last executing test programs:

3m31.53998615s ago: executing program 1 (id=1041):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1}, 0x7}, {{&(0x7f0000000300)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1, &(0x7f0000000480)=""/73, 0x49}, 0x9}, {{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000c80)=""/140, 0x8c}, {&(0x7f0000000680)=""/2, 0x2}], 0x3, &(0x7f0000000840)=""/82, 0x52}, 0x1000}, {{&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000000a00)=""/17, 0x11}, {&(0x7f0000000a40)=""/37, 0x25}, {&(0x7f0000000a80)=""/93, 0x5d}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000bc0)=""/19, 0x13}], 0x6, &(0x7f0000000e80)=""/199, 0xc7}, 0xb}], 0x4, 0x20103, &(0x7f0000000e40)={0x0, 0x3938700})
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)

3m29.794958859s ago: executing program 1 (id=1046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1000}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0xffffffffffffff12, 0x7, @mcast2}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (fail_nth: 5)

3m29.358354689s ago: executing program 1 (id=1047):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x4010000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x4, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

3m29.247466381s ago: executing program 1 (id=1048):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_SRC_VNI={0x8, 0xb, 0x400}]}, 0x24}}, 0x40001)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
write$tcp_mem(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)=@known='user.syz\x00')
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040))
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x43, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044)

3m28.95545613s ago: executing program 1 (id=1051):
socket(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6745208e00083a01fe800000000002000000000000000034ff02000000000000000000000000000188009078"], 0x0)

3m28.41038096s ago: executing program 1 (id=1053):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}})

3m26.715443505s ago: executing program 32 (id=1053):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}})

2m45.406703552s ago: executing program 4 (id=1204):
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="ca02141a2ba53c86d9648b2dd6fda18fa8663d"], 0x7, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xffffffff}, &(0x7f00000001c0), &(0x7f00000005c0))
syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0x270b, 0x186a, 0x0, 0x8000003, 0x0, r0}, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0)
socket$inet(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xfc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xcc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x5, 0x2, 0x3, 0x4, 0x3, 0x1, 0xc, 0x1, 0x7, 0x9, 0xf, 0x10, 0x2, 0x3, 0x6], 0x1, [0x1, 0x3, 0x5, 0xe0ce, 0x1, 0x3, 0x0, 0x0, 0x1ab3, 0xc7, 0x6, 0x41, 0x9, 0xfffd, 0x8, 0x1], [0x8, 0x40, 0x101, 0x3, 0x9, 0x3, 0x8, 0x7, 0x1e6, 0x4, 0x9, 0x1, 0x7, 0x0, 0x6, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x3, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xfc}}, 0x48004)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30600000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

2m42.307601937s ago: executing program 4 (id=1223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='fdinfo/3\x00')
r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x143}, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
fchmod(0xffffffffffffffff, 0xc6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r4, 0x6e2, 0x600, 0x1, 0x0, 0x0)
r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00')
readlinkat(r8, 0x0, &(0x7f00000002c0)=""/204, 0xcc)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES8=r7, @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf253400003b0c009900000000001b0000000f003400050a86912416255141aa320008001f010600000004015500eda8b004d5009d6a2ec05801983174680a000600fbda750a50388b4395965000001400fe00d543b2a92ee14c7fa6c71ce13984fcc31400fe00f69cc2e45634c5caeb350ff32d3db9750a003400020202020202000008001f015c9800000a0006000802110000000000050020010a000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
syz_emit_ethernet(0xcc, &(0x7f0000000140)=ANY=[], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r12=>0x0})
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100000, 0x0, 0xffffffffffffffff, 0x7, '\x00', r12, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r13, &(0x7f00000003c0)="c6c1be0068624e98eb6f9e8ac75706ab5f54d703e6f62928c77fb9868fe31d96c93f97e4e6de7064f16e49569e4733e5f7967b37ebce8606ff40408ecf33a849ac80358078b5184a1226450a9319bc0d932b0921a5db3c7d3fa7b06b2a249d04063a58dc036fc0e5931abb0abdcba8a55997478e8634fbdc010d0d740a95fadfb6c7d43afd2b9d8458dd76e839b629684147518d69dc9e83b8dd7b3f801923bd0c9b35929794f0209976007818abf7aec2d0776dd772b3a836eda0f4871cfc68f23c0e29e7de4b74", &(0x7f0000000080)=""/182, 0x4}, 0x20)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="310300030000000000000800000008000300891b062bb975497b0a332359115c707a4f3aa1489ba45aa356860e54b57d6619790a5abefd7a5fb47b6ea5a82657192d715c268af29fcb8aacf3db5227eaf089ed2966065f8e1a46f90994e1f7a0d734c66d3920c29bc9d7709e7d8b98255c64d58a2b040a337ca1016b11b152da764263352230c81dfd3ec2c9f972aaf7c679415f0a75a00e8d8d96e09ae118c6b40bd583a88940baacda00579e321dd589f3b4cbb285eac94a0272f0a5054783551c72d4a3cc01781bf46ec83eeecad0db3fee8a48fec1673c9fff01cf88f4a76f4016a9d56d08051b1c3ac0", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0)

2m41.32221014s ago: executing program 4 (id=1225):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0xa, @win={{0x9, 0x4, 0xfffff9f9, 0x4}, 0x8, 0x4, 0x0, 0x2, 0x0, 0x1}})
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@local, @remote, <r3=>0x0}, &(0x7f0000000280)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x4, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r11=>0x0, 0x4, 0x0, 0x8, 0x80, 0x40, @local, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1, 0x10, 0x296, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', <r13=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x95, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6gre0\x00', <r15=>0x0, 0x2f, 0x7, 0x2, 0x2, 0x31, @loopback, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40, 0x8, 0x58d5, 0x6}})
r16 = socket$netlink(0x10, 0x3, 0x0)
r17 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'team0\x00', <r18=>0x0})
sendmsg$nl_route(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r18], 0x3c}}, 0x0)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
r20 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r21 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r21, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r22=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r19, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r22, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000800)={0x4f4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb52}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}, {{0x8, 0x1, r14}, {0x1e4, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xb, 0x0, 0x6, 0x4}, {0x5, 0x4, 0x3, 0x200}, {0x8, 0x7, 0x9, 0x6}, {0xdf6, 0x59, 0x9, 0x1}, {0x7ff, 0x7e, 0x40, 0x635b79a9}, {0xfff4, 0x4, 0x4, 0x8}, {0x4, 0xe0, 0x9, 0xa}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x200c0041)

2m41.193140467s ago: executing program 4 (id=1226):
syz_open_dev$video(0x0, 0x7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)=@known='user.syz\x00')
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000240)=0x8)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Cap'], 0x86)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40080)
r7 = dup3(r5, r4, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r8, 0x29, 0x46, 0x0, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r7)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRES64=r0, @ANYBLOB="000107000000b1da000002000001800800020003000000050005000f000000080002000500000008000300030000000800020000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x94)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)

2m40.211488436s ago: executing program 4 (id=1229):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x80000000, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@mcast1}, &(0x7f0000000300)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00'})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r3, &(0x7f0000000ec0)='-1\x00', 0x3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x7, 0x4, 0xe, @mcast2, @mcast1, 0x80a7, 0x1, 0x6, 0x6}})

2m40.032874901s ago: executing program 4 (id=1231):
syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2)
ptrace(0x10, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = dup2(r3, r2)
sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = socket(0xa, 0x1, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000240))
writev(r6, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)})
memfd_create(0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, 0x0, &(0x7f0000000180))

2m39.667273522s ago: executing program 33 (id=1231):
syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2)
ptrace(0x10, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = dup2(r3, r2)
sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = socket(0xa, 0x1, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000240))
writev(r6, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)})
memfd_create(0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, 0x0, &(0x7f0000000180))

5.701344197s ago: executing program 3 (id=1828):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000280)='Q', 0x1})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000100)='W', 0x1})
close_range(r1, 0xffffffffffffffff, 0x300)

5.535524807s ago: executing program 5 (id=1830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03030000000000000000060014000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

5.484356862s ago: executing program 3 (id=1831):
unshare(0x28040600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind(r0, 0x0, 0x0)

5.480787091s ago: executing program 5 (id=1832):
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000040))
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20050800)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x44041)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9980030004000000200012800b00010065727370616e00001000028004001200050016"], 0x54}, 0x1, 0x0, 0x0, 0x24008400}, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x2})
r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r7=>0x0})
sendmsg$can_bcm(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r6, @ANYRES64=r7, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000})
personality(0x5000004)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
uname(&(0x7f0000000180)=""/224)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0, 0x43, 0x95}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'hmac(sha1)\x00'}}, &(0x7f00000000c0)="72a73a63940607c39f2f2919c6fd6a7b9b868eb8a30249c5141537bb0b9fa0d167cfce739b4cd771143ca2865b4a723a4f318c8eab33e981444209e31292c3e34a755d", &(0x7f0000000280)="611f51d3a58f454ba8fa48c1a9a892cb41d24863fe16aa217c0b94642e70975db93cb3b402f16b6b5a502694c3b46b699e4771339601cade6e6c5257d5874aff57af98998dae10088b0f0462b91736246e4f15ec26ac3b8b40fbebe3fc8e19de02009da6cadd0cdd0ed476288457e0d2e5329dc076e4fd6108bb3b634c3bc136d453cdad99631dab29b49c4857bd288c070d40e5d4")

5.355338893s ago: executing program 3 (id=1833):
r0 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xcbc4, 0x9})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000013000500002000000003000007000000", @ANYRES32=r5, @ANYBLOB="00040100521900000c001a800800048077c6d3ae"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x200}}, 0x24)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@delqdisc={0x210, 0x25, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0x5}, {0xfff1, 0xc}, {0xd, 0x6}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x7f, 0x4, 0x2, 0x10000, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xf7, 0x3, 0x9e67, 0x0, 0x6, 0x7, 0x7}}, {0x12, 0x2, [0x3, 0x7, 0x6, 0x0, 0x8, 0xc, 0x4]}}, {{0x1c, 0x1, {0xf7, 0x2, 0x7f, 0xa, 0x1, 0x10, 0x243, 0x6}}, {0x10, 0x2, [0x81, 0x40, 0x9, 0x5, 0x4, 0x8]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0xffffffff, 0x2, 0x5, 0x10001, 0x7}}, {0x12, 0x2, [0x4f, 0x2, 0x1000, 0xf, 0x8, 0xd45c, 0xd]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4b}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7fff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x58f}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb6}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x81, 0x9, 0x40, 0x1, 0x7, 0x101, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x1, 0x88, 0x7, 0x8001, 0x2, 0x9, 0xffff4cf3, 0x8}}, {0x14, 0x2, [0x1, 0x6, 0x978b, 0x146d, 0x9, 0x5, 0xffda, 0x101]}}, {{0x1c, 0x1, {0x6, 0x6, 0x183, 0x2, 0x0, 0x7f, 0x7f, 0x1}}, {0x6, 0x2, [0xab1]}}, {{0x1c, 0x1, {0x7, 0xb0, 0xda53, 0xfffff219, 0x1, 0x8, 0x3, 0x5}}, {0xe, 0x2, [0x19, 0x974b, 0xfff9, 0x74bd, 0xffff]}}, {{0x1c, 0x1, {0x2, 0x2, 0x9, 0x8, 0x1, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x1, 0x1, 0x1ff, 0x3, 0x0, 0x7f, 0x0, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r9, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)

5.268563308s ago: executing program 2 (id=1835):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)

5.195162278s ago: executing program 2 (id=1836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x4000, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4.983341465s ago: executing program 2 (id=1837):
gettid()
unshare(0x2060000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x46, 0x7000000, &(0x7f0000000100)="6027a98820210172b82b22ecbdc64da99999ab9cdde9825980d5afd8654f38976e340713fac123221463a4645d8412ab50d14af845e59a9b4c322bed0473fe3a0bc3e66c8361"})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000140)=0xfff)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x1de, 0x3, 0x0, "7e12ddc5a89047bf00"})
r7 = syz_open_pts(r6, 0x0)
dup2(r7, r6)
fsopen(&(0x7f0000000180)='nilfs2\x00', 0x1)
fcntl$setstatus(r7, 0x4, 0x2000)
syz_usb_control_io$hid(r3, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socket$netlink(0x10, 0x3, 0x0)

4.439488069s ago: executing program 0 (id=1838):
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/125, 0x7d}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x1000007f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000c80)=""/159, 0x9f}], 0x2, &(0x7f0000000640)=""/23, 0x17}, 0x10000}, {{&(0x7f0000000680)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000b00)=""/90, 0x5a}, {&(0x7f0000000b80)=""/61, 0x3d}], 0x6}, 0x8}], 0x3, 0x40012100, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r6=>0xffffffffffffffff})
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

4.409511055s ago: executing program 5 (id=1839):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_getres(0x3, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff8eff80ec003108004500007400000000000190780a010101ac1414aa0400907800000000460000000000000000110000ffffffffac1e00010186400000000000109e0cec69d2dae06de9173b3f60c8"], 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60})

3.971270046s ago: executing program 3 (id=1840):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
prctl$PR_GET_FPEXC(0xb, 0x0)
setsockopt$inet_int(r3, 0x0, 0xd, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
readv(r4, &(0x7f0000001440)=[{0x0}], 0x1)
connect$qrtr(r4, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010844}, 0x48000)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x51, &(0x7f0000000140)={@multicast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1b, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {0x3, 0xe22, 0x1b, 0x0, @opaque="7dc2c7c577ee7fd51eb4bf8764316418929676"}}}}}}, 0x0)
r7 = fsopen(&(0x7f0000000040)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

3.051335093s ago: executing program 6 (id=1842):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006001400080003", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

2.676614127s ago: executing program 6 (id=1843):
unshare(0x28040600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind(r0, 0x0, 0x0)

2.339345588s ago: executing program 6 (id=1844):
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0xbe4, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000280)="cb71804405000504659b", 0xa})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000340)={0xffffffff, 0x100, 0x0, 0x5, 0x590b, 0x2})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setresgid(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0)
mq_timedreceive(r3, &(0x7f00000004c0)=""/79, 0xfffffdfd, 0x0, &(0x7f0000000180)={0x77359400})
mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0)

