last executing test programs:

9.51816563s ago: executing program 4 (id=957):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x80, 0x0, r2}, &(0x7f0000000500)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x609}, 0x1})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26)
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000002880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x88030a0}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080080}, 0x80)
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2061)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r7, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0xc, 0xfffffffb, 0x12, 0x5, 0x3, "c02db8159fdcae50281e45d2767f7c7199e33d"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

7.866469867s ago: executing program 4 (id=963):
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r1, 0x6)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x180, 0x0, 0x0, 0x200000, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x18, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002780)={0x24, 0x0, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000004f00), 0x40, 0x40000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
close_range(r0, 0xffffffffffffffff, 0x0)

7.501801998s ago: executing program 2 (id=967):
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
r1 = socket$isdn(0x22, 0x3, 0x10)
sendto$isdn(r1, &(0x7f0000000080)={0x80, 0xd, "f949dea380ad7b4bbf1510a1fe027736e9fdccc56468aba8279b1797fc98d7e7a1b1a9c29164aba31512269ceb89f43ebe4f8b9cc2d875873804d21e017d8b01c846656a91d537e23e327a494f60202b7c326753e88fdbf74e3e808d706ff4712774a61e510c75be68d62285c94101ff7fabff1d2802fdb57cd190089c7854ebe3f909866ede1db4427ac90a2ac6a32620"}, 0x99, 0x811, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000000200), 0x3, 0x2)
ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0xa, @raw_data="7b8d090bef4b3e339eb18c4ad6d85ff588bd19b6819300674a469dfb4d77d5d723ed5f39231d1590ba54c4c5af46de1db8718e41fd621efe1494a8e34315be37c5a1655723ab57dd202111af9725f991854a51ea3afd0b2d5fab511f43f19c81b9f9770b8e4f74b75ad6a352fe5eb2c4f31a935445ef19010361468ee6c5ae1d66c6e9ee52a6beac70d03706aeccf4b0b2e014716b8db3e30207f8a7b57996fb552c691709fe2e3170630d682a8b05fd5f74ae4525980c1cf18b97077b858310b5dc3f8ab231e011"})
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0xa, 0x1, 0x6f, 0x40, 0x2a39, 0x3f8c, 0x9424, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x34, 0x0, 0xff, 0x12, 0x1a}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$kcm(0x2, 0xa, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.136287807s ago: executing program 4 (id=969):
socket(0x10, 0x80002, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004b41460800000009ea8001020401a9df1e0001000000000904", @ANYRES32=r3, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0})

6.017755511s ago: executing program 3 (id=973):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x300, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0xffffffff}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x133e00, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/meminfo\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000})
read$FUSE(r6, &(0x7f0000004600)={0x2020}, 0x2020)
preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/99, 0x63}], 0x1, 0x80000000, 0x2)
sendmsg$nl_route_sched(r5, 0x0, 0x4000c00)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffffffffffe)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0x0, 0x9, 0xb, 0x3, 0x6, 0xb, 0x5, 0x2f, 0x3, 0xc0}, {0x8080000, 0xe000, 0xb, 0x2, 0x1, 0x0, 0x24, 0x1, 0x5, 0x0, 0x6, 0x5}, {0xd000, 0x2000, 0x4, 0x4, 0x1, 0x6a, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0xff, 0x9, 0xe, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x30000, 0x30000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x2, 0x4000, 0xf, 0x98, 0x3, 0xfc, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xffff3006, 0xeeee8000, 0x0, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x9}, {0x80a0000, 0x9}, 0x4005000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]})
sendmsg(r5, &(0x7f0000000640)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="0f3558c71c029af2afba38a83432b357dd8759fb2ad58d22ba0199e83812bfe3a800097dd67cabec49c4270d720b52912ef4d95ae95cb1a4a2ff58402f00fc4d72b5e44d7de8deba1838523543b2157d76207f3e3687faf7571528670e938e4e79701b", 0x63}, {0x0}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="600000000000000002010000000000007b23834a4c322dca5b4a8b011478e8e2acdcd4b4f78e173d307bae08ac13ac5de47b375ac6c8c86a6de8bda761eb6d05fb711dc85f5e99db6ea11afaad7ca6b2954e699f8c31bbbca16a29cac320000000903e12381b285f61040000003df2e987c27fb5f0931efca973ee0000000000"], 0x80}, 0x4014000)
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xd, 0x4, 0xd7, 0x0, 0x9, 0x6, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x1, 0x0, 0x856c, 0x8002, 0xd4, 0x4, 0x9, 0x0, '\x00', 0xd, 0xffffffffffff8001})

