] RBP: 00007f574e154090 R08: 0000000000000000 R09: 0000000000000000
[  123.181882][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.181887][ T7268] R13: 00007f574d5e6038 R14: 00007f574d5e5fa0 R15: 00007fff5bcee148
[  123.181902][ T7268]  </TASK>
[  123.384130][ T5895] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  123.513954][ T7272] netlink: 'syz.1.482': attribute type 29 has an invalid length.
[  123.523085][ T7272] netlink: 'syz.1.482': attribute type 29 has an invalid length.
[  123.523580][ T5895] usb 1-1: device descriptor read/64, error -71
[  123.615306][ T7274] netlink: 596 bytes leftover after parsing attributes in process `syz.1.482'.
[  123.693721][ T5913] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  123.773482][ T5895] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  123.843366][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  123.851589][ T5913] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  123.863090][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  123.874139][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  123.884703][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  123.895456][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  123.908459][  T926] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  123.913529][ T5895] usb 1-1: device descriptor read/64, error -71
[  123.917215][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  123.931639][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.985020][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.490'.
[  124.023697][ T5895] usb usb1-port1: attempt power cycle
[  124.070011][  T926] usb 2-1: config index 0 descriptor too short (expected 50962, got 21)
[  124.078431][  T926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.092929][  T926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 14
[  124.108196][  T926] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  124.117840][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.125867][  T926] usb 2-1: Product: syz
[  124.130205][  T926] usb 2-1: Manufacturer: syz
[  124.134831][  T926] usb 2-1: SerialNumber: syz
[  124.141786][  T926] usb 2-1: config 0 descriptor??
[  124.157270][ T5913] usb 4-1: usb_control_msg returned -32
[  124.162953][ T5913] usbtmc 4-1:16.0: can't read capabilities
[  124.333352][ T5913] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  124.356375][  T926] usb 2-1: USB disconnect, device number 23
[  124.373375][ T5895] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  124.394213][ T5895] usb 1-1: device descriptor read/8, error -71
[  124.483363][ T5913] usb 3-1: Using ep0 maxpacket: 8
[  124.492007][ T5913] usb 3-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[  124.501219][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.510182][ T5913] usb 3-1: Product: syz
[  124.517876][ T5913] usb 3-1: Manufacturer: syz
[  124.520878][ T7299] usbtmc 4-1:16.0: usb_control_msg returned -32
[  124.522478][ T5913] usb 3-1: SerialNumber: syz
[  124.525193][ T5913] usb 3-1: config 0 descriptor??
[  124.541264][ T5913] gspca_main: sonixj-2.14.0 probing 0c45:6128
[  124.544150][  T926] usb 4-1: USB disconnect, device number 20
[  124.643476][ T5895] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  124.663739][ T5895] usb 1-1: device descriptor read/8, error -71
[  124.773687][ T5895] usb usb1-port1: unable to enumerate USB device
[  125.136793][ T7311] 9p: Bad value for 'rfdno'
[  125.343356][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  125.348314][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.492'.
[  125.453329][ T5881] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  125.496506][    T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  125.505771][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.513814][    T9] usb 4-1: Product: syz
[  125.518047][    T9] usb 4-1: Manufacturer: syz
[  125.522635][    T9] usb 4-1: SerialNumber: syz
[  125.529506][    T9] usb 4-1: config 0 descriptor??
[  125.537521][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  125.550590][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.560443][    T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  125.570418][    T9] usb 4-1: media controller created
[  125.584130][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.616734][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short
[  125.625226][ T5881] usb 2-1: not running at top speed; connect to a high speed hub
[  125.633950][    T9] DVB: Unable to find symbol mt352_attach()
[  125.634666][ T5881] usb 2-1: config 3 has an invalid interface number: 106 but max is 0
[  125.648816][ T5881] usb 2-1: config 3 has no interface number 0
[  125.655007][ T5881] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  125.666250][ T5881] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has an invalid bInterval 0, changing to 10
[  125.678991][ T5881] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid wMaxPacketSize 0
[  125.689399][ T5881] usb 2-1: config 3 interface 106 has no altsetting 0
[  125.691713][    T9] DVB: Unable to find symbol nxt6000_attach()
[  125.700298][ T5881] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  125.705121][    T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  125.711977][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.728909][ T5881] usb 2-1: Product: syz
[  125.731416][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21
[  125.733064][ T5881] usb 2-1: Manufacturer: syz
[  125.733086][ T5881] usb 2-1: SerialNumber: syz
[  125.748650][ T7309] FAULT_INJECTION: forcing a failure.
[  125.748650][ T7309] name failslab, interval 1, probability 0, space 0, times 0
[  125.752599][ T7313] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  125.753657][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.3.497 Not tainted syzkaller #0 PREEMPT(full) 
[  125.753677][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  125.753688][ T7309] Call Trace:
[  125.753695][ T7309]  <TASK>
[  125.753701][ T7309]  dump_stack_lvl+0x189/0x250
[  125.753729][ T7309]  ? __pfx____ratelimit+0x10/0x10
[  125.753748][ T7309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.753767][ T7309]  ? __pfx__printk+0x10/0x10
[  125.753791][ T7309]  ? __pfx___might_resched+0x10/0x10
[  125.753814][ T7309]  should_fail_ex+0x414/0x560
[  125.753838][ T7309]  should_failslab+0xa8/0x100
[  125.753857][ T7309]  __kmalloc_noprof+0xdf/0x800
[  125.753880][ T7309]  ? i2cdev_ioctl_rdwr+0xce/0x740
[  125.753901][ T7309]  i2cdev_ioctl_rdwr+0xce/0x740
[  125.753925][ T7309]  i2cdev_ioctl+0x64b/0x820
[  125.753940][ T7309]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  125.753959][ T7309]  ? __fget_files+0x3a0/0x420
[  125.753976][ T7309]  ? __fget_files+0x2a/0x420
[  125.753996][ T7309]  ? bpf_lsm_file_ioctl+0x9/0x20
[  125.754013][ T7309]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  125.754028][ T7309]  __se_sys_ioctl+0xfc/0x170
[  125.754053][ T7309]  do_syscall_64+0xfa/0xfa0
[  125.754072][ T7309]  ? irqentry_exit+0x10f/0x640
[  125.754088][ T7309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.754103][ T7309]  ? clear_bhb_loop+0x60/0xb0
[  125.754122][ T7309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.754138][ T7309] RIP: 0033:0x7f574d38f749
[  125.754152][ T7309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.754165][ T7309] RSP: 002b:00007f574e154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.754183][ T7309] RAX: ffffffffffffffda RBX: 00007f574d5e5fa0 RCX: 00007f574d38f749
[  125.754194][ T7309] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000005
[  125.754204][ T7309] RBP: 00007f574e154090 R08: 0000000000000000 R09: 0000000000000000
[  125.754215][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.754224][ T7309] R13: 00007f574d5e6038 R14: 00007f574d5e5fa0 R15: 00007fff5bcee148
[  125.754252][ T7309]  </TASK>
[  125.998146][    T9] dvb-usb: schedule remote query interval to 1000 msecs.
[  126.006934][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  126.020542][ T5913] input: sonixj as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  126.053533][    T9] dvb-usb: bulk message failed: -22 (7/0)
[  126.060521][    T9] dvb-usb: bulk message failed: -22 (7/0)
[  126.077915][    T9] usb 4-1: USB disconnect, device number 21
[  126.217766][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.219921][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  126.230062][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.252202][ T7298] input: syz1 as /devices/virtual/input/input20
[  126.295812][  T926] usb 3-1: USB disconnect, device number 21
[  126.332307][ T5881] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected
[  126.358318][ T5881] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  126.419783][ T5881] usb 2-1: USB disconnect, device number 24
[  126.464539][ T5881] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  126.495760][ T5881] kobil_sct 2-1:3.106: device disconnected
[  126.534577][ T7329] netlink: 'syz.0.504': attribute type 40 has an invalid length.
[  126.604265][ T5835] Bluetooth: hci1: Malformed HCI Event: 0x22
[  126.946972][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  127.046181][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[  127.113850][    T9] usb 1-1: Using ep0 maxpacket: 16
[  127.127434][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.145638][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.162850][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  127.172513][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.193222][    T9] usb 1-1: config 0 descriptor??
[  127.423563][ T5881] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  127.491558][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.512144][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.596994][ T5881] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  127.605753][ T5881] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  127.616328][ T5881] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3
[  127.625435][ T5881] usb 2-1: config 150 has no interface number 0
[  127.631798][ T5881] usb 2-1: config 150 interface 204 has no altsetting 0
[  127.644385][ T5881] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  127.655975][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.661577][    T9] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  127.667966][ T5881] usb 2-1: Product: syz
[  127.683864][ T5881] usb 2-1: Manufacturer: syz
[  127.688474][ T5881] usb 2-1: SerialNumber: syz
[  127.726290][ T7383] kvm: vcpu 0: requested 370 ns lapic timer period limited to 200000 ns
[  127.735421][  T926] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  127.745372][ T7383] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[  127.915365][  T926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  127.927680][ T5881] usb 2-1: USB disconnect, device number 25
[  127.941356][ T5895] usb 1-1: USB disconnect, device number 32
[  127.950696][  T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  127.964861][  T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  127.978083][  T926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  127.995632][  T926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  128.005684][  T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.024827][  T926] usb 3-1: config 0 descriptor??
[  128.030539][ T7378] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  128.133308][ T5914] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  128.246601][  T926] usbhid 3-1:0.0: can't add hid device: -71
[  128.254379][  T926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  128.264752][  T926] usb 3-1: USB disconnect, device number 22
[  128.285092][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  128.293172][ T5914] usb 4-1: not running at top speed; connect to a high speed hub
[  128.301980][ T5914] usb 4-1: config 10 has an invalid interface number: 240 but max is 0
[  128.310971][ T5914] usb 4-1: config 10 has no interface number 0
[  128.317637][ T5914] usb 4-1: config 10 interface 240 has no altsetting 0
[  128.327329][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=2a.72
[  128.336517][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.344536][ T5914] usb 4-1: Product: syz
[  128.348706][ T5914] usb 4-1: Manufacturer: syz
[  128.355282][ T5914] usb 4-1: SerialNumber: syz
[  128.578639][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.587910][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.604752][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.614725][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.628259][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.639917][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.668342][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:10.240/input/input23
[  128.680737][ T5188] bcm5974 4-1:10.240: could not read from device
[  128.702303][ T5188] bcm5974 4-1:10.240: could not read from device
[  128.711498][ T5914] usb 4-1: USB disconnect, device number 22
[  128.733645][  T926] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  128.778989][ T5830] udevd[5830]: Error opening device "/dev/input/event4": No such file or directory
[  128.797961][ T5830] udevd[5830]: Unable to EVIOCGABS device "/dev/input/event4"
[  128.807003][ T5830] udevd[5830]: Unable to EVIOCGABS device "/dev/input/event4"
[  128.815935][ T5830] udevd[5830]: Unable to EVIOCGABS device "/dev/input/event4"
[  128.833414][ T5830] udevd[5830]: Unable to EVIOCGABS device "/dev/input/event4"
[  128.895290][  T926] usb 1-1: config 8 has an invalid interface number: 207 but max is 0
[  128.905605][  T926] usb 1-1: config 8 has no interface number 0
[  128.911737][  T926] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=83.f8
[  128.931011][  T926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.156202][  T926] usb 1-1: string descriptor 0 read error: -71
[  129.165094][  T926] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  129.171652][  T926] gspca_sn9c2028: read1 error -71
[  129.179394][  T926] gspca_sn9c2028: read1 error -71
[  129.185033][  T926] gspca_sn9c2028: read1 error -71
[  129.190084][  T926] sn9c2028 1-1:8.207: probe with driver sn9c2028 failed with error -71
[  129.204248][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  129.206035][  T926] usb 1-1: USB disconnect, device number 33
[  129.263712][  T860] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  129.383333][    T9] usb 2-1: Using ep0 maxpacket: 32
[  129.390207][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  129.403461][    T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  129.412801][    T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  129.421443][    T9] usb 2-1: Product: syz
[  129.427607][    T9] usb 2-1: Manufacturer: syz
[  129.432211][    T9] usb 2-1: SerialNumber: syz
[  129.443963][    T9] usb 2-1: config 0 descriptor??