2.301650902s ago: executing program 0 (id=1845):
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'lo\x00'})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@dev, @private}, &(0x7f0000000700)=0xc)
syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402010000000007240100000000090582090002"], 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x92, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0xfd, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '$:'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0xd6, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x5, 0xffbb}, @dmm={0x7, 0x24, 0x14, 0x3, 0xfffe}, @dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7fad, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0x14}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x8, 0x81}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xf3, 0x5, 0x6, 0x10, 0x4}, 0x113, &(0x7f0000000200)={0x5, 0xf, 0x113, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9fb090f83e735e83, 0x2, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xc, 0x5, 0x5, 0x45}, @generic={0xf9, 0x10, 0x2, "45f3dd6a4a6cfdac717e5dad155085b04c2ccb7d1e461a045b72e01f5188b590a622969d3961ba0f9bb4d2ca0fb28584e0c57af2caf9559a18009bd5bde7d5dd3e6fe8d0ed62ffac4c69f5f1c26e176ce158307aa153715cc48156dd9687aeeac38789d459797194e46d7c37807c72193c7d9bc39737df9a1f750c14ec29e673c57bab26008a8dc96d34bce62a17f026b4063e122a6429730972ff004f0934ec95257571cf4898d57dc5c4b3e608848b7b4fb505d864de3982cb933ce67f6d7cf27be72d44cc5e3460441565e237258ad3f888c9790448d6c94c9e952e0e04da5389170be9edb2729bcb2fa6b730d8fd91cf3caf7dc0"}]}, 0x6, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x402}}, {0x31, &(0x7f00000003c0)=@string={0x31, 0x3, "1d2df43614399e421b59bba44076e86120a5777ff53eb488869ae9eb12bccdd876adaa9ecd14656628cb6d951a6e42"}}, {0xfc, &(0x7f0000000400)=@string={0xfc, 0x3, "db000a2ba259a2b2b09fae4d1cc5eb2deb806cc9c190851babf83729925250ed73b894fe0ca14b80e4fe0e3566570c11bcbfb9d2bb9d7c569ce34218a4c9c7ff677c5eb13dd13739c9a03168efc6397d270a530dbbfb377fece8308dbca9bc2a23c1907e61093058efc522c7ef0725dae253569d467e28c6bffa7d768e5ea1f11ee6812ef5908322bad85cf51544b7d17e9054c493b5becc24a30f99271ee4b8fd34b35169359f44008a38c1949859361b74ecd9afc8259709e8df05dcb7eed81df822fef953c3630acfa8936b3fa599b18c0518148023e1d43b28f329aab1cd3c2215b30608658de8516fcd3fbfe46e1a54f488dcb8f046478e"}}, {0x98, &(0x7f0000000500)=@string={0x98, 0x3, "e60a13b0d154b685b413de1381e7d6c3000478725afab3affe7fc9351bd161b8c89836ed6975320ee3c8c048bcd9df7f1b6a91ffaf0367142ba03686c3c60d7aa2aff52074e156524f21ab95c79c848f42f23176b34b55d2d30f878806452e35214e156c52ba08652d70ae5648f99d01eca4c41401db268b8736854dd1b2b28eaeaf3cccc8312aeca4fd3f77f08fcadb3cb4b51e60c8"}}]})

2.104455605s ago: executing program 6 (id=1846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)

2.027155505s ago: executing program 3 (id=1847):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x5, 0xb}, {0xf, 0x2}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.950941826s ago: executing program 6 (id=1848):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="00147167cc5745bf66c109b429963bf976a107a35753021bbb55e6bf0f33ba28fdbe58f595feefc4636d1d3006f26963e6248b47749d7d7bcab7ada59b7427976048040c059429fec135235e56d46527cbb6f6f7ee0462dcb36a2f84bdde34ec3e2f7d796b608f1dffc2b03324f7ae3f1a7365c06e8f5b6d289c3219f44171993468aa0fd8deee47314ebf101893ca30667a38bf4ec85b3d2a0b17cf9c2c", 0x9e, 0xfffffffffffffffd)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
close_range(r4, 0xffffffffffffffff, 0x40000000)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r5, 0x10200300)
add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000001880)="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", 0xbd0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000005c0)=""/107, 0x6b, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x20044014)
r6 = socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffc}, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)

1.882086773s ago: executing program 5 (id=1849):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]})
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000240)=0x10001)
write(r1, &(0x7f0000000280)="4591c28e8b83", 0x6)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x4}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x2}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffb}]}}]}, 0x58}}, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="b2989488f78624bea13cc037d0aac407f9b26fac254c23795307d8c673995af9daafe73beef48b2efdad32a03a182833554960fa903e83e0d2f466d01991290dcee2f04164d02d7e4808f72a6230512da99801", 0x53}], 0x1, 0xffffffffffffffff}, {&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x6, @mcast1, 0x800}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)="2c38de1e52a383972e17ca71b54eee1b06cb820e5375ec4a408f87518d3a8c2efc04e228288dd49c109d66dc3bf27604c5455ca048bf03fc4103f1724ba83c9b", 0x40}, {&(0x7f0000000400)="15de9a13809ac99f1b8b46321d88ad0b422bbacef306267249250681147cdf7ed45ac2dce9274d53a78df9e6da73edd45e1ba5ebe80a08d0e4245c725f6179bcfe7e1dae9b611351feb81bcfb29d219750a1fb1a8bb47cc3ee2a5f157ec86a86cbc4f4cc2dae92045e03eb554b0f322a8a7b72cf7d8a6c89b4219dd95531429713b2320f056c4ae048c333ed749a405f0fd576488f5d8ceab0f7dadab7a5592cb0d51eb328e84de3c80a40208882276b024d6ceb775db9eebcaa28ee74da39400a75bc83b3f071a25b9919b3e48583b7a1ad7d814ef0668e3c37f5aa553fe60c8c707e0f033fe47c6d3b64", 0xeb}, {&(0x7f0000000500)="a5d087ee485ef91ff2ed53e8a0d65d39720e3e5a7cfa", 0x16}], 0x3, 0x0, 0x0, 0x40}], 0x2, 0x40440d0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0x3, @private2}}, 0x0, 0x280}, 0x90)

1.779417998s ago: executing program 3 (id=1850):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x2, "ff5f"}, 0xa)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8)
syz_open_dev$midi(&(0x7f0000000200), 0x2, 0x40081)
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x4, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0xf, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x5, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x9, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x8000000d, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffe, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x40000000, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x1, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x1000006, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x1006, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf41, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.593388062s ago: executing program 5 (id=1851):
unshare(0x24040400)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10)
close_range(r0, r0, 0x0)
r2 = socket$inet(0x2, 0xa, 0x5)
setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0)

1.472408872s ago: executing program 5 (id=1852):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[], 0x64, 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x77}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/188, 0x41000}, 0x70)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')

1.377266396s ago: executing program 0 (id=1853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006001400080003", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

1.212022003s ago: executing program 0 (id=1854):
unshare(0x28040600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind(r0, 0x0, 0x0)

911.59833ms ago: executing program 0 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

895.447219ms ago: executing program 2 (id=1856):
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0xbe4, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000280)="cb71804405000504659b", 0xa})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000340)={0xffffffff, 0x100, 0x0, 0x5, 0x590b, 0x2})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setresgid(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0)
mq_timedreceive(r3, &(0x7f00000004c0)=""/79, 0xfffffdfd, 0x0, &(0x7f0000000180)={0x77359400})
mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0)

834.811938ms ago: executing program 0 (id=1857):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x108)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x40000000000000, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x5a00, 0xbc03, 0x6, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x7006, 0x0, 0x0, 0x0}})

519.47498ms ago: executing program 2 (id=1858):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0x6000}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)

58.797019ms ago: executing program 2 (id=1859):
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x1, <r0=>0xffffffffffffffff, 'id0\x00'})
r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0))
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', <r3=>0x0, 0x20, 0x10, 0x87e, 0x6, {{0x6, 0x4, 0x0, 0x29, 0x18, 0x64, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4}]}}}}})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_emit_ethernet(0xd09, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_SOPASS={0x3a, 0x3, "50fd3edb063bc53e1ebefe65a36963021131bd63f6e05cdc56f9b8d2bd5a88ad5f2fed6fb699800e91a32a036f7ee8817a6558b769e2"}, @ETHTOOL_A_WOL_SOPASS={0x5b, 0x3, "ac0019dd95ad9abce1cb6fc176a6a49a0c607b7ababfd6e801ae36c4e8e93c07f1ceebc0c84b94fa1398013c6b09761c20eadfa22132802fe9bec2b8fce83b35dc8b503c482ff6e838e022c9a9e0ae987b205637951cf6"}]}, 0xf4}}, 0x4001)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x93, 0x89, 0x3f, 0x10, 0x46d, 0x900, 0xfa5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0xf0, 0xd5, 0x9a}}]}}]}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
io_setup(0xe, &(0x7f0000000140)=<r6=>0x0)
r7 = eventfd2(0x0, 0x0)
io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}])
ppoll(&(0x7f0000000040)=[{r7, 0x2101}, {r5, 0x6790}], 0x2, 0x0, 0x0, 0x0)
shutdown(r5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)

0s ago: executing program 6 (id=1860):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000866000/0x1000)=nil, 0x1000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_crash_size', 0x16ba82, 0x10)
write$cgroup_int(r3, &(0x7f0000000180)=0x5, 0x12)
socket$kcm(0x10, 0x2, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x8006, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FICLONE(r0, 0x40049409, r6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa1c6, 0x0)

kernel console output (not intermixed with test programs):

