last executing test programs:

10m27.261345601s ago: executing program 0 (id=65):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c4"], 0x20)

10m27.169148441s ago: executing program 0 (id=66):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000400))
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="01007fe43843a54ba7a40000"], 0x14}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0)
r4 = msgget$private(0x0, 0x420)
msgsnd(r4, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r4, &(0x7f0000000040)=ANY=[], 0x401, 0x0)
msgctl$IPC_RMID(r4, 0x0)
sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010101}}}], 0x18}}], 0x2, 0x0)

10m26.932687386s ago: executing program 0 (id=71):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe0ff)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe8)

10m26.755522448s ago: executing program 0 (id=72):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000001010102920e00000000000002000000300002802c00018014000300fc02000000000000000000000000000014000400fc0000000000000000000000000000010c001b"], 0x50}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x3, 0x20)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0x18}}, 0x1c)
connect$inet6(r5, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x7, 0x3, 0x4, {0x0, 0x5, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x40c4000)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x24044094)

10m26.518324163s ago: executing program 0 (id=74):
pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0)

10m26.316985549s ago: executing program 0 (id=76):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
r4 = getpid()
syz_emit_ethernet(0x9a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x64, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e21, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "34e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d4", "5cb275b40fd4031ec1941ebfaa96d7bf", {"cf0372b8d285ee92d104650b69fd413d", "0667f5c2b37bbd83be6ba638018bb23c"}}}}}}}}, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40a40)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x6, 0x0, 0xec7d4df7d86751b2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x1, 0x7f, 0x2}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl(r3, 0x8916, &(0x7f0000000000))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000020800084000000001140000001016010000000000000000000000000a"], 0x8c}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r11 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000)
sendmsg$kcm(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1)
r12 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0xfff, 0x408101)
ioctl$SNDRV_PCM_IOCTL_XRUN(r12, 0x4148, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

10m11.008934811s ago: executing program 32 (id=76):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
r4 = getpid()
syz_emit_ethernet(0x9a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x64, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e21, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "34e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d4", "5cb275b40fd4031ec1941ebfaa96d7bf", {"cf0372b8d285ee92d104650b69fd413d", "0667f5c2b37bbd83be6ba638018bb23c"}}}}}}}}, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40a40)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x6, 0x0, 0xec7d4df7d86751b2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x1, 0x7f, 0x2}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl(r3, 0x8916, &(0x7f0000000000))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000020800084000000001140000001016010000000000000000000000000a"], 0x8c}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r11 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000)
sendmsg$kcm(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1)
r12 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0xfff, 0x408101)
ioctl$SNDRV_PCM_IOCTL_XRUN(r12, 0x4148, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

8.717982483s ago: executing program 2 (id=3633):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001f40)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x1000100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="073f8a")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)

8.137229396s ago: executing program 5 (id=3641):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0xa898cf170ab9f9b9, 0x1, 0x0, {0xa, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
write$binfmt_script(r0, &(0x7f0000000880), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f0000000300))

8.05069177s ago: executing program 5 (id=3643):
unshare(0x62040200)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x210c0e, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x88}}, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
pipe(0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003, [0x1]}, &(0x7f0000000100)=0x54)

7.378080144s ago: executing program 1 (id=3647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x401, 0x4002, 0x100000, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xc}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x1}}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x20, {0x5, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x70}}, 0xc000)

7.281053736s ago: executing program 1 (id=3649):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
r3 = syz_usb_connect$cdc_ecm(0x3, 0x91, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x10, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "7c8a"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x1d, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm_detail={0xf, 0x24, 0x13, 0x7, "29517039518b03fc757243"}, @mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x7, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8a, 0xf4, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x47, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x81, 0xc, 0x5, 0xff, 0x73}, 0x2a, &(0x7f00000005c0)={0x5, 0xf, 0x2a, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x1, 0x6, 0x49}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x15, 0x9, 0x6, 0x7}]}, 0x5, [{0x1d, &(0x7f0000000600)=@string={0x1d, 0x3, "e801a2b3c6a3b315c0d525ed42ced527fb7f404bfae79b37534c92"}}, {0xcf, &(0x7f0000000640)=@string={0xcf, 0x3, "bb853b4e2a303f4eed4781c1f60708c55b69a814d7299cd43eaeb13ead648e58bf99573a64693b9d0d4e3ed7c904023270b6122c0a2bd4aed7872b919c14eb6ddfa0d2ab3ad1c97bb9d9a7ce32523494ba40b730b1444f7f86f967734f7453e25c9aea05839b16b8fd7b76fee6f8c30cad781f346a4e409f3b8897825fff2ca45c9cce9110e7fd4d649e528529d7bdcf27c96d75c40ca85f4f6305e830e3eb93d39e6dc72af554e756332793eded246ef62904fa1ee1674fadd3c9901025e4c71c383eb84f39d844e321a0e328"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2009}}]}) (rerun: 32)
syz_usb_disconnect(r3) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async, rerun: 32)
r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1000", 0x16, 0x11, 0x0, @empty, @local, {[], {0xffff, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x87, 0x100}, "30b00afe4e70"}}}}}}}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20011000000012"], 0x0}) (async)
r6 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100)
r7 = socket(0x10, 0x803, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x60000005}) (async)
syz_usb_connect$uac1(0x5, 0xbd, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x9, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xb0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0xe, "c3", "ff"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x5, 0x1, "d53e5aec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9, 0xacf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x4, 0xff, 0x9, "9ee882ea8c81262b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa, 0x3, 0x5, 0x7, "060901", "da"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x4, 0xd, '|vK', "01"}, @as_header={0x7, 0x24, 0x1, 0xc, 0xfe, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xd, 0x8, 0x2, 0x10, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc01}}, {0x9f, &(0x7f0000000300)=@string={0x9f, 0x3, "527834a2e5cf71603be153ebd3d27446096b3fe8f441b3db904d1152117c10da8e11062226f1f0f900a44aab0bace5274543a966ce51db3ae983219e615c08fd66c5be901c171f068ac83bbbe1fb9412daa25758dd0964b323415d195cf3ce792ada31c53775a8ec8b2f70980c2083f5a6259aa0cfce5e3b80ffca73ff912f23eb02eb730bf4a872054687333496e6240164a5291540a3b2cbe12207a4"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x407}}, {0x64, &(0x7f0000000400)=@string={0x64, 0x3, "0261e01c25717fa4801f0d765cb24e4c250bcf6f3515255c63140e126b2efea26815492ca52fe43f6f6c5a023758eb1b4fbf918a95ff13cf71ae4c40ffde8d436b052b90ea9177953776953f37cdc1910fa4c0fce6110d1267eeddab20e3929f3d95"}}]}) (async)
r8 = fsopen(&(0x7f0000000340)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r8, 0x0, 0x0) (async, rerun: 64)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000080)='sysfs\x00', &(0x7f00000000c0)="5d57b8", 0x3) (rerun: 64)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x2c, 0x447, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x2, {[@lsrr={0x83, 0x3, 0x7}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2, 0x10000}, {@private}, {@local, 0x2}, {@remote, 0x8}, {@broadcast, 0x400}, {@remote, 0x200}, {@private}]}]}}}}}}}, 0x0)

5.975154908s ago: executing program 1 (id=3654):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@updsa={0x134, 0x1a, 0x20, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0xff}, @in6=@private1, {0x200000, 0x0, 0x3}, {}, {0x0, 0x0, 0x1}, 0x0, 0x34ff, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x134}}, 0x0)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000013481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r2, 0x4d7f6084, 0x0)
getdents64(r2, 0x0, 0x20)
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x103)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20fe, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0xb, 0xf8, 0x8, 0xbf84}, {0x9, 0xff, 0x2, 0x8}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x38, 0x2000000}, 0x10)
io_uring_setup(0x6201, &(0x7f0000000300)={0x0, 0xed74, 0x0, 0x0, 0x3a3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000003080)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/70}, {&(0x7f00000004c0)=""/160}, {&(0x7f00000001c0)=""/29}, {&(0x7f0000000580)=""/252}]}, 0x6}, {{&(0x7f0000000680)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/200}, 0x4}, {{&(0x7f0000000840)=@isdn, 0x0, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096}, {&(0x7f00000018c0)=""/253}]}, 0x800}, {{&(0x7f0000001a00)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a80)=""/72}, {&(0x7f0000001b00)=""/254}, {&(0x7f0000001c00)=""/207}, {&(0x7f0000001d00)=""/112}]}, 0xecde}, {{&(0x7f0000001dc0)=@xdp, 0x0, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/97}, {&(0x7f0000001ec0)=""/191}, {&(0x7f0000001f80)=""/185}], 0x0, &(0x7f0000002080)=""/4096}, 0x5}], 0x10135, 0x2, 0x0)
userfaultfd(0x801)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000)

4.900988395s ago: executing program 5 (id=3662):
socket(0x3, 0x4, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) (fail_nth: 3)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57})

4.705084835s ago: executing program 2 (id=3663):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00')
writev(r0, 0x0, 0x0)

4.663806135s ago: executing program 2 (id=3664):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r3}, 0x0, 0x0, 0x0)
write$sndseq(r2, &(0x7f0000000180), 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)={0x7fff, 0x8, 0x100, 0x1, 0x8000000000})
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r10 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
r11 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r11, r9, r10}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}, 0x0, {0x0, r12}})
io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r13 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r13, 0xc0487c04, &(0x7f0000000080)={0x0, 0xfffffffffffffd4c, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x0, <r14=>0x80000000}, {0x0, 0x80000000, 0x0, {<r15=>0x0}}, {}, {0x0, <r16=>0x80000000}], 0xfffffffffffffde0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r13, 0xc0347c03, &(0x7f00000008c0)={{r16, r15, 0x0, [0x0, 0x10008]}, {r14, 0x0, 0x4, [0x7]}, 0x2, [0x1000, 0x8]})

3.193196529s ago: executing program 5 (id=3666):
r0 = socket(0x3, 0x4, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_io_uring_setup(0x27e2, &(0x7f00000000c0)={0x0, 0xc52a, 0x8000, 0x2, 0x276}, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, r0, 0x80, &(0x7f0000000240)=@l2={0x1f, 0xa, @any, 0x401, 0x2}})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x200, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6109d}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8010)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57})

3.061334466s ago: executing program 1 (id=3669):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x6, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[0x0])
signalfd4(r0, &(0x7f0000000140), 0x8, 0x0)

2.988320935s ago: executing program 2 (id=3670):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0xd83}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xaf, 0xfa}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0xfe, 0x5, 0x10, 0x40}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "c32bb8de700cd7c1617e137717a1a2a5c51ac6e48d896eeb5f852c13f805bf121ef3f3b53e1c84200b796116829be5a1d2d4c8182fe9963b3508b107219fe36fa2f01f2a7ab4f4b1b85cdd4623426e67f69e63053e68adfa26f78e4bf51139f3a9ee4f54f24e63f72c"}}, {0xd5, &(0x7f0000000180)=@string={0xd5, 0x3, "e6c2058c178d3474aa94b509774aadf8cdf33bb00a4263d33bddd84103020ca93c8810bd2c272a1d48e15ffb6d9f083f92e35e5f0954fe1d251e74a9b80526169d03b6823db1bf24efd5e1eae8dd8fdcb1008ab046913d001e5e29b0ee68b260bb90da5403d00716b7f31fdf02ac23c09cfe7758261a662827cba6035ea76224d554e7fe7e18c4eb0f347f8f7af83a3cdc4508b131d65ea946ee90463bface86d218db59cc7ca5183009ab1172c1e9916e0fc7e274af96e8aebcd0d88c9283a1b619333ff9cb015783e4b0c423d0eca6ee01c6"}}, {0x82, &(0x7f0000000280)=@string={0x82, 0x3, "3ffe6856e67ca94a6c99df55dd5ff698862e3218a58da6297369af86824d9d2085b8a0080652f702eeabe911bd669c164b97846bdfbfdd9a37abf411f81c2b686d314b64ad5ce35726759d3029bea2e6eed9242f3cd5a4ba756b8db2f0af5587f68a0abea801b52016c37f3a2efbcc4922ca0bc33621a58ad9c1d8efb87c86bd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3009}}, {0x10, &(0x7f0000000380)=@string={0x10, 0x3, "b6558593c8bd5b0ac78df4f118b0"}}]})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0xd83}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xaf, 0xfa}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0xfe, 0x5, 0x10, 0x40}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x6b, &(0x7f0000000100)=@string={0x6b, 0x3, "c32bb8de700cd7c1617e137717a1a2a5c51ac6e48d896eeb5f852c13f805bf121ef3f3b53e1c84200b796116829be5a1d2d4c8182fe9963b3508b107219fe36fa2f01f2a7ab4f4b1b85cdd4623426e67f69e63053e68adfa26f78e4bf51139f3a9ee4f54f24e63f72c"}}, {0xd5, &(0x7f0000000180)=@string={0xd5, 0x3, "e6c2058c178d3474aa94b509774aadf8cdf33bb00a4263d33bddd84103020ca93c8810bd2c272a1d48e15ffb6d9f083f92e35e5f0954fe1d251e74a9b80526169d03b6823db1bf24efd5e1eae8dd8fdcb1008ab046913d001e5e29b0ee68b260bb90da5403d00716b7f31fdf02ac23c09cfe7758261a662827cba6035ea76224d554e7fe7e18c4eb0f347f8f7af83a3cdc4508b131d65ea946ee90463bface86d218db59cc7ca5183009ab1172c1e9916e0fc7e274af96e8aebcd0d88c9283a1b619333ff9cb015783e4b0c423d0eca6ee01c6"}}, {0x82, &(0x7f0000000280)=@string={0x82, 0x3, "3ffe6856e67ca94a6c99df55dd5ff698862e3218a58da6297369af86824d9d2085b8a0080652f702eeabe911bd669c164b97846bdfbfdd9a37abf411f81c2b686d314b64ad5ce35726759d3029bea2e6eed9242f3cd5a4ba756b8db2f0af5587f68a0abea801b52016c37f3a2efbcc4922ca0bc33621a58ad9c1d8efb87c86bd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3009}}, {0x10, &(0x7f0000000380)=@string={0x10, 0x3, "b6558593c8bd5b0ac78df4f118b0"}}]}) (async)