5.706046217s ago: executing program 2 (id=974):
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000440)={0xfffffed0})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x7ff, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
r5 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x2802)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = socket$tipc(0x1e, 0x5, 0x0)
getpeername$tipc(r6, 0x0, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x80105013, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES16=r7, @ANYRESOCT=0x0], 0x80}}, {{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x24000004)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffffffe, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r8, &(0x7f0000000640)=""/187, 0xbb)

4.790060482s ago: executing program 0 (id=975):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r0, &(0x7f0000000040)={0x2, 0x1}, 0xfffffffffffffffe, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x1, 0xc8, 0x9, 0x2700}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}}}}]}, 0x38}}, 0x0)
r3 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, 0x0})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX])
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

4.346935426s ago: executing program 0 (id=976):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={<r4=>0x0, 0x7, 0x1, [0x5]}, &(0x7f00000001c0)=0xa)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r4, 0xfffffff9}, 0xc) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0) (async, rerun: 64)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async, rerun: 64)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)

4.202058076s ago: executing program 3 (id=977):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100))
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1})
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x40000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.90043975s ago: executing program 4 (id=978):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000021c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000080)={0x20, 0xf, 0x3, "b3e71b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x3c, 0x1, @local, @local}}}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES16], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b"], 0x0}, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x5, 0x80, {0x9, 0x21, 0x83, 0x3, 0x1, {0x22, 0xe35}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x0, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x80, 0x8, 0xff}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0x0, 0xa, 0xff, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) (async)
io_setup(0x8f0, 0x0)
r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) (async)
syz_usb_disconnect(r3) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0xb0, 0x83, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xe8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x9, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x6, 0x8}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xf0, 0xd3, 0x7, 0xff, 0x5}, 0x4c, &(0x7f0000002340)=ANY=[@ANYBLOB="050f4c000614100465b96e69b789c6007767bd6900f91520af0a1003000e000302000b1001082200566b09000f07100210bd8000141004ff8f904f932383ed733846c5b60231ff7ddb100b584afaa07b1e5ee77091b7d0c1856a804b0bc296a29da6bfbd61cb5670d034ca97caa9c4e9994baa28cd8548fcd8cdd93d9032c5e61d6fa0861db10827fbf4bd8699da15c1dc5600c161a20625af2c99e9273c980a600e4538e13b997a2d0a34f7f204c574c90967f7c350e1e259769b538b46ad8c266a6a0f3b4dbd152f2bb64cb5adbb"], 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb5, &(0x7f0000000440)=@string={0xb5, 0x3, "3b897ce352d6501c2d6cc615147fc3d7ccd37e274934a860128f14b5dcbc2d5e897e8563f2eeaae2f88faa33c166d747900755cad5543386cd9d4e3f5ccc6874718f9e0389e953224727e0eb392f4f4f53c696b8d1a36f2633ae68216261af9ea4e478d445e5317682e2dbec1385c3d02ad35f7d2765c06a046db712e2c3dec5e73c39ac560b4ee594f2399a70fbe2ae6e99de9a050a3d1af13805d1f5b0e5d5d3faef6a2753be0d14606035c1e92d41282177"}}, {0x3, &(0x7f0000000500)=@string={0x3, 0x3, '{'}}, {0xdc, &(0x7f0000000540)=@string={0xdc, 0x3, "50e8fee49cd94616ed1d0fdbba36a9708dcf18fe62f056ac2af5a61ec1ffd1e847ad1066bd1eca1a24eb45900c7d7b1eb7307fe32b5d75835efdddde98725dd51ac148e4f1899d9549a7d9c4ad45764df70fa9731cbc595588273e0599bb8c2169ec0161de55ec4718d1a87fe42239fafa1266f43e5e5d4904c63ff563518ae01ed530f67f1d979ab71157cebb8b9a44cdb125b7ee2fe1c9d0cadbc9fc0faaaf96938d370e0e111d87d086b85faeed17ebdd82914e46424cc0ca1440759538508c322529a696a6a929ca6deb4070814c7b688ce7b3a16ac00c47"}}, {0x4, &(0x7f0000002240)=@string={0x0, 0x3, "387d4fc6536abf045fe01ab8dd25cda290576069554a12a548e729b055e1bd08b49f9da00064c5384e56cbe5783cdd3eccdea45f36ea621cc399c3f47aef6cf48b017bbaa79d0d0be3c41280eacc30a9c952a1a448a1ee3230b4d7a06b25c5a184f1fe9d93b94128f7f2237f4bf1734477c76599a79a36559d2cfb61cb92854a7ac728fc3d69c7333e90efb5e676043c73ddea9614ff7ef354adeef43f1ff625ee61efde25422685432a56d03606f506df8c6d98dde64f2b2249132bc31c43ba6a3d17e54f32e2205b874f32744e5788d5afe808dcedf3b0707045efc341fd1859f89637f962fdae72fc7cdbee310e7ccc29bafbeba4090ed9"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x412}}, {0x95, &(0x7f00000006c0)=@string={0x95, 0x3, "7ff5f50878eed05b7fec702f029c769610b2b53d154d57212aa63f4049baf17438f5ce67d894b14b00bd5b4fcd0b3c8d29957e1a77fea27e48c7be30f96446483d3405ab4819e86bf5aa66141a936c610ba4a43d43ae89bf1033be81f870d13523a44f758fd597d3dca197bc0fe408128653d114fcaed9ee11fc642006c6a09f9fd4008a6845251352190a0131ec64daaa8c57"}}, {0x79, &(0x7f0000000780)=@string={0x79, 0x3, "d89c50d06fcafaa2b1e0f0f38ca895699f1852c89e8f2301eb654f85ab5e093aa29b410632e5fd37a1df118f6e8762660c5f5843ba7d995f9b6d3c6a1a76755b08f54034ec2eb959bf7436fc10981c397bf37cead930f668bc2b9c3de9c0ecf72aeb3d8bbde2546edba0dcd3b2ffb934e4dc141accc36e"}}, {0x72, &(0x7f0000000800)=@string={0x72, 0x3, "b81792b4d353315561781e5872fdc53b00bf4c79a8368c4a6eb4be5e2b4bd791469d7ced84ad13679db39f2ec7c40679fc266d3c5ce3ccc96d13567e4d0e2ab6901dece25b5fd1bad328a7cdc2399b2a2d86c2699e05a06b41668d6b84d6ab36a41fcdb461b97043324e61c577d37c70"}}]}) (async, rerun: 32)
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854e"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) (async, rerun: 32)
r5 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4000000) (async)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c885) (async, rerun: 32)
r7 = getpgid(0x0) (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_pidfd_open(r7, 0x0)
fallocate(r8, 0x3, 0x68, 0x3) (async)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0) (async, rerun: 64)
io_setup(0x0, 0x0) (async, rerun: 64)
syz_usb_disconnect(r3)