[  129.449567][ T7404] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  129.458926][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[  129.465297][  T860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  129.476340][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[  129.484174][  T860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  129.499360][  T860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  129.517167][  T860] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  129.527007][  T860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.537002][  T860] usb 3-1: Product: syz
[  129.541173][  T860] usb 3-1: Manufacturer: syz
[  129.546893][  T860] usb 3-1: SerialNumber: syz
[  129.559170][  T860] usb 3-1: config 0 descriptor??
[  129.565205][ T7402] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  129.572456][ T7402] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  129.582067][  T860] usb 3-1: ucan: probing device on interface #0
[  129.590866][ T7414] netlink: 436 bytes leftover after parsing attributes in process `syz.3.539'.
[  129.731046][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.740484][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.782026][  T860] usb 3-1: ucan: could not read protocol version, ret=-71
[  129.804348][  T860] usb 3-1: ucan: probe failed; try to update the device firmware
[  129.835675][  T860] usb 3-1: USB disconnect, device number 23
[  129.863750][ T5914] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  130.033310][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  130.040209][ T5914] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  130.049341][ T5914] usb 4-1: config 179 has no interface number 0
[  130.055765][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  130.067033][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  130.078369][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  130.089567][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  130.101629][ T5914] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  130.115516][ T5914] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  130.125183][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.137615][ T7416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.148201][ T5914] xpad 4-1:179.65: probe with driver xpad failed with error -5
[  130.243336][  T926] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  130.355198][ T5914] usb 4-1: USB disconnect, device number 23
[  130.392600][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'.
[  130.406506][  T926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.418622][  T926] usb 1-1: config 0 has no interfaces?
[  130.425861][   T50] raw-gadget.1 gadget.1: failed to queue suspend event
[  130.435959][  T926] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  130.445117][  T926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.453085][  T926] usb 1-1: Product: syz
[  130.457769][  T926] usb 1-1: Manufacturer: syz
[  130.460278][ T7433] raw-gadget.1 gadget.1: failed to queue disconnect event
[  130.462368][  T926] usb 1-1: SerialNumber: syz
[  130.465271][  T926] usb 1-1: config 0 descriptor??
[  130.653385][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  130.695738][ T5914] usb 1-1: USB disconnect, device number 34
[  130.804935][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.815398][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.825732][   T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  130.835085][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.843114][   T10] usb 3-1: SerialNumber: syz
[  130.899293][ T7439] netlink: 220 bytes leftover after parsing attributes in process `syz.3.550'.
[  130.909974][ T7439] unsupported nla_type 224
[  130.916129][ T7439] FAULT_INJECTION: forcing a failure.
[  130.916129][ T7439] name failslab, interval 1, probability 0, space 0, times 0
[  130.930180][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.3.550 Not tainted syzkaller #0 PREEMPT(full) 
[  130.930201][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.930211][ T7439] Call Trace:
[  130.930218][ T7439]  <TASK>
[  130.930224][ T7439]  dump_stack_lvl+0x189/0x250
[  130.930249][ T7439]  ? __pfx____ratelimit+0x10/0x10
[  130.930268][ T7439]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.930288][ T7439]  ? __pfx__printk+0x10/0x10
[  130.930308][ T7439]  ? __pfx___might_resched+0x10/0x10
[  130.930327][ T7439]  ? fs_reclaim_acquire+0x7d/0x100
[  130.930349][ T7439]  should_fail_ex+0x414/0x560
[  130.930373][ T7439]  should_failslab+0xa8/0x100
[  130.930392][ T7439]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  130.930415][ T7439]  ? __alloc_skb+0x255/0x430
[  130.930435][ T7439]  ? napi_skb_cache_get+0x445/0x6e0
[  130.930455][ T7439]  ? napi_skb_cache_get+0x151/0x6e0
[  130.930482][ T7439]  __alloc_skb+0x255/0x430
[  130.930508][ T7439]  ? __pfx___alloc_skb+0x10/0x10
[  130.930538][ T7439]  ? netlink_ack_tlv_len+0x6c/0x210
[  130.930567][ T7439]  netlink_ack+0x146/0xa50
[  130.930585][ T7439]  ? rcu_is_watching+0x15/0xb0
[  130.930607][ T7439]  ? trace_contention_end+0x39/0x120
[  130.930637][ T7439]  netlink_rcv_skb+0x28c/0x470
[  130.930654][ T7439]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  130.930676][ T7439]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  130.930707][ T7439]  ? netlink_deliver_tap+0x2e/0x1b0
[  130.930722][ T7439]  ? netlink_deliver_tap+0x2e/0x1b0
[  130.930741][ T7439]  xfrm_netlink_rcv+0x79/0x90
[  130.930760][ T7439]  netlink_unicast+0x82f/0x9e0
[  130.930791][ T7439]  ? __pfx_netlink_unicast+0x10/0x10
[  130.930815][ T7439]  ? netlink_sendmsg+0x642/0xb30
[  130.930831][ T7439]  ? skb_put+0x11b/0x210
[  130.930856][ T7439]  netlink_sendmsg+0x805/0xb30
[  130.930882][ T7439]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.930902][ T7439]  ? aa_sock_msg_perm+0xf1/0x1d0
[  130.930927][ T7439]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.930942][ T7439]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.930964][ T7439]  __sock_sendmsg+0x21c/0x270
[  130.930988][ T7439]  ____sys_sendmsg+0x505/0x870
[  130.931009][ T7439]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.931035][ T7439]  ? import_iovec+0x74/0xa0
[  130.931054][ T7439]  ___sys_sendmsg+0x21f/0x2a0
[  130.931073][ T7439]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.931119][ T7439]  ? __fget_files+0x2a/0x420
[  130.931135][ T7439]  ? __fget_files+0x3a0/0x420
[  130.931161][ T7439]  __x64_sys_sendmsg+0x19b/0x260
[  130.931179][ T7439]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.931203][ T7439]  ? __pfx_ksys_write+0x10/0x10
[  130.931229][ T7439]  ? do_syscall_64+0xbe/0xfa0
[  130.931250][ T7439]  do_syscall_64+0xfa/0xfa0
[  130.931270][ T7439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.931286][ T7439]  ? clear_bhb_loop+0x60/0xb0
[  130.931306][ T7439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.931323][ T7439] RIP: 0033:0x7f574d38f749
[  130.931339][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.931354][ T7439] RSP: 002b:00007f574e154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.931369][ T7439] RAX: ffffffffffffffda RBX: 00007f574d5e5fa0 RCX: 00007f574d38f749
[  130.931376][ T7439] RDX: 0000000004000010 RSI: 0000200000000340 RDI: 0000000000000003
[  130.931382][ T7439] RBP: 00007f574e154090 R08: 0000000000000000 R09: 0000000000000000
[  130.931388][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.931393][ T7439] R13: 00007f574d5e6038 R14: 00007f574d5e5fa0 R15: 00007fff5bcee148
[  130.931409][ T7439]  </TASK>
[  131.293155][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'.
[  131.310090][   T10] usb 3-1: 0:2 : does not exist
[  131.317041][   T10] usb 3-1: unit 255 not found!
[  131.344233][   T10] usb 3-1: USB disconnect, device number 24
[  131.382750][ T7320] udevd[7320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.288044][ T7470] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.561'.
[  132.297512][ T7470] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4
[  132.587224][ T7477] cgroup: Bad value for 'name'
[  132.593185][ T7477] comedi comedi3: bad chanlist[0]=0x80000004 chan=4 range length=1
[  132.660425][ T7487] FAULT_INJECTION: forcing a failure.
[  132.660425][ T7487] name failslab, interval 1, probability 0, space 0, times 0
[  132.664679][ T7486] comedi comedi3: bad chanlist[0]=0x80000004 chan=4 range length=1
[  132.673229][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.0.566 Not tainted syzkaller #0 PREEMPT(full) 
[  132.673253][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.673263][ T7487] Call Trace:
[  132.673271][ T7487]  <TASK>
[  132.673278][ T7487]  dump_stack_lvl+0x189/0x250
[  132.673302][ T7487]  ? __pfx____ratelimit+0x10/0x10
[  132.673320][ T7487]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.673340][ T7487]  ? __pfx__printk+0x10/0x10
[  132.673361][ T7487]  ? __pfx___might_resched+0x10/0x10
[  132.673380][ T7487]  ? fs_reclaim_acquire+0x7d/0x100
[  132.673400][ T7487]  should_fail_ex+0x414/0x560
[  132.673424][ T7487]  should_failslab+0xa8/0x100
[  132.673444][ T7487]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  132.673468][ T7487]  ? __alloc_skb+0x255/0x430
[  132.673488][ T7487]  ? napi_skb_cache_get+0x445/0x6e0
[  132.673508][ T7487]  ? napi_skb_cache_get+0x151/0x6e0
[  132.673533][ T7487]  __alloc_skb+0x255/0x430
[  132.673557][ T7487]  ? __pfx___alloc_skb+0x10/0x10
[  132.673580][ T7487]  ? netlink_autobind+0xdb/0x300
[  132.673596][ T7487]  ? netlink_autobind+0x2c2/0x300
[  132.673616][ T7487]  netlink_sendmsg+0x5c6/0xb30
[  132.673641][ T7487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.673665][ T7487]  ? __lock_acquire+0xab9/0xd20
[  132.673681][ T7487]  ? aa_sock_msg_perm+0xf1/0x1d0
[  132.673705][ T7487]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.673719][ T7487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.673737][ T7487]  __sock_sendmsg+0x21c/0x270
[  132.673760][ T7487]  sock_write_iter+0x279/0x360
[  132.673782][ T7487]  ? __pfx_sock_write_iter+0x10/0x10
[  132.673810][ T7487]  ? bpf_lsm_file_permission+0x9/0x20
[  132.673825][ T7487]  ? security_file_permission+0x75/0x290
[  132.673851][ T7487]  vfs_write+0x5c9/0xb30
[  132.673878][ T7487]  ? __pfx_sock_write_iter+0x10/0x10
[  132.673897][ T7487]  ? __pfx_vfs_write+0x10/0x10
[  132.673928][ T7487]  ? __fget_files+0x2a/0x420
[  132.673955][ T7487]  ksys_write+0x145/0x250
[  132.673980][ T7487]  ? __pfx_ksys_write+0x10/0x10
[  132.674005][ T7487]  ? do_syscall_64+0xbe/0xfa0
[  132.674027][ T7487]  do_syscall_64+0xfa/0xfa0
[  132.674045][ T7487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.674061][ T7487]  ? clear_bhb_loop+0x60/0xb0
[  132.674080][ T7487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.674095][ T7487] RIP: 0033:0x7f18d2d8f749
[  132.674109][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.674123][ T7487] RSP: 002b:00007f18d3bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.674140][ T7487] RAX: ffffffffffffffda RBX: 00007f18d2fe6090 RCX: 00007f18d2d8f749
[  132.674153][ T7487] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000007
[  132.674163][ T7487] RBP: 00007f18d3bf9090 R08: 0000000000000000 R09: 0000000000000000
[  132.674173][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.674182][ T7487] R13: 00007f18d2fe6128 R14: 00007f18d2fe6090 R15: 00007fff1dc936d8
[  132.674210][ T7487]  </TASK>
[  132.731056][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.758465][ T7487] comedi comedi3: bad chanlist[0]=0x80000004 chan=4 range length=1
[  132.762417][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.489774][ T7496] FAULT_INJECTION: forcing a failure.