2.94271957s ago: executing program 1 (id=3672):
r0 = io_uring_setup(0xdcf, &(0x7f0000000000)={0x0, 0x7a40, 0x2, 0x3, 0x38e})
r1 = io_uring_setup(0x3929, &(0x7f0000000080)={0x0, 0x9d4a, 0x2, 0x3, 0x16d, 0x0, r0})
r2 = fsopen(&(0x7f0000000100)='qnx4\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
r4 = open_tree(r3, &(0x7f0000001180)='./file0\x00', 0x88000)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = fsmount(r2, 0x1, 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r7=>r0, {0x9, 0x266}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002200)={@mcast1, 0x6, 0x0, 0xff, 0x1, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000002240)={@dev={0xfe, 0x80, '\x00', 0xa}, 0xfffffff8, 0x0, 0x3, 0x0, 0x2, 0x9}, 0x20)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, r1, 0x73b0a000)
socket$inet6(0xa, 0x1, 0x7)
syz_usb_connect(0x3, 0xa9f, &(0x7f0000002280)={{0x12, 0x1, 0x300, 0xe, 0xf, 0xc6, 0x10, 0x10c4, 0x8477, 0x7fd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8d, 0x2, 0x5, 0x5, 0x50, 0x9, [{{0x9, 0x4, 0xce, 0xba, 0xd, 0xd7, 0xe1, 0x43, 0xd, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x2, 0xc0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x7}, @generic={0x9, 0x11, "a72d4dfbb6c565"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x2, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xcc, 0x5, 0x7, [@generic={0x89, 0x24, "487a65e131dd5a1c69acb26386fa7116199f57a6f80d00c26d7f478dbceb64b90242edfd7ba0ab5bd966edd4fc0ce09c4dedcfbd2fe7133b8be0d678c83266ba6e6d158a87beaca4fa3df36ce447675dc0878fe5c2ee8f1d1a11b71f2574552428cab5b717a30ab54c9dda3cde695d0c508e5af3d4783be913abc43135a7009b2f8a5e5c384880"}, @generic={0xc4, 0x1, "133ad1cfa9c422cd42514d05305b845680a56fabc7731f25b298e375910e794f3b69587f73c28985cf2c5d670f42c9ceaa3ad3e02c89c7b431f6e91708d9f707a77962d7db24a55a4d7df5d552747289e7a1e64f6130f6e59ee72c4f28757fa931fc2c3e602d12e9b2e2ec2f4abc6f5c0d239d762e5bda611e84dfd15c0e42a3d73cb6a474998b7d854c8c89da0823f621be496125c397d3703689e1f2d800eeb54fd7479b0a371252c6a21ed2c13c038a37693eb282f9bd4f50eaaa2bcc0baa5f4b"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xcb, 0x72, 0xed, [@generic={0x73, 0x3, "7c49493068724e2d73d115c287a77539ce05602c8219bbf87da60542cd392f0058538ce0a3ab9a3151ac83035e210b2c186199686776bb31f029ceb7381567335116559a902fa14d3b908344656fb2a783fafe79ea750eb5c6cceca8bb0c22eaf4a24e8c574e090a3d13e5412fe3cbdec2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x94, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x3}, @generic={0xa4, 0x30, "854ece726b01731af30a85d136560ec5d2ec18238e282606f0e614b983adca358dfe2b03755ceed3baa80712980c69f3fd92f2d9b17b1f7b5cb2a8caa4d6417e32717bc930ddeb8d921afe2635f339d90ba0344375ae69c46667c83565c25c8829e67e56420b5c5be5504e677eed02006b1a9bef2e467f3c52a93c0a2d9ce4a0baeaa12b3b80f3403ba01d6fd82b518db7bd91322b724993338403d6f0a412bb7361"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x1, 0x7, 0x8, [@generic={0xe6, 0x4, "927de9fb3a474ae34988458f98c647c8ece81b65e94170931da3675cb5e78d32618e4994a1cbd178dc27957d7339995236cf5e007b568e33e35b897218ffed00f2b75461d389bf6defb4c2cd316a0092f1b2215ecc8d6e03e94461ef5538f0a2c901e9cd6939919b22c879a4b8c934d92ce7e3f51aac97d4cea87e2614aaf8e2fe34547fdf6474532fc42b56a182600250870728cb3ac7c1f00b8a11b8a0d7b92d6a543783988cb41de794f48e551835a13812a9ba0dabcb6635ddcb48157b709bb0c5b15c3e02e5c3d81dba124bd1e28e82edc5d238bfb84542204f2e558202fcf1366c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x9, 0x0, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x5, 0x3}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x4, 0x7, 0xe, [@generic={0xa7, 0xe, "e3e681ed66c785fe401ce3bd961654362dd807b8d969ef47be0538c58de97f2442b9ebd237bff8b86d21844e60ead138dbe55072b2eb8ad9091a20248a427ca6169087659dd8b8c71fbb610d946ab565b343c69bc59f71948ce6d486de16ed9d27e0e47f33b117a987ec73b0181e6d1197b7b7934483c749fe20473a447b9db8a09ea418b1fc46a5c7233a4087072f8fb07daef3b50848a565d008c375279fded9f3fbbaf1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x6, 0xc, 0x50, 0x9, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x14, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x7, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2a91}, @generic={0x5d, 0x22, "e97e2506990bdafaec11d7b6d8a5c71273b66e68f474d3a3f88968f70972277d98f5e5aaa45ba11125456e88e9084b50ed5c7e8157feadb9803137fc4cfc222b082b2f5f27348c6e46223ec6a63f88c6588ebf666ba4e3df42da4a"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xde, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x60, 0xfff9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x5, 0x48, [@generic={0xba, 0x21, "738c3ce68a14cc74006c4abb4acb0cba514fd9e14f4e08ec529c1267bfbdb12b9979150cbe33aa3a0b6a0efe888aa7717242cf16a50e50737c1b8300d9adb7ee000ac1a6b607f07b1e4df41b25d2798de2e59b73a1fb5e9ea3e9423a8607798a9aa2d1c7d07df15ce752d85db518c2abd009cdc39e224dda5bd2f2583fc778604326df64cee6158de35c056641572ad09f4d474fba33e3fd2c331dc2d655164250926eab063ec513d4e4fbf78dc6fbead3ecf974cc1fe8aa"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x60, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x63, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x5}, @generic={0xe, 0xb, "ff51854578c3877a0d43c891"}]}}]}}, {{0x9, 0x4, 0x6, 0x1, 0x6, 0x55, 0x33, 0x26, 0x3, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3, 0x5d, "2b83ee"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x8, 0xa, "567e63daf793fdda"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x81, 0x4, 0x5, 0x1, "7889db2b62"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x1b, "", "9f83"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc, 0x5a, 0x4}]}], [{{0x9, 0x5, 0xb, 0x8, 0x0, 0xae, 0xbe, 0x4, [@generic={0xcb, 0xc, "02c61f184f0005f67bb9b42b9397cf3e299af593a0700fba6994e8159fed33218e859d382c5db55f44eaabb56733f543b5a99631b925ee19d7424e5d1fb8d58a004bb0e55e4bb3c82dcfc7951815158afc8c958982f68b586668be7bef89aaa09589c13d16a4676ce910cb87e3513e16fd0ef37cd872aef70cd439cb9a7898dbada39bfadfc4fd63cbce7c122daa15e085a8cd3cbc47e106c73c2b7261746b83dc47da2d2f5757c737336b0986108a6c4e5f9e479f8039b32c16c9aba31dd0473e7371761554124401"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x81, 0x3, 0x0, [@generic={0x3e, 0x4, "ec5f00a9786d05f30f37791fb2263c3e4aa573d84e5186afb0490e7dc8ce1efd78166fa21466670933e9f3a8ecd2ed69ede581792d633ea6aed4ce3d"}, @generic={0xae, 0x22, "7196adf87d9d0ac0f22570534a84bff2e0bc0b98ae359d20748540726aae4c9a185aeca70eec4b206612683412a85560cdde63b0f0d81e3c41056f8851d8af0f4eb34e92080f3d532073d47e51909b4287b6045280f2bf9d4ac8b4d68e2e01f8cabb2bdc917b62561392b6367da5a8d2b46919f3ee217b9539b3132dd1b75a3871c96a79c90cf2ba2123c71f8b95c2e29bdca7cab689e8240ae9f790e20056fc6cab60acace054c9d61f1f01"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x6b, 0x2, 0x1, [@generic={0xf9, 0x31, "32539868aca9e5a2c2f749cc8ebe0c2847ec5cdb36f6bcee8f11790a2a9ff00e25636459741fdad7c44615d36b83e543efc56bf686e785f3ea14b7aa828c9daba4c5849697407e3da4f2a89e66e0ac3214c087401949a167d72fa72d116c746cb2685af29e8aa5004bf9a937733c434af36d4f726b5a6d0652e0f2a3a9e05d4d477b1103f24dfae90888a6c9c1073a327440dcf26c57340dfa6a8189608f79b2dd2907dea5be4b29ec2ba7ccc07a323e5b3760a54c54893a11293dbece67401b75876dd2e6b21dbe420475063588a3b65e734e56c1c25e22f0a561906b8fa3f1f64c6f5d0f77aed0dc04ca34e2be7cb25ba0feaffa9320"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x1}]}}, {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x10, 0x3, [@generic={0x8f, 0x9, "5f33f8b488d62c2ef09fc30789f1f364a30a83361619aab994ce115f3164e130f344dab9fa849b70388a27c76a35f52c1f43800e88d21a718edb913292d33863961df4b570ae3214fe473a98e5eb600ea6d2b442cfe4f5738ea1fc0eec0f79dbf14d80f91aee80d98b270a77a9933bdceb38ad29920cc9d015cbf0dfb23b545fba7416daff1dbfe8517e6a91ca"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x8, 0x15, 0x9, [@generic={0xc4, 0xd, "be6d886eac222801d971cec163933a47da8b90311c7594edd175285abeef18d5f805a4b0643efe5a1a13580039084c271efd5dd336689c8a5b03fdca9845f6f61a6ac89e28fe08ed4e7402319be2beb9cc55038c671810204289e73644d443b757f39e09c28c86949c49faae15eec2927cc6fd6869b112653eb3b32228adaebfb1500200e6e176a62f4615577baf0057bf348e34ec3773e6aeb669f6d9e80cce1a0338a5361a289be5cd2d82f9a20a91336f60e695688b0acf1f3ab2deb71842d1fa"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0xee, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}]}}]}}]}}]}}, &(0x7f0000002f80)={0xa, &(0x7f0000002d40)={0xa, 0x6, 0x110, 0x3, 0xa0, 0x4, 0xff, 0xce}, 0x21, &(0x7f0000002d80)={0x5, 0xf, 0x21, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x4, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x4, 0x1c}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x5, 0x5589}]}, 0x7, [{0x7, &(0x7f0000002dc0)=@string={0x7, 0x3, "c7c38be3ce"}}, {0x9, &(0x7f0000002e00)=@string={0x9, 0x3, "de89c2d813fba7"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x2409}}, {0x26, &(0x7f0000002e80)=@string={0x26, 0x3, "6a681200483fc7cf8b0ed1640ac85eec571e765e461514698579914efd591b2f509e940f"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0xc899}}, {0x4, &(0x7f0000002f00)=@lang_id={0x4, 0x3, 0x42b}}, {0x29, &(0x7f0000002f40)=@string={0x29, 0x3, "c5630f7baac7ac290f00826a7a8e43d15c44bad8f50fb1c3afb37e6e6908d2c81d88a2c92ec4c7"}}]})
tkill(0x0, 0xf)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x200000a, 0x12, r4, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000003000)=0x3, 0x0, 0x4)
pwritev(r5, &(0x7f0000003540)=[{&(0x7f0000003040)="539980dcbd53b2391e0ef3c947f2af8dafb5ba897c994427d995fa6b885626d7c8df303bc8fc467e33e22e5481f79f66159e0ae0bb5dbad1b473c63ff44cf16061d8a74a92ae3d55b79f3365d94e9b57f8a711599b6d0d38f0c3db12d2ef2ba3b43b0dcf51794b42cf5cac208ada181ef1de902ff3af57445d19dffd9a22236a52a44d6ac9ddad6fde95ae00515f29291d5047bcc6cbff4f4b0b65709858183f883e894284a7d5a1e59a2877d5c6698037a946afec005afddeae13a385c493ebd7", 0xc1}, {&(0x7f0000003140)="ca84bb9c1fba8c736b7a53dea67985bcb8d120dd90f9393072d3d0a65e0cce16223cdb93ca447657ba596975407a846b07767bc1c96acbee74c4bde2e15a5c24eeaab3d16d6ffef5f4e2a1efa195f33015404f61205b4815e37fc3c071bced8c24814853a98958ad27cedce5351599552938f61ce0baa18a136c8ffc7e7a9b50bff2c3d1722cbcce9e21b2b96b153b3b0db3f75343dc36c1d668a235fe2a237195761e8435fe78fbd00d2dafd0f23971", 0xb0}, {&(0x7f0000003200)="13065a3f7bc1e80268b5d068520806abffb59981c4d5eb63b987b500b8d3dbddf5afa565390e22c434f17b3d9eda3c2945656074ebe929a61699a46dd9e019b780fd02241dae7d1118ca51457a573106b5a94c15498f7c308982d73b41752d933646e667b6826bfcbe5835bd5618fd8bf9d3a0aafce025513f1067de9734abdfa4c28f0b614a7a9e3ef37e18ab8b9d66d2285314961aa42c86aea0f934fafdf677a57f0c0adca0346f88ec69191fd076daa6860f11", 0xb5}, {&(0x7f00000032c0)="0bb27ad06390d608bef8fd0345ce47dc30ec12c3fd65bb25e1afafc9ce93f47f293207ae5af9316371c39e3435f272e20652ecf1f88fc0ec156237a57db486f551ebb9b39f0ada9df81a2f690052f7e5f68e012e026d1758e9f634aec172614e1807c0b123b0c2d85f727cd97510c74cc5912f00926710309595e20b3e88a97abddb03d5d80ce8741a09407247da14cc5a52a774bf522c5b86dcaa23aff8c79c03f65b813829ae7664ce8949b06cb2e6822dd042051e239d71ccf4e7b816ac95190fa0f18321174cd70439104255f865da", 0xd1}, {&(0x7f00000033c0)="633e094cc43eeb07e028b4fbd5e73a2e05abe69a44813bf6995aad8f03f0eb50c3b8b699153232f277842f7edbe80da822eb40ad06d3e0b781e4d5692f188191f2a06b6ad3026e55be9e37bc1cab707dcb73e17cee4c7b9e3e9350d660838e2b9c04ac02d0e1c19328189361839b461c0739df210d71aa4c88fd7846670ed846d820522d478172dd90cf2fdd1a0c2857573a633339a397bec22d025ecc93a310701574944b8c2e4a78", 0xa9}, {&(0x7f0000003480)="b8dacc6a0e455e637471cca4e2a62adf78e7fe746a4f2a6daa18823c435508c39d4d8b184499084061e11b25e497fa2f51d35fad893fd4ad2bfd4f4d1f9bd06c6e382e8815e0fb194c17312ef5dbdae087954c3fcbc04b5db1377924f96cfc0fff7fea728a7cf6894ac76308b65e3accc5272cb48537b19b4491968586168b37", 0x80}, {&(0x7f0000003500)="2cc6f14bece0fc99e875e381eed710a664c11f773981a67edc97a736147996f618c59e800f2c630ed0a0393c", 0x2c}], 0x7, 0x2, 0x8)
mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000008, 0x10, r3, 0xb3af0000)
ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f00000036c0)=@urb_type_control={0x2, {0x3}, 0x800, 0x7, &(0x7f0000003580)={0x60, 0x14, 0x3a, 0xdbc6, 0x9}, 0x8, 0x4, 0x8001, 0x0, 0x3c7, 0x4, &(0x7f00000035c0)="f2369590dd9746e513371284835e4c183420a8d7c55ee6e795fd9d39c0f0251190af2f2270b79f5597bc8b6a254bb4346666f2a9c0fe0e395761a6f3a9c5b7d87c66f4eb12007dfa3dc320a865dd34ad156acdda46f139fc0e65e21d314ae98ebdb9d5e352fe21799afd77012a86d86c4e3dbab7c132900c119112405956ceeb454e176aeef85434125de9c9c9c6f0031f34e039f96c6671c4c76f51407bdc331156da4265509f4628ebf819284b7c85b68ca84b01a027b4fd9c7a73d1dd4119fc13939b4357e394c80b3aab9a999e904e905e87abfaa38c0daf1fffde02b6a449c6187ce87cd14cfc641ac1d3fed9f040e5"})
r10 = creat(&(0x7f0000003700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45)
r11 = openat$rdma_cm(0xffffff9c, &(0x7f0000004740), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000047c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000004780)={<r12=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000004800)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0xa, 0x4e21, 0xa, @local, 0x5}, r12, 0x2}}, 0x48)
ioctl$DRM_IOCTL_MODESET_CTL(r6, 0x40086408, &(0x7f0000004880)={0x5, 0x5})
ioctl$TIOCMSET(r10, 0x5418, &(0x7f00000048c0)=0x2)
close_range(r4, r8, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000004900)={0x0, <r13=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000004940)={r13})

2.604938629s ago: executing program 4 (id=3677):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005b80)={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x81, 0x7, 0x0, 0xe, 0x40040000})
r1 = msgget$private(0x0, 0x392)
r2 = getgid()
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
r7 = openat$cuse(0xffffff9c, &(0x7f0000002400), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000002440)=ANY=[@ANYBLOB="79f7852e995273c5c25801000200005bfd", @ANYRES64=r2, @ANYBLOB="050000000000000001000000000000000500000000000000090000000000000007000000060000000400000000000000790c00000000000000000000000000000400000000000000f2ffffffffffffffc2bb0000000000000700000003000000060000000080000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000700000000000000000000000000000002000000000000000100000080000000000000000000000003000000000000000000000000000000b3f1000000000000040000000000000003000000020000000400000000000000050000000000000008000000000000000900000000000000ffffffffffffffff040000000000000004000000080000007f0000000010000009000000", @ANYRESOCT=r5, @ANYRES32=0x0, @ANYRES32=r6], 0x158)
getresgid(&(0x7f0000000000), &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000080))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0)
r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe)
r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=<r11=>0x0)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r14 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r14, 0x84, 0x1c, &(0x7f00000022c0), &(0x7f0000002300)=0x4)
memfd_secret(0x0)
r15 = openat$rdma_cm(0xffffff9c, &(0x7f0000002340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002380)={<r16=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0xffffffff, {}, 0x5, 0x5}}}, 0x90)
r17 = openat$mixer(0xffffff9c, &(0x7f00000023c0), 0x8000, 0x0)
r18 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002600)=@generic={&(0x7f00000025c0)='./file0\x00', 0x0, 0x18}, 0x14)
close_range(r17, r18, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x3, 0xffffffffffffffff, r2, r4, r8, 0xd, 0x8}, 0x0, 0x0, 0x8a69, 0x3, 0x10000, 0x5, 0x5, 0x81, 0x3, 0x6, r11})

2.537614372s ago: executing program 4 (id=3678):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2204c001, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8e59, 0x0, 0x3})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x20, 0x0, 0x1})
close_range(r2, 0xffffffffffffffff, 0x0)
write$dsp(r0, &(0x7f00000001c0)="d2", 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1002)

2.053148643s ago: executing program 5 (id=3680):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0)

1.99816112s ago: executing program 3 (id=3682):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x6, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
signalfd4(r0, 0x0, 0x0, 0x0)

1.811878689s ago: executing program 4 (id=3683):
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x40, r2, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
lseek(r0, 0x0, 0x4)

1.567362781s ago: executing program 3 (id=3684):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x358, 0x198, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c4, 0xffffffff, 0xffffffff, 0x2c4, 0xffffffff, 0x3, &(0x7f0000000580), {[{{@ip={@remote, @multicast1, 0xff, 0xff, 'wlan1\x00', 'pimreg\x00', {}, {}, 0x67, 0x2, 0xef9993a21c6f1df5}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0xa0, 0x52, 'system_u:object_r:ping_exec_t:s0\x00'}}}, {{@ip={@local, @rand_addr=0x64010102, 0xff, 0xffffffff, 'ip6gre0\x00', 'bond_slave_1\x00', {}, {}, 0x62, 0x2, 0x18}, 0x0, 0xe4, 0x12c, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x2}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x8, 0x0, '\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b4)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000200)={{0xfffffffffffffffd, 0x3}, {}, 0x0, 0x7})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x0, 0x25, 0x148, 0x340, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'bridge_slave_1\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x48}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578)

1.141285417s ago: executing program 5 (id=3685):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, 0x0, &(0x7f0000000280)}, 0x1c)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000002c0)=0x1, 0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private1, <r6=>0x0}, &(0x7f00000000c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007301a3000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x400c000)

1.073785155s ago: executing program 2 (id=3686):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00')
writev(r0, 0x0, 0x0)

909.317848ms ago: executing program 3 (id=3687):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00')
writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)}, {0x0}], 0x2)