 PREEMPT(full) 
[  430.166000][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  430.166013][T12466] Call Trace:
[  430.166019][T12466]  <TASK>
[  430.166028][T12466]  dump_stack_lvl+0x189/0x250
[  430.166055][T12466]  ? __pfx____ratelimit+0x10/0x10
[  430.166075][T12466]  ? __pfx_dump_stack_lvl+0x10/0x10
[  430.166096][T12466]  ? __pfx__printk+0x10/0x10
[  430.166128][T12466]  ? __pfx___might_resched+0x10/0x10
[  430.166146][T12466]  ? fs_reclaim_acquire+0x7d/0x100
[  430.166168][T12466]  should_fail_ex+0x414/0x560
[  430.166201][T12466]  should_failslab+0xa8/0x100
[  430.166229][T12466]  __kmalloc_noprof+0xcb/0x4f0
[  430.166254][T12466]  ? snd_pcm_hw_refine+0x967/0x1640
[  430.166280][T12466]  snd_pcm_hw_refine+0x967/0x1640
[  430.166308][T12466]  ? do_syscall_64+0xfa/0x3b0
[  430.166338][T12466]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  430.166395][T12466]  ? __kasan_kmalloc+0x93/0xb0
[  430.166422][T12466]  ? _snd_pcm_hw_param_min+0x2f5/0x540
[  430.166454][T12466]  snd_pcm_hw_param_near+0xfd/0x500
[  430.166485][T12466]  ? __asan_memset+0x22/0x50
[  430.166513][T12466]  snd_pcm_oss_change_params_locked+0x2135/0x3e40
[  430.166582][T12466]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  430.166610][T12466]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  430.166638][T12466]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  430.166668][T12466]  ? __pfx_snd_pcm_post_prepare+0x10/0x10
[  430.166686][T12466]  ? snd_pcm_action_nonatomic+0x289/0x2e0
[  430.166710][T12466]  snd_pcm_oss_make_ready+0x11b/0x340
[  430.166745][T12466]  snd_pcm_oss_set_trigger+0x95/0x740
[  430.166775][T12466]  ? __might_fault+0xb0/0x130
[  430.166806][T12466]  snd_pcm_oss_ioctl+0xbb3/0xdd0
[  430.166835][T12466]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  430.166862][T12466]  __se_sys_ioctl+0xfc/0x170
[  430.166888][T12466]  do_syscall_64+0xfa/0x3b0
[  430.166907][T12466]  ? lockdep_hardirqs_on+0x9c/0x150
[  430.166925][T12466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.166944][T12466]  ? clear_bhb_loop+0x60/0xb0
[  430.166966][T12466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.166985][T12466] RIP: 0033:0x7f8f5a38eba9
[  430.167002][T12466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  430.167019][T12466] RSP: 002b:00007f8f5b2a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  430.167039][T12466] RAX: ffffffffffffffda RBX: 00007f8f5a5d5fa0 RCX: 00007f8f5a38eba9
[  430.167053][T12466] RDX: 0000200000000040 RSI: 0000000040045010 RDI: 0000000000000003
[  430.167065][T12466] RBP: 00007f8f5b2a9090 R08: 0000000000000000 R09: 0000000000000000
[  430.167076][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  430.167087][T12466] R13: 00007f8f5a5d6038 R14: 00007f8f5a5d5fa0 R15: 00007f8f5a6ffa28
[  430.167117][T12466]  </TASK>
[  430.444221][    C1] vkms_vblank_simulate: vblank timer overrun
[  431.675847][T12479] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  432.848537][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1289'.
[  432.865272][   T30] audit: type=1326 audit(1757802095.941:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  432.887607][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.005541][   T30] audit: type=1326 audit(1757802095.951:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.032459][   T30] audit: type=1326 audit(1757802095.951:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.054708][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.067480][   T30] audit: type=1326 audit(1757802095.951:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.299351][   T30] audit: type=1326 audit(1757802095.951:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.321647][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.341226][T12516] tipc: Started in network mode
[  433.346225][T12516] tipc: Node identity 00000000000000000000ffff640101, cluster identity 4711
[  433.361185][T12516] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  433.432917][   T30] audit: type=1326 audit(1757802095.951:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.528228][   T30] audit: type=1326 audit(1757802095.951:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.551374][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.561741][   T30] audit: type=1326 audit(1757802096.101:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.584126][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.599093][   T30] audit: type=1326 audit(1757802096.101:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  433.621422][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.650174][   T30] audit: type=1326 audit(1757802096.161:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8a73b8eba9 code=0x7ffc0000
[  434.437166][ T5871] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  434.726609][T12553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.747535][ T5871] usb 4-1: config 0 has no interfaces?
[  434.775768][ T5871] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  434.824841][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.894219][ T5871] usb 4-1: Product: syz
[  434.918032][ T5871] usb 4-1: Manufacturer: syz
[  434.942684][ T5871] usb 4-1: SerialNumber: syz
[  435.009883][ T5871] usb 4-1: config 0 descriptor??
[  435.702352][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.704450][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.757732][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'.
[  436.126502][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.137010][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.352369][T12582] netlink: 'syz.6.1309': attribute type 32 has an invalid length.
[  436.417844][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1309'.
[  436.437332][T12582] (unnamed net_device) (uninitialized): Setting coupled_control to on (1)
[  438.074545][ T5947] usb 4-1: USB disconnect, device number 69
[  438.629433][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  438.661814][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  438.673605][ T5947] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  438.736330][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  438.837272][ T5947] usb 4-1: Using ep0 maxpacket: 8
[  438.848723][ T5947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  438.860856][ T5947] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  438.864139][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  438.895160][ T5947] usb 4-1: config 1 has no interface number 1
[  438.925967][ T5947] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  438.969671][ T5947] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  438.998867][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  439.010493][ T5947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  439.025056][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  439.035503][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  439.049547][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  439.060268][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  439.072145][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.080827][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  439.107186][ T5947] usb 4-1: Product: syz
[  439.123681][ T5947] usb 4-1: Manufacturer: syz
[  439.134724][ T5947] usb 4-1: SerialNumber: syz
[  439.379427][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.393193][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.447805][ T5947] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  439.460809][ T5947] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  439.482074][ T5947] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  439.573200][ T5947] usb 4-1: USB disconnect, device number 70
[  439.686104][T11683] udevd[11683]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  439.774578][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.803061][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.020212][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  440.026589][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  440.102012][T12640] FAULT_INJECTION: forcing a failure.
[  440.102012][T12640] name failslab, interval 1, probability 0, space 0, times 0
[  440.116589][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz.6.1325 Not tainted syzkaller #0 PREEMPT(full) 
[  440.116613][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  440.116624][T12640] Call Trace:
[  440.116630][T12640]  <TASK>
[  440.116636][T12640]  dump_stack_lvl+0x189/0x250
[  440.116660][T12640]  ? __pfx____ratelimit+0x10/0x10
[  440.116679][T12640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.116700][T12640]  ? __pfx__printk+0x10/0x10
[  440.116733][T12640]  ? __pfx___might_resched+0x10/0x10
[  440.116750][T12640]  ? fs_reclaim_acquire+0x7d/0x100
[  440.116774][T12640]  should_fail_ex+0x414/0x560
[  440.116806][T12640]  should_failslab+0xa8/0x100
[  440.116834][T12640]  __kmalloc_noprof+0xcb/0x4f0
[  440.116857][T12640]  ? kfree+0x4d/0x440
[  440.116877][T12640]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  440.116901][T12640]  tomoyo_realpath_from_path+0xe3/0x5d0
[  440.116922][T12640]  ? tomoyo_domain+0xd9/0x130
[  440.116945][T12640]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  440.116970][T12640]  tomoyo_path_number_perm+0x1e8/0x5a0
[  440.116998][T12640]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  440.117039][T12640]  ? __lock_acquire+0xab9/0xd20
[  440.117088][T12640]  ? __fget_files+0x2a/0x420
[  440.117108][T12640]  ? __fget_files+0x2a/0x420
[  440.117122][T12640]  ? __fget_files+0x3a0/0x420
[  440.117136][T12640]  ? __fget_files+0x2a/0x420
[  440.117156][T12640]  security_file_ioctl+0xcb/0x2d0
[  440.117183][T12640]  __se_sys_ioctl+0x47/0x170
[  440.117209][T12640]  do_syscall_64+0xfa/0x3b0
[  440.117229][T12640]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.117247][T12640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.117267][T12640]  ? clear_bhb_loop+0x60/0xb0
[  440.117290][T12640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.117308][T12640] RIP: 0033:0x7f8f5a38eba9
[  440.117325][T12640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.117343][T12640] RSP: 002b:00007f8f5b2a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  440.117363][T12640] RAX: ffffffffffffffda RBX: 00007f8f5a5d5fa0 RCX: 00007f8f5a38eba9
[  440.117378][T12640] RDX: 0000200000000080 RSI: 00000000c008640a RDI: 0000000000000003
[  440.117391][T12640] RBP: 00007f8f5b2a9090 R08: 0000000000000000 R09: 0000000000000000
[  440.117409][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.117421][T12640] R13: 00007f8f5a5d6038 R14: 00007f8f5a5d5fa0 R15: 00007f8f5a6ffa28
[  440.117452][T12640]  </TASK>
[  440.365729][T12640] ERROR: Out of memory at tomoyo_realpath_from_path.
[  441.395574][T12682] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  443.315393][T12706] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  443.352564][ T5947] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  443.538086][ T5947] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  443.587225][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.606438][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.607657][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.645728][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.659920][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.707284][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.731001][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.753874][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.765979][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.794455][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.809863][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.827251][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.858869][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.858916][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.886502][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.898936][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.926984][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.928016][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.929026][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.929072][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.929100][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.931876][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.931924][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.931951][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.932449][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.933175][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.933223][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.933250][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.934427][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.934476][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.934504][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.935820][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.935869][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.935897][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.938089][ T5947] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  443.938118][ T5947] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  443.938142][ T5947] usb 7-1: Product: syz
[  443.938158][ T5947] usb 7-1: Manufacturer: syz
[  443.938174][ T5947] usb 7-1: SerialNumber: syz
[  443.941029][ T5947] usb 7-1: config 0 descriptor??
[  443.951207][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.953039][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.976054][ T5947] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  444.200360][ T5947] usb 7-1: USB disconnect, device number 2
[  444.202831][ T5947] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  444.854210][ T5861] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  445.727043][T12778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  446.330450][T12810] __nla_validate_parse: 80 callbacks suppressed
[  446.330465][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[  446.817977][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.834217][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.924532][T12826] netlink: 'syz.2.1365': attribute type 1 has an invalid length.
[  447.104552][T12826] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.211801][T12828] bond2: (slave geneve2): making interface the new active one
[  447.226998][T12828] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  447.788021][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  447.788035][   T30] audit: type=1326 audit(1757802110.881:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.0.1372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffe0000
[  448.125706][T12846] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  448.400335][T12851] vlan2: entered promiscuous mode
[  448.417028][T12851] bridge0: entered promiscuous mode
[  448.428294][T12851] vlan2: entered allmulticast mode
[  448.440607][T12851] bridge0: entered allmulticast mode
[  449.517494][T12855] netlink: 'syz.6.1375': attribute type 21 has an invalid length.
[  449.529877][T12855] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1375'.
[  449.816474][T12863] snd_dummy snd_dummy.0: control 0:31686:0:syz0:0 is already present
[  449.837386][ T5981] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  449.977735][ T5981] usb 7-1: device descriptor read/64, error -71
[  450.256810][ T5981] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  450.335375][  T121] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  450.348283][  T980] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  450.369797][ T5943] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  450.377704][  T121] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -2
[  450.417243][ T5943] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -2
[  450.437115][  T980] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  450.448628][ T5981] usb 7-1: device descriptor read/64, error -71
[  450.525020][  T980] usb 3-1: USB disconnect, device number 18
[  450.557449][ T5981] usb usb7-port1: attempt power cycle
[  450.587394][  T121] usb 6-1: USB disconnect, device number 8
[  450.642086][ T5943] usb 5-1: USB disconnect, device number 39
[  450.668362][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1377'.
[  450.687383][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1377'.
[  450.710011][T12867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1377'.
[  450.973394][ T5981] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  451.117396][ T5981] usb 7-1: device descriptor read/8, error -71
[  451.283262][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'.
[  451.397324][ T5981] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  451.452585][ T5981] usb 7-1: device descriptor read/8, error -71
[  451.591257][T12876] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1381'.
[  451.659032][ T5981] usb usb7-port1: unable to enumerate USB device
[  452.784412][T12894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1386'.
[  453.774578][T12913] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  454.310036][T12767] Set syz1 is full, maxelem 65536 reached
[  455.188977][T12935] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  456.130256][T12953] binder: 12952:12953 ioctl 4018620d 0 returned -22
[  456.252070][T12955] netlink: 'syz.3.1403': attribute type 21 has an invalid length.
[  456.281850][T12955] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1403'.
[  456.317579][T12961] netlink: 'syz.6.1407': attribute type 2 has an invalid length.
[  456.587850][  T121] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  456.807283][  T121] usb 4-1: device descriptor read/64, error -71
[  457.138233][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.146673][  T121] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  457.156730][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.176775][  T980] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  457.393256][  T121] usb 4-1: device descriptor read/64, error -71
[  457.417870][  T980] usb 7-1: config 0 has no interfaces?
[  457.462455][T12984] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  457.470979][  T980] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  457.483287][  T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.523365][  T121] usb usb4-port1: attempt power cycle
[  457.539076][  T980] usb 7-1: Product: syz
[  457.554079][  T980] usb 7-1: Manufacturer: syz
[  457.573971][  T980] usb 7-1: SerialNumber: syz
[  457.599368][  T980] usb 7-1: config 0 descriptor??
[  457.917302][  T121] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  457.967243][  T121] usb 4-1: device descriptor read/8, error -71
[  458.207842][  T980] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  458.396726][  T980] usb 6-1: config 0 has no interfaces?
[  458.402922][  T121] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  458.413585][  T980] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  458.424606][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.434418][  T980] usb 6-1: Product: syz
[  458.439548][  T980] usb 6-1: Manufacturer: syz
[  458.444202][  T980] usb 6-1: SerialNumber: syz
[  458.647426][  T980] usb 6-1: config 0 descriptor??
[  458.827361][  T121] usb 4-1: device descriptor read/8, error -71
[  458.861784][T12990] program syz.5.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  458.881436][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.891611][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.141774][  T121] usb usb4-port1: unable to enumerate USB device
[  459.647472][  T121] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  459.690069][  T980] usb 7-1: USB disconnect, device number 7