[  133.489774][ T7496] name failslab, interval 1, probability 0, space 0, times 0
[  133.517963][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.2.568 Not tainted syzkaller #0 PREEMPT(full) 
[  133.517986][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  133.517996][ T7496] Call Trace:
[  133.518003][ T7496]  <TASK>
[  133.518009][ T7496]  dump_stack_lvl+0x189/0x250
[  133.518035][ T7496]  ? __pfx____ratelimit+0x10/0x10
[  133.518052][ T7496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.518070][ T7496]  ? __pfx__printk+0x10/0x10
[  133.518094][ T7496]  ? __pfx___might_resched+0x10/0x10
[  133.518113][ T7496]  ? fs_reclaim_acquire+0x7d/0x100
[  133.518134][ T7496]  should_fail_ex+0x414/0x560
[  133.518159][ T7496]  should_failslab+0xa8/0x100
[  133.518178][ T7496]  kmem_cache_alloc_noprof+0x88/0x700
[  133.518201][ T7496]  ? getname_flags+0xb8/0x540
[  133.518223][ T7496]  getname_flags+0xb8/0x540
[  133.518244][ T7496]  __getname_maybe_null+0x78/0x120
[  133.518262][ T7496]  __se_sys_move_mount+0x251/0x560
[  133.518284][ T7496]  ? __pfx___se_sys_move_mount+0x10/0x10
[  133.518303][ T7496]  ? __pfx_ksys_write+0x10/0x10
[  133.518329][ T7496]  ? do_syscall_64+0xbe/0xfa0
[  133.518345][ T7496]  ? __x64_sys_move_mount+0x20/0xc0
[  133.518366][ T7496]  do_syscall_64+0xfa/0xfa0
[  133.518385][ T7496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.518402][ T7496]  ? clear_bhb_loop+0x60/0xb0
[  133.518422][ T7496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.518437][ T7496] RIP: 0033:0x7f2f1538f749
[  133.518451][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.518466][ T7496] RSP: 002b:00007f2f135f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  133.518483][ T7496] RAX: ffffffffffffffda RBX: 00007f2f155e5fa0 RCX: 00007f2f1538f749
[  133.518496][ T7496] RDX: ffffffffffffff9c RSI: 0000200000008080 RDI: 0000000000000004
[  133.518507][ T7496] RBP: 00007f2f135f6090 R08: 0000000000000152 R09: 0000000000000000
[  133.518517][ T7496] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  133.518527][ T7496] R13: 00007f2f155e6038 R14: 00007f2f155e5fa0 R15: 00007ffcb746c568
[  133.518554][ T7496]  </TASK>
[  133.990494][ T7515] FAULT_INJECTION: forcing a failure.
[  133.990494][ T7515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.003902][ T7515] CPU: 1 UID: 0 PID: 7515 Comm: syz.2.575 Not tainted syzkaller #0 PREEMPT(full) 
[  134.003922][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.003932][ T7515] Call Trace:
[  134.003939][ T7515]  <TASK>
[  134.003946][ T7515]  dump_stack_lvl+0x189/0x250
[  134.003971][ T7515]  ? __pfx____ratelimit+0x10/0x10
[  134.003989][ T7515]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.004008][ T7515]  ? __pfx__printk+0x10/0x10
[  134.004037][ T7515]  should_fail_ex+0x414/0x560
[  134.004060][ T7515]  _copy_to_user+0x31/0xb0
[  134.004078][ T7515]  simple_read_from_buffer+0xe1/0x170
[  134.004101][ T7515]  proc_fail_nth_read+0x1b3/0x220
[  134.004119][ T7515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.004136][ T7515]  ? rw_verify_area+0x2a6/0x4d0
[  134.004154][ T7515]  ? __lock_acquire+0xab9/0xd20
[  134.004168][ T7515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.004181][ T7515]  vfs_read+0x200/0xa30
[  134.004200][ T7515]  ? fdget_pos+0x247/0x320
[  134.004219][ T7515]  ? __pfx___mutex_lock+0x10/0x10
[  134.004239][ T7515]  ? __pfx_vfs_read+0x10/0x10
[  134.004271][ T7515]  ? __fget_files+0x2a/0x420
[  134.004292][ T7515]  ? __fget_files+0x3a0/0x420
[  134.004307][ T7515]  ? __fget_files+0x2a/0x420
[  134.004333][ T7515]  ksys_read+0x145/0x250
[  134.004357][ T7515]  ? __pfx_ksys_read+0x10/0x10
[  134.004382][ T7515]  ? do_syscall_64+0xbe/0xfa0
[  134.004404][ T7515]  do_syscall_64+0xfa/0xfa0
[  134.004422][ T7515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.004437][ T7515]  ? clear_bhb_loop+0x60/0xb0
[  134.004457][ T7515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.004473][ T7515] RIP: 0033:0x7f2f1538e15c
[  134.004488][ T7515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  134.004502][ T7515] RSP: 002b:00007f2f135f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  134.004519][ T7515] RAX: ffffffffffffffda RBX: 00007f2f155e5fa0 RCX: 00007f2f1538e15c
[  134.004532][ T7515] RDX: 000000000000000f RSI: 00007f2f135f60a0 RDI: 0000000000000004
[  134.004541][ T7515] RBP: 00007f2f135f6090 R08: 0000000000000000 R09: 0000000000000000
[  134.004552][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.004562][ T7515] R13: 00007f2f155e6038 R14: 00007f2f155e5fa0 R15: 00007ffcb746c568
[  134.004591][ T7515]  </TASK>
[  134.278222][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[  134.397086][  T860] usb 2-1: USB disconnect, device number 26
[  134.404938][ T5895] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  134.587740][ T5914] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  134.602003][ T5895] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  134.619264][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.636463][ T5895] usb 4-1: Product: syz
[  134.641159][ T5895] usb 4-1: Manufacturer: syz
[  134.645826][ T5895] usb 4-1: SerialNumber: syz
[  134.653917][ T5895] usb 4-1: config 0 descriptor??
[  134.662931][ T5895] gspca_main: sunplus-2.14.0 probing 055f:c230
[  134.763790][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.774359][ T5914] usb 1-1: config 0 has no interfaces?
[  134.782998][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  134.792797][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.809456][ T5914] usb 1-1: Product: syz
[  134.816202][ T5914] usb 1-1: Manufacturer: syz
[  134.820887][ T5914] usb 1-1: SerialNumber: syz
[  134.830013][ T5914] usb 1-1: config 0 descriptor??
[  135.051582][  T860] usb 1-1: USB disconnect, device number 35
[  135.183413][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  135.314760][    T9] usb 2-1: device descriptor read/64, error -71
[  135.553334][ T5913] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  135.573357][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  135.683415][ T5913] usb 3-1: device descriptor read/64, error -71
[  135.703408][    T9] usb 2-1: device descriptor read/64, error -71
[  135.813583][    T9] usb usb2-port1: attempt power cycle
[  135.923344][ T5913] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  136.073522][ T5913] usb 3-1: device descriptor read/64, error -71
[  136.107464][ T5895] gspca_sunplus: reg_r err -71
[  136.112428][ T5895] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  136.130752][ T5895] usb 4-1: USB disconnect, device number 24
[  136.163572][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  136.186479][ T5913] usb usb3-port1: attempt power cycle
[  136.192750][    T9] usb 2-1: device descriptor read/8, error -71
[  136.445458][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  136.474925][    T9] usb 2-1: device descriptor read/8, error -71
[  136.543342][ T5913] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  136.563793][ T5913] usb 3-1: device descriptor read/8, error -71
[  136.583541][    T9] usb usb2-port1: unable to enumerate USB device
[  136.763356][ T5914] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  136.803330][ T5913] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  136.823996][ T5913] usb 3-1: device descriptor read/8, error -71
[  136.913323][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  136.927129][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.933651][ T5913] usb usb3-port1: unable to enumerate USB device
[  136.937464][ T5914] usb 1-1: config 0 has no interfaces?
[  136.950988][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  136.961654][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.969677][ T5914] usb 1-1: Product: syz
[  136.973864][ T5914] usb 1-1: Manufacturer: syz
[  136.978450][ T5914] usb 1-1: SerialNumber: syz
[  136.985228][ T5914] usb 1-1: config 0 descriptor??
[  137.064518][    T9] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  137.072576][    T9] usb 4-1: config 1 has no interface number 0
[  137.078740][    T9] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  137.090306][    T9] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  137.100132][    T9] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.113022][    T9] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  137.122124][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.130137][    T9] usb 4-1: Product: syz
[  137.134330][    T9] usb 4-1: Manufacturer: syz
[  137.138914][    T9] usb 4-1: SerialNumber: syz
[  137.147163][ T7574] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  137.205094][ T5913] usb 1-1: USB disconnect, device number 36
[  137.357041][ T7574] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  137.368563][    T9] usb 4-1: Incompatible driver and firmware versions
[  138.454819][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  138.479786][ T7603] binder_alloc: 7602: pid 7602 spamming oneway? 1 buffers allocated for a total size of 4096
[  138.549769][ T7606] FAULT_INJECTION: forcing a failure.
[  138.549769][ T7606] name failslab, interval 1, probability 0, space 0, times 0
[  138.564338][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.2.606 Not tainted syzkaller #0 PREEMPT(full) 
[  138.564361][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  138.564372][ T7606] Call Trace:
[  138.564378][ T7606]  <TASK>
[  138.564386][ T7606]  dump_stack_lvl+0x189/0x250
[  138.564412][ T7606]  ? __pfx____ratelimit+0x10/0x10
[  138.564431][ T7606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.564451][ T7606]  ? __pfx__printk+0x10/0x10
[  138.564476][ T7606]  ? __pfx___might_resched+0x10/0x10
[  138.564500][ T7606]  should_fail_ex+0x414/0x560
[  138.564527][ T7606]  should_failslab+0xa8/0x100
[  138.564547][ T7606]  __kmalloc_noprof+0xdf/0x800
[  138.564571][ T7606]  ? kfree+0x4d/0x680
[  138.564589][ T7606]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  138.564619][ T7606]  tomoyo_realpath_from_path+0xe3/0x5d0
[  138.564645][ T7606]  ? tomoyo_domain+0xd8/0x130
[  138.564666][ T7606]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  138.564686][ T7606]  tomoyo_path_number_perm+0x1e8/0x5a0
[  138.564709][ T7606]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  138.564768][ T7606]  ? __fget_files+0x2a/0x420
[  138.564792][ T7606]  ? __fget_files+0x3a0/0x420
[  138.564810][ T7606]  ? __fget_files+0x2a/0x420
[  138.564833][ T7606]  security_file_ioctl+0xcb/0x2d0
[  138.564854][ T7606]  __se_sys_ioctl+0x47/0x170
[  138.564879][ T7606]  do_syscall_64+0xfa/0xfa0
[  138.564899][ T7606]  ? irqentry_exit+0x10f/0x640
[  138.564916][ T7606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.564933][ T7606]  ? clear_bhb_loop+0x60/0xb0
[  138.564953][ T7606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.564969][ T7606] RIP: 0033:0x7f2f1538f749
[  138.564984][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.564998][ T7606] RSP: 002b:00007f2f135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.565017][ T7606] RAX: ffffffffffffffda RBX: 00007f2f155e5fa0 RCX: 00007f2f1538f749
[  138.565030][ T7606] RDX: 0000200000000500 RSI: 00000000c0306201 RDI: 0000000000000004
[  138.565040][ T7606] RBP: 00007f2f135f6090 R08: 0000000000000000 R09: 0000000000000000
[  138.565051][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.565061][ T7606] R13: 00007f2f155e6038 R14: 00007f2f155e5fa0 R15: 00007ffcb746c568
[  138.565091][ T7606]  </TASK>
[  138.565098][ T7606] ERROR: Out of memory at tomoyo_realpath_from_path.