906.005281ms ago: executing program 2 (id=3688):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@updsa={0x134, 0x1a, 0x20, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0xff}, @in6=@private1, {0x200000, 0x0, 0x3}, {}, {0x0, 0x0, 0x1}, 0x0, 0x34ff, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x134}}, 0x0)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x103)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20fe, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0xb, 0xf8, 0x8, 0xbf84}, {0x9, 0xff, 0x2, 0x8}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x38, 0x2000000}, 0x10)
io_uring_setup(0x6201, &(0x7f0000000300)={0x0, 0xed74, 0x0, 0x0, 0x3a3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x801)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100140)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x20048004)

865.886402ms ago: executing program 3 (id=3689):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
listen(r2, 0x7)
r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0)
read$FUSE(r3, &(0x7f0000001500)={0x2020}, 0x2020)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1)
sendto$inet(r0, &(0x7f00000004c0)="ab", 0x1, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000530404"], 0x10}}, 0x20060801)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c980029829"], 0x0)
r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r5, 0x0, 0x0)
r6 = accept4$tipc(r3, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10, 0x800)
setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f00000000c0)=0x69, 0x4)

710.657872ms ago: executing program 4 (id=3690):
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x4000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

425.266674ms ago: executing program 3 (id=3691):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x543, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

362.906081ms ago: executing program 4 (id=3692):
socket$l2tp(0x2, 0x2, 0x73)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xe8, &(0x7f00000005c0)='\x05x\xe9\xac\xa4\t\xd6i\x81\xfe\x8f1n\xf4nj\x86\xa3i\xc4\v}\xef\xffph\xab\x10\xd1\xa6\x1d\xa7\xaf\xa5T\xfe\xc4}\\\x84\xbe\xb9\x06\xa9\xb0n\xec\x89*cU\xadE<\xd76\x1d,%\xa6P\xb3\n\x00\x89\xf7\xff\xff\xff^ \xa7\x83\x1c\xf4\xf1\x84\xb7Y\x9e\x12\xad\x90\xc2\xd1\x94\xc8\x835\xfeV\xeb\xef~S\xab\x0e\a_\x9a\xcd\x95c\x94\xf4\xad\xc1Z\x96h\x9cF\xaa\xa0s\xf6>\xf5D,\x9a\xce90\xdb\t\xa7Z}\x03\x8dq\x86\xcbhp\xa9\xd2@\x9b\xfbN\xfb.\xe0R\x99Jk\xe7@\xe7\x00\xe7\xf1E\n6\xc9\x8c\xaa\'qx\xd1y\xbe3\xdbL\xc1\x10\xc3\xbe\xf6\xc5\xdd\xd1\f\xf1d\x85\xcc\x8f\xa6K\f\x9f+\xc1\xb4\'\x01\x9fu\x9b+\x9f\x15\xbf.d\xfd\x03u\xed!\xdci9+z\x86\x05D\xea\xc9\xd4\x10\xbc\x88:`\x1a\xa1\xefk5\\\x98\xaa\t'}, 0x30)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xf)

258.510878ms ago: executing program 3 (id=3693):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
syz_open_dev$I2C(&(0x7f0000000180), 0x8000, 0x80181)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000080)={0xffffffffffffffee, 0x8000, 0x9})
r1 = socket(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@any, 0x7}, @my=0x0, 0x8, 0x5, 0x1, 0x0, 0xcb, 0x3, 0x35})
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040))
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
close_range(r0, r3, 0xd9b6aea5c12f250d)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r5, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

73.152608ms ago: executing program 4 (id=3694):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0x8, 0x7, 0x0, 0x3, 0x8d, 0x0, 0x20, 0x89, 0xa0, 0x7, 0xa, 0x0, 0xe59, 0xb, 0x4, 0x8, 0x2, 0x1, '\x00', 0x9, 0x501})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

0s ago: executing program 1 (id=3695):
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x138, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0x138}}, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001c40)={{r0}, "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"})
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2)
r3 = socket(0x7702fbfc640e7f2a, 0x80002, 0xfffffffd)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004091}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1e0000001300290a000000000000000007"], 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