[  459.809143][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1418'.
[  459.847330][  T121] usb 4-1: Using ep0 maxpacket: 32
[  459.859453][  T121] usb 4-1: config 0 has an invalid interface number: 235 but max is 0
[  459.868914][  T121] usb 4-1: config 0 has no interface number 0
[  459.933889][  T121] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  459.981186][  T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.025794][  T121] usb 4-1: Product: syz
[  460.033730][  T121] usb 4-1: Manufacturer: syz
[  460.042100][  T121] usb 4-1: SerialNumber: syz
[  460.068819][  T121] usb 4-1: config 0 descriptor??
[  460.293370][  T121] kaweth 4-1:0.235: Firmware present in device.
[  460.337011][T13008] fuse: Unknown parameter '0x00000000000000070177777777777777777777700000000000000000000'
[  460.483804][  T121] kaweth 4-1:0.235: Statistics collection: 0
[  460.544779][  T121] kaweth 4-1:0.235: Multicast filter limit: 0
[  460.573532][  T121] kaweth 4-1:0.235: MTU: 0
[  460.594693][  T121] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00
[  460.667172][ T5871] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  460.691446][T13013] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  460.879050][ T5981] usb 6-1: USB disconnect, device number 9
[  460.908881][ T5871] usb 7-1: Using ep0 maxpacket: 8
[  460.958000][ T5871] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  461.013338][ T5871] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  461.087615][ T5871] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  461.120628][ T5871] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  461.158819][ T5871] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  461.173796][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.309635][ T5981] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  461.454142][ T5871] usb 7-1: GET_CAPABILITIES returned 0
[  461.460505][ T5871] usbtmc 7-1:16.0: can't read capabilities
[  461.611273][ T5981] usb 6-1: config 6 has an invalid interface number: 245 but max is 0
[  461.622542][ T5981] usb 6-1: config 6 has an invalid interface number: 83 but max is 0
[  461.670791][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.680820][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.690395][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.699466][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.710056][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.719125][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.728171][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.741271][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.750349][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.759417][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.769474][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.778541][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.787586][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.796625][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.805665][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.814703][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.850004][ T5981] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  461.867529][ T5981] usb 6-1: config 6 has an invalid descriptor of length 210, skipping remainder of the config
[  461.917303][ T5981] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  462.001215][ T5981] usb 6-1: config 6 has no interface number 0
[  462.091395][ T5981] usb 6-1: config 6 has no interface number 1
[  462.227827][ T5981] usb 6-1: config 6 interface 245 altsetting 2 endpoint 0xC has invalid maxpacket 64, setting to 8
[  462.244262][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'.
[  462.270265][ T5981] usb 6-1: config 6 interface 245 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 8
[  462.300982][  T121] kaweth 4-1:0.235: Error setting receive filter
[  462.317291][  T121] kaweth 4-1:0.235: probe with driver kaweth failed with error -5
[  462.365679][  T121] usb 4-1: USB disconnect, device number 75
[  462.425520][ T5981] usb 6-1: config 6 interface 245 altsetting 2 endpoint 0x1 has invalid maxpacket 32, setting to 8
[  462.498574][ T5981] usb 6-1: config 6 interface 245 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  462.563810][ T5981] usb 6-1: config 6 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  462.583571][ T5981] usb 6-1: config 6 interface 245 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  462.595624][ T5981] usb 6-1: config 6 interface 245 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[  462.612152][ T5981] usb 6-1: config 6 interface 83 altsetting 41 endpoint 0xB has invalid maxpacket 1616, setting to 8
[  462.624777][ T5981] usb 6-1: config 6 interface 83 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  462.640421][ T5981] usb 6-1: config 6 interface 245 has no altsetting 0
[  462.647624][ T5981] usb 6-1: config 6 interface 83 has no altsetting 0
[  463.110612][ T5936] usb 7-1: USB disconnect, device number 8
[  463.210195][T13031] FAULT_INJECTION: forcing a failure.
[  463.210195][T13031] name failslab, interval 1, probability 0, space 0, times 0
[  463.253420][T13031] CPU: 1 UID: 0 PID: 13031 Comm: syz.6.1426 Not tainted syzkaller #0 PREEMPT(full) 
[  463.253454][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  463.253467][T13031] Call Trace:
[  463.253474][T13031]  <TASK>
[  463.253482][T13031]  dump_stack_lvl+0x189/0x250
[  463.253510][T13031]  ? __pfx____ratelimit+0x10/0x10
[  463.253530][T13031]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.253553][T13031]  ? __pfx__printk+0x10/0x10
[  463.253582][T13031]  ? __pfx___might_resched+0x10/0x10
[  463.253601][T13031]  ? fs_reclaim_acquire+0x7d/0x100
[  463.253625][T13031]  should_fail_ex+0x414/0x560
[  463.253658][T13031]  should_failslab+0xa8/0x100
[  463.253688][T13031]  __kmalloc_noprof+0xcb/0x4f0
[  463.253712][T13031]  ? sock_kmalloc+0xd6/0x160
[  463.253741][T13031]  sock_kmalloc+0xd6/0x160
[  463.253769][T13031]  hash_sendmsg+0x666/0x11d0
[  463.253821][T13031]  ? __pfx_hash_sendmsg+0x10/0x10
[  463.253848][T13031]  __sock_sendmsg+0x21c/0x270
[  463.253880][T13031]  ____sys_sendmsg+0x52d/0x830
[  463.253909][T13031]  ? __pfx_____sys_sendmsg+0x10/0x10
[  463.253943][T13031]  ? import_iovec+0x74/0xa0
[  463.253972][T13031]  ___sys_sendmsg+0x21f/0x2a0
[  463.253998][T13031]  ? __pfx____sys_sendmsg+0x10/0x10
[  463.254061][T13031]  ? __fget_files+0x2a/0x420
[  463.254077][T13031]  ? __fget_files+0x3a0/0x420
[  463.254104][T13031]  __sys_sendmmsg+0x227/0x430
[  463.254134][T13031]  ? __pfx___sys_sendmmsg+0x10/0x10
[  463.254157][T13031]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  463.254206][T13031]  ? ksys_write+0x22a/0x250
[  463.254234][T13031]  ? __pfx_ksys_write+0x10/0x10
[  463.254257][T13031]  ? rcu_is_watching+0x15/0xb0
[  463.254284][T13031]  __x64_sys_sendmmsg+0xa0/0xc0
[  463.254311][T13031]  do_syscall_64+0xfa/0x3b0
[  463.254331][T13031]  ? lockdep_hardirqs_on+0x9c/0x150
[  463.254350][T13031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.254369][T13031]  ? clear_bhb_loop+0x60/0xb0
[  463.254400][T13031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.254419][T13031] RIP: 0033:0x7f8f5a38eba9
[  463.254436][T13031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.254453][T13031] RSP: 002b:00007f8f5b2a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  463.254474][T13031] RAX: ffffffffffffffda RBX: 00007f8f5a5d5fa0 RCX: 00007f8f5a38eba9
[  463.254489][T13031] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006
[  463.254502][T13031] RBP: 00007f8f5b2a9090 R08: 0000000000000000 R09: 0000000000000000
[  463.254514][T13031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  463.254526][T13031] R13: 00007f8f5a5d6038 R14: 00007f8f5a5d5fa0 R15: 00007f8f5a6ffa28
[  463.254557][T13031]  </TASK>
[  463.518635][    C1] vkms_vblank_simulate: vblank timer overrun
[  463.862324][T13041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1429'.
[  463.913572][T13043] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  464.166524][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.177004][ T5981] usb 6-1: New USB device found, idVendor=2027, idProduct=a001, bcdDevice=96.0e
[  464.189178][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.227349][ T5981] usb 6-1: can't set config #6, error -71
[  464.229350][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.300087][ T5981] usb 6-1: USB disconnect, device number 10
[  464.474889][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1434'.
[  464.759355][T13063] cgroup: fork rejected by pids controller in /syz2
[  465.443759][   T30] audit: type=1326 audit(1757802128.541:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  465.459649][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.475695][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.495311][   T30] audit: type=1326 audit(1757802128.551:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  465.595041][   T30] audit: type=1326 audit(1757802128.551:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  465.632471][   T30] audit: type=1326 audit(1757802128.551:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  465.654835][    C1] vkms_vblank_simulate: vblank timer overrun
[  465.740487][   T30] audit: type=1326 audit(1757802128.551:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  465.932268][   T30] audit: type=1326 audit(1757802128.551:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  465.954618][    C1] vkms_vblank_simulate: vblank timer overrun
[  466.295504][   T30] audit: type=1326 audit(1757802128.551:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  466.321228][   T30] audit: type=1326 audit(1757802128.551:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  466.387972][   T30] audit: type=1326 audit(1757802128.551:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  466.572745][   T30] audit: type=1326 audit(1757802128.551:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x7ffc0000
[  466.695666][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'.
[  467.007205][ T5981] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  467.222373][ T5981] usb 3-1: Using ep0 maxpacket: 8
[  467.239748][ T5981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  467.252560][ T5981] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  467.262996][ T5981] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  467.317180][ T5936] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  467.365308][ T5981] usb 3-1: Product: syz
[  467.393316][ T5981] usb 3-1: Manufacturer: syz
[  467.434386][ T5981] usb 3-1: SerialNumber: syz
[  467.488690][ T5936] usb 7-1: Using ep0 maxpacket: 16
[  467.503463][ T5936] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  467.524052][ T5936] usb 7-1: config 0 has no interface number 0
[  467.546374][ T5936] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  467.583886][ T5936] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  467.642304][ T5936] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  467.654601][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.689135][ T5936] usb 7-1: Product: syz
[  467.695892][ T5936] usb 7-1: Manufacturer: syz
[  467.700872][ T5936] usb 7-1: SerialNumber: syz
[  467.708600][ T5936] usb 7-1: config 0 descriptor??
[  467.719430][T13390] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  467.742428][T13390] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  467.806783][ T5981] usb 3-1: palm_os_3_probe - error -110 getting connection information
[  467.816938][    C1] sd 0:0:1:0: [sda] tag#7337 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  467.827361][    C1] sd 0:0:1:0: [sda] tag#7337 CDB: Read(6) 08 00 00 00 00 00 00 00 98 18 00 00
[  467.885660][ T5981] visor 3-1:1.0: probe with driver visor failed with error -110
[  467.986181][T13387] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  468.004995][ T5981] usb 3-1: USB disconnect, device number 19
[  468.081777][T13387] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  468.271857][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'.
[  468.849987][ T5936] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  468.862676][ T5936] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  468.928893][ T5936] asix 7-1:0.251: probe with driver asix failed with error -71
[  468.977263][ T5943] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[  468.998787][ T5936] usb 7-1: USB disconnect, device number 9
[  469.024610][T13414] FAULT_INJECTION: forcing a failure.
[  469.024610][T13414] name failslab, interval 1, probability 0, space 0, times 0
[  469.041395][T13414] CPU: 0 UID: 0 PID: 13414 Comm: syz.0.1452 Not tainted syzkaller #0 PREEMPT(full) 
[  469.041412][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  469.041418][T13414] Call Trace:
[  469.041423][T13414]  <TASK>
[  469.041428][T13414]  dump_stack_lvl+0x189/0x250
[  469.041448][T13414]  ? __pfx____ratelimit+0x10/0x10
[  469.041459][T13414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.041471][T13414]  ? __pfx__printk+0x10/0x10
[  469.041487][T13414]  ? __pfx___might_resched+0x10/0x10
[  469.041497][T13414]  ? fs_reclaim_acquire+0x7d/0x100
[  469.041509][T13414]  should_fail_ex+0x414/0x560
[  469.041527][T13414]  should_failslab+0xa8/0x100
[  469.041544][T13414]  __kmalloc_noprof+0xcb/0x4f0
[  469.041557][T13414]  ? tomoyo_encode+0x28b/0x550
[  469.041571][T13414]  tomoyo_encode+0x28b/0x550
[  469.041585][T13414]  tomoyo_realpath_from_path+0x58d/0x5d0
[  469.041601][T13414]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  469.041616][T13414]  tomoyo_path_number_perm+0x1e8/0x5a0
[  469.041632][T13414]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  469.041655][T13414]  ? __lock_acquire+0xab9/0xd20
[  469.041681][T13414]  ? __fget_files+0x2a/0x420
[  469.041691][T13414]  ? __fget_files+0x2a/0x420
[  469.041699][T13414]  ? __fget_files+0x3a0/0x420
[  469.041707][T13414]  ? __fget_files+0x2a/0x420
[  469.041718][T13414]  security_file_ioctl+0xcb/0x2d0
[  469.041733][T13414]  __se_sys_ioctl+0x47/0x170
[  469.041747][T13414]  do_syscall_64+0xfa/0x3b0
[  469.041758][T13414]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.041768][T13414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.041778][T13414]  ? clear_bhb_loop+0x60/0xb0
[  469.041791][T13414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.041800][T13414] RIP: 0033:0x7fa041d8eba9
[  469.041810][T13414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.041819][T13414] RSP: 002b:00007fa042c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  469.041830][T13414] RAX: ffffffffffffffda RBX: 00007fa041fd5fa0 RCX: 00007fa041d8eba9
[  469.041838][T13414] RDX: 0000200000000080 RSI: 00000000c008640a RDI: 0000000000000003
[  469.041845][T13414] RBP: 00007fa042c1f090 R08: 0000000000000000 R09: 0000000000000000
[  469.041851][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.041862][T13414] R13: 00007fa041fd6038 R14: 00007fa041fd5fa0 R15: 00007fa0420ffa28
[  469.041878][T13414]  </TASK>
[  469.041962][T13414] ERROR: Out of memory at tomoyo_realpath_from_path.
[  469.429391][ T5943] usb 4-1: unable to get BOS descriptor or descriptor too short
[  469.441260][ T5943] usb 4-1: not running at top speed; connect to a high speed hub
[  469.498168][ T5943] usb 4-1: config 188 has an invalid interface number: 3 but max is 1
[  469.560805][ T5943] usb 4-1: config 188 has an invalid interface number: 9 but max is 1
[  469.571556][T13416] bond0: mtu less than device minimum
[  469.581805][ T5943] usb 4-1: config 188 has no interface number 0
[  469.588375][ T5943] usb 4-1: config 188 has no interface number 1
[  469.594663][ T5943] usb 4-1: config 188 interface 3 has no altsetting 0
[  469.601874][ T5943] usb 4-1: config 188 interface 9 has no altsetting 0
[  469.610758][ T5943] usb 4-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0
[  469.635112][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.648327][ T5943] usb 4-1: Product: syz
[  469.660512][ T5943] usb 4-1: Manufacturer: syz
[  469.665197][ T5943] usb 4-1: SerialNumber: syz
[  469.922967][ T5943] usb 4-1: unknown number of interfaces: 2
[  469.947750][ T5943] usb 4-1: USB disconnect, device number 76
[  470.077341][ T5981] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  470.247250][ T5981] usb 6-1: Using ep0 maxpacket: 16
[  470.261425][ T5981] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  470.272637][ T5981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  470.285362][ T5981] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  470.301520][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.315316][ T5981] usb 6-1: Product: syz
[  470.319879][ T5981] usb 6-1: Manufacturer: syz
[  470.324905][ T5981] usb 6-1: SerialNumber: syz
[  470.747584][ T5981] usb 6-1: 0:2 : does not exist
[  471.167499][ T5981] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  471.269651][ T5981] usb 6-1: USB disconnect, device number 11
[  471.375166][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  471.447377][    T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  471.485461][T13461] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  471.485461][T13461] The task syz.3.1469 (13461) triggered the difference, watch for misbehavior.
[  471.597233][    T9] usb 3-1: device descriptor read/64, error -71
[  471.837423][    T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  471.979565][    T9] usb 3-1: device descriptor read/64, error -71
[  472.102717][ T5943] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  472.110919][    T9] usb usb3-port1: attempt power cycle
[  472.377390][ T5943] usb 7-1: Using ep0 maxpacket: 16
[  472.386277][ T5943] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  472.388768][T13472] openvswitch: netlink: IPv4 tun info is not correct
[  472.404355][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.441962][ T5943] usb 7-1: config 0 descriptor??
[  472.466953][ T5943] gspca_main: sonixj-2.14.0 probing 0471:0327
[  472.552038][T13477] program syz.0.1474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.647783][T13478] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  472.648149][    T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  472.685102][T13478] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  472.708007][    T9] usb 3-1: device descriptor read/8, error -71
[  472.724212][T13478] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  472.755457][T13482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.764657][T13482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.970206][    T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  473.004547][    T9] usb 3-1: device descriptor read/8, error -71
[  473.053336][T13470] tipc: Enabled bearer <eth:gre0>, priority 11
[  473.117371][    T9] usb usb3-port1: unable to enumerate USB device
[  473.237407][ T5990] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  473.398455][ T5943] gspca_sonixj: reg_r err -71
[  473.403336][ T5943] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  473.424784][ T5990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  473.442157][ T5943] usb 7-1: USB disconnect, device number 10
[  473.449828][ T5990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  473.473875][ T5990] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  473.484727][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  473.505121][ T5990] usb 4-1: SerialNumber: syz
[  473.651388][T13498] bond1: entered promiscuous mode
[  473.657464][T13498] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.950252][ T5990] usb 4-1: 0:2 : does not exist
[  474.001059][ T5990] usb 4-1: USB disconnect, device number 77
[  474.052433][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  474.167383][    T9] tipc: Node number set to 1677852415