[  138.618716][    T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  138.641858][ T7606] binder_alloc: 7605: pid 7605 spamming oneway? 1 buffers allocated for a total size of 4096
[  138.674711][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.873994][    T9] usb 2-1: config 0 descriptor??
[  139.041688][ T7622] binder_alloc: 7621: pid 7621 spamming oneway? 1 buffers allocated for a total size of 4096
[  139.052525][ T7622] FAULT_INJECTION: forcing a failure.
[  139.052525][ T7622] name failslab, interval 1, probability 0, space 0, times 0
[  139.066260][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.0.612 Not tainted syzkaller #0 PREEMPT(full) 
[  139.066281][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  139.066291][ T7622] Call Trace:
[  139.066299][ T7622]  <TASK>
[  139.066306][ T7622]  dump_stack_lvl+0x189/0x250
[  139.066331][ T7622]  ? __pfx____ratelimit+0x10/0x10
[  139.066349][ T7622]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.066361][ T7622]  ? __pfx__printk+0x10/0x10
[  139.066375][ T7622]  ? __pfx___might_resched+0x10/0x10
[  139.066388][ T7622]  should_fail_ex+0x414/0x560
[  139.066403][ T7622]  should_failslab+0xa8/0x100
[  139.066420][ T7622]  __kmalloc_noprof+0xdf/0x800
[  139.066448][ T7622]  ? kfree+0x4d/0x680
[  139.066467][ T7622]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  139.066496][ T7622]  tomoyo_realpath_from_path+0xe3/0x5d0
[  139.066511][ T7622]  ? tomoyo_domain+0xd8/0x130
[  139.066522][ T7622]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  139.066533][ T7622]  tomoyo_path_number_perm+0x1e8/0x5a0
[  139.066546][ T7622]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  139.066595][ T7622]  ? __fget_files+0x2a/0x420
[  139.066619][ T7622]  ? __fget_files+0x3a0/0x420
[  139.066636][ T7622]  ? __fget_files+0x2a/0x420
[  139.066652][ T7622]  security_file_ioctl+0xcb/0x2d0
[  139.066665][ T7622]  __se_sys_ioctl+0x47/0x170
[  139.066679][ T7622]  do_syscall_64+0xfa/0xfa0
[  139.066691][ T7622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.066699][ T7622]  ? clear_bhb_loop+0x60/0xb0
[  139.066717][ T7622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.066732][ T7622] RIP: 0033:0x7f18d2d8f749
[  139.066747][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.066767][ T7622] RSP: 002b:00007f18d3c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  139.066785][ T7622] RAX: ffffffffffffffda RBX: 00007f18d2fe5fa0 RCX: 00007f18d2d8f749
[  139.066796][ T7622] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000004
[  139.066802][ T7622] RBP: 00007f18d3c1a090 R08: 0000000000000000 R09: 0000000000000000
[  139.066807][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.066813][ T7622] R13: 00007f18d2fe6038 R14: 00007f18d2fe5fa0 R15: 00007fff1dc936d8
[  139.066829][ T7622]  </TASK>
[  139.066833][ T7622] ERROR: Out of memory at tomoyo_realpath_from_path.
[  139.318413][ T7596] netlink: 88 bytes leftover after parsing attributes in process `syz.1.602'.
[  139.330342][    T9] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f
[  139.337808][    T9] hackrf 2-1:0.0: Could not detect board
[  139.347908][    T9] hackrf 2-1:0.0: probe with driver hackrf failed with error -71
[  139.359389][    T9] usb 2-1: USB disconnect, device number 31
[  139.366319][ T7624] binder_alloc: 7623: pid 7623 spamming oneway? 1 buffers allocated for a total size of 4096
[  139.540306][ T7631] binder_alloc: 7625: binder_alloc_buf, no vma
[  139.547957][ T7631] binder_alloc: 7625: binder_alloc_buf, no vma
[  139.689553][    T9] usb 4-1: USB disconnect, device number 25
[  139.800799][ T7645] FAULT_INJECTION: forcing a failure.
[  139.800799][ T7645] name failslab, interval 1, probability 0, space 0, times 0
[  139.814060][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.2.622 Not tainted syzkaller #0 PREEMPT(full) 
[  139.814074][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  139.814081][ T7645] Call Trace:
[  139.814085][ T7645]  <TASK>
[  139.814090][ T7645]  dump_stack_lvl+0x189/0x250
[  139.814106][ T7645]  ? __pfx____ratelimit+0x10/0x10
[  139.814117][ T7645]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.814128][ T7645]  ? __pfx__printk+0x10/0x10
[  139.814142][ T7645]  ? __pfx___might_resched+0x10/0x10
[  139.814152][ T7645]  ? fs_reclaim_acquire+0x7d/0x100
[  139.814165][ T7645]  should_fail_ex+0x414/0x560
[  139.814179][ T7645]  should_failslab+0xa8/0x100
[  139.814190][ T7645]  kmem_cache_alloc_noprof+0x88/0x700
[  139.814204][ T7645]  ? getname_flags+0xb8/0x540
[  139.814216][ T7645]  getname_flags+0xb8/0x540
[  139.814228][ T7645]  __getname_maybe_null+0x78/0x120
[  139.814239][ T7645]  __se_sys_move_mount+0x251/0x560
[  139.814252][ T7645]  ? __pfx___se_sys_move_mount+0x10/0x10
[  139.814262][ T7645]  ? __pfx_ksys_write+0x10/0x10
[  139.814278][ T7645]  ? do_syscall_64+0xbe/0xfa0
[  139.814288][ T7645]  ? __x64_sys_move_mount+0x20/0xc0
[  139.814299][ T7645]  do_syscall_64+0xfa/0xfa0
[  139.814310][ T7645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.814318][ T7645]  ? clear_bhb_loop+0x60/0xb0
[  139.814329][ T7645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.814338][ T7645] RIP: 0033:0x7f2f1538f749
[  139.814347][ T7645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.814355][ T7645] RSP: 002b:00007f2f135f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  139.814366][ T7645] RAX: ffffffffffffffda RBX: 00007f2f155e5fa0 RCX: 00007f2f1538f749
[  139.814373][ T7645] RDX: ffffffffffffff9c RSI: 0000200000008080 RDI: 0000000000000004
[  139.814379][ T7645] RBP: 00007f2f135f6090 R08: 0000000000000152 R09: 0000000000000000
[  139.814385][ T7645] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  139.814390][ T7645] R13: 00007f2f155e6038 R14: 00007f2f155e5fa0 R15: 00007ffcb746c568
[  139.814405][ T7645]  </TASK>
[  140.247857][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  140.258909][ T7660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.629'.
[  140.323358][  T860] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  140.418371][    T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  140.427686][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.438021][    T9] usb 4-1: Product: syz
[  140.442369][    T9] usb 4-1: Manufacturer: syz
[  140.460562][    T9] usb 4-1: SerialNumber: syz
[  140.468319][    T9] usb 4-1: config 0 descriptor??
[  140.484499][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  140.505675][  T860] usb 3-1: config 0 has an invalid interface number: 154 but max is 0
[  140.517821][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  140.528693][  T860] usb 3-1: config 0 has no interface number 0
[  140.534924][  T860] usb 3-1: config 0 interface 154 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  140.546503][  T860] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 222, changing to 11
[  140.558723][    T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  140.568085][    T9] usb 4-1: media controller created
[  140.573539][  T860] usb 3-1: config 0 interface 154 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  140.574983][  T926] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  140.598296][  T860] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x84 has an invalid bInterval 110, changing to 10
[  140.612064][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.622652][  T860] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x84 has invalid maxpacket 42617, setting to 1024
[  140.641301][  T860] usb 3-1: config 0 interface 154 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  140.658239][  T860] usb 3-1: New USB device found, idVendor=2040, idProduct=4201, bcdDevice=71.c4
[  140.679141][  T860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.687338][  T860] usb 3-1: Product: syz
[  140.691506][  T860] usb 3-1: Manufacturer: syz
[  140.700797][  T860] usb 3-1: SerialNumber: syz
[  140.707965][ T7643] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  140.718119][ T7643] dvb-usb: bulk message failed: -22 (7/0)
[  140.724772][    T9] DVB: Unable to find symbol mt352_attach()
[  140.751099][  T860] usb 3-1: config 0 descriptor??
[  140.757434][ T7648] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  140.766966][  T926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.777207][    T9] DVB: Unable to find symbol nxt6000_attach()
[  140.786836][  T926] usb 2-1: config 0 has no interfaces?
[  140.788723][    T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  140.795391][  T926] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  140.809298][  T860] em28xx 3-1:0.154: New device syz syz @ 480 Mbps (2040:4201, interface 154, class 154)
[  140.817914][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.821151][  T860] em28xx 3-1:0.154: DVB interface 154 found: bulk
[  140.832517][  T926] usb 2-1: Product: syz
[  140.838079][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24
[  140.839392][  T926] usb 2-1: Manufacturer: syz
[  140.864848][    T9] dvb-usb: schedule remote query interval to 1000 msecs.
[  140.871925][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  140.882297][  T926] usb 2-1: SerialNumber: syz
[  140.882856][    T9] dvb-usb: bulk message failed: -22 (7/0)
[  140.887781][    T9] dvb-usb: bulk message failed: -22 (7/0)
[  140.904331][  T926] usb 2-1: config 0 descriptor??
[  140.916046][    T9] usb 4-1: USB disconnect, device number 26
[  141.006195][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  141.074260][  T860] em28xx 3-1:0.154: unknown em28xx chip ID (0)
[  141.128060][ T5913] usb 2-1: USB disconnect, device number 32
[  141.147796][  T860] em28xx 3-1:0.154: reading from i2c device at 0xa0 failed (error=-5)
[  141.158363][  T860] em28xx 3-1:0.154: board has no eeprom
[  141.223589][  T860] em28xx 3-1:0.154: Identified as Hauppauge WinTV USB 2 (card=4)
[  141.231424][  T860] em28xx 3-1:0.154: dvb set to bulk mode.