addresses unique to avoid problems!
[  643.738124][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.749679][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.760075][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.772081][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.783292][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.792468][T15599] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0
[  643.794557][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.813939][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.825281][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.835325][T15599] usb 4-1: config 0 interface 0 has no altsetting 0
[  643.847668][T16365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.878864][T16365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.878906][T15599] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  643.934172][T16365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  643.999103][T16365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.091561][T16365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.100398][T15599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.118744][T16365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.139547][T15599] usb 4-1: config 0 descriptor??
[  644.141182][T16365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.375807][T15599] usbhid 4-1:0.0: can't add hid device: -71
[  644.388281][T15599] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  644.408204][T15599] usb 4-1: USB disconnect, device number 30
[  644.480262][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.561207][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.774395][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.782434][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.935689][ T2150] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  645.133572][T16460] xt_NFQUEUE: number of total queues is 0
[  645.218036][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  645.247768][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  645.301147][ T2150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  645.355490][ T2150] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  645.367299][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.386228][ T2150] usb 2-1: config 0 descriptor??
[  645.391932][   T55] Bluetooth: hci0: command tx timeout
[  645.601646][ T5888] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  645.642221][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  645.761753][ T5888] usb 6-1: Using ep0 maxpacket: 16
[  645.777757][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  645.808886][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  645.827427][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  645.838053][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  645.839187][ T2150] wacom 0003:056A:002A.002B: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[  645.857794][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.858128][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  645.866554][ T5888] usb 6-1: Product: syz
[  645.893539][ T2150] wacom 0003:056A:002A.002B: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.1-1/input0
[  645.899534][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  645.914134][ T5888] usb 6-1: Manufacturer: syz
[  645.920862][ T5888] usb 6-1: SerialNumber: syz
[  645.926618][ T2150] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:002A.002B/input/input42
[  645.940854][ T5888] usb 6-1: config 0 descriptor??
[  645.950257][ T5888] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  645.960163][ T5888] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  646.081801][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.089949][   T10] usb 4-1: Product: syz
[  646.094350][   T10] usb 4-1: Manufacturer: syz
[  646.099071][   T10] usb 4-1: SerialNumber: syz
[  646.107760][   T10] usb 4-1: config 0 descriptor??
[  646.150367][   T10] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  646.249732][T15599] usb 2-1: USB disconnect, device number 9
[  646.534232][T15400] usb 3-1: USB disconnect, device number 27
[  646.578146][ T5888] em28xx 6-1:0.0: unknown em28xx chip ID (133)
[  646.778671][ T5888] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  646.894339][   T10] usb 4-1: USB disconnect, device number 31
[  646.988567][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  647.015136][ T5888] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  647.035457][ T5888] em28xx 6-1:0.0: No AC97 audio processor
[  647.317827][T15599] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  647.481774][T15599] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  647.491599][   T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  647.505346][T15599] usb 2-1: config 0 has no interface number 0
[  647.516434][T15599] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  647.532348][T15599] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  647.542803][T15599] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  647.585914][T15599] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  647.602170][T15599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.627007][T15599] usb 2-1: config 0 descriptor??
[  647.635875][T15599] gspca_main: spca561-2.14.0 probing abcd:cdee
[  647.685080][   T10] usb 4-1: config 0 has no interfaces?
[  647.716402][   T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  647.725950][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.734953][   T10] usb 4-1: Product: syz
[  647.739556][   T10] usb 4-1: Manufacturer: syz
[  647.745061][   T10] usb 4-1: SerialNumber: syz
[  647.774411][   T10] usb 4-1: config 0 descriptor??
[  647.902136][T16492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.910887][T16492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.933272][T15599] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  647.944436][T15599] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  647.960462][T15599] usb 2-1: MIDIStreaming interface descriptor not found
[  648.308419][T15599] usb 2-1: USB disconnect, device number 10
[  648.512751][ T5835] usb 6-1: USB disconnect, device number 13
[  648.519308][ T5835] em28xx 6-1:0.0: Disconnecting em28xx
[  648.534312][ T5835] em28xx 6-1:0.0: Freeing device
[  648.566396][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  649.033078][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  649.033098][   T30] audit: type=1326 audit(1742964488.839:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  649.086965][   T30] audit: type=1326 audit(1742964488.839:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  649.111092][   T30] audit: type=1326 audit(1742964488.879:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  649.134791][   T30] audit: type=1326 audit(1742964488.879:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  649.271611][   T30] audit: type=1326 audit(1742964488.879:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  649.296994][   T30] audit: type=1326 audit(1742964488.879:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  649.913987][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3297'.
[  649.937045][T16504] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  650.386338][ T2150] usb 4-1: USB disconnect, device number 32
[  650.785334][T16484] tipc: Started in network mode
[  650.790336][T16484] tipc: Node identity 2, cluster identity 4711
[  650.811526][T16484] tipc: Node number set to 2
[  650.821783][ T2150] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  651.138290][ T2150] usb 4-1: config 0 has no interfaces?
[  651.251953][ T2150] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  651.261087][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.275933][ T2150] usb 4-1: Product: syz
[  651.280307][ T2150] usb 4-1: Manufacturer: syz
[  651.519219][ T2150] usb 4-1: SerialNumber: syz
[  651.603572][ T2150] usb 4-1: config 0 descriptor??
[  651.749390][T16526] x_tables: duplicate underflow at hook 1
[  651.938612][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  651.954044][   T30] audit: type=1326 audit(1742964491.739:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.3306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  652.041545][   T30] audit: type=1326 audit(1742964491.739:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.3306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  652.077099][   T30] audit: type=1326 audit(1742964491.739:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.3306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  652.109583][   T30] audit: type=1326 audit(1742964491.739:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.4.3306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  652.186268][ T5888] usb 2-1: Using ep0 maxpacket: 32
[  652.203643][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.227239][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.246236][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  652.263910][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.283696][ T5888] usb 2-1: config 0 descriptor??
[  652.302364][ T5888] hub 2-1:0.0: USB hub found
[  652.509379][ T5888] hub 2-1:0.0: 1 port detected
[  652.516794][ T5888] hub 2-1:0.0: config failed, can't get hub status (err -5)
[  652.528272][ T5888] usbhid 2-1:0.0: can't add hid device: -71
[  652.543132][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  652.585154][ T5888] usb 2-1: USB disconnect, device number 11
[  653.121590][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  653.273650][ T5888] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  653.285982][ T5888] usb 2-1: config 0 has no interface number 0
[  653.292895][ T5888] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  653.341682][ T5888] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  653.352349][ T5888] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  653.375236][ T5888] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  653.385168][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.401308][ T5888] usb 2-1: config 0 descriptor??
[  653.429426][ T5888] gspca_main: spca561-2.14.0 probing abcd:cdee
[  653.521807][ T2150] usb 4-1: USB disconnect, device number 33
[  653.637913][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.675066][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.698582][ T5888] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  653.715201][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  653.722490][ T5888] usb 2-1: MIDIStreaming interface descriptor not found
[  653.781815][ T5888] usb 2-1: USB disconnect, device number 12
[  654.062200][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  654.287457][T16563] FAULT_INJECTION: forcing a failure.
[  654.287457][T16563] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  654.302058][T16563] CPU: 0 UID: 0 PID: 16563 Comm: syz.1.3317 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  654.302086][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  654.302100][T16563] Call Trace:
[  654.302107][T16563]  <TASK>
[  654.302115][T16563]  dump_stack_lvl+0x241/0x360
[  654.302148][T16563]  ? __pfx_dump_stack_lvl+0x10/0x10
[  654.302174][T16563]  ? __pfx__printk+0x10/0x10
[  654.302206][T16563]  should_fail_ex+0x424/0x570
[  654.302235][T16563]  _copy_from_iter+0x211/0x1c70
[  654.302276][T16563]  ? __pfx__copy_from_iter+0x10/0x10
[  654.302296][T16563]  ? __virt_addr_valid+0x183/0x530
[  654.302318][T16563]  ? __virt_addr_valid+0x183/0x530
[  654.302339][T16563]  ? __virt_addr_valid+0x45f/0x530
[  654.302362][T16563]  ? __phys_addr_symbol+0x2f/0x70
[  654.302383][T16563]  ? __check_object_size+0x478/0x720
[  654.302410][T16563]  pfkey_sendmsg+0x248/0x1140
[  654.302443][T16563]  ? __pfx___might_resched+0x10/0x10
[  654.302465][T16563]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  654.302492][T16563]  ? aa_sk_perm+0x96f/0xac0
[  654.302519][T16563]  ? __pfx_aa_sk_perm+0x10/0x10
[  654.302543][T16563]  ? __import_iovec+0x585/0x830
[  654.302563][T16563]  ? aa_sock_msg_perm+0x91/0x160
[  654.302590][T16563]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  654.302611][T16563]  __sock_sendmsg+0x221/0x270
[  654.302634][T16563]  ____sys_sendmsg+0x53c/0x870
[  654.302667][T16563]  ? __pfx_____sys_sendmsg+0x10/0x10
[  654.302706][T16563]  __sys_sendmsg+0x271/0x360
[  654.302737][T16563]  ? __pfx___sys_sendmsg+0x10/0x10
[  654.302814][T16563]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  654.302842][T16563]  ? lockdep_hardirqs_on+0x9d/0x150
[  654.302869][T16563]  __do_fast_syscall_32+0xb4/0x110
[  654.302908][T16563]  ? exc_page_fault+0x599/0x8b0
[  654.302933][T16563]  do_fast_syscall_32+0x34/0x80
[  654.302976][T16563]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  654.303001][T16563] RIP: 0023:0xf7ff4579
[  654.303018][T16563] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  654.303035][T16563] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  654.303057][T16563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  654.303071][T16563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  654.303083][T16563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  654.303096][T16563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  654.303109][T16563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  654.303132][T16563]  </TASK>
[  654.966207][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'.
[  654.998174][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'.
[  655.019716][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'.
[  655.141762][ T2150] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  655.406736][ T2150] usb 3-1: config 0 has no interfaces?
[  655.605745][ T2150] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  655.632658][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.661728][ T2150] usb 3-1: Product: syz
[  655.675520][ T2150] usb 3-1: Manufacturer: syz
[  655.687024][ T2150] usb 3-1: SerialNumber: syz
[  655.695764][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'.
[  655.715884][ T2150] usb 3-1: config 0 descriptor??
[  655.725869][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'.
[  656.409754][T15599] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  656.558859][T16600] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3331'.
[  656.572150][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  656.572169][   T30] audit: type=1326 audit(1742964496.369:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.666893][T15599] usb 4-1: config 0 has no interfaces?
[  656.676429][T15599] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  656.689039][T15599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.700745][   T30] audit: type=1326 audit(1742964496.369:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.723184][T15599] usb 4-1: Product: syz
[  656.727369][T15599] usb 4-1: Manufacturer: syz
[  656.732036][T15599] usb 4-1: SerialNumber: syz
[  656.737398][   T30] audit: type=1326 audit(1742964496.369:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.761049][T15599] usb 4-1: config 0 descriptor??
[  656.769232][   T30] audit: type=1326 audit(1742964496.369:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.808546][   T30] audit: type=1326 audit(1742964496.369:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.881677][   T30] audit: type=1326 audit(1742964496.379:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.904095][   T30] audit: type=1326 audit(1742964496.379:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  656.930144][   T30] audit: type=1326 audit(1742964496.379:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff4579 code=0x7ffc0000
[  657.151578][   T30] audit: type=1326 audit(1742964496.379:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x0
[  657.173507][   T30] audit: type=1326 audit(1742964496.419:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.1.3329" exe="/root/syz-executor" sig=31 arch=40000003 syscall=311 compat=1 ip=0xf7ff4579 code=0x0
[  658.581257][T15599] usb 3-1: USB disconnect, device number 28
[  658.917751][ T2150] usb 4-1: USB disconnect, device number 34
[  660.550499][T15599] IPVS: starting estimator thread 0...
[  660.641860][T16659] IPVS: using max 39 ests per chain, 93600 per kthread
[  660.871810][ T2150] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  660.952011][ T5835] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  661.033750][ T2150] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  661.043046][ T2150] usb 5-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config
[  661.063061][ T2150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  661.076590][ T2150] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  661.095913][ T2150] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  661.112626][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.132405][ T2150] usb 5-1: Product: Г
[  661.137588][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  661.148696][ T5835] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.159978][ T2150] usb 5-1: Manufacturer: ꔲ淺㯍⽆㐨룁쯂彪嘊鞃䒣莱ʒ໥柨㺱ކ㹚㶠鴟畓Ể㘨绑ꭘ銋瀊鞚⡱蠇픛亓ꑠ 顁䝗㿃샞픗뢋Ф酡蟡翫⠋짱㣀㘅ﻢȱ䀔鯒犪힪ç
[  661.193770][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  661.203153][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.211191][ T5835] usb 4-1: Product: syz
[  661.218718][ T2150] usb 5-1: SerialNumber: Ы
[  661.224616][ T5835] usb 4-1: Manufacturer: syz
[  661.229261][ T5835] usb 4-1: SerialNumber: syz
[  661.236188][T16661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  661.243492][ T5835] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  661.467923][ T2150] usb 5-1: 0:2 : does not exist
[  661.492561][ T2150] usb 5-1: USB disconnect, device number 2
[  661.530316][ T5835] usb 4-1: USB disconnect, device number 35
[  661.532221][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  661.682587][T15744] udevd[15744]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  661.731545][   T10] usb 2-1: Using ep0 maxpacket: 8
[  661.744696][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  661.771100][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.785766][   T10] usb 2-1: Product: syz
[  661.811642][   T10] usb 2-1: Manufacturer: syz
[  661.816390][   T10] usb 2-1: SerialNumber: syz
[  661.833037][   T10] usb 2-1: config 0 descriptor??
[  662.046886][   T10] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  662.265153][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  662.265175][   T30] audit: type=1326 audit(1742964502.069:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  662.301393][   T30] audit: type=1326 audit(1742964502.069:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  662.664547][   T10] usb write operation failed. (-71)
[  662.806447][   T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  663.071843][   T10] dvbdev: DVB: registering new adapter (Terratec H7)
[  663.089595][   T10] usb 2-1: media controller created
[  663.095088][   T30] audit: type=1326 audit(1742964502.099:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  663.141782][T16700] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  663.149887][   T10] usb read operation failed. (-71)
[  663.167358][   T30] audit: type=1326 audit(1742964502.099:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  663.189931][   T10] usb write operation failed. (-71)
[  663.199152][   T30] audit: type=1326 audit(1742964502.099:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  663.221891][   T30] audit: type=1326 audit(1742964502.099:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  663.308705][   T10] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  663.371559][   T30] audit: type=1326 audit(1742964502.099:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  663.392411][   T10] usb 2-1: USB disconnect, device number 13
[  663.452984][T16706] bridge0: port 3(erspan0) entered blocking state
[  663.492507][   T30] audit: type=1326 audit(1742964502.099:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  663.521838][T16706] bridge0: port 3(erspan0) entered disabled state
[  663.528517][T16706] erspan0: entered allmulticast mode
[  663.592650][T16706] erspan0: entered promiscuous mode
[  663.598408][T16706] bridge0: port 3(erspan0) entered blocking state
[  663.604997][T16706] bridge0: port 3(erspan0) entered forwarding state
[  663.623066][   T30] audit: type=1326 audit(1742964502.099:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x0
[  663.679499][   T30] audit: type=1326 audit(1742964502.099:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.4.3359" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x0
[  663.866961][T16721] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3366'.
[  664.081062][T16729] sctp: [Deprecated]: syz.5.3369 (pid 16729) Use of int in max_burst socket option.
[  664.081062][T16729] Use struct sctp_assoc_value instead
[  664.131621][ T5835] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  664.241157][T16734] netlink: 1532 bytes leftover after parsing attributes in process `syz.5.3371'.
[  664.272864][ T5835] usb 3-1: device descriptor read/64, error -71
[  664.521512][ T5835] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  664.681804][ T5835] usb 3-1: device descriptor read/64, error -71
[  664.701658][   T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  664.735700][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3362'.
[  664.744989][T16706] netlink: 39 bytes leftover after parsing attributes in process `syz.1.3362'.
[  664.811693][ T5835] usb usb3-port1: attempt power cycle
[  664.940787][   T10] usb 4-1: config 0 has no interfaces?
[  665.101895][   T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  665.163244][T15400] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  665.170919][ T5835] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  665.192544][ T5835] usb 3-1: device descriptor read/8, error -71
[  665.202550][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.257177][   T10] usb 4-1: Product: syz
[  665.261400][   T10] usb 4-1: Manufacturer: syz
[  665.281612][   T10] usb 4-1: SerialNumber: syz
[  665.296577][   T10] usb 4-1: config 0 descriptor??
[  665.399514][T15400] usb 6-1: config 0 has no interfaces?
[  665.434364][T15400] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  665.465286][ T5835] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  665.518572][T15400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.536971][T15400] usb 6-1: Product: syz
[  665.541183][T15400] usb 6-1: Manufacturer: syz
[  665.557574][ T5835] usb 3-1: device descriptor read/8, error -71
[  665.567548][T15400] usb 6-1: SerialNumber: syz
[  665.579111][T15400] usb 6-1: config 0 descriptor??
[  665.745682][ T5835] usb usb3-port1: unable to enumerate USB device
[  665.859832][T16745] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  666.018099][T16743] @: renamed from vlan0 (while UP)
[  666.310344][T16753] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  666.318169][T16753] PKCS7: Only support pkcs7_signedData type
[  666.456219][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'.
[  667.322017][T14728] Bluetooth: hci1: command 0x0406 tx timeout
[  667.334506][ T5835] usb 4-1: USB disconnect, device number 36
[  667.521602][ T5891] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  667.674211][ T5891] usb 5-1: config 252 has an invalid interface number: 73 but max is 0
[  667.692176][ T5891] usb 5-1: config 252 has no interface number 0
[  667.714932][ T5891] usb 5-1: config 252 interface 73 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  667.743244][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  667.743264][   T30] audit: type=1326 audit(1742964507.549:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  667.756467][ T5891] usb 5-1: config 252 interface 73 has no altsetting 0
[  667.804042][ T5891] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=b8.e5
[  667.826138][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.841487][ T5891] usb 5-1: Product: syz
[  667.841572][   T30] audit: type=1326 audit(1742964507.589:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  667.845820][ T5891] usb 5-1: Manufacturer: syz
[  667.882498][ T5891] usb 5-1: SerialNumber: syz