[  474.287173][ T5981] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  474.637850][ T5981] usb 7-1: Using ep0 maxpacket: 8
[  474.673527][ T5981] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  474.750740][ T5981] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  474.797113][ T5981] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  474.833121][ T5981] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  474.890801][ T5981] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  474.922188][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.017402][ T5990] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  475.140840][ T5981] usb 7-1: GET_CAPABILITIES returned 0
[  475.149535][ T5981] usbtmc 7-1:16.0: can't read capabilities
[  475.167140][ T5990] usb 6-1: Using ep0 maxpacket: 32
[  475.174093][ T5990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.188913][ T5990] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  475.198732][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.208419][ T5936] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  475.222211][ T5990] usb 6-1: Product: syz
[  475.282050][ T5990] usb 6-1: Manufacturer: syz
[  475.313159][ T5990] usb 6-1: SerialNumber: syz
[  475.349971][ T5990] usb 6-1: config 0 descriptor??
[  475.354339][T13502] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32
[  475.363792][ T5990] xr_serial 6-1:0.0: failed to claim sibling interface: -16
[  475.380290][ T5936] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[  475.388976][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.403356][ T5990] xr_serial 6-1:0.0: probe with driver xr_serial failed with error -16
[  475.417666][ T5936] usb 4-1: config 0 has no interface number 0
[  475.446250][ T5936] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  475.465996][ T5936] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  475.493194][ T5936] usb 4-1: config 0 interface 249 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  475.561193][  T980] usb 7-1: USB disconnect, device number 11
[  475.570365][T13511] binder: BINDER_SET_CONTEXT_MGR already set
[  475.576381][T13511] binder: 13510:13511 ioctl 4018620d 2000000000c0 returned -16
[  475.583294][T13512] binder: BINDER_SET_CONTEXT_MGR already set
[  475.610240][ T5936] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  475.619425][T13512] binder: 13510:13512 ioctl 4018620d 200000000040 returned -16
[  475.630030][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.652472][T13511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.663432][T13512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.669927][ T5981] IPVS: starting estimator thread 0...
[  475.674913][T13511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.689950][ T5936] usb 4-1: config 0 descriptor??
[  475.710103][T13512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.719227][ T5936] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[  475.749154][ T5981] usb 6-1: USB disconnect, device number 12
[  475.790560][T13523] IPVS: using max 31 ests per chain, 74400 per kthread
[  477.391802][T13537] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[  477.853172][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1492'.
[  478.545977][    T9] usb 4-1: USB disconnect, device number 78
[  478.590186][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1493'.
[  478.640331][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1493'.
[  479.177263][ T5936] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  479.374470][ T5936] usb 6-1: Using ep0 maxpacket: 32
[  479.444206][T13571] binder: 13570:13571 unknown command 0
[  479.499331][T13571] binder: 13570:13571 ioctl c0306201 200000000080 returned -22
[  480.015266][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short
[  480.034400][ T5936] usb 6-1: unable to read config index 0 descriptor/start: -71
[  480.052272][ T5936] usb 6-1: can't read configurations, error -71
[  480.409136][ T5943] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  480.767533][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'.
[  480.834536][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short
[  480.855821][ T5943] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7
[  480.872688][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'.
[  480.962764][ T5943] usb 3-1: config 1 interface 1 has no altsetting 0
[  481.114960][ T5943] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  481.163510][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.210454][ T5943] usb 3-1: Product: syz
[  481.214653][ T5943] usb 3-1: Manufacturer: syz
[  481.272665][ T5943] usb 3-1: SerialNumber: syz
[  481.467621][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.497525][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.530022][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.539218][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.645331][T13607] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.967966][T13614] vlan2: entered promiscuous mode
[  481.973270][T13614] bridge0: entered promiscuous mode
[  481.978897][T13614] vlan2: entered allmulticast mode
[  481.986116][T13614] bridge0: entered allmulticast mode
[  482.139225][T13616] ptrace attach of "./syz-executor exec"[13617] was attempted by "./syz-executor exec"[13616]
[  482.782334][T13623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  483.167327][ T5943] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  483.251479][ T5943] usb 3-1: USB disconnect, device number 24
[  483.483617][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1515'.
[  484.077300][ T5936] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  484.301063][ T5936] usb 7-1: config 0 has no interfaces?
[  484.321609][ T5936] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  484.332691][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.346450][ T5936] usb 7-1: Product: syz
[  484.377100][ T5936] usb 7-1: Manufacturer: syz
[  484.405663][ T5936] usb 7-1: SerialNumber: syz
[  484.569192][ T5990] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  484.607444][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'.
[  484.748995][ T5936] usb 7-1: config 0 descriptor??
[  484.779401][ T5990] usb 6-1: config 0 has no interfaces?
[  484.799388][ T5990] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  484.810472][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.819946][ T5990] usb 6-1: Product: syz
[  484.824486][ T5990] usb 6-1: Manufacturer: syz
[  484.865265][ T5990] usb 6-1: SerialNumber: syz
[  484.889813][ T5990] usb 6-1: config 0 descriptor??
[  485.176953][T13659] program syz.5.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  485.214632][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.412487][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.967360][ T5981] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  486.119263][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short
[  486.128315][ T5981] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7
[  486.150184][ T5981] usb 3-1: config 1 interface 1 has no altsetting 0
[  486.177495][ T5981] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  486.186653][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.214374][ T5981] usb 3-1: Product: syz
[  486.221545][ T5981] usb 3-1: Manufacturer: syz
[  486.226360][ T5981] usb 3-1: SerialNumber: syz
[  486.568225][T13677] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  486.604682][ T5936] usb 7-1: USB disconnect, device number 12
[  487.027163][ T5936] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  487.187251][ T5936] usb 7-1: Using ep0 maxpacket: 32
[  487.210530][ T5936] usb 7-1: config 0 has an invalid interface number: 206 but max is 1
[  487.218775][ T5936] usb 7-1: config 0 has no interface number 1
[  487.232708][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  487.267517][ T5936] usb 7-1: config 0 interface 206 has no altsetting 0
[  487.299209][ T5936] usb 7-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  487.308420][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.316489][ T5936] usb 7-1: Product: syz
[  487.322953][ T5936] usb 7-1: Manufacturer: syz
[  487.337599][ T5936] usb 7-1: SerialNumber: syz
[  487.368954][ T5936] usb 7-1: config 0 descriptor??
[  487.455913][ T5936] usb 6-1: USB disconnect, device number 15
[  487.587385][T13685] Invalid logical block size (-3)
[  487.606802][    T9] usb 7-1: USB disconnect, device number 13
[  488.167237][ T5936] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  488.208183][T13696] netlink: 'syz.0.1532': attribute type 10 has an invalid length.
[  488.403397][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.444824][ T5936] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.578262][ T5936] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.617210][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0
[  488.689792][ T5936] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  488.760813][ T5981] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  488.788704][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.853902][ T5936] usb 4-1: config 0 descriptor??
[  488.906927][ T5981] usb 3-1: USB disconnect, device number 25
[  489.064687][ T5871] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  489.149101][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  489.207154][ T5871] usb 7-1: Using ep0 maxpacket: 8
[  489.227509][ T5871] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7
[  489.281922][ T5871] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  489.307382][ T5871] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  489.320582][ T5936] kye 0003:0458:5015.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  489.328599][ T5871] usb 7-1: Product: syz
[  489.341335][ T5871] usb 7-1: Manufacturer: syz
[  489.357182][ T5871] usb 7-1: SerialNumber: syz
[  489.437300][ T5936] kye 0003:0458:5015.0011: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0
[  489.478207][ T5936] kye 0003:0458:5015.0011: tablet-enabling feature report not found
[  489.496424][ T5936] kye 0003:0458:5015.0011: tablet enabling failed
[  489.557511][ T5936] usb 4-1: USB disconnect, device number 79
[  489.683592][T13710] fido_id[13710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  489.742393][T13714] bridge_slave_0: left allmulticast mode
[  489.748619][T13714] bridge_slave_0: left promiscuous mode
[  489.757893][ T5871] usb 7-1: palm_os_3_probe - error -110 getting connection information
[  489.785591][ T5871] visor 7-1:1.0: probe with driver visor failed with error -110
[  489.786735][T13714] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.871145][T13714] bridge_slave_1: left allmulticast mode
[  489.885331][T13714] bridge_slave_1: left promiscuous mode
[  489.911779][T13714] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.042530][T13714] bond0: (slave bond_slave_0): Releasing backup interface
[  490.064983][T13714] bond0: (slave bond_slave_1): Releasing backup interface
[  490.283050][ T5943] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  490.568916][ T5943] usb 6-1: config 0 has no interfaces?
[  490.579421][ T5943] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  490.595697][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.598485][T13714] team0: Port device team_slave_0 removed
[  490.612467][ T5943] usb 6-1: Product: syz
[  490.698885][T13714] team0: Port device team_slave_1 removed
[  490.706641][ T5943] usb 6-1: Manufacturer: syz
[  490.713467][ T5943] usb 6-1: SerialNumber: syz
[  490.727826][T13714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.740573][T13714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.788146][T13714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.796694][ T5943] usb 6-1: config 0 descriptor??
[  490.802424][T13714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.151374][T13738] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  491.484918][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.496639][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.609644][ T5981] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  491.786819][ T5981] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  491.832381][ T5981] usb 3-1: config 0 has no interface number 0
[  491.847507][ T5981] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  491.868058][ T5981] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  491.885040][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.913638][ T5981] usb 3-1: Product: syz
[  491.922017][ T5981] usb 3-1: Manufacturer: syz
[  491.931545][ T5981] usb 3-1: SerialNumber: syz
[  491.950576][ T5981] usb 3-1: config 0 descriptor??
[  491.981501][ T5981] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  492.225493][    C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  492.239392][ T5981] usb 7-1: USB disconnect, device number 14
[  492.437275][ T5871] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  492.446593][  T121] usb 3-1: USB disconnect, device number 26
[  492.456154][  T121] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  492.607412][ T5871] usb 4-1: Using ep0 maxpacket: 16
[  492.614065][ T5871] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  492.623802][ T5871] usb 4-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config
[  492.636112][ T5871] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  492.654342][ T5871] usb 4-1: config 1 has no interface number 1
[  492.669661][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  492.755662][ T5871] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE
[  492.789433][ T5871] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7
[  492.803480][ T5871] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024
[  492.825759][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  492.837224][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.852014][ T5871] usb 4-1: Product: syz
[  492.861201][ T5871] usb 4-1: Manufacturer: syz
[  492.865830][ T5871] usb 4-1: SerialNumber: syz
[  492.910991][ T5936] usb 6-1: USB disconnect, device number 16
[  493.430405][ T5862] Bluetooth: hci4: command 0x0406 tx timeout
[  493.614471][T13770] bond3: entered promiscuous mode
[  493.624103][T13770] 8021q: adding VLAN 0 to HW filter on device bond3
[  495.202003][ T5871] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  495.202033][ T5871] usb 4-1: found format II with max.bitrate = 0, frame size=0
[  495.202044][ T5871] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  495.244496][ T5871] usb 4-1: USB disconnect, device number 80
[  495.559356][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  495.680128][T13796] trusted_key: encrypted_key: insufficient parameters specified
[  496.707307][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  496.891458][    T9] usb 3-1: config 0 has no interfaces?
[  496.952340][    T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  497.002291][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.029623][    T9] usb 3-1: Product: syz
[  497.035191][    T9] usb 3-1: Manufacturer: syz
[  497.039848][    T9] usb 3-1: SerialNumber: syz
[  497.071511][    T9] usb 3-1: config 0 descriptor??
[  498.127403][ T5936] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  498.808253][T13830] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  499.247314][ T5936] usb 6-1: device descriptor read/64, error -71
[  499.537136][ T5936] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  499.593289][  T980] usb 3-1: USB disconnect, device number 27
[  499.691489][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  499.820098][ T5936] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  499.843802][ T5936] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  499.875343][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.893471][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.912267][ T5936] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  499.921717][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.929761][ T5936] usb 6-1: Product: syz
[  499.934196][ T5936] usb 6-1: Manufacturer: syz
[  499.939127][ T5936] usb 6-1: SerialNumber: syz
[  499.949113][ T5936] hub 6-1:1.0: bad descriptor, ignoring hub
[  499.961180][ T5936] hub 6-1:1.0: probe with driver hub failed with error -5
[  500.077363][    T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  500.185493][T13838] fuse: Unknown parameter '000000000000000000040x0000000000000003��00000000000000000000'
[  500.230700][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.253642][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.256499][ T5936] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  500.277697][    T9] usb 4-1: device descriptor read/all, error -61
[  500.957161][ T5871] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  501.117200][ T5871] usb 7-1: Using ep0 maxpacket: 8
[  501.123804][ T5871] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  501.131589][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  501.144236][ T5871] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.155955][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  501.167310][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  501.178354][ T5871] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  501.185745][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  501.196977][ T5871] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.209353][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  501.220561][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  501.233793][ T5871] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  501.241462][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  501.252931][ T5871] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.264967][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  501.276145][ T5871] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  501.289957][ T5871] usb 7-1: string descriptor 0 read error: -22
[  501.296833][ T5871] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  501.316641][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.336683][ T5871] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  501.463165][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  501.469734][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  501.561680][T13850] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  501.571652][T13850] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  501.587316][ T5936] usb 7-1: USB disconnect, device number 15
[  501.891989][T13860] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  501.954640][ T5871] usb 6-1: USB disconnect, device number 18
[  501.963897][ T5871] usblp0: removed
[  503.019111][ T5936] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  503.047636][ T5943] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  503.246725][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.259302][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.281792][T13891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  503.330660][ T5943] usb 6-1: config 0 has no interfaces?
[  503.383871][ T5943] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  503.954054][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.992627][ T5943] usb 6-1: Product: syz
[  504.015189][ T5943] usb 6-1: Manufacturer: syz
[  504.025828][ T5943] usb 6-1: SerialNumber: syz
[  504.075614][ T5943] usb 6-1: config 0 descriptor??
[  505.919980][ T5981] usb 6-1: USB disconnect, device number 19
[  506.231452][T13926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.348397][T13929] trusted_key: encrypted_key: master key parameter '�Yf�Ɯ���r�"i��a_�`�A��[���@�B.EF���;���ef�L�' is invalid
[  506.525650][T13933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.558663][ T5943] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  506.717204][ T5943] usb 4-1: Using ep0 maxpacket: 8