[  141.238649][    T9] em28xx 3-1:0.154: reading from i2c device at 0x3e failed (error=-5)
[  141.260013][  T860] usb 3-1: USB disconnect, device number 29
[  141.271018][    T9] em28xx 3-1:0.154: reading from i2c device at 0x60 failed (error=-19)
[  141.282839][  T860] em28xx 3-1:0.154: Disconnecting em28xx
[  141.288689][    T9] em28xx 3-1:0.154: Registering input extension
[  141.363341][    T9] rc_core: IR keymap rc-hauppauge not found
[  141.374092][    T9] Registered IR keymap rc-empty
[  141.394161][    T9] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.154/rc/rc0
[  141.408132][    T9] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.154/rc/rc0/input25
[  141.429022][    T9] em28xx 3-1:0.154: Input extension successfully initialized
[  141.436699][  T860] em28xx 3-1:0.154: Closing input extension
[  141.471647][  T860] em28xx 3-1:0.154: Freeing device
[  141.654289][  T926] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  141.823415][  T926] usb 1-1: Using ep0 maxpacket: 32
[  141.844743][  T926] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  141.928776][  T926] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  141.941159][  T926] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  141.944124][  T860] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  141.949677][  T926] usb 1-1: Product: syz
[  141.961459][  T926] usb 1-1: Manufacturer: syz
[  141.967069][  T926] usb 1-1: SerialNumber: syz
[  141.976397][  T926] usb 1-1: config 0 descriptor??
[  141.982090][ T7686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.004772][  T926] hub 1-1:0.0: bad descriptor, ignoring hub
[  142.013377][  T926] hub 1-1:0.0: probe with driver hub failed with error -5
[  142.148162][  T860] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  142.157351][  T860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.173311][  T860] usb 3-1: Product: syz
[  142.178492][  T860] usb 3-1: Manufacturer: syz
[  142.183098][  T860] usb 3-1: SerialNumber: syz
[  142.194748][  T860] usb 3-1: config 0 descriptor??
[  142.203112][  T860] gspca_main: sunplus-2.14.0 probing 055f:c230
[  142.282846][ T7720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.292546][ T7720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.353332][  T926] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  142.463332][ T5914] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  142.507875][  T926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  142.517098][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.525146][  T926] usb 2-1: Product: syz
[  142.529323][  T926] usb 2-1: Manufacturer: syz
[  142.534163][  T926] usb 2-1: SerialNumber: syz
[  142.541196][  T926] usb 2-1: config 0 descriptor??
[  142.615508][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.625713][ T5914] usb 4-1: config 0 has no interfaces?
[  142.633958][ T5914] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  142.643032][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.651245][ T5914] usb 4-1: Product: syz
[  142.655474][ T5914] usb 4-1: Manufacturer: syz
[  142.660075][ T5914] usb 4-1: SerialNumber: syz
[  142.667605][ T5914] usb 4-1: config 0 descriptor??
[  142.751971][  T926] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  142.887548][ T5914] usb 4-1: USB disconnect, device number 27
[  142.957438][  T137] raw-gadget.0 gadget.0: failed to queue suspend event
[  143.026938][ T7721] raw-gadget.0 gadget.0: failed to queue disconnect event
[  143.411957][  T860] gspca_sunplus: reg_r err -71
[  143.424968][  T860] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  143.440889][  T860] usb 3-1: USB disconnect, device number 30
[  143.582236][ T7728] hub 9-0:1.0: USB hub found
[  143.599791][ T7728] hub 9-0:1.0: 1 port detected
[  144.265851][  T926] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  144.293912][  T926] usb 2-1: USB disconnect, device number 33
[  144.343342][  T860] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  144.473397][  T860] usb 3-1: device descriptor read/64, error -71
[  144.713696][  T860] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  144.856027][  T860] usb 3-1: device descriptor read/64, error -71
[  144.964690][  T860] usb usb3-port1: attempt power cycle
[  145.053354][ T5895] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  145.099397][ T7760] zonefs (nullb0) ERROR: Not a zoned block device
[  145.215272][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.225845][ T5895] usb 4-1: config 0 has no interfaces?
[  145.234007][ T5895] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  145.243396][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.252895][ T5895] usb 4-1: Product: syz
[  145.257451][ T5895] usb 4-1: Manufacturer: syz
[  145.262043][ T5895] usb 4-1: SerialNumber: syz
[  145.268681][ T5895] usb 4-1: config 0 descriptor??
[  145.303675][  T860] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  145.324281][ T7767] FAULT_INJECTION: forcing a failure.
[  145.324281][ T7767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.337888][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.1.670 Not tainted syzkaller #0 PREEMPT(full) 
[  145.337901][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.337908][ T7767] Call Trace:
[  145.337912][ T7767]  <TASK>
[  145.337916][ T7767]  dump_stack_lvl+0x189/0x250
[  145.337932][ T7767]  ? __pfx____ratelimit+0x10/0x10
[  145.337944][ T7767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.337955][ T7767]  ? __pfx__printk+0x10/0x10
[  145.337965][ T7767]  ? __might_fault+0xb0/0x130
[  145.337984][ T7767]  should_fail_ex+0x414/0x560
[  145.338002][ T7767]  _copy_from_user+0x2d/0xb0
[  145.338011][ T7767]  ___sys_sendmsg+0x158/0x2a0
[  145.338022][ T7767]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.338058][ T7767]  ? __fget_files+0x2a/0x420
[  145.338076][ T7767]  ? __fget_files+0x3a0/0x420
[  145.338102][ T7767]  __x64_sys_sendmsg+0x19b/0x260
[  145.338121][ T7767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.338139][ T7767]  ? __pfx_ksys_write+0x10/0x10
[  145.338154][ T7767]  ? do_syscall_64+0xbe/0xfa0
[  145.338167][ T7767]  do_syscall_64+0xfa/0xfa0
[  145.338178][ T7767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.338186][ T7767]  ? clear_bhb_loop+0x60/0xb0
[  145.338197][ T7767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.338206][ T7767] RIP: 0033:0x7f761238f749
[  145.338215][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.338223][ T7767] RSP: 002b:00007f76132ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.338234][ T7767] RAX: ffffffffffffffda RBX: 00007f76125e5fa0 RCX: 00007f761238f749
[  145.338241][ T7767] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003
[  145.338247][ T7767] RBP: 00007f76132ca090 R08: 0000000000000000 R09: 0000000000000000
[  145.338253][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.338258][ T7767] R13: 00007f76125e6038 R14: 00007f76125e5fa0 R15: 00007ffcd4efc8e8
[  145.338273][ T7767]  </TASK>
[  145.338854][  T860] usb 3-1: device descriptor read/8, error -71
[  145.481619][ T7770] netlink: zone id is out of range
[  145.549804][ T6248] usb 4-1: USB disconnect, device number 28
[  145.551955][ T7770] netlink: set zone limit has 4 unknown bytes
[  145.723451][  T860] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  145.743806][  T860] usb 3-1: device descriptor read/8, error -71
[  145.853578][  T860] usb usb3-port1: unable to enumerate USB device
[  146.250255][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.258807][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.266834][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.275722][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.283207][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.291053][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.298879][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.307152][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.315607][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.322994][  T860] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  146.335708][  T860] hid-generic 0006:0004:0009.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  146.353661][ T5913] usb 1-1: USB disconnect, device number 37
[  146.425489][ T7785] fido_id[7785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  146.603350][ T5914] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  146.787680][ T5914] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[  146.797063][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.807236][ T5914] usb 2-1: config 0 has no interface number 0
[  146.815341][ T5914] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.825204][ T5914] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  146.838275][ T5914] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  146.847325][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.857267][ T5914] usb 2-1: config 0 descriptor??
[  146.870191][ T5914] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  147.103691][  T860] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  147.118774][  T137] usb 2-1: Failed to submit usb control message: -71
[  147.127971][ T6248] usb 2-1: USB disconnect, device number 34
[  147.140042][  T137] usb 2-1: unable to send the bmi data to the device: -71
[  147.149498][  T137] usb 2-1: unable to get target info from device
[  147.157181][  T137] usb 2-1: could not get target info (-71)
[  147.163385][ T5913] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  147.163403][  T137] usb 2-1: could not probe fw (-71)
[  147.256623][  T860] usb 1-1: Using ep0 maxpacket: 16
[  147.264654][  T860] usb 1-1: config 0 has an invalid interface number: 115 but max is 0
[  147.273819][  T860] usb 1-1: config 0 has no interface number 0
[  147.280343][  T860] usb 1-1: config 0 interface 115 altsetting 0 endpoint 0xE has an invalid bInterval 146, changing to 11
[  147.292117][  T860] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=b2.70
[  147.301717][  T860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.320818][  T860] usb 1-1: config 0 descriptor??
[  147.327456][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.337838][ T5913] usb 4-1: config 0 has no interfaces?
[  147.348073][  T860] adutux 1-1:0.115: interrupt endpoints not found
[  147.361746][ T5913] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  147.377933][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.386091][ T5913] usb 4-1: Product: syz
[  147.390256][ T5913] usb 4-1: Manufacturer: syz
[  147.395277][ T5913] usb 4-1: SerialNumber: syz
[  147.404351][ T5913] usb 4-1: config 0 descriptor??
[  147.530522][ T7816] process 'syz.1.686' launched './file0' with NULL argv: empty string added
[  147.548955][  T926] usb 1-1: USB disconnect, device number 38
[  147.626098][ T5914] usb 4-1: USB disconnect, device number 29
[  147.660052][ T7818] ima: Can not allocate md4 (reason: -2)
[  147.667009][   T30] audit: type=1800 audit(1763669041.054:3): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.687" name="/" dev="fuse" ino=1 res=0 errno=0
[  148.266564][ T5835] Bluetooth: hci2: connection err: -111
[  148.523344][ T5913] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  148.643660][  T860] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  148.684667][ T5913] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[  148.692872][ T5913] usb 4-1: config 0 has no interface number 0
[  148.700390][ T5913] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  148.709574][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.719991][ T5913] usb 4-1: config 0 descriptor??
[  148.817593][  T860] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  148.826694][  T860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.835073][  T860] usb 2-1: Product: syz
[  148.839250][  T860] usb 2-1: Manufacturer: syz
[  148.843904][  T860] usb 2-1: SerialNumber: syz
[  148.850539][  T860] usb 2-1: config 0 descriptor??
[  148.858252][  T860] gspca_main: sunplus-2.14.0 probing 055f:c230
[  148.903366][ T5914] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  148.927121][ T5835] Bluetooth: hci2: adv larger than maximum supported
[  148.927148][ T5835] Bluetooth: hci2: Malformed LE Event: 0x0d
[  148.927910][ T5913] usb 4-1: string descriptor 0 read error: -71
[  148.951248][ T5913] usb-storage 4-1:0.168: USB Mass Storage device detected
[  148.961888][ T5913] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  148.990694][ T5913] usb 4-1: USB disconnect, device number 30
[  149.054907][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.065305][ T5914] usb 1-1: config 0 has no interfaces?
[  149.072348][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  149.081525][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.089545][ T5914] usb 1-1: Product: syz
[  149.093737][ T5914] usb 1-1: Manufacturer: syz
[  149.098330][ T5914] usb 1-1: SerialNumber: syz
[  149.105352][ T5914] usb 1-1: config 0 descriptor??
[  149.322766][ T5913] usb 1-1: USB disconnect, device number 39
[  149.763481][  T926] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  149.893348][  T926] usb 4-1: device descriptor read/64, error -71
[  150.075666][  T860] gspca_sunplus: reg_r err -71
[  150.081099][  T860] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  150.095239][  T860] usb 2-1: USB disconnect, device number 35
[  150.143408][  T926] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  150.283539][  T926] usb 4-1: device descriptor read/64, error -71
[  150.395715][  T926] usb usb4-port1: attempt power cycle
[  150.735704][ T7890] comedi comedi0: dt2814: a I/O base address must be specified
[  150.753600][  T926] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  150.773553][ T5895] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  150.783601][  T926] usb 4-1: device descriptor read/8, error -71
[  150.821678][ T7894] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  150.830376][ T7894] netlink: 224 bytes leftover after parsing attributes in process `syz.1.714'.