[  667.904851][   T30] audit: type=1326 audit(1742964507.629:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  667.976118][   T30] audit: type=1326 audit(1742964507.629:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  668.042781][   T10] usb 6-1: USB disconnect, device number 14
[  668.074865][   T30] audit: type=1326 audit(1742964507.629:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  668.126448][   T30] audit: type=1326 audit(1742964507.629:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  668.181171][   T30] audit: type=1326 audit(1742964507.629:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  668.203309][    C0] vkms_vblank_simulate: vblank timer overrun
[  668.221149][   T30] audit: type=1326 audit(1742964507.629:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  668.237432][T16788] FAULT_INJECTION: forcing a failure.
[  668.237432][T16788] name failslab, interval 1, probability 0, space 0, times 0
[  668.282148][T16788] CPU: 1 UID: 0 PID: 16788 Comm: syz.3.3389 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  668.282179][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  668.282192][T16788] Call Trace:
[  668.282200][T16788]  <TASK>
[  668.282208][T16788]  dump_stack_lvl+0x241/0x360
[  668.282242][T16788]  ? __pfx_dump_stack_lvl+0x10/0x10
[  668.282269][T16788]  ? __pfx__printk+0x10/0x10
[  668.282296][T16788]  ? __pfx___might_resched+0x10/0x10
[  668.282320][T16788]  should_fail_ex+0x424/0x570
[  668.282349][T16788]  should_failslab+0xac/0x100
[  668.282376][T16788]  __kvmalloc_node_noprof+0x170/0x5a0
[  668.282404][T16788]  ? alloc_netdev_mqs+0x92d/0x1210
[  668.282428][T16788]  alloc_netdev_mqs+0x92d/0x1210
[  668.282453][T16788]  rtnl_create_link+0x2f9/0xc90
[  668.282488][T16788]  rtnl_newlink_create+0x212/0xa50
[  668.282523][T16788]  ? __pfx___mutex_lock+0x10/0x10
[  668.282553][T16788]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  668.282580][T16788]  ? nla_strscpy+0x102/0x180
[  668.282609][T16788]  ? full_name_hash+0x93/0xe0
[  668.282641][T16788]  rtnl_newlink+0x1a0a/0x1f60
[  668.282672][T16788]  ? kasan_save_free_info+0x40/0x50
[  668.282703][T16788]  ? __pfx_rtnl_newlink+0x10/0x10
[  668.282723][T16788]  ? __netlink_deliver_tap+0x561/0x7f0
[  668.282811][T16788]  ? aa_get_newest_label+0x101/0x6f0
[  668.282845][T16788]  ? __lock_acquire+0xad5/0xd80
[  668.282889][T16788]  ? __pfx_rtnl_newlink+0x10/0x10
[  668.282913][T16788]  rtnetlink_rcv_msg+0x80f/0xd70
[  668.282935][T16788]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  668.283477][T16788]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  668.283506][T16788]  ? ref_tracker_free+0x63e/0x7e0
[  668.283541][T16788]  netlink_rcv_skb+0x208/0x480
[  668.283563][T16788]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  668.283587][T16788]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  668.283621][T16788]  ? netlink_deliver_tap+0x2e/0x1b0
[  668.283643][T16788]  ? netlink_deliver_tap+0x2e/0x1b0
[  668.283667][T16788]  netlink_unicast+0x7f8/0x9a0
[  668.283704][T16788]  ? __pfx_netlink_unicast+0x10/0x10
[  668.283733][T16788]  ? __virt_addr_valid+0x45f/0x530
[  668.283758][T16788]  ? __phys_addr_symbol+0x2f/0x70
[  668.283782][T16788]  ? __check_object_size+0x478/0x720
[  668.283813][T16788]  netlink_sendmsg+0x8e8/0xce0
[  668.283843][T16788]  ? __pfx_netlink_sendmsg+0x10/0x10
[  668.283867][T16788]  ? __import_iovec+0x585/0x830
[  668.283889][T16788]  ? aa_sock_msg_perm+0x91/0x160
[  668.283920][T16788]  ? __pfx_netlink_sendmsg+0x10/0x10
[  668.283950][T16788]  __sock_sendmsg+0x221/0x270
[  668.283977][T16788]  ____sys_sendmsg+0x53c/0x870
[  668.284014][T16788]  ? __pfx_____sys_sendmsg+0x10/0x10
[  668.284057][T16788]  __sys_sendmsg+0x271/0x360
[  668.284092][T16788]  ? __pfx___sys_sendmsg+0x10/0x10
[  668.284159][T16788]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  668.284187][T16788]  ? lockdep_hardirqs_on+0x9d/0x150
[  668.284216][T16788]  __do_fast_syscall_32+0xb4/0x110
[  668.284245][T16788]  ? exc_page_fault+0x599/0x8b0
[  668.284273][T16788]  do_fast_syscall_32+0x34/0x80
[  668.284301][T16788]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  668.284326][T16788] RIP: 0023:0xf7f55579
[  668.284345][T16788] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  668.284363][T16788] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  668.284390][T16788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[  668.284405][T16788] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  668.284418][T16788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  668.284430][T16788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  668.284442][T16788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  668.284467][T16788]  </TASK>
[  668.906966][ T5891] ti_usb_3410_5052 5-1:252.73: TI USB 3410 1 port adapter converter detected
[  668.961673][ T5891] ti_usb_3410_5052 5-1:252.73: missing endpoints
[  669.032788][ T5891] usb 5-1: USB disconnect, device number 3
[  669.174782][   T30] audit: type=1326 audit(1742964508.979:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  669.227050][   T30] audit: type=1326 audit(1742964509.009:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  669.791726][T15599] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  669.958405][T15599] usb 5-1: config 2 has an invalid interface number: 45 but max is 0
[  669.966611][T15599] usb 5-1: config 2 has no interface number 0
[  669.974127][   T55] Bluetooth: hci3: ACL packet for unknown connection handle 2505
[  669.976180][T15599] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  669.994472][T15599] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  670.039752][T15599] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2
[  670.056773][T15599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.072986][T15599] usb 5-1: Product: syz
[  670.085181][T15599] usb 5-1: Manufacturer: syz
[  670.091314][T15599] usb 5-1: SerialNumber: syz
[  670.105949][T15599] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected
[  670.130651][T15599] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  670.318756][T15599] usb 5-1: USB disconnect, device number 4
[  670.327156][T15599] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  670.349800][T15599] kobil_sct 5-1:2.45: device disconnected
[  671.207395][ T5835] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  671.364321][ T5835] usb 5-1: config 0 has an invalid interface number: 216 but max is 0
[  671.375839][ T5835] usb 5-1: config 0 has no interface number 0
[  671.382727][ T5835] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  671.394480][ T5835] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  671.407702][ T5835] usb 5-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  671.417059][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.426325][ T5835] usb 5-1: Product: syz
[  671.430549][ T5835] usb 5-1: Manufacturer: syz
[  671.435274][ T5835] usb 5-1: SerialNumber: syz
[  671.447626][ T5835] usb 5-1: config 0 descriptor??
[  671.458720][ T5835] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  671.510184][ T5835] snd-usb-audio 5-1:0.216: probe with driver snd-usb-audio failed with error -2
[  671.552739][T15744] udevd[15744]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  671.670402][ T5835] usb 5-1: USB disconnect, device number 5
[  672.187817][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'.
[  672.218506][T16842] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  672.274005][T16846] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  672.461588][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  672.510784][T16854] FAULT_INJECTION: forcing a failure.
[  672.510784][T16854] name failslab, interval 1, probability 0, space 0, times 0
[  672.524467][T16854] CPU: 0 UID: 0 PID: 16854 Comm: syz.5.3413 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  672.524496][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  672.524509][T16854] Call Trace:
[  672.524516][T16854]  <TASK>
[  672.524526][T16854]  dump_stack_lvl+0x241/0x360
[  672.524569][T16854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.524596][T16854]  ? __pfx__printk+0x10/0x10
[  672.524620][T16854]  ? __count_memcg_events+0x1e1/0x3d0
[  672.524652][T16854]  ? __pfx___might_resched+0x10/0x10
[  672.524674][T16854]  should_fail_ex+0x424/0x570
[  672.524703][T16854]  should_failslab+0xac/0x100
[  672.524728][T16854]  kmem_cache_alloc_noprof+0x78/0x390
[  672.524755][T16854]  ? prepare_creds+0x31/0x640
[  672.524782][T16854]  prepare_creds+0x31/0x640
[  672.524810][T16854]  lookup_user_key+0x37d/0x15b0
[  672.524842][T16854]  ? __pfx_lookup_user_key+0x10/0x10
[  672.524865][T16854]  ? irqentry_exit+0x63/0x90
[  672.524891][T16854]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  672.524927][T16854]  ? rep_movs_alternative+0x4a/0x70
[  672.524951][T16854]  __se_sys_add_key+0x30d/0x4b0
[  672.524973][T16854]  ? __pfx___se_sys_add_key+0x10/0x10
[  672.524998][T16854]  ? __ia32_sys_add_key+0x20/0xc0
[  672.525020][T16854]  __do_fast_syscall_32+0xb4/0x110
[  672.525048][T16854]  ? exc_page_fault+0x599/0x8b0
[  672.525074][T16854]  do_fast_syscall_32+0x34/0x80
[  672.525101][T16854]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  672.525126][T16854] RIP: 0023:0xf7f05579
[  672.525142][T16854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  672.525160][T16854] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 000000000000011e
[  672.525181][T16854] RAX: ffffffffffffffda RBX: 00000000800018c0 RCX: 0000000080001900
[  672.525195][T16854] RDX: 0000000080001940 RSI: 00000000000fffff RDI: 00000000fffffffe
[  672.525209][T16854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  672.525224][T16854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  672.525236][T16854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  672.525259][T16854]  </TASK>
[  672.582899][ T5835] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  672.689948][   T10] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  672.771518][ T5891] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  672.787475][   T10] usb 2-1: config 0 has no interface number 0
[  672.804955][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  672.825367][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  672.843823][ T5835] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  672.849879][   T10] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  672.858644][ T5835] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  672.880722][ T5835] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  672.882719][   T10] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  672.896547][ T5835] usb 5-1: config 1 interface 0 has no altsetting 0
[  672.916504][ T5835] usb 5-1: string descriptor 0 read error: -22
[  672.919541][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.922942][ T5835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  672.941034][   T10] usb 2-1: config 0 descriptor??
[  672.941332][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.958541][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.959894][T16849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  672.977220][T16849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  672.985308][T16849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  672.985880][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.006303][ T5835] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  673.012204][ T5891] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  673.035707][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[  673.075897][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.123608][ T5891] usb 3-1: config 0 descriptor??
[  673.267493][   T10] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  673.282377][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  673.299791][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  673.332681][   T10] usb 2-1: USB disconnect, device number 14
[  673.416307][T15564] udevd[15564]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  673.552843][ T5891] hid-led 0003:1D34:000A.002C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0
[  673.570354][ T5891] hid-led 0003:1D34:000A.002C: Dream Cheeky Webmail Notifier initialized
[  673.770256][ T5891] usb 3-1: USB disconnect, device number 33
[  673.947901][T15400] usb 5-1: USB disconnect, device number 6
[  674.100023][T16886] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  674.179005][T15599] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  674.462410][T15400] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  674.487863][T15599] usb 6-1: config 0 has no interfaces?
[  674.501373][T15599] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  674.533250][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'.
[  674.661646][T15599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.721554][T15599] usb 6-1: Product: syz
[  674.730008][T16893] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  674.738551][T15599] usb 6-1: Manufacturer: syz
[  674.753788][T15599] usb 6-1: SerialNumber: syz
[  674.771106][T15599] usb 6-1: config 0 descriptor??
[  674.814818][T15400] usb 2-1: config 0 has no interfaces?
[  674.834015][T15400] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  674.843284][T15400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.861597][T15400] usb 2-1: Product: syz
[  674.865879][T15400] usb 2-1: Manufacturer: syz
[  674.872081][T15400] usb 2-1: SerialNumber: syz
[  674.915053][T15400] usb 2-1: config 0 descriptor??
[  674.930960][T16898] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  675.441944][T15400] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  675.549072][T16905] bridge0: port 3(erspan0) entered blocking state
[  675.588236][T16905] bridge0: port 3(erspan0) entered disabled state
[  675.610297][T15400] usb 5-1: config 0 has an invalid interface number: 162 but max is 0
[  675.649164][T15400] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  675.661601][T16905] erspan0: entered allmulticast mode
[  675.686453][T15400] usb 5-1: config 0 has no interface number 0
[  675.703852][T16905] erspan0: entered promiscuous mode
[  675.709794][T15400] usb 5-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9
[  675.716310][T16905] bridge0: port 3(erspan0) entered blocking state
[  675.727475][T16905] bridge0: port 3(erspan0) entered forwarding state
[  675.756616][T15400] usb 5-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  675.776440][T15400] usb 5-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  675.791146][T15400] usb 5-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11
[  675.887201][T15400] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45
[  675.896621][T15400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.975771][T15400] usb 5-1: Product: syz
[  675.989856][T15400] usb 5-1: Manufacturer: syz
[  676.006657][T15400] usb 5-1: SerialNumber: syz
[  676.031343][T15400] usb 5-1: config 0 descriptor??
[  676.152461][T15400] rtsx_usb 5-1:0.162: probe with driver rtsx_usb failed with error -8
[  676.251845][ T5891] usb 5-1: USB disconnect, device number 7
[  676.341766][ T5888] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  676.501676][ T5888] usb 4-1: Using ep0 maxpacket: 32
[  676.509449][ T5888] usb 4-1: config 0 has an invalid interface number: 32 but max is 0
[  676.527154][ T5888] usb 4-1: config 0 has no interface number 0
[  676.538579][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3428'.
[  676.539129][ T5888] usb 4-1: too many endpoints for config 0 interface 32 altsetting 48: 32, using maximum allowed: 30
[  676.548983][T16905] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3428'.
[  676.585047][ T5888] usb 4-1: config 0 interface 32 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  676.598521][ T5888] usb 4-1: config 0 interface 32 has no altsetting 0
[  676.605487][ T5888] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  676.614682][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.633346][ T5888] usb 4-1: config 0 descriptor??
[  676.868129][T15400] usb 6-1: USB disconnect, device number 15
[  677.291611][T15400] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  677.455470][ T5835] usb 2-1: USB disconnect, device number 15
[  677.471622][T15400] usb 6-1: Using ep0 maxpacket: 8
[  677.498770][T15400] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  677.531636][ T5891] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  677.558701][T15400] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  677.589329][T15400] usb 6-1: config 135 has no interface number 0
[  677.604083][T15400] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  677.758935][ T5891] usb 3-1: config 0 has no interfaces?
[  677.804181][ T5891] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  677.823843][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.841739][ T5891] usb 3-1: Product: syz
[  677.850636][ T5891] usb 3-1: Manufacturer: syz
[  677.861539][ T5891] usb 3-1: SerialNumber: syz
[  677.874586][ T5891] usb 3-1: config 0 descriptor??
[  678.450265][T15400] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  678.503603][T15400] usb 6-1: config 135 interface 230 has no altsetting 0
[  678.523228][T15400] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  678.535515][T15400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.545377][T15400] usb 6-1: Product: syz
[  678.550141][T15400] usb 6-1: Manufacturer: syz
[  678.562557][T15400] usb 6-1: SerialNumber: syz
[  678.575728][T15400] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  678.617876][T15400] usb 6-1: No valid video chain found.
[  678.797183][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.811954][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.821805][ T5881] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  678.839946][T15400] usb 6-1: USB disconnect, device number 16
[  678.981599][ T5881] usb 2-1: device descriptor read/64, error -71
[  679.073849][ T5888] usb 4-1: string descriptor 0 read error: -71
[  679.118114][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  679.146461][ T5888] gspca_vc032x: reg_r err -71
[  679.160286][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.186520][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.199474][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'.
[  679.210161][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.220154][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.221604][T16933] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  679.238314][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.248984][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.259429][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.266689][ T5881] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  679.281129][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.302862][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.328274][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.347760][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.364144][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.388506][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.403086][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.425791][ T5881] usb 2-1: device descriptor read/64, error -71
[  679.439757][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.478239][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.496623][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.530161][ T5888] gspca_vc032x: I2c Bus Busy Wait 00
[  679.569251][ T5881] usb usb2-port1: attempt power cycle
[  679.587775][ T5888] gspca_vc032x: Unknown sensor...
[  679.599828][ T5888] vc032x 4-1:0.32: probe with driver vc032x failed with error -22
[  679.639931][ T5888] usb 4-1: USB disconnect, device number 37
[  679.729956][T16939] vlan0: entered promiscuous mode
[  679.763369][T16939] bond0: entered promiscuous mode
[  679.778687][T16939] bond_slave_0: entered promiscuous mode
[  679.789671][T16939] bond_slave_1: entered promiscuous mode
[  679.807142][T16939] bond0: left promiscuous mode
[  679.816192][T16939] bond_slave_0: left promiscuous mode
[  679.829278][T16939] bond_slave_1: left promiscuous mode
[  679.922752][ T5881] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  679.980333][ T5881] usb 2-1: device descriptor read/8, error -71
[  680.241556][ T5881] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  680.293918][ T5881] usb 2-1: device descriptor read/8, error -71
[  680.465059][ T5881] usb usb2-port1: unable to enumerate USB device
[  680.632132][ T5888] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  680.670206][   T10] usb 3-1: USB disconnect, device number 34
[  680.781637][ T5891] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  680.810274][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  680.833062][ T5888] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  680.867515][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  680.897282][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.960578][T16945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  681.026279][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  681.281695][ T5891] usb 4-1: config 0 has no interfaces?
[  681.382211][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  681.420270][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.448991][ T5891] usb 4-1: Product: syz
[  681.454821][ T5891] usb 4-1: Manufacturer: syz
[  681.651566][ T5891] usb 4-1: SerialNumber: syz
[  681.680797][ T5891] usb 4-1: config 0 descriptor??
[  682.011237][T16971] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  682.261965][ T5888] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  682.431707][ T5888] usb 5-1: Using ep0 maxpacket: 16
[  682.440945][ T5888] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  682.456771][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  682.481590][ T5888] usb 5-1: config 0 has no interface number 0
[  682.500759][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  682.515161][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.530505][ T5888] usb 5-1: Product: syz
[  682.536315][ T5888] usb 5-1: Manufacturer: syz
[  682.541074][ T5888] usb 5-1: SerialNumber: syz
[  682.554919][ T5888] usb 5-1: config 0 descriptor??
[  682.591565][ T5835] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  682.757958][ T5835] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  682.798133][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  682.821499][ T5835] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  682.833129][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.851387][ T5835] usb 2-1: Product: syz
[  682.860316][ T5835] usb 2-1: Manufacturer: syz
[  682.870817][ T5835] usb 2-1: SerialNumber: syz
[  683.112993][ T5888] usb 6-1: USB disconnect, device number 17
[  683.124200][ T5835] usb 2-1: 0:2 : does not exist
[  683.154475][ T5835] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  683.209812][ T5835] usb 2-1: USB disconnect, device number 20
[  683.323974][ T5881] usb 4-1: USB disconnect, device number 38
[  683.388842][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  683.388863][   T30] audit: type=1326 audit(1742964523.189:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  683.430339][   T30] audit: type=1326 audit(1742964523.189:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  683.443168][T15744] udevd[15744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  683.482373][   T30] audit: type=1326 audit(1742964523.199:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  683.518956][   T30] audit: type=1326 audit(1742964523.199:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  683.730854][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3459'.
[  683.831579][ T5881] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  683.983684][ T5881] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  683.995080][ T5881] usb 4-1: config 16 interface 0 has no altsetting 0
[  684.011550][ T5881] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  684.022830][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.071572][T15599] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  684.243803][T15599] usb 2-1: unable to get BOS descriptor or descriptor too short