[  506.732374][ T5943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  506.750981][ T5943] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  506.780585][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.793091][ T5943] usb 4-1: Product: syz
[  506.797357][ T5943] usb 4-1: Manufacturer: syz
[  506.802115][ T5943] usb 4-1: SerialNumber: syz
[  506.811702][ T5943] usb 4-1: config 0 descriptor??
[  506.822114][ T5943] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  506.877173][ T5981] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  506.917187][ T5936] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  507.007146][ T5981] usb 6-1: device descriptor read/64, error -71
[  507.089068][ T5936] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  507.105952][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.117269][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.128321][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.139633][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.149606][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.160542][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.168940][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.187326][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.199120][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.220470][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.232312][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.247125][ T5981] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  507.251045][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.267647][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.276611][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.295295][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.309741][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.325723][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.345971][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.355107][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.367601][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.380414][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.388095][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.397151][ T5981] usb 6-1: device descriptor read/64, error -71
[  507.403326][ T5936] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.424613][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  507.441665][ T5936] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  507.451232][ T5936] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  507.467233][ T5936] usb 7-1: Product: syz
[  507.471451][ T5936] usb 7-1: Manufacturer: syz
[  507.476254][ T5936] usb 7-1: SerialNumber: syz
[  507.492793][ T5936] usb 7-1: config 0 descriptor??
[  507.523112][ T5936] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  507.543983][ T5981] usb usb6-port1: attempt power cycle
[  507.907533][ T5981] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  508.026298][ T5871] usb 7-1: USB disconnect, device number 17
[  508.034239][ T5981] usb 6-1: device descriptor read/8, error -71
[  508.118038][ T5871] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  508.337506][ T5981] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  508.365042][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.374545][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.418540][ T5981] usb 6-1: device descriptor read/8, error -71
[  508.537589][ T5981] usb usb6-port1: unable to enumerate USB device
[  509.453072][ T5943] gspca_zc3xx: i2c_r status error 8a
[  509.737294][ T5936] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  509.861901][T13926] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1593'.
[  510.169398][ T5943] gspca_zc3xx: reg_r err -110
[  510.237270][ T5943] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  510.237771][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.277377][ T5936] usb 3-1: Using ep0 maxpacket: 16
[  510.312075][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.317970][ T5936] usb 3-1: config 149 has an invalid interface number: 17 but max is 0
[  510.343590][ T5936] usb 3-1: config 149 has no interface number 0
[  510.383778][ T5936] usb 3-1: config 149 interface 17 has no altsetting 0
[  510.437483][    T9] usb 4-1: USB disconnect, device number 83
[  510.462408][ T5936] usb 3-1: New USB device found, idVendor=0d9f, idProduct=0089, bcdDevice=65.f4
[  510.472215][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.480606][ T5936] usb 3-1: Product: syz
[  510.484815][ T5936] usb 3-1: Manufacturer: syz
[  510.489911][ T5936] usb 3-1: SerialNumber: syz
[  510.829038][ T5936] usbhid 3-1:149.17: couldn't find an input interrupt endpoint
[  510.887642][ T5936] usb 3-1: USB disconnect, device number 28
[  511.157923][    T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  511.327232][    T9] usb 6-1: Using ep0 maxpacket: 8
[  511.337171][  T980] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  511.595027][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  511.609599][    T9] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  511.625295][    T9] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  511.637136][    T9] usb 6-1: Product: syz
[  511.649361][    T9] usb 6-1: Manufacturer: syz
[  511.709761][  T980] usb 7-1: config 0 has no interfaces?
[  511.738992][  T980] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  511.769905][    T9] usb 6-1: SerialNumber: syz
[  511.772620][  T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.000177][  T980] usb 7-1: Product: syz
[  512.180737][  T980] usb 7-1: Manufacturer: syz
[  512.215010][  T980] usb 7-1: SerialNumber: syz
[  512.222905][  T980] usb 7-1: config 0 descriptor??
[  512.257601][    T9] usb 6-1: palm_os_3_probe - error -110 getting connection information
[  512.331466][    T9] visor 6-1:1.0: probe with driver visor failed with error -110
[  512.409817][  T121] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  512.688342][  T121] usb 3-1: Using ep0 maxpacket: 8
[  512.758412][  T121] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  512.916772][  T121] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  512.932073][  T121] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  512.964340][  T121] usb 3-1: Product: syz
[  512.995908][  T121] usb 3-1: Manufacturer: syz
[  513.009186][  T121] usb 3-1: SerialNumber: syz
[  513.366799][  T121] usb 3-1: palm_os_3_probe - error -110 getting connection information
[  513.394104][  T121] visor 3-1:1.0: probe with driver visor failed with error -110
[  513.512689][T13987] bond2: (slave geneve2): Releasing active interface
[  513.939534][ T5943] usb 7-1: USB disconnect, device number 18
[  514.107908][    T9] usb 6-1: USB disconnect, device number 24
[  515.079930][    T9] usb 3-1: USB disconnect, device number 29
[  515.142368][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.174770][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.185097][  T121] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  515.651926][ T5981] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  515.671424][  T121] usb 7-1: config 0 has no interfaces?
[  515.681549][  T121] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  515.690745][  T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.701109][  T121] usb 7-1: Product: syz
[  515.705253][  T121] usb 7-1: Manufacturer: syz
[  515.709912][  T121] usb 7-1: SerialNumber: syz
[  515.720490][  T121] usb 7-1: config 0 descriptor??
[  515.849450][ T5981] usb 4-1: Using ep0 maxpacket: 8
[  515.857786][ T5981] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  515.866074][ T5981] usb 4-1: config 2 has no interface number 0
[  515.876552][ T5981] usb 4-1: config 2 interface 31 has no altsetting 0
[  515.889808][ T5981] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  515.901021][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.909102][ T5981] usb 4-1: Product: syz
[  515.913482][ T5981] usb 4-1: Manufacturer: syz
[  515.920146][ T5981] usb 4-1: SerialNumber: syz
[  516.308134][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1621'.
[  516.465650][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.476136][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.400176][ T5981] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22
[  517.435650][ T5981] usb 4-1: USB disconnect, device number 84
[  517.847892][    T9] usb 7-1: USB disconnect, device number 19
[  518.365365][T14053] fuse: Bad value for 'user_id'
[  518.373477][T14053] fuse: Bad value for 'user_id'
[  518.726412][T14056] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  519.364548][T14069] netlink: 'syz.3.1627': attribute type 27 has an invalid length.
[  519.415308][T14069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  519.713277][T14069] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  519.809555][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  519.809567][   T30] audit: type=1326 audit(1757802182.911:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.1630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa041d8eba9 code=0x0
[  520.343324][T14086] bond2: entered promiscuous mode
[  520.349298][T14086] 8021q: adding VLAN 0 to HW filter on device bond2
[  520.611213][T14093] binder: BINDER_SET_CONTEXT_MGR already set
[  520.624744][T14093] binder: 14091:14093 ioctl 4018620d 2000000000c0 returned -16
[  520.718218][T14092] binder: 14091:14092 ioctl 4008af7c 200000000480 returned -22
[  520.777309][T14093] binder: 14091:14093 ioctl 4008af7c 200000000480 returned -22
[  521.169887][T14105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  521.210773][T14109] netlink: 'syz.6.1639': attribute type 1 has an invalid length.
[  521.825462][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'.
[  521.953154][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.970183][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.057278][ T5936] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  523.207120][ T5936] usb 4-1: Using ep0 maxpacket: 32
[  523.244249][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.261710][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.316925][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  523.351496][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.363874][ T5936] usb 4-1: config 0 descriptor??
[  523.369465][ T5943] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  523.413507][T14145] input: syz0 as /devices/virtual/input/input20
[  523.426697][ T5936] hub 4-1:0.0: USB hub found
[  523.580373][ T5943] usb 6-1: Using ep0 maxpacket: 16
[  523.589389][ T5943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  523.618436][ T5943] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.629709][ T5943] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  523.758473][T14151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.779025][ T5943] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  523.789194][T14151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.796085][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  524.056171][ T5943] usb 6-1: SerialNumber: syz
[  524.452412][ T5936] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  524.575907][ T5936] usbhid 4-1:0.0: can't add hid device: -71
[  524.708625][ T5936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  524.768724][ T5936] usb 4-1: USB disconnect, device number 86
[  524.834593][ T5943] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  524.982383][ T5936] usb 6-1: USB disconnect, device number 25
[  525.525242][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'.
[  525.647109][  T121] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  525.830701][  T121] usb 4-1: Using ep0 maxpacket: 16
[  525.854968][  T121] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  525.892928][  T121] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  525.914497][  T121] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  525.945626][  T121] usb 4-1: Product: syz
[  525.966868][  T121] usb 4-1: Manufacturer: syz
[  525.995094][  T121] usb 4-1: SerialNumber: syz
[  526.021229][  T121] usb 4-1: config 0 descriptor??
[  526.140421][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1660'.
[  526.393489][T14174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1653'.
[  526.467247][  T121] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  526.638212][T14203] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.897564][  T121] usb 6-1: config 0 has no interfaces?
[  527.014400][  T121] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  527.027250][  T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.086680][  T121] usb 6-1: Product: syz
[  527.249955][  T121] usb 6-1: Manufacturer: syz
[  527.524481][  T121] usb 6-1: SerialNumber: syz
[  527.577712][  T121] usb 6-1: config 0 descriptor??
[  527.700104][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1665'.
[  527.710536][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1665'.
[  527.720256][T14218] netlink: 'syz.6.1665': attribute type 1 has an invalid length.
[  528.240106][ T5936] usb 4-1: USB disconnect, device number 87
[  529.730991][ T5936] usb 6-1: USB disconnect, device number 26
[  529.975416][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.029429][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.040288][T14263] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1673'.
[  530.714817][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1677'.
[  531.791096][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.801128][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.233072][ T5871] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  532.291976][  T980] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  532.435030][ T5871] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  532.451509][T14301] netlink: 'syz.6.1681': attribute type 2 has an invalid length.
[  532.452452][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.523323][ T5871] usb 4-1: Product: syz
[  532.534517][  T980] usb 6-1: config 0 has no interfaces?
[  532.539889][ T5871] usb 4-1: Manufacturer: syz
[  532.564821][ T5871] usb 4-1: SerialNumber: syz
[  532.630477][ T5871] usb 4-1: config 0 descriptor??
[  532.687518][  T980] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  532.736338][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.765484][  T980] usb 6-1: Product: syz
[  532.787531][  T980] usb 6-1: Manufacturer: syz
[  532.844998][  T980] usb 6-1: SerialNumber: syz
[  533.024727][  T980] usb 6-1: config 0 descriptor??
[  533.036140][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.088006][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.137486][  T121] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  533.238317][    T9] usb 4-1: USB disconnect, device number 88
[  533.382680][  T121] usb 3-1: config 0 has no interfaces?
[  533.401858][  T121] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  533.411244][  T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.427862][  T121] usb 3-1: Product: syz
[  533.432347][  T121] usb 3-1: Manufacturer: syz
[  533.438821][  T121] usb 3-1: SerialNumber: syz
[  533.466109][  T121] usb 3-1: config 0 descriptor??
[  533.989783][  T121] usb 3-1: USB disconnect, device number 30
[  534.603749][ T5936] usb 6-1: USB disconnect, device number 27
[  534.782850][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'.
[  534.790373][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'.
[  534.920837][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  535.113364][  T980] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  535.185893][T14364] binder: BINDER_SET_CONTEXT_MGR already set
[  535.207153][    T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  535.220131][T14364] binder: 14363:14364 ioctl 4018620d 200000000100 returned -16
[  535.278228][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.300564][  T980] usb 7-1: Using ep0 maxpacket: 32
[  535.311487][T14367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.343054][  T980] usb 7-1: unable to get BOS descriptor or descriptor too short
[  535.356362][  T980] usb 7-1: unable to read config index 0 descriptor/start: -71
[  535.364316][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.387229][  T980] usb 7-1: can't read configurations, error -71
[  535.387239][    T9] usb 6-1: Using ep0 maxpacket: 8
[  535.398571][    T9] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab
[  535.398598][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.415941][    T9] usb 6-1: Product: syz
[  535.423021][    T9] usb 6-1: Manufacturer: syz
[  535.429962][T14367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.445272][    T9] usb 6-1: SerialNumber: syz
[  535.475630][    T9] usb 6-1: config 0 descriptor??
[  536.437609][ T5943] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  536.500321][   T30] audit: type=1326 audit(1757802199.601:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x50000
[  536.548751][   T30] audit: type=1326 audit(1757802199.631:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8a73b8eba9 code=0x50000
[  536.603527][ T5943] usb 4-1: config 0 has no interfaces?
[  536.612200][ T5943] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  536.624807][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.646431][ T5943] usb 4-1: Product: syz
[  536.651646][ T5943] usb 4-1: Manufacturer: syz
[  536.670702][ T5943] usb 4-1: SerialNumber: syz
[  536.687379][   T30] audit: type=1326 audit(1757802199.631:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a73bc1465 code=0x50000
[  536.712600][ T5943] usb 4-1: config 0 descriptor??
[  536.771095][   T30] audit: type=1326 audit(1757802199.631:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8a73b8eba9 code=0x50000
[  536.837388][  T980] psmouse serio2: Failed to reset mouse on : -5
[  537.315690][  T121] usb 4-1: USB disconnect, device number 89
[  538.784656][    T9] usb 6-1: USB disconnect, device number 28
[  539.291706][ T5943] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  539.402904][T14389] Bluetooth: hci2: command 0x0406 tx timeout
[  539.547907][ T5943] usb 7-1: Using ep0 maxpacket: 8
[  539.598854][ T5943] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  539.627533][ T5943] usb 7-1: config 0 has no interface number 0
[  539.636475][ T5943] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  539.677226][ T5943] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  539.725396][ T5943] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  539.799210][ T5943] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  539.813098][ T5943] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  539.824952][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.827442][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  539.836533][ T5943] usb 7-1: config 0 descriptor??
[  539.858101][ T5943] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  540.047094][    T9] usb 6-1: Using ep0 maxpacket: 32
[  540.156960][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.166202][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.179011][T14427] netlink: 'syz.6.1713': attribute type 1 has an invalid length.
[  540.593977][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  540.614051][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  540.623369][T14433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.637653][T14433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.655701][    T9] usb 6-1: can't read configurations, error -71
[  540.737212][  T980] misc userio: Buffer overflowed, userio client isn't keeping up
[  541.117262][    T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  541.288068][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.302242][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.316032][    T9] usb 6-1: config 0 has no interfaces?