[  150.839503][ T7895] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  150.847266][ T7895] netlink: 224 bytes leftover after parsing attributes in process `syz.1.714'.
[  150.862307][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.871046][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.965807][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.976116][ T5895] usb 1-1: config 0 has no interfaces?
[  150.987888][ T5895] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  151.000915][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.009734][ T5895] usb 1-1: Product: syz
[  151.014320][ T5895] usb 1-1: Manufacturer: syz
[  151.019189][ T5895] usb 1-1: SerialNumber: syz
[  151.023935][  T926] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  151.045257][ T5895] usb 1-1: config 0 descriptor??
[  151.053337][ T5914] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  151.063788][  T926] usb 4-1: device descriptor read/8, error -71
[  151.173560][  T926] usb usb4-port1: unable to enumerate USB device
[  151.223319][ T5914] usb 3-1: Using ep0 maxpacket: 8
[  151.230236][ T5914] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.241349][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0
[  151.248147][ T5914] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00
[  151.257876][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.277511][ T5914] usb 3-1: config 0 descriptor??
[  151.287755][  T860] usb 1-1: USB disconnect, device number 40
[  151.413312][  T926] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  151.563325][  T926] usb 2-1: Using ep0 maxpacket: 32
[  151.570324][  T926] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  151.581372][  T926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  151.592445][  T926] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  151.602991][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.611140][  T926] usb 2-1: Product: syz
[  151.615346][  T926] usb 2-1: Manufacturer: syz
[  151.619936][  T926] usb 2-1: SerialNumber: syz
[  151.626814][  T926] usb 2-1: config 0 descriptor??
[  151.689524][ T5914] hid-corsair-void 0003:1B1C:0A1F.0007: unbalanced collection at end of report description
[  151.701774][ T5914] hid-corsair-void 0003:1B1C:0A1F.0007: parse failed (reason: -22)
[  151.709838][ T5914] hid-corsair-void 0003:1B1C:0A1F.0007: probe with driver hid-corsair-void failed with error -22
[  151.848387][  T926] usb 2-1: USB disconnect, device number 36
[  152.103430][  T860] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  152.155702][ T6248] usb 3-1: USB disconnect, device number 35
[  152.256547][  T860] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  152.266420][  T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.274521][  T860] usb 1-1: Product: syz
[  152.278747][  T860] usb 1-1: Manufacturer: syz
[  152.283332][  T926] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  152.291141][  T860] usb 1-1: SerialNumber: syz
[  152.297400][  T860] usb 1-1: config 0 descriptor??
[  152.307477][  T860] gspca_main: sunplus-2.14.0 probing 055f:c230
[  152.433323][  T926] usb 2-1: Using ep0 maxpacket: 32
[  152.440780][  T926] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  152.451309][  T926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  152.462534][  T926] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  152.471672][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.479890][  T926] usb 2-1: Product: syz
[  152.484471][  T926] usb 2-1: Manufacturer: syz
[  152.489073][  T926] usb 2-1: SerialNumber: syz
[  152.496166][  T926] usb 2-1: config 0 descriptor??
[  152.704249][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.726024][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.761754][  T926] usb 2-1: USB disconnect, device number 37
[  152.866219][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.725'.
[  152.879111][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.725'.
[  152.889537][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.725'.
[  152.899572][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.725'.
[  153.035988][ T7926] netlink: 7036 bytes leftover after parsing attributes in process `syz.2.727'.
[  153.273527][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  153.435234][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.446878][ T5914] usb 4-1: config 0 has no interfaces?
[  153.454380][ T5914] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  153.463479][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.471461][ T5914] usb 4-1: Product: syz
[  153.475656][ T5914] usb 4-1: Manufacturer: syz
[  153.480250][ T5914] usb 4-1: SerialNumber: syz
[  153.488024][ T5914] usb 4-1: config 0 descriptor??
[  153.529292][  T860] gspca_sunplus: reg_r err -71
[  153.534237][ T5913] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  153.541893][  T860] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  153.556256][  T860] usb 1-1: USB disconnect, device number 41
[  153.695447][ T5913] usb 2-1: config 0 has an invalid interface number: 87 but max is 0
[  153.703723][ T5913] usb 2-1: config 0 has no interface number 0
[  153.709853][ T5913] usb 2-1: config 0 interface 87 has no altsetting 0
[  153.711469][ T5914] usb 4-1: USB disconnect, device number 35
[  153.718591][ T5913] usb 2-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=b1.c5
[  153.736774][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.745189][ T5913] usb 2-1: Product: syz
[  153.749659][ T5913] usb 2-1: Manufacturer: syz
[  153.754526][ T5913] usb 2-1: SerialNumber: syz
[  153.761009][ T5913] usb 2-1: config 0 descriptor??
[  153.769373][ T5913] snd-usb-caiaq 2-1:0.87: can't set alt interface.
[  153.775946][ T5913] usb 2-1: unable to init card! (ret=-5)
[  153.782026][ T5913] snd-usb-caiaq 2-1:0.87: probe with driver snd-usb-caiaq failed with error -5
[  153.902156][ T7936] netlink: 'syz.2.732': attribute type 21 has an invalid length.
[  153.910368][ T7936] netlink: 164 bytes leftover after parsing attributes in process `syz.2.732'.
[  153.970538][ T5913] usb 2-1: USB disconnect, device number 38
[  154.094922][ T7940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.734'.
[  154.104957][ T7940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.734'.
[  154.183369][ T5914] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  154.270170][ T7945] overlayfs: overlapping lowerdir path
[  154.343397][ T5914] usb 3-1: Using ep0 maxpacket: 8
[  154.351837][ T5914] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  154.359639][ T7948] overlay: Bad value for 'redirect_dir'
[  154.365367][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.374526][ T5914] usb 3-1: Product: syz
[  154.378692][ T5914] usb 3-1: Manufacturer: syz
[  154.383792][ T5914] usb 3-1: SerialNumber: syz
[  154.394072][ T5914] usb 3-1: config 0 descriptor??
[  154.411631][ T5914] go7007 3-1:0.0: probe with driver go7007 failed with error -12
[  154.471118][ T7952] fuse: Unknown parameter '000000000000000000000030x0000000000000003'
[  154.533451][ T5913] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  154.612537][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.624756][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.685115][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  154.695304][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  154.707092][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  154.719007][ T5913] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  154.728158][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.736201][ T5913] usb 1-1: Product: syz
[  154.740557][ T5913] usb 1-1: Manufacturer: syz
[  154.745245][ T5913] usb 1-1: SerialNumber: syz
[  154.751797][ T5913] usb 1-1: config 0 descriptor??
[  154.758067][ T7947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  154.765814][ T7947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  154.775288][ T5913] usb 1-1: ucan: probing device on interface #0
[  154.857792][ T6248] usb 3-1: USB disconnect, device number 36
[  154.893608][  T860] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  155.046230][  T860] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  155.055475][  T860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.063550][  T860] usb 4-1: Product: syz
[  155.068107][  T860] usb 4-1: Manufacturer: syz
[  155.072707][  T860] usb 4-1: SerialNumber: syz
[  155.080433][  T860] usb 4-1: config 0 descriptor??
[  155.092283][  T860] gspca_main: sunplus-2.14.0 probing 055f:c230
[  155.392978][ T5913] ucan 1-1:0.0 can0: registered device
[  155.463327][  T926] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  155.531942][ T7970] block nbd0: not configured, cannot reconfigure
[  155.580068][ T5913] ucan 1-1:0.0 can0: firmware string: unknown
[  155.604148][ T5913] usb 1-1: USB disconnect, device number 42
[  155.618540][  T926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.629387][  T926] usb 3-1: config 0 has no interfaces?
[  155.643462][  T926] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  155.654346][  T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.662450][  T926] usb 3-1: Product: syz
[  155.667497][  T926] usb 3-1: Manufacturer: syz
[  155.672104][  T926] usb 3-1: SerialNumber: syz
[  155.679913][  T926] usb 3-1: config 0 descriptor??
[  155.833367][  T926] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  155.901608][ T5913] usb 3-1: USB disconnect, device number 37
[  155.983319][  T926] usb 2-1: Using ep0 maxpacket: 8
[  155.989987][  T926] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  155.998592][  T926] usb 2-1: config 179 has no interface number 0
[  156.005815][  T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  156.016915][  T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  156.028145][  T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  156.039277][  T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  156.050703][  T926] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  156.064024][  T926] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  156.073050][  T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.086502][ T7972] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  156.302102][  T860] gspca_sunplus: reg_r err -71
[  156.312467][  T860] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  156.320228][ T5914] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input26
[  156.328362][  T860] usb 4-1: USB disconnect, device number 36
[  156.413497][  T926] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  156.502285][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.511374][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.587236][  T926] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  156.596436][  T926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.604498][  T926] usb 1-1: Product: syz
[  156.608741][  T926] usb 1-1: Manufacturer: syz
[  156.613411][  T926] usb 1-1: SerialNumber: syz
[  156.713472][  T860] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  156.790228][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.800183][   T34] wlan1: Trigger new scan to find an IBSS to join
[  156.807165][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.834458][  T926] gspca_main: pac207-2.14.0 probing 093a:2476
[  156.841437][  T926] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  156.856502][  T926] uvcvideo 1-1:13.0: Found UVC 0.00 device syz (093a:2476)
[  156.874664][  T926] uvcvideo 1-1:13.0: No valid video chain found.
[  156.876493][  T860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  156.906647][  T926] usb 1-1: USB disconnect, device number 43
[  156.956616][  T860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.969010][  T860] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  156.979787][  T860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.004931][  T860] usb 3-1: config 0 descriptor??
[  157.011025][ T6248] usb 2-1: USB disconnect, device number 39
[  157.011037][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  157.026224][    C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  157.433803][  T860] chicony 0003:04F2:1421.0008: reserved main item tag 0xd
[  157.447930][  T860] chicony 0003:04F2:1421.0008: item fetching failed at offset 4/5
[  157.465680][  T860] chicony 0003:04F2:1421.0008: Chicony hid parse failed: -22
[  157.473131][  T860] chicony 0003:04F2:1421.0008: probe with driver chicony failed with error -22
[  157.489375][ T5895] IPVS: starting estimator thread 0...
[  157.564265][ T8001] netlink: 'syz.0.756': attribute type 21 has an invalid length.
[  157.567990][ T8004] __nla_validate_parse: 4 callbacks suppressed
[  157.568005][ T8004] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.757'.
[  157.587646][ T8001] netlink: 128 bytes leftover after parsing attributes in process `syz.0.756'.
[  157.587800][ T8002] IPVS: using max 28 ests per chain, 67200 per kthread
[  157.615613][ T8004] netlink: 116 bytes leftover after parsing attributes in process `syz.3.757'.