[  684.252253][ T5881] usb 4-1: string descriptor 0 read error: -71
[  684.255645][T15599] usb 2-1: not running at top speed; connect to a high speed hub
[  684.283378][ T5881] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  684.288464][T15599] usb 2-1: config 33 has an invalid descriptor of length 132, skipping remainder of the config
[  684.309806][ T5881] imon 4-1:16.0: unable to initialize intf0, err -19
[  684.314565][T15599] usb 2-1: config 33 has 0 interfaces, different from the descriptor's value: 1
[  684.337871][ T5881] imon:imon_probe: failed to initialize context!
[  684.344167][T15599] usb 2-1: string descriptor 0 read error: -22
[  684.352137][ T5881] imon 4-1:16.0: unable to register, err -19
[  684.354038][T15599] usb 2-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice=e4.9a
[  684.369407][T15599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.390149][ T5881] usb 4-1: USB disconnect, device number 39
[  684.612392][T17003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.620919][T17003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.898088][ T5881] usb 5-1: USB disconnect, device number 8
[  685.007102][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.028349][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.066270][T17016] bridge_slave_0: left allmulticast mode
[  685.101890][T17016] bridge_slave_0: left promiscuous mode
[  685.121356][T17016] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.138595][T17026] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  685.155455][T17016] bridge_slave_1: left allmulticast mode
[  685.161287][T17016] bridge_slave_1: left promiscuous mode
[  685.167339][T17016] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.190977][T17016] bond0: (slave bond_slave_0): Releasing backup interface
[  685.229340][T17016] bond0: (slave bond_slave_1): Releasing backup interface
[  685.295914][T17016] team0: Port device team_slave_0 removed
[  685.308288][T17016] team0: Port device team_slave_1 removed
[  685.315768][T17016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  685.323490][T17016] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.333417][T17016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  685.340973][T17016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  685.371535][   T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  685.423471][   T30] audit: type=1326 audit(1742964525.229:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  685.457921][   T30] audit: type=1326 audit(1742964525.229:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  685.483113][   T30] audit: type=1326 audit(1742964525.229:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  685.506328][   T30] audit: type=1326 audit(1742964525.229:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  685.529403][   T30] audit: type=1326 audit(1742964525.249:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  685.575089][   T10] usb 3-1: Using ep0 maxpacket: 32
[  685.591771][   T30] audit: type=1326 audit(1742964525.249:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.4.3469" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x0
[  685.625283][   T10] usb 3-1: config 4 has an invalid interface number: 228 but max is 0
[  685.633999][   T10] usb 3-1: config 4 has no interface number 0
[  685.640312][   T10] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0xF has an invalid bInterval 0, changing to 7
[  685.677563][   T10] usb 3-1: config 4 interface 228 has no altsetting 0
[  685.693287][   T10] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  685.709811][   T10] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  685.720607][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  685.720652][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  685.753420][   T10] usb 3-1: Product: syz
[  685.758896][   T10] usb 3-1: Manufacturer: syz
[  685.770642][   T10] usb 3-1: SerialNumber: syz
[  685.931571][T15599] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  685.995764][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  686.003267][   T10] usb 3-1: invalid MIDI in EP 0
[  686.026291][   T10] snd-usb-audio 3-1:4.228: probe with driver snd-usb-audio failed with error -22
[  686.039961][   T10] usb 3-1: USB disconnect, device number 35
[  686.204137][T15599] usb 6-1: Using ep0 maxpacket: 8
[  686.300990][T15599] usb 6-1: config 6 has an invalid interface number: 51 but max is 1
[  686.323343][T15599] usb 6-1: config 6 has no interface number 1
[  686.329481][T15599] usb 6-1: config 6 interface 0 has no altsetting 0
[  686.486228][T15599] usb 6-1: config 6 interface 51 has no altsetting 0
[  686.496624][T15599] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[  686.506090][T15599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.514297][T15599] usb 6-1: Product: syz
[  686.518594][T15599] usb 6-1: Manufacturer: syz
[  686.523745][T15599] usb 6-1: SerialNumber: syz
[  686.602391][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  686.756316][T15599] xr_serial 6-1:6.51: xr_serial converter detected
[  686.768153][T15599] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  686.775131][T15599] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  686.795268][T15599] usb 6-1: USB disconnect, device number 18
[  686.810159][T15599] xr_serial 6-1:6.0: device disconnected
[  686.846331][T17043] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3474'.
[  686.855514][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3474'.
[  686.869513][T17043] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3474'.
[  686.880751][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3474'.
[  686.906621][ T5891] usb 2-1: USB disconnect, device number 21
[  687.199162][T17054] batman_adv: batadv0: Adding interface: ip6gretap1
[  687.210706][T17054] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  687.244223][T17054] batman_adv: batadv0: Interface activated: ip6gretap1
[  687.268490][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'.
[  687.320725][T17055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  687.341629][T17055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  687.366348][T17055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  687.399468][T17055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  687.423603][T17055] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  687.445300][T17055] batman_adv: batadv0: Removing interface: ip6gretap1
[  687.717486][T17061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.747849][T17061] input: syz0 as /devices/virtual/input/input47
[  687.798522][T14728] Bluetooth: hci5: command 0x0406 tx timeout
[  687.971701][ T5884] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  688.141787][ T5884] usb 3-1: Using ep0 maxpacket: 16
[  688.153656][ T5884] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  688.166610][ T5884] usb 3-1: config 0 has no interface number 0
[  688.175210][ T5884] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  688.184691][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.192894][ T5884] usb 3-1: Product: syz
[  688.197332][ T5884] usb 3-1: Manufacturer: syz
[  688.202050][ T5884] usb 3-1: SerialNumber: syz
[  688.209011][ T5884] usb 3-1: config 0 descriptor??
[  688.232589][ T5884] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  688.253500][ T5881] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  688.415393][ T5881] usb 6-1: config 0 has no interfaces?
[  688.436324][ T5881] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  688.457326][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.479368][ T5881] usb 6-1: Product: syz
[  688.483838][ T5881] usb 6-1: Manufacturer: syz
[  688.488925][ T5881] usb 6-1: SerialNumber: syz
[  688.497012][ T5881] usb 6-1: config 0 descriptor??
[  688.534254][ T5884] gspca_spca1528: reg_w err -71
[  688.561715][ T5884] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  688.588937][ T5884] usb 3-1: USB disconnect, device number 36
[  688.991578][ T5884] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  688.991584][ T5835] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  689.151608][ T5884] usb 3-1: Using ep0 maxpacket: 16
[  689.166056][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.176183][ T5884] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  689.185744][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.324091][ T5835] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  689.333429][ T5835] usb 5-1: config 0 has no interface number 0
[  689.339904][ T5835] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  689.600436][ T5884] usb 3-1: config 0 descriptor??
[  689.611041][ T5835] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  689.636353][ T5835] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  689.701868][ T5835] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  689.720672][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.790902][ T5835] usb 5-1: config 0 descriptor??
[  689.813759][T17084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.822716][T17084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.116133][ T5884] uclogic 0003:5543:0064.002D: No inputs registered, leaving
[  690.118342][T17086] tipc: Started in network mode
[  690.125297][ T5884] uclogic 0003:5543:0064.002D: hidraw0: USB HID v10.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0
[  690.142424][T17086] tipc: Node identity 2, cluster identity 4711
[  690.183535][T17086] tipc: Node number set to 2
[  690.265517][ T5835] gspca_main: spca561-2.14.0 probing abcd:cdee
[  690.305389][ T5835] spca561 5-1:0.156: probe with driver spca561 failed with error -22
[  690.355665][ T5835] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  690.411705][ T5835] usb 5-1: MIDIStreaming interface descriptor not found
[  690.464345][ T5835] usb 5-1: USB disconnect, device number 9
[  690.692971][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  691.009990][ T5881] usb 6-1: USB disconnect, device number 19
[  691.084353][T17115] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  691.090931][T17115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  691.101302][T17115] vhci_hcd vhci_hcd.0: Device attached
[  691.120642][T17116] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2
[  691.147156][   T12] vhci_hcd: stop threads
[  691.158372][   T12] vhci_hcd: release socket
[  691.163264][   T12] vhci_hcd: disconnect device
[  691.224963][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'.
[  691.241225][T17119] openvswitch: netlink: Flow actions attr not present in new flow.
[  691.243423][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  691.243441][   T30] audit: type=1326 audit(1742964531.039:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  691.278689][   T30] audit: type=1326 audit(1742964531.079:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  691.301612][ T5888] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  691.335339][   T30] audit: type=1326 audit(1742964531.079:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  691.357697][   T30] audit: type=1326 audit(1742964531.079:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  691.388332][   T30] audit: type=1326 audit(1742964531.109:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  691.414564][   T30] audit: type=1326 audit(1742964531.119:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x0
[  691.446781][   T30] audit: type=1326 audit(1742964531.129:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.4.3495" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7f80579 code=0x0
[  691.461661][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  691.489061][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short
[  691.499161][ T5888] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  691.509582][ T5888] usb 2-1: config 8 interface 0 has no altsetting 0
[  691.518113][ T5888] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  691.527663][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.535798][ T5888] usb 2-1: Product: syz
[  691.540160][ T5888] usb 2-1: Manufacturer: syz
[  691.545016][ T5888] usb 2-1: SerialNumber: syz
[  691.553273][T17114] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  691.621517][T15599] usb 3-1: USB disconnect, device number 37
[  691.769236][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  691.779816][ T5888] usb 2-1: selecting invalid altsetting 0
[  691.808275][ T5888] usb 2-1: USB disconnect, device number 22
[  692.024147][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  692.681792][T17147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.699554][T17147] input: syz0 as /devices/virtual/input/input48
[  692.861683][ T5884] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  692.952003][T15599] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  693.013451][ T5884] usb 4-1: config 0 has an invalid interface number: 156 but max is 0
[  693.034948][ T5884] usb 4-1: config 0 has no interface number 0
[  693.041103][ T5884] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  693.072754][ T5884] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  693.099360][ T5884] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  693.112966][T15599] usb 3-1: Using ep0 maxpacket: 32
[  693.131678][ T5884] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  693.152003][T15599] usb 3-1: config 1 interface 0 has no altsetting 0
[  693.169368][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.179907][T15599] usb 3-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.40
[  693.181700][ T5835] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  693.190085][T15599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.213796][ T5884] usb 4-1: config 0 descriptor??
[  693.233326][T15599] usb 3-1: Product: syz
[  693.237665][T15599] usb 3-1: Manufacturer: syz
[  693.252539][ T5884] gspca_main: spca561-2.14.0 probing abcd:cdee
[  693.260397][T15599] usb 3-1: SerialNumber: syz
[  693.500422][ T5835] usb 6-1: config 0 has no interfaces?
[  693.503381][ T5884] spca561 4-1:0.156: probe with driver spca561 failed with error -22
[  693.525908][ T5884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  693.543931][ T5835] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  693.544566][ T5884] usb 4-1: MIDIStreaming interface descriptor not found
[  693.554387][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.568722][ T5835] usb 6-1: Product: syz
[  693.573030][ T5835] usb 6-1: Manufacturer: syz
[  693.577710][ T5835] usb 6-1: SerialNumber: syz
[  693.598013][ T5835] usb 6-1: config 0 descriptor??
[  693.650198][ T5884] usb 4-1: USB disconnect, device number 40
[  693.738839][T15564] udevd[15564]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.083174][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'.
[  694.183121][   T30] audit: type=1326 audit(1742964533.979:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17173 comm="syz.3.3512" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x0
[  694.419815][T17180] netlink: 'syz.1.3515': attribute type 1 has an invalid length.
[  694.428823][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3515'.
[  694.689066][T15599] usbhid 3-1:1.0: can't add hid device: -71
[  694.702015][T15599] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  694.725490][T15599] usb 3-1: USB disconnect, device number 38
[  695.071895][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  695.221749][   T10] usb 2-1: device descriptor read/64, error -71
[  695.482729][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  695.651714][   T10] usb 2-1: device descriptor read/64, error -71
[  695.711641][ T5888] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  695.729825][   T30] audit: type=1326 audit(1742964535.529:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17204 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  695.776051][   T30] audit: type=1326 audit(1742964535.529:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17204 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  695.842010][ T5884] usb 6-1: USB disconnect, device number 20
[  695.851725][   T10] usb usb2-port1: attempt power cycle
[  695.923116][ T5888] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[  695.931716][ T5888] usb 3-1: config 0 has no interface number 0
[  695.937871][ T5888] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  695.950070][ T5888] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  695.962198][ T5888] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  695.975603][ T5888] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  696.025952][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.045345][ T5888] usb 3-1: config 0 descriptor??
[  696.057317][ T5888] gspca_main: spca561-2.14.0 probing abcd:cdee
[  696.202347][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  696.238353][   T10] usb 2-1: device descriptor read/8, error -71
[  696.267234][ T5888] spca561 3-1:0.156: probe with driver spca561 failed with error -22
[  696.285453][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  696.307451][ T5888] usb 3-1: MIDIStreaming interface descriptor not found
[  696.377550][ T5888] usb 3-1: USB disconnect, device number 39
[  696.481585][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  696.520159][   T10] usb 2-1: device descriptor read/8, error -71
[  696.641751][   T10] usb usb2-port1: unable to enumerate USB device
[  697.229200][T17234] netlink: 'syz.3.3533': attribute type 10 has an invalid length.
[  697.239130][T17234] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  697.249487][T17234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  697.862012][   T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  698.043850][   T10] usb 3-1: config 0 has no interfaces?
[  698.118484][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  698.137414][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.178483][   T10] usb 3-1: Product: syz
[  698.189248][   T10] usb 3-1: Manufacturer: syz
[  698.202921][T17253] input: syz0 as /devices/virtual/input/input49
[  698.211336][   T10] usb 3-1: SerialNumber: syz
[  698.250756][   T10] usb 3-1: config 0 descriptor??
[  698.459211][T17267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.477137][T17267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.496092][T17265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.505584][T15268] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  698.531202][T17265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.673533][T15268] usb 6-1: config 0 has an invalid interface number: 156 but max is 0
[  698.711889][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  698.720804][T15268] usb 6-1: config 0 has no interface number 0
[  698.755487][T15268] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  698.780974][T15268] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  698.791522][T15268] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  698.812283][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'.
[  698.821551][T15268] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  698.841279][T15268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.849780][T17273] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  698.863558][T15268] usb 6-1: config 0 descriptor??
[  698.895381][T15268] gspca_main: spca561-2.14.0 probing abcd:cdee
[  699.081386][T17255] tipc: Started in network mode
[  699.087072][T17255] tipc: Node identity 2, cluster identity 4711
[  699.095807][T17255] tipc: Node number set to 2
[  699.117812][T15268] spca561 6-1:0.156: probe with driver spca561 failed with error -22
[  699.134423][T15268] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  699.145951][T15268] usb 6-1: MIDIStreaming interface descriptor not found
[  699.184252][T15268] usb 6-1: USB disconnect, device number 21
[  699.313079][ T5884] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  699.424740][T15569] udevd[15569]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  699.483151][ T5884] usb 4-1: config 0 has an invalid interface number: 156 but max is 0
[  699.497019][ T5884] usb 4-1: config 0 has no interface number 0
[  699.504702][ T5884] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  699.517663][ T5884] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  699.529328][ T5884] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  699.543251][ T5884] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  699.556071][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.573310][ T5884] usb 4-1: config 0 descriptor??
[  699.598044][ T5884] gspca_main: spca561-2.14.0 probing abcd:cdee
[  699.807309][ T5884] spca561 4-1:0.156: probe with driver spca561 failed with error -22
[  699.834283][ T5884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  699.847888][ T5884] usb 4-1: MIDIStreaming interface descriptor not found
[  699.852728][T17291] input: syz0 as /devices/virtual/input/input50
[  699.928085][ T5884] usb 4-1: USB disconnect, device number 41
[  699.938730][T17296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  700.209192][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  700.280903][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  700.280922][   T30] audit: type=1326 audit(1742964540.079:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  700.318001][   T30] audit: type=1326 audit(1742964540.109:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  700.346584][   T30] audit: type=1326 audit(1742964540.109:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  700.375904][   T30] audit: type=1326 audit(1742964540.109:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  700.398597][   T30] audit: type=1326 audit(1742964540.119:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  700.458459][   T30] audit: type=1326 audit(1742964540.119:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0
[  700.487908][   T30] audit: type=1326 audit(1742964540.179:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3555" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7f05579 code=0x0
[  700.575795][ T5888] usb 3-1: USB disconnect, device number 40
[  700.657833][T17307] FAULT_INJECTION: forcing a failure.
[  700.657833][T17307] name failslab, interval 1, probability 0, space 0, times 0
[  700.677412][T17307] CPU: 1 UID: 0 PID: 17307 Comm: syz.2.3557 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  700.677439][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  700.677452][T17307] Call Trace:
[  700.677459][T17307]  <TASK>
[  700.677467][T17307]  dump_stack_lvl+0x241/0x360
[  700.677498][T17307]  ? __pfx_dump_stack_lvl+0x10/0x10
[  700.677522][T17307]  ? __pfx__printk+0x10/0x10
[  700.677545][T17307]  ? kstrtoull+0x1d3/0x2f0
[  700.677579][T17307]  ? __pfx___might_resched+0x10/0x10
[  700.677599][T17307]  should_fail_ex+0x424/0x570
[  700.677625][T17307]  should_failslab+0xac/0x100
[  700.677649][T17307]  __kmalloc_noprof+0xdf/0x4d0
[  700.677672][T17307]  ? iovec_from_user+0x87/0x240
[  700.677691][T17307]  ? __lock_acquire+0xad5/0xd80
[  700.677719][T17307]  iovec_from_user+0x87/0x240
[  700.677742][T17307]  __import_iovec+0x175/0x830
[  700.677770][T17307]  import_iovec+0xeb/0x120
[  700.677794][T17307]  get_compat_msghdr+0x45e/0x730
[  700.677819][T17307]  ? __pfx_get_compat_msghdr+0x10/0x10
[  700.677849][T17307]  __sys_recvmsg+0x247/0x3a0
[  700.677871][T17307]  ? __pfx___sys_recvmsg+0x10/0x10
[  700.677897][T17307]  ? __fget_files+0x2a/0x420
[  700.677937][T17307]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  700.677963][T17307]  ? lockdep_hardirqs_on+0x9d/0x150
[  700.677989][T17307]  __do_fast_syscall_32+0xb4/0x110
[  700.678026][T17307]  ? exc_page_fault+0x599/0x8b0
[  700.678051][T17307]  do_fast_syscall_32+0x34/0x80
[  700.678076][T17307]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  700.678097][T17307] RIP: 0023:0xf749d579
[  700.678111][T17307] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  700.678126][T17307] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[  700.678145][T17307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340
[  700.678157][T17307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  700.678166][T17307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  700.678177][T17307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  700.678187][T17307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  700.678204][T17307]  </TASK>