[  541.333134][    T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  541.342984][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.351103][    T9] usb 6-1: Product: syz
[  541.367471][    T9] usb 6-1: Manufacturer: syz
[  541.385271][    T9] usb 6-1: SerialNumber: syz
[  541.399954][    T9] usb 6-1: config 0 descriptor??
[  541.569886][T14449] fuse: Unknown parameter 'D21�QI��M&���O�E9��7}�-�HG��l�.'@������ڭ���E�9���?�C�<i�$��a[	q�z��|��H���Q��\P}&
U���s^�Ɇ�;G�1��ꫪ
[  541.569886][T14449] ��q?2�3u:�wԇ���d�]�G�����o��|B�fb<i?��ĩL�H֏�1��FQͤE�ѴU+`b��E��ڜwh�;�0��X���@�'
[  541.606841][T14449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1721'.
[  541.774814][T14451] netlink: 'syz.3.1722': attribute type 10 has an invalid length.
[  541.828429][T14442] program syz.5.1720 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  541.906630][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.907764][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.022314][  T980] input: PS/2 Generic Mouse as /devices/serio2/input/input21
[  542.200089][ T5943] usb 7-1: USB disconnect, device number 22
[  542.248577][  T980] psmouse serio2: Failed to enable mouse on 
[  542.270377][ T5943] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  542.701125][ T5943] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  542.924450][ T5943] usb 7-1: config 1 has an invalid interface number: 26 but max is 1
[  542.957151][ T5943] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.993769][ T5943] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  543.027303][ T5943] usb 7-1: config 1 has no interface number 0
[  543.027309][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  543.113048][ T5943] usb 7-1: config 1 interface 26 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  543.176407][ T5943] usb 7-1: config 1 interface 26 has no altsetting 0
[  543.184523][ T5943] usb 7-1: language id specifier not provided by device, defaulting to English
[  543.248617][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  543.262649][    T9] usb 3-1: config 66 has an invalid descriptor of length 127, skipping remainder of the config
[  543.282880][    T9] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 1
[  543.310249][    T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  543.322148][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.330809][    T9] usb 3-1: Product: syz
[  543.335583][    T9] usb 3-1: Manufacturer: syz
[  543.345765][    T9] usb 3-1: SerialNumber: syz
[  543.430506][ T5943] usb 7-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=5e.d2
[  543.469336][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.477552][ T5943] usb 7-1: Manufacturer: 凪ࡳㆾ풡㎍숗뼮
[  543.484927][ T5943] usb 7-1: SerialNumber: 껇ꦁ粄৶硏쏭币觮脒ᶿЎ⩝娎銺૟ᩅ꘤䈍퉆몑㨑꠳䁢럴䷂햗䈯謳日ⶱ魅ⲓ
[  544.049118][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.058043][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.106392][ T5943] option 7-1:1.26: GSM modem (1-port) converter detected
[  544.233303][ T5943] usb 7-1: USB disconnect, device number 23
[  544.264788][ T5943] option 7-1:1.26: device disconnected
[  544.362306][ T5936] usb 6-1: USB disconnect, device number 30
[  544.755642][T14479] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns
[  544.787233][ T5936] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  544.922561][T14479] kvm: pic: non byte write
[  545.017167][ T5936] usb 6-1: Using ep0 maxpacket: 32
[  545.137784][T14484] FAULT_INJECTION: forcing a failure.
[  545.137784][T14484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  545.151044][T14484] CPU: 1 UID: 0 PID: 14484 Comm: syz.0.1732 Not tainted syzkaller #0 PREEMPT(full) 
[  545.151070][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  545.151083][T14484] Call Trace:
[  545.151091][T14484]  <TASK>
[  545.151099][T14484]  dump_stack_lvl+0x189/0x250
[  545.151124][T14484]  ? __pfx____ratelimit+0x10/0x10
[  545.151141][T14484]  ? __pfx_dump_stack_lvl+0x10/0x10
[  545.151161][T14484]  ? __pfx__printk+0x10/0x10
[  545.151194][T14484]  should_fail_ex+0x414/0x560
[  545.151225][T14484]  _copy_to_user+0x31/0xb0
[  545.151252][T14484]  simple_read_from_buffer+0xe1/0x170
[  545.151284][T14484]  proc_fail_nth_read+0x1b3/0x220
[  545.151310][T14484]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  545.151336][T14484]  ? rw_verify_area+0x2a6/0x4d0
[  545.151359][T14484]  ? __lock_acquire+0xab9/0xd20
[  545.151386][T14484]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  545.151410][T14484]  vfs_read+0x200/0xa30
[  545.151441][T14484]  ? fdget_pos+0x247/0x320
[  545.151462][T14484]  ? __pfx___mutex_lock+0x10/0x10
[  545.151484][T14484]  ? __pfx_vfs_read+0x10/0x10
[  545.151510][T14484]  ? __fget_files+0x2a/0x420
[  545.151532][T14484]  ? __fget_files+0x3a0/0x420
[  545.151548][T14484]  ? __fget_files+0x2a/0x420
[  545.151575][T14484]  ksys_read+0x145/0x250
[  545.151603][T14484]  ? __pfx_ksys_read+0x10/0x10
[  545.151641][T14484]  do_syscall_64+0xfa/0x3b0
[  545.151660][T14484]  ? lockdep_hardirqs_on+0x9c/0x150
[  545.151679][T14484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.151698][T14484]  ? clear_bhb_loop+0x60/0xb0
[  545.151722][T14484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.151742][T14484] RIP: 0033:0x7fa041d8d5bc
[  545.151760][T14484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  545.151777][T14484] RSP: 002b:00007fa042c1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  545.151797][T14484] RAX: ffffffffffffffda RBX: 00007fa041fd5fa0 RCX: 00007fa041d8d5bc
[  545.151812][T14484] RDX: 000000000000000f RSI: 00007fa042c1f0a0 RDI: 0000000000000004
[  545.151824][T14484] RBP: 00007fa042c1f090 R08: 0000000000000000 R09: 0000000000000000
[  545.151837][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.151848][T14484] R13: 00007fa041fd6038 R14: 00007fa041fd5fa0 R15: 00007fa0420ffa28
[  545.151880][T14484]  </TASK>
[  545.217984][  T121] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  545.272091][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'.
[  545.435102][T14487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.447576][T14487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.606132][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short
[  545.618110][ T5936] usb 6-1: unable to read config index 0 descriptor/start: -71
[  545.646019][ T5936] usb 6-1: can't read configurations, error -71
[  545.646781][  T121] usb 4-1: config 0 has no interfaces?
[  545.666705][  T121] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  545.693012][  T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.713069][  T121] usb 4-1: Product: syz
[  545.730219][    T9] usb 3-1: USB disconnect, device number 31
[  545.741107][  T121] usb 4-1: Manufacturer: syz
[  545.752961][  T121] usb 4-1: SerialNumber: syz
[  545.782361][  T121] usb 4-1: config 0 descriptor??
[  546.552124][   T30] audit: type=1326 audit(1757802209.561:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a73b8eba9 code=0x7fc00000
[  547.318347][T14528] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  547.497577][ T5936] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  547.620202][  T121] usb 4-1: USB disconnect, device number 90
[  547.657244][ T5936] usb 7-1: Using ep0 maxpacket: 32
[  547.751319][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'.
[  547.834347][T14530] openvswitch: netlink: Flow actions attr not present in new flow.
[  548.253682][ T5936] usb 7-1: unable to get BOS descriptor or descriptor too short
[  548.289606][ T5936] usb 7-1: unable to read config index 0 descriptor/start: -71
[  548.326430][ T5936] usb 7-1: can't read configurations, error -71
[  548.458845][  T980] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  548.697112][  T980] usb 4-1: Using ep0 maxpacket: 8
[  548.712958][  T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  548.723741][  T980] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  548.777396][  T980] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  548.803975][  T980] usb 4-1: Product: syz
[  548.829944][  T980] usb 4-1: Manufacturer: syz
[  548.834568][  T980] usb 4-1: SerialNumber: syz
[  548.918865][T14546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.930834][T14546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.307246][ T5936] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  549.316743][T14550] FAULT_INJECTION: forcing a failure.
[  549.316743][T14550] name failslab, interval 1, probability 0, space 0, times 0
[  549.339655][T14550] CPU: 1 UID: 0 PID: 14550 Comm: syz.2.1751 Not tainted syzkaller #0 PREEMPT(full) 
[  549.339670][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  549.339678][T14550] Call Trace:
[  549.339682][T14550]  <TASK>
[  549.339687][T14550]  dump_stack_lvl+0x189/0x250
[  549.339705][T14550]  ? __pfx____ratelimit+0x10/0x10
[  549.339717][T14550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.339728][T14550]  ? __pfx__printk+0x10/0x10
[  549.339748][T14550]  ? __pfx___might_resched+0x10/0x10
[  549.339758][T14550]  ? fs_reclaim_acquire+0x7d/0x100
[  549.339771][T14550]  should_fail_ex+0x414/0x560
[  549.339789][T14550]  should_failslab+0xa8/0x100
[  549.339805][T14550]  __kmalloc_cache_noprof+0x70/0x3d0
[  549.339825][T14550]  ? nfnetlink_rcv+0xeff/0x2520
[  549.339843][T14550]  nfnetlink_rcv+0xeff/0x2520
[  549.339874][T14550]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  549.339898][T14550]  ? ref_tracker_free+0x63a/0x7d0
[  549.339923][T14550]  ? __netlink_deliver_tap+0x807/0x850
[  549.339934][T14550]  ? netlink_deliver_tap+0x2e/0x1b0
[  549.339954][T14550]  netlink_unicast+0x82c/0x9e0
[  549.339974][T14550]  ? __pfx_netlink_unicast+0x10/0x10
[  549.339990][T14550]  ? netlink_sendmsg+0x642/0xb30
[  549.339999][T14550]  ? skb_put+0x11b/0x210
[  549.340013][T14550]  netlink_sendmsg+0x805/0xb30
[  549.340028][T14550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.340041][T14550]  ? aa_sock_msg_perm+0xf1/0x1d0
[  549.340052][T14550]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  549.340064][T14550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.340075][T14550]  __sock_sendmsg+0x21c/0x270
[  549.340092][T14550]  ____sys_sendmsg+0x505/0x830
[  549.340108][T14550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  549.340126][T14550]  ? import_iovec+0x74/0xa0
[  549.340142][T14550]  ___sys_sendmsg+0x21f/0x2a0
[  549.340156][T14550]  ? __pfx____sys_sendmsg+0x10/0x10
[  549.340188][T14550]  ? __fget_files+0x2a/0x420
[  549.340196][T14550]  ? __fget_files+0x3a0/0x420
[  549.340211][T14550]  __x64_sys_sendmsg+0x19b/0x260
[  549.340225][T14550]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  549.340243][T14550]  ? __pfx_ksys_write+0x10/0x10
[  549.340255][T14550]  ? rcu_is_watching+0x15/0xb0
[  549.340269][T14550]  ? do_syscall_64+0xbe/0x3b0
[  549.340282][T14550]  do_syscall_64+0xfa/0x3b0
[  549.340292][T14550]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.340302][T14550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.340312][T14550]  ? clear_bhb_loop+0x60/0xb0
[  549.340325][T14550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.340334][T14550] RIP: 0033:0x7f8a73b8eba9
[  549.340344][T14550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.340353][T14550] RSP: 002b:00007f8a74944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.340365][T14550] RAX: ffffffffffffffda RBX: 00007f8a73dd5fa0 RCX: 00007f8a73b8eba9
[  549.340373][T14550] RDX: 000000000000c000 RSI: 0000200000000180 RDI: 0000000000000003
[  549.340379][T14550] RBP: 00007f8a74944090 R08: 0000000000000000 R09: 0000000000000000
[  549.340385][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  549.340391][T14550] R13: 00007f8a73dd6038 R14: 00007f8a73dd5fa0 R15: 00007f8a73effa28
[  549.340407][T14550]  </TASK>
[  549.995962][  T980] usb 4-1: palm_os_3_probe - error -110 getting connection information
[  550.006121][  T980] visor 4-1:1.0: probe with driver visor failed with error -110
[  550.046805][  T980] usb 4-1: USB disconnect, device number 91
[  550.107525][ T5936] usb 7-1: config 0 has no interfaces?
[  550.118167][ T5936] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  550.137292][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.165704][ T5936] usb 7-1: Product: syz
[  550.181102][ T5936] usb 7-1: Manufacturer: syz
[  550.216540][ T5936] usb 7-1: SerialNumber: syz
[  550.282239][ T5936] usb 7-1: config 0 descriptor??
[  550.380304][T14566] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  550.392391][T14566] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  552.942287][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.965718][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.999754][  T121] usb 7-1: USB disconnect, device number 25
[  553.207545][ T5943] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  553.523143][T14601] netlink: 'syz.3.1761': attribute type 21 has an invalid length.
[  553.543538][T14601] IPv6: NLM_F_CREATE should be specified when creating new route
[  553.588113][T14601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  553.595611][T14601] IPv6: NLM_F_CREATE should be set when creating new route
[  553.602903][T14601] IPv6: NLM_F_CREATE should be set when creating new route
[  553.610105][T14601] IPv6: NLM_F_CREATE should be set when creating new route
[  553.807091][ T5943] usb 3-1: Using ep0 maxpacket: 32
[  553.887117][  T121] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  553.927171][ T5979] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  554.048171][  T121] usb 6-1: Using ep0 maxpacket: 16
[  554.060458][  T121] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  554.072804][  T121] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  554.091116][ T5979] usb 7-1: config 0 has no interfaces?
[  554.100785][  T121] usb 6-1: config 0 has no interface number 0
[  554.109162][  T121] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  554.128177][ T5979] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  554.136536][T14611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'.
[  554.139483][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.156619][ T5979] usb 7-1: Product: syz
[  554.163698][ T5979] usb 7-1: Manufacturer: syz
[  554.170447][  T121] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  554.181892][  T121] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  554.192581][ T5979] usb 7-1: SerialNumber: syz
[  554.197554][  T121] usb 6-1: Product: syz
[  554.208789][  T121] usb 6-1: SerialNumber: syz
[  554.218079][ T5979] usb 7-1: config 0 descriptor??
[  554.231464][  T121] usb 6-1: config 0 descriptor??
[  554.342349][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short
[  554.362966][ T5943] usb 3-1: unable to read config index 0 descriptor/start: -71
[  554.391179][ T5943] usb 3-1: can't read configurations, error -71
[  554.449267][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1763'.
[  554.501434][ T5979] usb 6-1: USB disconnect, device number 33
[  554.826139][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'.
[  554.852774][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'.
[  555.927279][  T121] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  555.992345][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.056337][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.092606][  T121] usb 4-1: config 0 has no interfaces?
[  556.102765][  T121] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  556.111947][  T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.120574][  T121] usb 4-1: Product: syz
[  556.125030][  T121] usb 4-1: Manufacturer: syz
[  556.130381][  T121] usb 4-1: SerialNumber: syz
[  556.137540][    T9] usb 7-1: USB disconnect, device number 26
[  556.253165][T14643] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  556.285888][  T121] usb 4-1: config 0 descriptor??
[  556.720884][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.733282][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.805180][T14655] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  556.858866][    T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  556.868903][  T121] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  557.029463][    T9] usb 3-1: Using ep0 maxpacket: 32
[  557.113170][  T121] usb 6-1: config 0 has no interfaces?
[  557.123160][  T121] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  557.133322][  T121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.148769][  T121] usb 6-1: config 0 descriptor??
[  557.573300][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  557.601243][    T9] usb 3-1: unable to read config index 0 descriptor/start: -71
[  557.617235][    T9] usb 3-1: can't read configurations, error -71
[  558.327602][ T5936] usb 4-1: USB disconnect, device number 92
[  558.744641][T14683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.889937][T14683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.002187][T14687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  559.177133][ T5936] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  559.377354][ T5936] usb 7-1: Using ep0 maxpacket: 32
[  559.385963][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.471766][ T5943] usb 6-1: USB disconnect, device number 34
[  559.481103][ T5936] usb 7-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30
[  559.546640][ T5936] usb 7-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255
[  559.609596][ T5936] usb 7-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36
[  559.759535][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  559.803694][ T5936] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  559.886890][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.944871][ T5943] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  560.436597][ T5943] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  560.494156][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.516553][ T5936] usb 7-1: Product: syz
[  560.547080][ T5943] usb 6-1: Product: syz
[  560.551291][ T5936] usb 7-1: Manufacturer: syz
[  560.566373][ T5943] usb 6-1: Manufacturer: syz
[  560.607131][ T5936] usb 7-1: SerialNumber: syz
[  560.690712][ T5943] usb 6-1: SerialNumber: syz
[  560.698103][ T5936] usb 7-1: config 0 descriptor??
[  560.706246][T14684] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  560.714882][ T5943] r8152-cfgselector 6-1: Unknown version 0x0000
[  560.722287][ T5943] r8152-cfgselector 6-1: config 0 descriptor??
[  561.187227][  T980] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  561.337128][  T980] usb 4-1: Using ep0 maxpacket: 32
[  561.394821][ T5943] r8152-cfgselector 6-1: Unknown version 0x0000
[  561.402935][ T5943] r8152-cfgselector 6-1: bad CDC descriptors
[  562.031361][  T980] usb 4-1: unable to get BOS descriptor or descriptor too short
[  562.044926][  T980] usb 4-1: unable to read config index 0 descriptor/start: -71
[  562.074405][  T980] usb 4-1: can't read configurations, error -71
[  562.282794][ T5947] r8152-cfgselector 6-1: USB disconnect, device number 35
[  562.354828][ T5936] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  562.390113][   T30] audit: type=1326 audit(1757802225.481:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.485000][ T5936] usb 7-1: USB disconnect, device number 27
[  562.486438][   T30] audit: type=1326 audit(1757802225.481:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.563736][   T30] audit: type=1326 audit(1757802225.481:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.586631][   T30] audit: type=1326 audit(1757802225.491:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.624669][   T30] audit: type=1326 audit(1757802225.491:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.666106][   T30] audit: type=1326 audit(1757802225.491:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f627bf8d510 code=0x7ffc0000