[  157.847810][ T7976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  157.858619][    T9] usb 3-1: USB disconnect, device number 38
[  157.963376][  T860] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  157.967675][ T8024] overlayfs: missing 'lowerdir'
[  158.126896][  T860] usb 2-1: Using ep0 maxpacket: 8
[  158.143396][  T860] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  158.152499][  T860] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  158.184503][  T860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.199702][  T860] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  158.220605][  T860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  158.238115][  T860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.279429][  T860] usbtmc 2-1:16.0: bulk endpoints not found
[  158.481849][ T5914] usb 2-1: USB disconnect, device number 40
[  158.669045][ T8058] support for the xor transformation has been removed.
[  158.923522][ T8076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.125407][ T8086] Mount JFS Failure: -5
[  159.231029][ T8098] netlink: 'syz.3.778': attribute type 1 has an invalid length.
[  159.294239][ T8098] netlink: 'syz.3.778': attribute type 2 has an invalid length.
[  159.754245][   T34] wlan1: Trigger new scan to find an IBSS to join
[  159.795599][  T860] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  159.838160][   T30] audit: type=1326 audit(1763669053.224:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f761238f749 code=0x0
[  159.912984][ T8125] netlink: 'syz.2.789': attribute type 12 has an invalid length.
[  159.921010][ T8125] netlink: 120 bytes leftover after parsing attributes in process `syz.2.789'.
[  159.963764][  T860] usb 1-1: Using ep0 maxpacket: 32
[  159.984199][  T860] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  159.992319][  T860] usb 1-1: config 0 has no interface number 0
[  160.023379][  T860] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  160.033220][  T860] usb 1-1: config 0 interface 89 has no altsetting 0
[  160.059145][  T860] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  160.068535][  T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.076930][  T860] usb 1-1: Product: syz
[  160.081098][  T860] usb 1-1: Manufacturer: syz
[  160.085899][  T860] usb 1-1: SerialNumber: syz
[  160.092975][  T860] usb 1-1: config 0 descriptor??
[  160.100615][  T860] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  160.110134][  T860] em28xx 1-1:0.89: Video interface 89 found:
[  160.303400][ T5913] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  160.483491][ T5913] usb 3-1: Using ep0 maxpacket: 16
[  160.490144][ T5913] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  160.500485][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.511198][ T5913] usb 3-1: config 0 descriptor??
[  160.521533][ T5913] gspca_main: sonixj-2.14.0 probing 0471:0327
[  160.653398][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  160.728726][  T860] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  160.813719][    T9] usb 4-1: Using ep0 maxpacket: 16
[  160.820612][    T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.831647][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  160.838330][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  160.847396][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.857654][    T9] usb 4-1: config 0 descriptor??
[  161.122555][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.131353][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.142813][ T5913] gspca_sonixj: reg_w1 err -71
[  161.150477][ T5913] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  161.162171][ T5913] usb 3-1: USB disconnect, device number 39
[  161.274112][    T9] hid_parser_main: 7 callbacks suppressed
[  161.274133][    T9] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  161.287386][    T9] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  161.295100][    T9] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  161.302500][    T9] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  161.310069][    T9] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  161.319571][    T9] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  161.473778][    C0] usb 4-1: input irq status -75 received
[  161.680844][    T9] usb 4-1: USB disconnect, device number 37
[  161.792759][ T8143] FAULT_INJECTION: forcing a failure.
[  161.792759][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.806785][ T8143] CPU: 1 UID: 0 PID: 8143 Comm: syz.2.797 Not tainted syzkaller #0 PREEMPT(full) 
[  161.806799][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  161.806806][ T8143] Call Trace:
[  161.806810][ T8143]  <TASK>
[  161.806814][ T8143]  dump_stack_lvl+0x189/0x250
[  161.806836][ T8143]  ? __pfx____ratelimit+0x10/0x10
[  161.806854][ T8143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.806875][ T8143]  ? __pfx__printk+0x10/0x10
[  161.806894][ T8143]  ? __might_fault+0xb0/0x130
[  161.806923][ T8143]  should_fail_ex+0x414/0x560
[  161.806937][ T8143]  _copy_from_user+0x2d/0xb0
[  161.806947][ T8143]  kvm_arch_vcpu_ioctl+0xaab/0x2a70
[  161.806957][ T8143]  ? __lock_acquire+0xab9/0xd20
[  161.806970][ T8143]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  161.806989][ T8143]  ? __lock_acquire+0xab9/0xd20
[  161.807027][ T8143]  ? is_bpf_text_address+0x26/0x2b0
[  161.807056][ T8143]  ? is_bpf_text_address+0x292/0x2b0
[  161.807072][ T8143]  ? is_bpf_text_address+0x26/0x2b0
[  161.807087][ T8143]  ? kernel_text_address+0xa5/0xe0
[  161.807101][ T8143]  ? __kernel_text_address+0xd/0x40
[  161.807113][ T8143]  ? unwind_get_return_address+0x4d/0x90
[  161.807125][ T8143]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  161.807140][ T8143]  ? arch_stack_walk+0xfc/0x150
[  161.807173][ T8143]  ? stack_trace_save+0x9c/0xe0
[  161.807191][ T8143]  ? stack_depot_save_flags+0x40/0x860
[  161.807220][ T8143]  ? __lock_acquire+0xab9/0xd20
[  161.807234][ T8143]  ? __mutex_trylock_common+0x153/0x260
[  161.807247][ T8143]  ? __pfx___mutex_trylock_common+0x10/0x10
[  161.807265][ T8143]  ? rcu_is_watching+0x15/0xb0
[  161.807279][ T8143]  ? trace_contention_end+0x39/0x120
[  161.807299][ T8143]  ? __mutex_lock+0x335/0x1350
[  161.807325][ T8143]  ? kasan_quarantine_put+0xdd/0x220
[  161.807348][ T8143]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.807366][ T8143]  ? kvm_vcpu_ioctl+0x269/0xed0
[  161.807392][ T8143]  ? __pfx___mutex_lock+0x10/0x10
[  161.807412][ T8143]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  161.807429][ T8143]  ? do_vfs_ioctl+0xbe8/0x1430
[  161.807447][ T8143]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  161.807468][ T8143]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  161.807495][ T8143]  kvm_vcpu_ioctl+0x78b/0xed0
[  161.807522][ T8143]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  161.807548][ T8143]  ? __fget_files+0x2a/0x420
[  161.807561][ T8143]  ? __fget_files+0x3a0/0x420
[  161.807570][ T8143]  ? __fget_files+0x2a/0x420
[  161.807582][ T8143]  ? bpf_lsm_file_ioctl+0x9/0x20
[  161.807598][ T8143]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  161.807620][ T8143]  __se_sys_ioctl+0xfc/0x170
[  161.807646][ T8143]  do_syscall_64+0xfa/0xfa0
[  161.807666][ T8143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.807679][ T8143]  ? clear_bhb_loop+0x60/0xb0
[  161.807690][ T8143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.807699][ T8143] RIP: 0033:0x7f2f1538f749
[  161.807708][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.807715][ T8143] RSP: 002b:00007f2f135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.807726][ T8143] RAX: ffffffffffffffda RBX: 00007f2f155e5fa0 RCX: 00007f2f1538f749
[  161.807733][ T8143] RDX: 0000200000000040 RSI: 000000004008ae90 RDI: 0000000000000005
[  161.807743][ T8143] RBP: 00007f2f135f6090 R08: 0000000000000000 R09: 0000000000000000
[  161.807753][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.807763][ T8143] R13: 00007f2f155e6038 R14: 00007f2f155e5fa0 R15: 00007ffcb746c568
[  161.807799][ T8143]  </TASK>
[  162.079055][  T860] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  162.165609][  T860] em28xx 1-1:0.89: board has no eeprom
[  162.223322][  T860] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  162.230951][  T860] em28xx 1-1:0.89: analog set to bulk mode.
[  162.237940][ T5913] em28xx 1-1:0.89: Registering V4L2 extension
[  162.302940][ T5913] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  162.313923][ T5913] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  162.322519][ T5913] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  162.335600][ T5913] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  162.345103][ T5913] em28xx 1-1:0.89: Config register raw data: 0xfffffffb
[  162.353711][ T5913] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  162.360749][ T5913] em28xx 1-1:0.89: No AC97 audio processor
[  162.390544][ T5913] usb 1-1: Decoder not found
[  162.412548][ T5913] em28xx 1-1:0.89: failed to create media graph
[  162.429938][ T5913] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  162.458718][ T5913] em28xx 1-1:0.89: Registering snapshot button...