[  700.753241][T17311] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  700.757399][    C1] vkms_vblank_simulate: vblank timer overrun
[  700.765245][T17311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  701.019658][   T30] audit: type=1326 audit(1742964540.819:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.2.3562" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0
[  701.120892][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'.
[  701.137180][T17320] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  701.571595][ T5835] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  701.647957][T17330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  701.721564][ T5835] usb 2-1: Using ep0 maxpacket: 32
[  701.740484][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  701.763712][ T5835] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  701.777909][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  701.796663][ T5835] usb 2-1: Product: syz
[  701.800947][ T5835] usb 2-1: Manufacturer: syz
[  701.810194][ T5835] usb 2-1: SerialNumber: syz
[  701.826749][ T5835] usb 2-1: config 0 descriptor??
[  701.836934][T17326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  702.041784][T15268] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  702.112469][ T5835] usb 2-1: USB disconnect, device number 28
[  702.211775][   T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  702.236436][T15268] usb 5-1: unable to get BOS descriptor or descriptor too short
[  702.253286][T15268] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.274874][T15268] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  702.301533][T15268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.317604][T15268] usb 5-1: Product: syz
[  702.323964][T15268] usb 5-1: Manufacturer: syz
[  702.328600][T15268] usb 5-1: SerialNumber: syz
[  702.411641][   T10] usb 3-1: Using ep0 maxpacket: 32
[  702.419044][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  702.426313][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  702.445839][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.470508][   T10] usb 3-1: config 0 descriptor??
[  702.576532][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.591828][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.627846][T15268] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  702.685014][T15268] usb 5-1: USB disconnect, device number 10
[  702.897047][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  702.904603][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  702.914103][T15744] udevd[15744]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  702.930175][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  702.938747][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  702.957979][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  702.966574][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  702.985265][   T10] ryos 0003:1E7D:31CE.002E: unknown main item tag 0x0
[  703.011855][   T10] ryos 0003:1E7D:31CE.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.2-1/input0
[  703.041877][T15599] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  703.055114][T17350] FAULT_INJECTION: forcing a failure.
[  703.055114][T17350] name failslab, interval 1, probability 0, space 0, times 0
[  703.079758][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.1.3575 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  703.079788][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  703.079802][T17350] Call Trace:
[  703.079810][T17350]  <TASK>
[  703.079820][T17350]  dump_stack_lvl+0x241/0x360
[  703.079854][T17350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  703.079882][T17350]  ? __pfx__printk+0x10/0x10
[  703.079907][T17350]  ? trace_contention_end+0x3c/0x120
[  703.079932][T17350]  ? __pfx___might_resched+0x10/0x10
[  703.079955][T17350]  should_fail_ex+0x424/0x570
[  703.079986][T17350]  should_failslab+0xac/0x100
[  703.080014][T17350]  __kmalloc_cache_noprof+0x73/0x370
[  703.080042][T17350]  ? __inet_diag_dump_start+0x9d/0xa50
[  703.080072][T17350]  __inet_diag_dump_start+0x9d/0xa50
[  703.080105][T17350]  __netlink_dump_start+0x45c/0x790
[  703.080133][T17350]  inet_diag_rcv_msg_compat+0x213/0x510
[  703.080163][T17350]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  703.080198][T17350]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[  703.080224][T17350]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[  703.080250][T17350]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  703.080280][T17350]  ? sock_diag_rcv_msg+0xca/0x5f0
[  703.080301][T17350]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  703.080331][T17350]  sock_diag_rcv_msg+0x3dc/0x5f0
[  703.080355][T17350]  netlink_rcv_skb+0x208/0x480
[  703.080377][T17350]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  703.080400][T17350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  703.080433][T17350]  ? netlink_deliver_tap+0x2e/0x1b0
[  703.080457][T17350]  ? netlink_deliver_tap+0x2e/0x1b0
[  703.080480][T17350]  netlink_unicast+0x7f8/0x9a0
[  703.080516][T17350]  ? __pfx_netlink_unicast+0x10/0x10
[  703.080554][T17350]  ? __virt_addr_valid+0x45f/0x530
[  703.080581][T17350]  ? __phys_addr_symbol+0x2f/0x70
[  703.080606][T17350]  ? __check_object_size+0x478/0x720
[  703.080635][T17350]  netlink_sendmsg+0x8e8/0xce0
[  703.080666][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  703.080691][T17350]  ? __import_iovec+0x585/0x830
[  703.080714][T17350]  ? aa_sock_msg_perm+0x91/0x160
[  703.080746][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  703.080766][T17350]  __sock_sendmsg+0x221/0x270
[  703.080793][T17350]  ____sys_sendmsg+0x53c/0x870
[  703.080831][T17350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  703.080874][T17350]  __sys_sendmsg+0x271/0x360
[  703.080909][T17350]  ? __pfx___sys_sendmsg+0x10/0x10
[  703.080977][T17350]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  703.081005][T17350]  ? lockdep_hardirqs_on+0x9d/0x150
[  703.081034][T17350]  __do_fast_syscall_32+0xb4/0x110
[  703.081064][T17350]  ? exc_page_fault+0x599/0x8b0
[  703.081092][T17350]  do_fast_syscall_32+0x34/0x80
[  703.081122][T17350]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  703.081147][T17350] RIP: 0023:0xf7ff4579
[  703.081165][T17350] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  703.081183][T17350] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  703.081206][T17350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  703.081221][T17350] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000
[  703.081234][T17350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  703.081247][T17350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  703.081261][T17350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  703.081285][T17350]  </TASK>
[  703.154552][T14728] Bluetooth: hci3: command 0x0406 tx timeout
[  703.311875][T15599] usb 4-1: device descriptor read/64, error -71
[  703.605776][T17356] netlink: 'syz.4.3577': attribute type 15 has an invalid length.
[  703.631634][T17356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3577'.
[  703.731230][   T30] audit: type=1326 audit(1742964543.519:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  703.811742][T15599] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  703.826349][   T30] audit: type=1326 audit(1742964543.569:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f05579 code=0x7ffc0000
[  703.951794][T15599] usb 4-1: device descriptor read/64, error -71
[  704.061989][T15599] usb usb4-port1: attempt power cycle
[  704.168508][T17371] vxcan1: tx address claim with dlc 0
[  704.411571][T15599] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  704.432551][T15599] usb 4-1: device descriptor read/8, error -71
[  704.656182][   T55] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11
[  704.681696][T15599] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  704.752448][T15599] usb 4-1: device descriptor read/8, error -71
[  704.882036][T15599] usb usb4-port1: unable to enumerate USB device
[  705.065488][ T5884] usb 3-1: USB disconnect, device number 41
[  705.234936][T17390] sg_write: process 399 (syz.1.3590) changed security contexts after opening file descriptor, this is not allowed.
[  705.252087][T15599] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  705.461800][T15599] usb 6-1: device descriptor read/64, error -71
[  705.791758][T15599] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  705.872002][T17399] FAULT_INJECTION: forcing a failure.
[  705.872002][T17399] name failslab, interval 1, probability 0, space 0, times 0
[  705.892109][T17399] CPU: 0 UID: 0 PID: 17399 Comm: syz.4.3593 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  705.892142][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  705.892152][T17399] Call Trace:
[  705.892158][T17399]  <TASK>
[  705.892164][T17399]  dump_stack_lvl+0x241/0x360
[  705.892189][T17399]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.892208][T17399]  ? __pfx__printk+0x10/0x10
[  705.892227][T17399]  ? __pfx___might_resched+0x10/0x10
[  705.892245][T17399]  should_fail_ex+0x424/0x570
[  705.892267][T17399]  should_failslab+0xac/0x100
[  705.892286][T17399]  __kvmalloc_node_noprof+0x170/0x5a0
[  705.892307][T17399]  ? alloc_netdev_mqs+0xa4/0x1210
[  705.892323][T17399]  ? __pfx_vlan_setup+0x10/0x10
[  705.892339][T17399]  alloc_netdev_mqs+0xa4/0x1210
[  705.892353][T17399]  ? __pfx_vlan_setup+0x10/0x10
[  705.892367][T17399]  ? rcu_is_watching+0x15/0xb0
[  705.892384][T17399]  rtnl_create_link+0x2f9/0xc90
[  705.892410][T17399]  rtnl_newlink_create+0x212/0xa50
[  705.892431][T17399]  ? __pfx___mutex_lock+0x10/0x10
[  705.892453][T17399]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  705.892475][T17399]  ? ns_capable+0x8a/0xf0
[  705.892501][T17399]  rtnl_newlink+0x1a0a/0x1f60
[  705.892523][T17399]  ? kasan_save_free_info+0x40/0x50
[  705.892545][T17399]  ? __pfx_rtnl_newlink+0x10/0x10
[  705.892560][T17399]  ? __netlink_deliver_tap+0x561/0x7f0
[  705.892574][T17399]  ? netlink_deliver_tap+0x19d/0x1b0
[  705.892587][T17399]  ? netlink_unicast+0x7c6/0x9a0
[  705.892607][T17399]  ? netlink_sendmsg+0x8e8/0xce0
[  705.892620][T17399]  ? __sock_sendmsg+0x221/0x270
[  705.892635][T17399]  ? ____sys_sendmsg+0x53c/0x870
[  705.892655][T17399]  ? __sys_sendmsg+0x271/0x360
[  705.892675][T17399]  ? __do_fast_syscall_32+0xb4/0x110
[  705.892694][T17399]  ? do_fast_syscall_32+0x34/0x80
[  705.892713][T17399]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  705.892746][T17399]  ? kasan_quarantine_put+0xdc/0x230
[  705.892760][T17399]  ? lockdep_hardirqs_on+0x9d/0x150
[  705.892780][T17399]  ? nlmon_xmit+0xaf/0x100
[  705.892797][T17399]  ? __local_bh_enable_ip+0x168/0x200
[  705.892816][T17399]  ? lockdep_hardirqs_on+0x9d/0x150
[  705.892838][T17399]  ? aa_get_newest_label+0x101/0x6f0
[  705.892859][T17399]  ? __lock_acquire+0xad5/0xd80
[  705.892889][T17399]  ? __pfx_rtnl_newlink+0x10/0x10
[  705.892923][T17399]  rtnetlink_rcv_msg+0x80f/0xd70
[  705.892949][T17399]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  705.892968][T17399]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  705.892987][T17399]  ? ref_tracker_free+0x63e/0x7e0
[  705.893010][T17399]  netlink_rcv_skb+0x208/0x480
[  705.893025][T17399]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  705.893048][T17399]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  705.893071][T17399]  ? netlink_deliver_tap+0x2e/0x1b0
[  705.893086][T17399]  ? netlink_deliver_tap+0x2e/0x1b0
[  705.893102][T17399]  netlink_unicast+0x7f8/0x9a0
[  705.893127][T17399]  ? __pfx_netlink_unicast+0x10/0x10
[  705.893148][T17399]  ? __virt_addr_valid+0x45f/0x530
[  705.893185][T17399]  ? __phys_addr_symbol+0x2f/0x70
[  705.893202][T17399]  ? __check_object_size+0x478/0x720
[  705.893226][T17399]  netlink_sendmsg+0x8e8/0xce0
[  705.893248][T17399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.893265][T17399]  ? __import_iovec+0x585/0x830
[  705.893281][T17399]  ? aa_sock_msg_perm+0x91/0x160
[  705.893303][T17399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.893318][T17399]  __sock_sendmsg+0x221/0x270
[  705.893336][T17399]  ____sys_sendmsg+0x53c/0x870
[  705.893363][T17399]  ? __pfx_____sys_sendmsg+0x10/0x10
[  705.893394][T17399]  __sys_sendmsg+0x271/0x360
[  705.893419][T17399]  ? __pfx___sys_sendmsg+0x10/0x10
[  705.893463][T17399]  ? __secure_computing+0xef/0x2f0
[  705.893483][T17399]  __do_fast_syscall_32+0xb4/0x110
[  705.893504][T17399]  ? exc_page_fault+0x599/0x8b0
[  705.893524][T17399]  do_fast_syscall_32+0x34/0x80
[  705.893544][T17399]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  705.893562][T17399] RIP: 0023:0xf7f80579
[  705.893575][T17399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  705.893587][T17399] RSP: 002b:00000000f508555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  705.893604][T17399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  705.893615][T17399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  705.893624][T17399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  705.893633][T17399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  705.893643][T17399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  705.893660][T17399]  </TASK>
[  706.350699][T15599] usb 6-1: device descriptor read/64, error -71
[  706.471793][T15599] usb usb6-port1: attempt power cycle
[  706.691498][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  706.831480][T15599] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  706.853737][T15599] usb 6-1: device descriptor read/8, error -71
[  706.891784][ T5884] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  707.051572][ T5884] usb 4-1: Using ep0 maxpacket: 8
[  707.069618][ T5884] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  707.081605][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  707.092146][T15599] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  707.128371][ T5884] usb 4-1: config 0 has no interface number 0
[  707.141903][T15599] usb 6-1: device descriptor read/8, error -71
[  707.148960][ T5884] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  707.169569][ T5884] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  707.183336][ T5884] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023
[  707.203050][ T5884] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  707.234563][ T5884] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  707.245200][ T5884] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[  707.262362][T15599] usb usb6-port1: unable to enumerate USB device
[  707.279699][ T5884] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  707.306900][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.323142][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'.
[  707.332327][ T5884] usb 4-1: Product: syz
[  707.354986][ T5884] usb 4-1: Manufacturer: syz
[  707.359623][ T5884] usb 4-1: SerialNumber: syz
[  707.396371][ T5884] usb 4-1: config 0 descriptor??
[  707.408221][T17402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  707.412739][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'.
[  707.416107][T17402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  707.440709][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3603'.
[  707.455028][T17426] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[  707.525293][T17428] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  707.654585][ T5884] usb 4-1: NFC: intf ffff888027746000 id ffffffff8f525c20
[  707.681386][ T5884] nfcmrvl 4-1:0.122: NFC: registered with nci successfully
[  707.693313][ T5884] usb 4-1: USB disconnect, device number 46
[  707.701199][ T5884] usb 4-1: NFC: intf ffff888027746000
[  707.861609][T15268] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  708.021764][T15268] usb 5-1: Using ep0 maxpacket: 32
[  708.034529][T15268] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  708.049861][T15268] usb 5-1: config 0 has no interface number 0
[  708.058914][T15268] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  708.096255][T15268] usb 5-1: New USB device found, idVendor=0d8e, idProduct=7811, bcdDevice= 3.81
[  708.127891][T15268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.167085][T15268] usb 5-1: Product: syz
[  708.195135][T15268] usb 5-1: Manufacturer: syz
[  708.218225][T15268] usb 5-1: SerialNumber: syz
[  708.264609][T15268] usb 5-1: config 0 descriptor??
[  708.305665][T17433] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  708.354779][T15268] usb 5-1: Could not find all expected endpoints
[  708.752172][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  708.993205][T17452] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x34324142, 8, 0, 0, 0)
[  709.289256][T17466] netlink: 'syz.3.3617': attribute type 1 has an invalid length.
[  709.351592][T15599] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  709.426591][T17473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3618'.
[  709.552162][T15599] usb 2-1: Using ep0 maxpacket: 32
[  709.565289][T15599] usb 2-1: unable to get BOS descriptor or descriptor too short
[  709.579206][T15599] usb 2-1: unable to read config index 0 descriptor/start: -71
[  709.588009][T15599] usb 2-1: can't read configurations, error -71
[  710.580515][ T5835] usb 5-1: USB disconnect, device number 11
[  711.283523][T17501] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3629'.
[  711.314724][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'.
[  711.346114][T17507] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  711.359284][T17501] pimreg3: entered allmulticast mode
[  711.521781][T15599] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  711.682315][T15599] usb 3-1: Using ep0 maxpacket: 32
[  711.691239][T15599] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  711.702834][T15400] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  711.720689][T15599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.730445][T15599] usb 3-1: Product: syz
[  711.743512][T15599] usb 3-1: Manufacturer: syz
[  711.751743][T15599] usb 3-1: SerialNumber: syz
[  711.759128][T15599] usb 3-1: config 0 descriptor??
[  711.774929][T15599] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  711.873331][T15400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  711.885500][T15400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  711.919537][T15400] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  711.953283][T15400] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00
[  711.975453][T15400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.993479][T15400] usb 5-1: config 0 descriptor??
[  712.261511][T15268] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  712.326217][T15400] usbhid 5-1:0.0: can't add hid device: -71
[  712.361884][T15400] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  712.414154][T15400] usb 5-1: USB disconnect, device number 12
[  712.433284][T15268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  712.444004][T15268] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  712.459865][T15268] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  712.469295][T15268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.478029][T15268] usb 6-1: Product: syz
[  712.482593][T15268] usb 6-1: Manufacturer: syz
[  712.488639][T15268] usb 6-1: SerialNumber: syz
[  712.734085][T17529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.751127][T17529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.797813][T15268] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  712.839409][T15268] usb 6-1: USB disconnect, device number 26
[  712.941570][T15400] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  713.161160][T15400] usb 2-1: Using ep0 maxpacket: 16
[  713.196420][T15400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.249695][T15400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  713.299580][T15400] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  713.311723][T15599] gspca_topro: reg_w err -110
[  713.317743][T15400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.336131][T15400] usb 2-1: config 0 descriptor??
[  713.355048][T15599] gspca_topro: Sensor soi763a
[  713.399175][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  713.432641][ T5835] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  713.547979][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.557204][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.591647][ T5835] usb 6-1: device descriptor read/64, error -71
[  713.612911][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.668617][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.692581][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.701200][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.732861][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.784189][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.794728][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.841560][ T5835] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  713.863239][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.966850][T15400] usbhid 2-1:0.0: can't add hid device: -71
[  713.978837][T15400] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  714.001636][ T5835] usb 6-1: device descriptor read/64, error -71
[  714.011357][T15400] usb 2-1: USB disconnect, device number 31
[  714.112018][ T5835] usb usb6-port1: attempt power cycle
[  714.155994][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  714.156015][   T30] audit: type=1326 audit(1742964553.959:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17564 comm="syz.1.3654" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4579 code=0x0
[  714.268772][T15268] usb 3-1: USB disconnect, device number 42
[  714.451542][ T5835] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  714.503595][ T5835] usb 6-1: device descriptor read/8, error -71
[  714.741577][ T5835] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  714.762580][ T5835] usb 6-1: device descriptor read/8, error -71
[  714.883346][ T5835] usb usb6-port1: unable to enumerate USB device
[  716.302946][T17582] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3660'.
[  717.331573][ T5881] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  717.387747][T17628] FAULT_INJECTION: forcing a failure.
[  717.387747][T17628] name failslab, interval 1, probability 0, space 0, times 0
[  717.402576][T17628] CPU: 0 UID: 0 PID: 17628 Comm: syz.3.3676 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  717.402606][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  717.402620][T17628] Call Trace:
[  717.402628][T17628]  <TASK>
[  717.402636][T17628]  dump_stack_lvl+0x241/0x360
[  717.402667][T17628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  717.402693][T17628]  ? __pfx__printk+0x10/0x10
[  717.402720][T17628]  ? __pfx___might_resched+0x10/0x10
[  717.402744][T17628]  should_fail_ex+0x424/0x570
[  717.402780][T17628]  should_failslab+0xac/0x100
[  717.402802][T17628]  __kmalloc_noprof+0xdf/0x4d0
[  717.402826][T17628]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  717.402848][T17628]  ? apparmor_capable+0x13b/0x1b0
[  717.402866][T17628]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  717.402892][T17628]  genl_rcv_msg+0x819/0xf00
[  717.402917][T17628]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.402936][T17628]  ? __dev_queue_xmit+0x1780/0x3f60
[  717.402950][T17628]  ? kasan_save_track+0x3f/0x80
[  717.402965][T17628]  ? __kasan_slab_alloc+0x66/0x80
[  717.402985][T17628]  ? __do_fast_syscall_32+0xb4/0x110
[  717.403017][T17628]  ? __lock_acquire+0xad5/0xd80
[  717.403041][T17628]  ? __pfx_wg_set_device+0x10/0x10
[  717.403070][T17628]  netlink_rcv_skb+0x208/0x480
[  717.403086][T17628]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.403107][T17628]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  717.403134][T17628]  ? netlink_deliver_tap+0x2e/0x1b0
[  717.403153][T17628]  genl_rcv+0x28/0x40
[  717.403172][T17628]  netlink_unicast+0x7f8/0x9a0
[  717.403200][T17628]  ? __pfx_netlink_unicast+0x10/0x10
[  717.403224][T17628]  ? __virt_addr_valid+0x45f/0x530
[  717.403245][T17628]  ? __phys_addr_symbol+0x2f/0x70
[  717.403264][T17628]  ? __check_object_size+0x478/0x720