[  562.691633][   T30] audit: type=1326 audit(1757802225.581:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.718509][   T30] audit: type=1326 audit(1757802225.581:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627bf8eba9 code=0x7ffc0000
[  562.781350][T14727] netlink: 'syz.6.1796': attribute type 10 has an invalid length.
[  562.808908][T14727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.850547][T14727] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  562.874727][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1797'.
[  562.890258][T14728] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  562.910322][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  562.916735][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  563.378629][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'.
[  563.387121][  T980] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  563.585800][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'.
[  563.649521][  T980] usb 6-1: unable to get BOS descriptor or descriptor too short
[  563.673231][  T980] usb 6-1: not running at top speed; connect to a high speed hub
[  563.709151][  T980] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  563.739716][  T980] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  563.783246][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.841985][  T980] usb 6-1: Product: syz
[  563.861112][  T980] usb 6-1: Manufacturer: syz
[  563.921179][  T980] usb 6-1: SerialNumber: syz
[  564.243292][  T980] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  564.281574][  T980] usb 6-1: USB disconnect, device number 36
[  564.802744][T14758] input: syz0 as /devices/virtual/input/input22
[  564.850458][T14760] bond0: entered promiscuous mode
[  564.855502][T14760] batadv0: entered promiscuous mode
[  566.150620][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.164432][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.034105][T14799] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  567.046327][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.055134][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.618868][ T5979] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  567.769834][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  568.002711][ T5979] usb 6-1: Using ep0 maxpacket: 8
[  568.008126][    T9] usb 3-1: Using ep0 maxpacket: 8
[  568.015624][ T5979] usb 6-1: unable to get BOS descriptor or descriptor too short
[  568.030028][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  568.041277][ T5979] usb 6-1: config 4 interface 0 has no altsetting 0
[  568.053494][ T5979] usb 6-1: string descriptor 0 read error: -22
[  568.061643][ T5979] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  568.077167][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  568.104968][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.113595][    T9] usb 3-1: config 1 has no interface number 1
[  568.120432][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  568.142423][ T5979] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  568.160121][ T5979] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  568.175099][    T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  568.299116][ T5979] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  568.394654][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  568.410394][ T5979] usb 6-1: media controller created
[  568.416898][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.426332][T14805] usb 6-1: dvb_usb_au6610: wlen=0, aborting
[  568.443688][    T9] usb 3-1: Product: syz
[  568.453207][    T9] usb 3-1: Manufacturer: syz
[  568.534467][    T9] usb 3-1: SerialNumber: syz
[  568.652562][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  568.717675][ T5979] zl10353_read_register: readreg error (reg=127, ret==0)
[  568.835202][ T5979] usb 6-1: USB disconnect, device number 37
[  568.871594][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.908509][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.926562][    T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  568.935389][    T9] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  568.945730][    T9] usb 3-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  569.031182][    T9] usb 3-1: USB disconnect, device number 37
[  569.143934][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  569.495307][T14831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1833'.
[  571.617435][ T5936] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  572.040757][ T5936] usb 3-1: config 0 has no interfaces?
[  572.046285][ T5936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  572.066012][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.087330][ T5936] usb 3-1: config 0 descriptor??
[  572.624867][T14869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.679763][T14869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.763665][T14869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.792707][T14869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.876690][T14874] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  572.896854][T14874] syzkaller0: entered promiscuous mode
[  572.905366][T14874] syzkaller0: entered allmulticast mode
[  573.375357][ T5936] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  573.537186][ T5936] usb 4-1: Using ep0 maxpacket: 16
[  573.551192][ T5936] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  573.569604][ T5936] usb 4-1: config 0 has no interface number 0
[  573.602254][ T5936] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11
[  573.667105][ T5936] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[  573.825066][  T980] usb 3-1: USB disconnect, device number 38
[  573.906393][ T5936] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  573.931695][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  573.960391][ T5936] usb 4-1: Product: syz
[  573.964586][ T5936] usb 4-1: SerialNumber: syz
[  573.986628][ T5936] usb 4-1: config 0 descriptor??
[  574.005663][ T5936] cm109 4-1:0.8: invalid payload size 1024, expected 4
[  574.034967][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.072744][ T5936] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input23
[  574.177444][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.210480][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.237589][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.574644][T14904] pim6reg: entered allmulticast mode
[  575.167215][    T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  575.287482][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  575.287513][    C1] ------------[ cut here ]------------
[  575.287588][    C1] URB ffff888028200c00 submitted while active
[  575.288508][    C1] WARNING: CPU: 1 PID: 14881 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830
[  575.317644][    C1] Modules linked in:
[  575.317702][    C1] CPU: 1 UID: 0 PID: 14881 Comm: syz.3.1850 Not tainted syzkaller #0 PREEMPT(full) 
[  575.317726][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  575.317739][    C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830
[  575.317769][    C1] Code: 44 89 f2 e8 61 3e 00 fa e9 13 fc ff ff e8 67 68 93 fa c6 05 98 43 61 08 01 90 48 c7 c7 60 05 35 8c 48 89 de e8 b0 03 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 41 68 93 fa eb 11 e8 3a 68 93 fa bd
[  575.317795][    C1] RSP: 0018:ffffc90000a08868 EFLAGS: 00010046
[  575.317813][    C1] RAX: 36d7531674191700 RBX: ffff888028200c00 RCX: 0000000000040000
[  575.317827][    C1] RDX: ffffc90002392000 RSI: 00000000000004e5 RDI: 00000000000004e6
[  575.317840][    C1] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a
[  575.317854][    C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000
[  575.317869][    C1] R13: ffff88807c7fe030 R14: ffff888028200c08 R15: 0000000000000820
[  575.317883][    C1] FS:  0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000
[  575.317898][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  575.317912][    C1] CR2: 00002000000ce000 CR3: 000000002b45e000 CR4: 00000000003526f0
[  575.317929][    C1] DR0: 0000000000000000 DR1: 0000000000036800 DR2: 0000000000009951
[  575.317941][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  575.317953][    C1] Call Trace:
[  575.317960][    C1]  <IRQ>
[  575.317969][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  575.318002][    C1]  ? kcov_remote_start+0x97/0x7f0
[  575.318031][    C1]  cm109_urb_irq_callback+0x709/0xca0
[  575.318057][    C1]  __usb_hcd_giveback_urb+0x376/0x540
[  575.318080][    C1]  dummy_timer+0x862/0x4550
[  575.318122][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  575.318149][    C1]  ? __pfx_pwq_dec_nr_in_flight+0x10/0x10
[  575.318186][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  575.318207][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  575.318224][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  575.318240][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  575.318276][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  575.318293][    C1]  ? read_tsc+0x9/0x20
[  575.318321][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  575.318350][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  575.318373][    C1]  handle_softirqs+0x283/0x870
[  575.318395][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  575.318418][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  575.318445][    C1]  __irq_exit_rcu+0xca/0x1f0
[  575.318464][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  575.318491][    C1]  irq_exit_rcu+0x9/0x30
[  575.318508][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  575.318539][    C1]  </IRQ>
[  575.318545][    C1]  <TASK>
[  575.318554][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  575.318575][    C1] RIP: 0010:kobject_get_path+0x6b/0x2d0
[  575.318596][    C1] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 e6 b4 b2 f6 49 8b 3e 48 85 ff 0f 84 bd 01 00 00 e8 d5 ae 05 00 <48> 89 c3 49 83 c6 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc
[  575.318613][    C1] RSP: 0018:ffffc9001852f798 EFLAGS: 00000246
[  575.318629][    C1] RAX: 000000000000000b RBX: 0000000000000003 RCX: 0000000027bdeb03
[  575.318642][    C1] RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff888027bdeb60
[  575.318655][    C1] RBP: 0000000000000dc0 R08: 00000000669bcdce R09: 00000000345292f7
[  575.318667][    C1] R10: 0000000000000012 R11: ffffffff81ac4b00 R12: 0000000000000011
[  575.318680][    C1] R13: ffff888143762010 R14: ffff888144b32010 R15: ffff8880486e4000
[  575.318699][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  575.318732][    C1]  ? kobject_get_path+0x6b/0x2d0
[  575.318757][    C1]  kobject_uevent_env+0x292/0x8c0
[  575.318787][    C1]  ? gadget_unbind_driver+0x315/0x430
[  575.318809][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  575.318832][    C1]  device_release_driver_internal+0x46c/0x800
[  575.318864][    C1]  driver_detach+0x1f3/0x2d0
[  575.318890][    C1]  bus_remove_driver+0x226/0x2f0
[  575.318913][    C1]  usb_gadget_unregister_driver+0x4e/0x70
[  575.318932][    C1]  raw_release+0xd7/0x260
[  575.318961][    C1]  ? __pfx_raw_release+0x10/0x10
[  575.318989][    C1]  __fput+0x449/0xa70
[  575.319018][    C1]  task_work_run+0x1d1/0x260
[  575.319046][    C1]  ? __pfx_task_work_run+0x10/0x10
[  575.319073][    C1]  ? kmem_cache_free+0x18f/0x400
[  575.319104][    C1]  do_exit+0x6b5/0x2300
[  575.319134][    C1]  ? do_raw_spin_lock+0x121/0x290
[  575.319159][    C1]  ? __pfx_do_exit+0x10/0x10
[  575.319196][    C1]  do_group_exit+0x21c/0x2d0
[  575.319220][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.319241][    C1]  get_signal+0x1286/0x1340
[  575.319276][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  575.319311][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  575.319354][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  575.319384][    C1]  exit_to_user_mode_loop+0x75/0x110
[  575.319412][    C1]  do_syscall_64+0x2bd/0x3b0
[  575.319431][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.319449][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.319468][    C1]  ? clear_bhb_loop+0x60/0xb0
[  575.319490][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.319508][    C1] RIP: 0033:0x7f627bf8eba9
[  575.319525][    C1] Code: Unable to access opcode bytes at 0x7f627bf8eb7f.
[  575.319537][    C1] RSP: 002b:00007f627cee80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  575.319557][    C1] RAX: fffffffffffffe00 RBX: 00007f627c1d5fa8 RCX: 00007f627bf8eba9
[  575.319572][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f627c1d5fa8
[  575.319585][    C1] RBP: 00007f627c1d5fa0 R08: 0000000000000000 R09: 0000000000000000
[  575.319598][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  575.319609][    C1] R13: 00007f627c1d6038 R14: 00007f627c2ff940 R15: 00007f627c2ffa28
[  575.319638][    C1]  </TASK>
[  575.319649][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  575.319662][    C1] CPU: 1 UID: 0 PID: 14881 Comm: syz.3.1850 Not tainted syzkaller #0 PREEMPT(full) 
[  575.319684][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  575.319697][    C1] Call Trace:
[  575.319705][    C1]  <IRQ>
[  575.319713][    C1]  dump_stack_lvl+0x99/0x250
[  575.319737][    C1]  ? __asan_memcpy+0x40/0x70
[  575.319760][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  575.319787][    C1]  ? __pfx__printk+0x10/0x10
[  575.319825][    C1]  vpanic+0x281/0x750
[  575.319847][    C1]  ? __pfx__printk+0x10/0x10
[  575.319873][    C1]  ? __pfx_vpanic+0x10/0x10
[  575.319895][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  575.319940][    C1]  panic+0xb9/0xc0
[  575.319962][    C1]  ? __pfx_panic+0x10/0x10
[  575.319996][    C1]  __warn+0x31b/0x4b0
[  575.320017][    C1]  ? usb_submit_urb+0xfc1/0x1830
[  575.320041][    C1]  ? usb_submit_urb+0xfc1/0x1830
[  575.320063][    C1]  report_bug+0x2be/0x4f0
[  575.320081][    C1]  ? usb_submit_urb+0xfc1/0x1830
[  575.320104][    C1]  ? usb_submit_urb+0xfc1/0x1830
[  575.320126][    C1]  ? usb_submit_urb+0xfc3/0x1830
[  575.320148][    C1]  handle_bug+0x84/0x160
[  575.320171][    C1]  exc_invalid_op+0x1a/0x50
[  575.320194][    C1]  asm_exc_invalid_op+0x1a/0x20
[  575.320212][    C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830
[  575.320235][    C1] Code: 44 89 f2 e8 61 3e 00 fa e9 13 fc ff ff e8 67 68 93 fa c6 05 98 43 61 08 01 90 48 c7 c7 60 05 35 8c 48 89 de e8 b0 03 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 41 68 93 fa eb 11 e8 3a 68 93 fa bd
[  575.320252][    C1] RSP: 0018:ffffc90000a08868 EFLAGS: 00010046
[  575.320268][    C1] RAX: 36d7531674191700 RBX: ffff888028200c00 RCX: 0000000000040000
[  575.320283][    C1] RDX: ffffc90002392000 RSI: 00000000000004e5 RDI: 00000000000004e6
[  575.320297][    C1] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a
[  575.320312][    C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000
[  575.320327][    C1] R13: ffff88807c7fe030 R14: ffff888028200c08 R15: 0000000000000820
[  575.320355][    C1]  ? usb_submit_urb+0xfc0/0x1830
[  575.320376][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  575.320408][    C1]  ? kcov_remote_start+0x97/0x7f0
[  575.320436][    C1]  cm109_urb_irq_callback+0x709/0xca0
[  575.320461][    C1]  __usb_hcd_giveback_urb+0x376/0x540
[  575.320486][    C1]  dummy_timer+0x862/0x4550
[  575.320526][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  575.320554][    C1]  ? __pfx_pwq_dec_nr_in_flight+0x10/0x10
[  575.320591][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  575.320613][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  575.320631][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  575.320647][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  575.320682][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  575.320700][    C1]  ? read_tsc+0x9/0x20
[  575.320727][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  575.320756][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  575.320784][    C1]  handle_softirqs+0x283/0x870
[  575.320807][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  575.320831][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  575.320859][    C1]  __irq_exit_rcu+0xca/0x1f0
[  575.320878][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  575.320905][    C1]  irq_exit_rcu+0x9/0x30
[  575.320922][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  575.320952][    C1]  </IRQ>
[  575.320959][    C1]  <TASK>
[  575.320968][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  575.320988][    C1] RIP: 0010:kobject_get_path+0x6b/0x2d0
[  575.321008][    C1] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 e6 b4 b2 f6 49 8b 3e 48 85 ff 0f 84 bd 01 00 00 e8 d5 ae 05 00 <48> 89 c3 49 83 c6 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc
[  575.321025][    C1] RSP: 0018:ffffc9001852f798 EFLAGS: 00000246
[  575.321042][    C1] RAX: 000000000000000b RBX: 0000000000000003 RCX: 0000000027bdeb03
[  575.321054][    C1] RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff888027bdeb60
[  575.321067][    C1] RBP: 0000000000000dc0 R08: 00000000669bcdce R09: 00000000345292f7
[  575.321080][    C1] R10: 0000000000000012 R11: ffffffff81ac4b00 R12: 0000000000000011
[  575.321093][    C1] R13: ffff888143762010 R14: ffff888144b32010 R15: ffff8880486e4000
[  575.321112][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  575.321144][    C1]  ? kobject_get_path+0x6b/0x2d0
[  575.321169][    C1]  kobject_uevent_env+0x292/0x8c0
[  575.321195][    C1]  ? gadget_unbind_driver+0x315/0x430
[  575.321217][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  575.321239][    C1]  device_release_driver_internal+0x46c/0x800
[  575.321271][    C1]  driver_detach+0x1f3/0x2d0
[  575.321298][    C1]  bus_remove_driver+0x226/0x2f0
[  575.321320][    C1]  usb_gadget_unregister_driver+0x4e/0x70
[  575.321339][    C1]  raw_release+0xd7/0x260
[  575.321368][    C1]  ? __pfx_raw_release+0x10/0x10
[  575.321397][    C1]  __fput+0x449/0xa70
[  575.321426][    C1]  task_work_run+0x1d1/0x260
[  575.321455][    C1]  ? __pfx_task_work_run+0x10/0x10
[  575.321482][    C1]  ? kmem_cache_free+0x18f/0x400
[  575.321512][    C1]  do_exit+0x6b5/0x2300
[  575.321542][    C1]  ? do_raw_spin_lock+0x121/0x290
[  575.321568][    C1]  ? __pfx_do_exit+0x10/0x10
[  575.321606][    C1]  do_group_exit+0x21c/0x2d0
[  575.321632][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.321652][    C1]  get_signal+0x1286/0x1340
[  575.321687][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  575.321722][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  575.321765][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  575.321799][    C1]  exit_to_user_mode_loop+0x75/0x110
[  575.321828][    C1]  do_syscall_64+0x2bd/0x3b0
[  575.321847][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.321866][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.321885][    C1]  ? clear_bhb_loop+0x60/0xb0
[  575.321908][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.321927][    C1] RIP: 0033:0x7f627bf8eba9
[  575.321941][    C1] Code: Unable to access opcode bytes at 0x7f627bf8eb7f.
[  575.321952][    C1] RSP: 002b:00007f627cee80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  575.321971][    C1] RAX: fffffffffffffe00 RBX: 00007f627c1d5fa8 RCX: 00007f627bf8eba9
[  575.321985][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f627c1d5fa8
[  575.321998][    C1] RBP: 00007f627c1d5fa0 R08: 0000000000000000 R09: 0000000000000000
[  575.322011][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  575.322023][    C1] R13: 00007f627c1d6038 R14: 00007f627c2ff940 R15: 00007f627c2ffa28
[  575.322051][    C1]  </TASK>
[  575.322304][    C1] Kernel Offset: disabled