[  162.458908][ T8151] ==================================================================
[  162.473183][ T8151] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  162.480543][ T8151] Read of size 8 at addr ffff88807cec8740 by task v4l_id/8151
[  162.487975][ T8151] 
[  162.490288][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  162.490307][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  162.490319][ T8151] Call Trace:
[  162.490325][ T8151]  <TASK>
[  162.490332][ T8151]  dump_stack_lvl+0x189/0x250
[  162.490355][ T8151]  ? __virt_addr_valid+0x1c8/0x5c0
[  162.490375][ T8151]  ? rcu_is_watching+0x15/0xb0
[  162.490395][ T8151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.490414][ T8151]  ? rcu_is_watching+0x15/0xb0
[  162.490433][ T8151]  ? lock_release+0x4b/0x3d0
[  162.490449][ T8151]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  162.490466][ T8151]  ? __virt_addr_valid+0x1c8/0x5c0
[  162.490484][ T8151]  ? __virt_addr_valid+0x4a5/0x5c0
[  162.490511][ T8151]  print_report+0xca/0x240
[  162.490531][ T8151]  ? v4l2_fh_open+0xac/0x420
[  162.490547][ T8151]  kasan_report+0x118/0x150
[  162.490561][ T8151]  ? v4l2_fh_open+0xac/0x420
[  162.490578][ T8151]  v4l2_fh_open+0xac/0x420
[  162.490593][ T8151]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  162.490610][ T8151]  em28xx_v4l2_open+0x157/0x9a0
[  162.490628][ T8151]  v4l2_open+0x1bf/0x3a0
[  162.490646][ T8151]  chrdev_open+0x4cc/0x5e0
[  162.490660][ T8151]  ? __pfx_chrdev_open+0x10/0x10
[  162.490672][ T8151]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  162.490690][ T8151]  ? __pfx_chrdev_open+0x10/0x10
[  162.490702][ T8151]  do_dentry_open+0x7ce/0x1420
[  162.490720][ T8151]  vfs_open+0x3b/0x340
[  162.490732][ T8151]  ? path_openat+0x33b3/0x3d90
[  162.490750][ T8151]  path_openat+0x33ce/0x3d90
[  162.490772][ T8151]  ? stack_depot_save_flags+0x40/0x860
[  162.490791][ T8151]  ? __kasan_slab_alloc+0x6c/0x80
[  162.490804][ T8151]  ? __pfx_path_openat+0x10/0x10
[  162.490826][ T8151]  do_filp_open+0x1fa/0x410
[  162.490841][ T8151]  ? __lock_acquire+0xab9/0xd20
[  162.490855][ T8151]  ? __pfx_do_filp_open+0x10/0x10
[  162.490877][ T8151]  ? _raw_spin_unlock+0x28/0x50
[  162.490889][ T8151]  ? alloc_fd+0x64c/0x6c0
[  162.490905][ T8151]  do_sys_openat2+0x121/0x1c0
[  162.490920][ T8151]  ? __pfx_do_sys_openat2+0x10/0x10
[  162.490935][ T8151]  ? exc_page_fault+0x82/0x100
[  162.490952][ T8151]  __x64_sys_openat+0x138/0x170
[  162.490968][ T8151]  do_syscall_64+0xfa/0xfa0
[  162.490982][ T8151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.490994][ T8151]  ? clear_bhb_loop+0x60/0xb0
[  162.491008][ T8151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.491020][ T8151] RIP: 0033:0x7f5572ea7407
[  162.491032][ T8151] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  162.491044][ T8151] RSP: 002b:00007fff9fb81490 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  162.491058][ T8151] RAX: ffffffffffffffda RBX: 00007f55735d4880 RCX: 00007f5572ea7407
[  162.491068][ T8151] RDX: 0000000000000000 RSI: 00007fff9fb82f1c RDI: ffffffffffffff9c
[  162.491077][ T8151] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  162.491084][ T8151] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  162.491092][ T8151] R13: 00007fff9fb816e0 R14: 00007f557373b000 R15: 0000555eb242b4d8
[  162.491107][ T8151]  </TASK>
[  162.491111][ T8151] 
[  162.792782][ T8151] Allocated by task 5913:
[  162.797094][ T8151]  kasan_save_track+0x3e/0x80
[  162.801754][ T8151]  __kasan_kmalloc+0x93/0xb0
[  162.806323][ T8151]  __kmalloc_cache_noprof+0x3e2/0x700
[  162.811680][ T8151]  em28xx_v4l2_init+0x10b/0x2e70
[  162.816603][ T8151]  em28xx_init_extension+0x120/0x1c0
[  162.821867][ T8151]  process_one_work+0x93a/0x15e0
[  162.826785][ T8151]  worker_thread+0x9b0/0xee0
[  162.831357][ T8151]  kthread+0x711/0x8a0
[  162.835406][ T8151]  ret_from_fork+0x599/0xb30
[  162.839982][ T8151]  ret_from_fork_asm+0x1a/0x30
[  162.844732][ T8151] 
[  162.847034][ T8151] Freed by task 5913:
[  162.850986][ T8151]  kasan_save_track+0x3e/0x80
[  162.855639][ T8151]  kasan_save_free_info+0x46/0x50
[  162.860644][ T8151]  __kasan_slab_free+0x5c/0x80
[  162.865387][ T8151]  kfree+0x1c0/0x680
[  162.869269][ T8151]  em28xx_v4l2_init+0x1683/0x2e70
[  162.874270][ T8151]  em28xx_init_extension+0x120/0x1c0
[  162.879535][ T8151]  process_one_work+0x93a/0x15e0
[  162.884450][ T8151]  worker_thread+0x9b0/0xee0
[  162.889016][ T8151]  kthread+0x711/0x8a0
[  162.893066][ T8151]  ret_from_fork+0x599/0xb30
[  162.897635][ T8151]  ret_from_fork_asm+0x1a/0x30
[  162.902381][ T8151] 
[  162.904684][ T8151] The buggy address belongs to the object at ffff88807cec8000
[  162.904684][ T8151]  which belongs to the cache kmalloc-8k of size 8192
[  162.918714][ T8151] The buggy address is located 1856 bytes inside of
[  162.918714][ T8151]  freed 8192-byte region [ffff88807cec8000, ffff88807ceca000)
[  162.932663][ T8151] 
[  162.934971][ T8151] The buggy address belongs to the physical page:
[  162.941372][ T8151] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cec8
[  162.950109][ T8151] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  162.958582][ T8151] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  162.966543][ T8151] page_type: f5(slab)
[  162.970507][ T8151] raw: 00fff00000000040 ffff88813fe27280 0000000000000000 dead000000000001
[  162.979071][ T8151] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  162.987633][ T8151] head: 00fff00000000040 ffff88813fe27280 0000000000000000 dead000000000001
[  162.996281][ T8151] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  163.004930][ T8151] head: 00fff00000000003 ffffea0001f3b201 00000000ffffffff 00000000ffffffff
[  163.013578][ T8151] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  163.022221][ T8151] page dumped because: kasan: bad access detected
[  163.028619][ T8151] page_owner tracks the page as allocated
[  163.034309][ T8151] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5569, tgid 5569 (rcS), ts 45762631861, free_ts 45761665632
[  163.054089][ T8151]  post_alloc_hook+0x234/0x290
[  163.058838][ T8151]  get_page_from_freelist+0x2365/0x2440
[  163.064361][ T8151]  __alloc_frozen_pages_noprof+0x181/0x370
[  163.070146][ T8151]  alloc_pages_mpol+0x232/0x4a0
[  163.074976][ T8151]  allocate_slab+0x86/0x3b0
[  163.079461][ T8151]  ___slab_alloc+0xf56/0x1990
[  163.084118][ T8151]  __slab_alloc+0x65/0x100
[  163.088511][ T8151]  __kmalloc_cache_noprof+0x41e/0x700
[  163.093868][ T8151]  tomoyo_init_log+0x111f/0x1f70
[  163.098785][ T8151]  tomoyo_supervisor+0x340/0x1480
[  163.103792][ T8151]  tomoyo_env_perm+0x149/0x1e0
[  163.108535][ T8151]  tomoyo_find_next_domain+0x15ce/0x1aa0
[  163.114147][ T8151]  tomoyo_bprm_check_security+0x11c/0x180
[  163.119854][ T8151]  security_bprm_check+0x89/0x270
[  163.124859][ T8151]  bprm_execve+0x888/0x1440
[  163.129344][ T8151]  do_execveat_common+0x510/0x6a0
[  163.134352][ T8151] page last free pid 5569 tgid 5569 stack trace:
[  163.140655][ T8151]  __free_frozen_pages+0xbc8/0xd30
[  163.145743][ T8151]  __slab_free+0x21b/0x2a0
[  163.150138][ T8151]  qlist_free_all+0x97/0x100
[  163.154711][ T8151]  kasan_quarantine_reduce+0x148/0x160
[  163.160152][ T8151]  __kasan_slab_alloc+0x22/0x80
[  163.164980][ T8151]  __kmalloc_cache_noprof+0x37c/0x700
[  163.170337][ T8151]  tomoyo_init_log+0x183/0x1f70
[  163.175172][ T8151]  tomoyo_supervisor+0x340/0x1480
[  163.180181][ T8151]  tomoyo_env_perm+0x149/0x1e0
[  163.184924][ T8151]  tomoyo_find_next_domain+0x15ce/0x1aa0
[  163.190533][ T8151]  tomoyo_bprm_check_security+0x11c/0x180
[  163.196231][ T8151]  security_bprm_check+0x89/0x270
[  163.201236][ T8151]  bprm_execve+0x888/0x1440
[  163.205723][ T8151]  do_execveat_common+0x510/0x6a0
[  163.210730][ T8151]  __x64_sys_execve+0x94/0xb0
[  163.215394][ T8151]  do_syscall_64+0xfa/0xfa0
[  163.219879][ T8151] 
[  163.222181][ T8151] Memory state around the buggy address:
[  163.227786][ T8151]  ffff88807cec8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.235824][ T8151]  ffff88807cec8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.243863][ T8151] >ffff88807cec8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.251896][ T8151]                                            ^
[  163.258024][ T8151]  ffff88807cec8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.266063][ T8151]  ffff88807cec8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.274099][ T8151] ==================================================================
[  163.286048][ T3486] wlan1: Trigger new scan to find an IBSS to join
[  163.294926][ T5913] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input27
[  163.331106][ T5913] em28xx 1-1:0.89: Remote control support is not available for this card.
[  163.377661][ T8151] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  163.384888][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  163.393816][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  163.403867][ T8151] Call Trace:
[  163.407132][ T8151]  <TASK>
[  163.410047][ T8151]  dump_stack_lvl+0x99/0x250
[  163.414625][ T8151]  ? __asan_memcpy+0x40/0x70
[  163.419201][ T8151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.424385][ T8151]  ? __pfx__printk+0x10/0x10
[  163.428963][ T8151]  vpanic+0x237/0x6d0
[  163.432923][ T8151]  ? __pfx_vpanic+0x10/0x10
[  163.437404][ T8151]  ? preempt_schedule+0xae/0xc0
[  163.442237][ T8151]  ? __pfx_preempt_schedule+0x10/0x10
[  163.447591][ T8151]  panic+0xb9/0xc0
[  163.451290][ T8151]  ? __pfx_panic+0x10/0x10
[  163.455686][ T8151]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  163.461562][ T8151]  ? is_module_address+0x17/0xf0
[  163.466477][ T8151]  ? v4l2_fh_open+0xac/0x420
[  163.471051][ T8151]  check_panic_on_warn+0x89/0xb0
[  163.475973][ T8151]  ? v4l2_fh_open+0xac/0x420
[  163.480544][ T8151]  end_report+0x6f/0x160
[  163.484765][ T8151]  kasan_report+0x129/0x150
[  163.489250][ T8151]  ? v4l2_fh_open+0xac/0x420
[  163.493824][ T8151]  v4l2_fh_open+0xac/0x420
[  163.498222][ T8151]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  163.504189][ T8151]  em28xx_v4l2_open+0x157/0x9a0
[  163.509026][ T8151]  v4l2_open+0x1bf/0x3a0
[  163.513257][ T8151]  chrdev_open+0x4cc/0x5e0
[  163.517660][ T8151]  ? __pfx_chrdev_open+0x10/0x10
[  163.522574][ T8151]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  163.528889][ T8151]  ? __pfx_chrdev_open+0x10/0x10
[  163.533806][ T8151]  do_dentry_open+0x7ce/0x1420
[  163.538555][ T8151]  vfs_open+0x3b/0x340
[  163.542607][ T8151]  ? path_openat+0x33b3/0x3d90
[  163.547362][ T8151]  path_openat+0x33ce/0x3d90
[  163.551939][ T8151]  ? stack_depot_save_flags+0x40/0x860
[  163.557385][ T8151]  ? __kasan_slab_alloc+0x6c/0x80
[  163.562391][ T8151]  ? __pfx_path_openat+0x10/0x10
[  163.567319][ T8151]  do_filp_open+0x1fa/0x410
[  163.571809][ T8151]  ? __lock_acquire+0xab9/0xd20
[  163.576640][ T8151]  ? __pfx_do_filp_open+0x10/0x10
[  163.581655][ T8151]  ? _raw_spin_unlock+0x28/0x50
[  163.586488][ T8151]  ? alloc_fd+0x64c/0x6c0
[  163.590805][ T8151]  do_sys_openat2+0x121/0x1c0
[  163.595465][ T8151]  ? __pfx_do_sys_openat2+0x10/0x10
[  163.600644][ T8151]  ? exc_page_fault+0x82/0x100
[  163.605391][ T8151]  __x64_sys_openat+0x138/0x170
[  163.610227][ T8151]  do_syscall_64+0xfa/0xfa0
[  163.614712][ T8151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.620761][ T8151]  ? clear_bhb_loop+0x60/0xb0
[  163.625431][ T8151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.631319][ T8151] RIP: 0033:0x7f5572ea7407
[  163.635728][ T8151] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  163.655321][ T8151] RSP: 002b:00007fff9fb81490 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  163.663727][ T8151] RAX: ffffffffffffffda RBX: 00007f55735d4880 RCX: 00007f5572ea7407
[  163.671680][ T8151] RDX: 0000000000000000 RSI: 00007fff9fb82f1c RDI: ffffffffffffff9c
[  163.679630][ T8151] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  163.687584][ T8151] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  163.695541][ T8151] R13: 00007fff9fb816e0 R14: 00007f557373b000 R15: 0000555eb242b4d8
[  163.703503][ T8151]  </TASK>
[  163.706875][ T8151] Kernel Offset: disabled
[  163.711182][ T8151] Rebooting in 86400 seconds..