[  717.403286][T17628]  netlink_sendmsg+0x8e8/0xce0
[  717.403309][T17628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  717.403327][T17628]  ? __import_iovec+0x585/0x830
[  717.403344][T17628]  ? aa_sock_msg_perm+0x91/0x160
[  717.403367][T17628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  717.403382][T17628]  __sock_sendmsg+0x221/0x270
[  717.403420][T17628]  ____sys_sendmsg+0x53c/0x870
[  717.403452][T17628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  717.403489][T17628]  __sys_sendmsg+0x271/0x360
[  717.403517][T17628]  ? __pfx___sys_sendmsg+0x10/0x10
[  717.403572][T17628]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  717.403597][T17628]  ? lockdep_hardirqs_on+0x9d/0x150
[  717.403622][T17628]  __do_fast_syscall_32+0xb4/0x110
[  717.403649][T17628]  ? exc_page_fault+0x599/0x8b0
[  717.403671][T17628]  do_fast_syscall_32+0x34/0x80
[  717.403694][T17628]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  717.403714][T17628] RIP: 0023:0xf7f55579
[  717.403729][T17628] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  717.403744][T17628] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  717.403763][T17628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b80
[  717.403786][T17628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  717.403796][T17628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  717.403806][T17628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  717.403817][T17628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  717.403839][T17628]  </TASK>
[  717.737315][    C0] vkms_vblank_simulate: vblank timer overrun
[  717.761597][ T5881] usb 3-1: Using ep0 maxpacket: 8
[  717.774934][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  717.784330][ T5881] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  717.801264][ T5881] usb 3-1: Product: syz
[  717.807246][ T5881] usb 3-1: Manufacturer: syz
[  717.812951][ T5881] usb 3-1: SerialNumber: syz
[  717.819543][T15599] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  717.832303][ T5881] usb 3-1: config 0 descriptor??
[  717.939636][ T5881] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  717.991500][T15599] usb 2-1: Using ep0 maxpacket: 16
[  717.999194][T15599] usb 2-1: config 5 has an invalid interface number: 206 but max is 1
[  718.007482][T15599] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  718.016976][T15599] usb 2-1: config 5 has an invalid interface number: 146 but max is 1
[  718.026129][T15599] usb 2-1: config 5 has an invalid interface number: 6 but max is 1
[  718.034426][T15599] usb 2-1: config 5 has an invalid interface number: 236 but max is 1
[  718.040250][T17611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.042642][T15599] usb 2-1: config 5 has 4 interfaces, different from the descriptor's value: 2
[  718.042666][T15599] usb 2-1: config 5 has no interface number 0
[  718.042683][T15599] usb 2-1: config 5 has no interface number 1
[  718.042699][T15599] usb 2-1: config 5 has no interface number 2
[  718.042715][T15599] usb 2-1: config 5 has no interface number 3
[  718.042764][T15599] usb 2-1: config 5 interface 206 altsetting 186 has an invalid descriptor for endpoint zero, skipping
[  718.051759][T17611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.060104][T15599] usb 2-1: config 5 interface 206 altsetting 186 has a duplicate endpoint with address 0x1, skipping
[  718.126867][T15599] usb 2-1: config 5 interface 206 altsetting 186 has a duplicate endpoint with address 0xC, skipping
[  718.140634][T17611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.167378][T15599] usb 2-1: config 5 interface 206 altsetting 186 has 6 endpoint descriptors, different from the interface descriptor's value: 13
[  718.190440][T17611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.206415][T17643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.208975][T15599] usb 2-1: too many endpoints for config 5 interface 146 altsetting 125: 233, using maximum allowed: 30
[  718.249898][T15599] usb 2-1: config 5 interface 146 altsetting 125 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  718.261969][T15599] usb 2-1: config 5 interface 146 altsetting 125 has an invalid descriptor for endpoint zero, skipping
[  718.273457][T15599] usb 2-1: config 5 interface 146 altsetting 125 endpoint 0x6 has invalid maxpacket 80, setting to 64
[  718.285046][T17643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.343224][ T5881] gspca_zc3xx: reg_w_i err -71
[  718.374124][ T5881] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  718.384921][ T5881] usb 3-1: USB disconnect, device number 43
[  718.387715][T15599] usb 2-1: config 5 interface 146 altsetting 125 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  718.792231][T15599] usb 2-1: config 5 interface 146 altsetting 125 has a duplicate endpoint with address 0x6, skipping
[  718.810322][T15599] usb 2-1: config 5 interface 146 altsetting 125 has a duplicate endpoint with address 0x1, skipping
[  718.819279][T17649] set match dimension is over the limit!
[  718.822006][T15599] usb 2-1: config 5 interface 146 altsetting 125 has a duplicate endpoint with address 0xB, skipping
[  718.851551][T15599] usb 2-1: config 5 interface 146 altsetting 125 has 7 endpoint descriptors, different from the interface descriptor's value: 233
[  718.865299][T15599] usb 2-1: config 5 interface 6 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  718.876255][T15599] usb 2-1: config 5 interface 6 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  718.889520][T15599] usb 2-1: config 5 interface 236 altsetting 95 has 4 endpoint descriptors, different from the interface descriptor's value: 0
[  718.902980][T15599] usb 2-1: config 5 interface 206 has no altsetting 0
[  718.909793][T15599] usb 2-1: config 5 interface 146 has no altsetting 0
[  718.917074][T15599] usb 2-1: config 5 interface 6 has no altsetting 0
[  718.923966][T15599] usb 2-1: config 5 interface 236 has no altsetting 0
[  718.934047][T15599] usb 2-1: Dual-Role OTG device on HNP port
[  718.941277][T15599] usb 2-1: New USB device found, idVendor=10c4, idProduct=8477, bcdDevice=7f.d1
[  718.951294][T15599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.985382][T15599] usb 2-1: Product: ␉
[  718.989621][T15599] usb 2-1: Manufacturer: 觞ﬓ
[  719.001900][T15599] usb 2-1: SerialNumber: 桪㽈쿇຋擑젊ṗ并ᕆ椔禅云姽⼛鹐ྔ
[  719.110336][   T30] audit: type=1326 audit(1742964558.909:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17656 comm="syz.2.3688" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf749d579 code=0x0
[  719.229905][T15599] cp210x 2-1:5.206: cp210x converter detected
[  719.248661][T15599] cp210x 2-1:5.206: failed to get vendor val 0x370b size 1: -71
[  719.260636][T15268] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  719.292373][T15599] cp210x 2-1:5.206: querying part number failed
[  719.320544][T15599] usb 2-1: cp210x converter now attached to ttyUSB0
[  719.348425][T15599] cp210x 2-1:5.146: cp210x converter detected
[  719.385587][T15599] cp210x 2-1:5.146: failed to get vendor val 0x370b size 1: -71
[  719.404031][T15599] cp210x 2-1:5.146: querying part number failed
[  719.430083][T15599] usb 2-1: cp210x converter now attached to ttyUSB1
[  719.459541][T15268] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  719.489179][T15268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.512520][T15599] cp210x 2-1:5.6: cp210x converter detected
[  719.519401][T15599] cp210x 2-1:5.6: failed to get vendor val 0x370b size 1: -71
[  719.520224][T15268] usb 6-1: config 0 descriptor??
[  719.533849][T15599] cp210x 2-1:5.6: querying part number failed
[  719.546056][T15268] gspca_main: sonixj-2.14.0 probing 0471:0327
[  719.556184][T15599] usb 2-1: cp210x converter now attached to ttyUSB2
[  719.617264][T15599] cp210x 2-1:5.236: cp210x converter detected
[  719.636702][T15599] cp210x 2-1:5.236: failed to get vendor val 0x370b size 1: -71
[  719.675114][T15599] cp210x 2-1:5.236: querying part number failed
[  719.692723][T15599] usb 2-1: cp210x converter now attached to ttyUSB3
[  719.711754][T15599] usb 2-1: USB disconnect, device number 32
[  719.806234][T15599] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  719.839922][T15599] cp210x 2-1:5.206: device disconnected
[  719.862658][T15599] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  719.912923][T15599] cp210x 2-1:5.146: device disconnected
[  719.952785][T15599] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2
[  719.981912][T15599] cp210x 2-1:5.6: device disconnected
[  720.051986][T15599] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3
[  720.060153][T15599] cp210x 2-1:5.236: device disconnected
[  720.121825][T15400] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  720.218263][T15268] gspca_sonixj: reg_w1 err -71
[  720.228912][T15268] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  720.261667][T15268] usb 6-1: USB disconnect, device number 31
[  720.278564][   T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
[  720.291492][T15400] usb 4-1: Using ep0 maxpacket: 8
[  720.299866][T15400] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  720.316690][T15400] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  720.327599][T15400] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  720.343929][T15400] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.357375][   T31]       Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0
[  720.359389][T15400] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  720.381280][T15400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.381493][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  720.429829][   T31] task:kworker/u8:1    state:D stack:20888 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
[  720.456132][   T31] Workqueue: netns cleanup_net
[  720.460963][   T31] Call Trace:
[  720.469906][   T31]  <TASK>
[  720.479544][   T31]  __schedule+0x1b18/0x50e0
[  720.487423][   T31]  ? register_lock_class+0x54/0x330
[  720.500133][   T31]  ? __pfx___schedule+0x10/0x10
[  720.508598][   T31]  ? schedule+0x90/0x360
[  720.519089][   T31]  ? schedule+0x90/0x360
[  720.527511][   T31]  schedule+0x163/0x360
[  720.536691][   T31]  afs_cell_purge+0x3e3/0x550
[  720.548239][   T31]  ? __pfx_afs_cell_purge+0x10/0x10
[  720.559730][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  720.571026][   T31]  ? afs_net+0x45/0x280
[  720.580434][   T31]  afs_net_exit+0x50/0x100
[  720.589714][   T31]  cleanup_net+0x814/0xd60
[  720.599473][T15400] usb 4-1: GET_CAPABILITIES returned 0
[  720.605662][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  720.615403][T15400] usbtmc 4-1:16.0: can't read capabilities
[  720.621396][   T31]  ? process_scheduled_works+0x9cb/0x18e0
[  720.627392][   T31]  process_scheduled_works+0xac3/0x18e0
[  720.633187][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  720.639901][   T31]  ? assign_work+0x367/0x3d0
[  720.648569][   T31]  worker_thread+0x870/0xd30
[  720.667505][   T31]  ? __kthread_parkme+0x169/0x1d0
[  720.683319][   T31]  ? __pfx_worker_thread+0x10/0x10
[  720.688505][   T31]  kthread+0x7a9/0x920
[  720.699803][   T31]  ? __pfx_worker_thread+0x10/0x10
[  720.710248][   T31]  ? __pfx_kthread+0x10/0x10
[  720.718194][   T31]  ? __pfx_kthread+0x10/0x10
[  720.728480][   T31]  ? __pfx_kthread+0x10/0x10
[  720.738041][   T31]  ? __pfx_kthread+0x10/0x10
[  720.752635][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  720.757905][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  720.782380][   T31]  ? __pfx_kthread+0x10/0x10
[  720.800163][   T31]  ret_from_fork+0x4b/0x80
[  720.812418][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.821498][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.830536][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.839575][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.848613][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.857676][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.866730][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.875769][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.884817][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.894930][   T31]  ? __pfx_kthread+0x10/0x10
[  720.931525][   T31]  ret_from_fork_asm+0x1a/0x30
[  720.971524][   T31]  </TASK>
[  720.975025][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.984142][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.987442][   T31] 
[  720.987442][   T31] Showing all locks held in the system:
[  720.993211][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  720.993255][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.000946][   T31] 5 locks held by kworker/u8:0/12:
[  721.010138][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.019051][   T31] 3 locks held by kworker/u8:1/13:
[  721.056114][   T31]  #0: ffff88801baf6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  721.067464][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.076567][   T31]  #1: ffffc90000127c60 (
[  721.076600][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.076608][   T31] net_cleanup_work
[  721.081096][   T31] ){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  721.120047][   T31]  #2: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60
[  721.135223][   T31] 1 lock held by khungtaskd/31:
[  721.140238][   T31]  #0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180
[  721.157414][   T31] 2 locks held by kworker/u8:5/1087:
[  721.163657][   T31]  #0: ffff8881472c3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  721.180647][   T31]  #1: ffffc90003fafc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  721.204226][   T31] 2 locks held by getty/5587:
[  721.209081][   T31]  #0: ffff88814c7420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  721.225950][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0
[  721.239387][   T31] 2 locks held by syz.2.3688/17670:
[  721.250640][   T31] 1 lock held by syz.3.3693/17668:
[  721.259223][   T31]  #0: ffff8880b8639ad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140
[  721.273477][   T31] 1 lock held by syz.3.3693/17669:
[  721.278778][   T31]  #0: ffffffff8eb3fc78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830
[  721.293705][   T31] 1 lock held by syz.4.3694/17671:
[  721.331565][   T31]  #0: ffffffff8eb3fb40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  721.341887][   T31] 
[  721.344461][   T31] =============================================
[  721.344461][   T31] 
[  721.356175][   T31] NMI backtrace for cpu 1
[  721.356194][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  721.356217][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  721.356230][   T31] Call Trace:
[  721.356238][   T31]  <TASK>
[  721.356246][   T31]  dump_stack_lvl+0x241/0x360
[  721.356278][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  721.356304][   T31]  ? __pfx__printk+0x10/0x10
[  721.356336][   T31]  nmi_cpu_backtrace+0x4ab/0x4e0
[  721.356363][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  721.356383][   T31]  ? _printk+0xd5/0x120
[  721.356416][   T31]  ? __wake_up_klogd+0xcc/0x110
[  721.356441][   T31]  ? __pfx__printk+0x10/0x10
[  721.356467][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  721.356498][   T31]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  721.356523][   T31]  watchdog+0x1058/0x10a0
[  721.356551][   T31]  ? watchdog+0x1ea/0x10a0
[  721.356581][   T31]  ? __pfx_watchdog+0x10/0x10
[  721.356608][   T31]  kthread+0x7a9/0x920
[  721.356633][   T31]  ? __pfx_watchdog+0x10/0x10
[  721.356660][   T31]  ? __pfx_kthread+0x10/0x10
[  721.356681][   T31]  ? __pfx_kthread+0x10/0x10
[  721.356704][   T31]  ? __pfx_kthread+0x10/0x10
[  721.356726][   T31]  ? __pfx_kthread+0x10/0x10
[  721.356749][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  721.356771][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  721.356796][   T31]  ? __pfx_kthread+0x10/0x10
[  721.356819][   T31]  ret_from_fork+0x4b/0x80
[  721.356836][   T31]  ? __pfx_kthread+0x10/0x10
[  721.356859][   T31]  ret_from_fork_asm+0x1a/0x30
[  721.356897][   T31]  </TASK>
[  721.356905][   T31] Sending NMI from CPU 1 to CPUs 0:
[  721.498460][T15268] usb 4-1: USB disconnect, device number 47
[  721.500073][    C0] NMI backtrace for cpu 0
[  721.500088][    C0] CPU: 0 UID: 0 PID: 15268 Comm: kworker/0:0 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  721.500111][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  721.500123][    C0] Workqueue: usb_hub_wq hub_event
[  721.500146][    C0] RIP: 0010:format_decode+0x46c/0xcb0
[  721.500167][    C0] Code: 8d 7e 01 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 76 06 00 00 45 0f b6 66 01 44 89 ef 44 89 e6 e8 17 cb ac f5 45 38 e5 <0f> b6 c3 40 0f b6 ed 0f 44 e8 89 2c 24 4d 0f 44 f7 49 bc 00 00 00
[  721.500182][    C0] RSP: 0018:ffffc9000c7b69a0 EFLAGS: 00000283
[  721.500197][    C0] RAX: 0000000000000002 RBX: 0000000000000008 RCX: 0000000000100000
[  721.500209][    C0] RDX: ffff888034b21e00 RSI: 0000000000000075 RDI: 000000000000006c
[  721.500221][    C0] RBP: 0000000000000008 R08: ffffffff8c169839 R09: ffffffff8c169453
[  721.500234][    C0] R10: 0000000000000002 R11: ffff888034b21e00 R12: 0000000000000075
[  721.500245][    C0] R13: 000000000000006c R14: ffffffff8c2b70a3 R15: ffffffff8c2b70a4
[  721.500259][    C0] FS:  0000000000000000(0000) GS:ffff888125224000(0000) knlGS:0000000000000000
[  721.500273][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  721.500286][    C0] CR2: 00000000f7490048 CR3: 000000003121e000 CR4: 00000000003526f0
[  721.500302][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  721.500313][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  721.500324][    C0] Call Trace:
[  721.500332][    C0]  <NMI>
[  721.500339][    C0]  ? nmi_cpu_backtrace+0x3d1/0x4e0
[  721.500361][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  721.500379][    C0]  ? look_up_lock_class+0x7b/0x170
[  721.500403][    C0]  ? lock_acquire+0x1fc/0x2f0
[  721.500430][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  721.500456][    C0]  ? nmi_handle+0x196/0x5e0
[  721.500474][    C0]  ? nmi_handle+0x7e/0x5e0
[  721.500493][    C0]  ? format_decode+0x46c/0xcb0
[  721.500510][    C0]  ? default_do_nmi+0x63/0x160
[  721.500527][    C0]  ? exc_nmi+0x123/0x1f0
[  721.500543][    C0]  ? end_repeat_nmi+0xf/0x53
[  721.500562][    C0]  ? format_decode+0x83/0xcb0
[  721.500584][    C0]  ? format_decode+0x469/0xcb0
[  721.500602][    C0]  ? format_decode+0x46c/0xcb0
[  721.500619][    C0]  ? format_decode+0x46c/0xcb0
[  721.500636][    C0]  ? format_decode+0x46c/0xcb0
[  721.500653][    C0]  </NMI>
[  721.500659][    C0]  <TASK>
[  721.500668][    C0]  vsnprintf+0x179/0x1230
[  721.500690][    C0]  ? __pfx_vsnprintf+0x10/0x10
[  721.500711][    C0]  sprintf+0xdc/0x130
[  721.500726][    C0]  ? desc_read+0x1a8/0x400
[  721.500744][    C0]  ? __pfx_sprintf+0x10/0x10
[  721.500761][    C0]  ? _prb_read_valid+0xac9/0xae0
[  721.500780][    C0]  info_print_prefix+0x16d/0x310
[  721.500804][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  721.500831][    C0]  record_print_text+0x14a/0x430
[  721.500853][    C0]  ? __pfx_record_print_text+0x10/0x10
[  721.500871][    C0]  ? prb_read_valid+0xab/0xf0
[  721.500887][    C0]  ? __pfx_prb_read_valid+0x10/0x10
[  721.500902][    C0]  ? _prb_read_valid+0xa51/0xae0
[  721.500921][    C0]  printk_get_next_message+0x65b/0x8b0
[  721.500945][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  721.500967][    C0]  ? __lock_acquire+0xad5/0xd80
[  721.500996][    C0]  ? console_flush_all+0x513/0xec0
[  721.501017][    C0]  console_flush_all+0x56b/0xec0
[  721.501038][    C0]  ? console_flush_all+0x1a5/0xec0
[  721.501059][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  721.501079][    C0]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  721.501099][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  721.501123][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  721.501146][    C0]  console_unlock+0x151/0x3b0
[  721.501164][    C0]  ? __pfx_console_unlock+0x10/0x10
[  721.501185][    C0]  ? vprintk_emit+0x532/0xa10
[  721.501201][    C0]  vprintk_emit+0x732/0xa10
[  721.501218][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  721.501235][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  721.501255][    C0]  ? __pfx_snprintf+0x10/0x10
[  721.501272][    C0]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  721.501295][    C0]  dev_vprintk_emit+0x358/0x420
[  721.501316][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  721.501338][    C0]  ? __virt_addr_valid+0x183/0x530
[  721.501363][    C0]  dev_printk_emit+0xdf/0x130
[  721.501382][    C0]  ? __queue_work+0x115/0x10a0
[  721.501406][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  721.501432][    C0]  ? __dev_printk+0x137/0x1a0
[  721.501451][    C0]  _dev_info+0x12d/0x180
[  721.501472][    C0]  ? __pfx__dev_info+0x10/0x10
[  721.501493][    C0]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  721.501516][    C0]  ? kernfs_notify+0x60/0x370
[  721.501538][    C0]  ? kernfs_notify+0x2ec/0x370
[  721.501559][    C0]  usb_disconnect+0xe7/0x960
[  721.501598][    C0]  hub_event+0x1d2a/0x50f0
[  721.501632][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  721.501661][    C0]  ? __pfx_hub_event+0x10/0x10
[  721.501681][    C0]  ? __lock_acquire+0xad5/0xd80
[  721.501709][    C0]  ? insn_get_displacement+0x60/0x9a0
[  721.501742][    C0]  ? process_scheduled_works+0x9cb/0x18e0
[  721.501773][    C0]  process_scheduled_works+0xac3/0x18e0
[  721.501815][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  721.501850][    C0]  ? assign_work+0x367/0x3d0
[  721.501882][    C0]  worker_thread+0x870/0xd30
[  721.501906][    C0]  ? __kthread_parkme+0x169/0x1d0
[  721.501925][    C0]  ? __pfx_worker_thread+0x10/0x10
[  721.501942][    C0]  kthread+0x7a9/0x920
[  721.501962][    C0]  ? __pfx_worker_thread+0x10/0x10
[  721.501980][    C0]  ? __pfx_kthread+0x10/0x10
[  721.501998][    C0]  ? __pfx_kthread+0x10/0x10
[  721.502018][    C0]  ? __pfx_kthread+0x10/0x10
[  721.502037][    C0]  ? __pfx_kthread+0x10/0x10
[  721.502057][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  721.502075][    C0]  ? lockdep_hardirqs_on+0x9d/0x150
[  721.502097][    C0]  ? __pfx_kthread+0x10/0x10
[  721.502117][    C0]  ret_from_fork+0x4b/0x80
[  721.502132][    C0]  ? __pfx_kthread+0x10/0x10
[  721.502151][    C0]  ret_from_fork_asm+0x1a/0x30
[  721.502181][    C0]  </TASK>
[  721.537715][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  721.537741][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  721.537771][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  721.537787][   T31] Call Trace:
[  721.537796][   T31]  <TASK>
[  721.537808][   T31]  dump_stack_lvl+0x241/0x360
[  721.537844][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  721.537875][   T31]  ? __pfx__printk+0x10/0x10
[  721.537907][   T31]  ? vscnprintf+0x5d/0x90
[  721.537935][   T31]  panic+0x349/0x880
[  721.537962][   T31]  ? __pfx_preempt_schedule+0x10/0x10
[  721.537990][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  721.538018][   T31]  ? __pfx_panic+0x10/0x10
[  721.538042][   T31]  ? tick_nohz_tick_stopped+0x82/0xb0
[  721.538072][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  721.538095][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  721.538121][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  721.538148][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  721.538176][   T31]  watchdog+0x1097/0x10a0
[  721.538208][   T31]  ? watchdog+0x1ea/0x10a0
[  721.538243][   T31]  ? __pfx_watchdog+0x10/0x10
[  721.538274][   T31]  kthread+0x7a9/0x920
[  721.538303][   T31]  ? __pfx_watchdog+0x10/0x10
[  721.538343][   T31]  ? __pfx_kthread+0x10/0x10
[  721.538368][   T31]  ? __pfx_kthread+0x10/0x10
[  721.538395][   T31]  ? __pfx_kthread+0x10/0x10
[  721.538420][   T31]  ? __pfx_kthread+0x10/0x10
[  721.538447][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  721.538472][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  721.538513][   T31]  ? __pfx_kthread+0x10/0x10
[  721.538540][   T31]  ret_from_fork+0x4b/0x80
[  721.538560][   T31]  ? __pfx_kthread+0x10/0x10
[  721.538584][   T31]  ret_from_fork_asm+0x1a/0x30
[  721.538626][   T31]  </TASK>
[  721.547176][   T31] Kernel Offset: disabled