3.799615335s ago: executing program 2 (id=979):
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r1, 0x6)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x180, 0x0, 0x0, 0x200000, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x18, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002780)={0x24, 0x0, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000004f00), 0x40, 0x40000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
close_range(r0, 0xffffffffffffffff, 0x0)

3.113958873s ago: executing program 0 (id=980):
r0 = openat$kvm(0x0, &(0x7f0000000780), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000000))

3.094796602s ago: executing program 2 (id=981):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
mlock(&(0x7f0000490000/0x2000)=nil, 0x2000)
mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$xdp(0x2c, 0x3, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x2)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x3, 0x7, 0x8000, 0xfffffe0000000000, 0x100fa11, 0xffffffff}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r7, 0x8800000)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x40200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0xffffffffffffffdc}, 0x1000}], 0x1, 0x40010500, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880))
sendfile(r9, r7, 0x0, 0x578410eb)
mmap(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x27ffff3, 0x13, r1, 0x8572000)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000200)={r7, 0xffffffffffffffff, 0x10000})

2.916424249s ago: executing program 0 (id=983):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x300, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0xffffffff}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x133e00, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/meminfo\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000})
read$FUSE(r4, &(0x7f0000004600)={0x2020}, 0x2020)
preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/99, 0x63}], 0x1, 0x80000000, 0x2)
sendmsg$nl_route_sched(r3, 0x0, 0x4000c00)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
socket$unix(0x1, 0x1, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7fffff7f}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000000)

2.613643237s ago: executing program 3 (id=984):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000700)={&(0x7f0000006000)={[{&(0x7f0000000340)="9311752b2890525422e50a2620cb2b315ca7f8e5f9b088f9109602060581655da1e2a4bec8926f0acf54bee805773938137ac3ac4d2fcc65b79480f6da12ffef3519cf15c82a713330a76a1b2e1ac20cd625fe60496cfc2147b38d8f1f681657fd93edd030bc7d51be5e3876ac562a2e85a6d9af34606582317a3fdad576c96acdd55654895bab479031d19270c10a117fee0efce02c67a353484096cd85bb419a552efd60adb7962c78f5a109df388f59aff121b983d85102086c1e0efc64e15dc19b4db3c5b1b01f05dad1a35b7a821635c2ddc3e60075a05e4788525e6efa0aeb3993b0e02b3e145be8517155c24f0e82f73d5e", 0xf5}, {&(0x7f0000000280)="ccd5ee80db4890b98c599735bb812ea37cfcc67345e0d5eb0d59a5a0cf47bf0c", 0x20, 0x1}, {&(0x7f0000004300)="626a8544f71b82961b5bffc8e5d27ef03e8f2a30806943413e816f8a03949685e409311d6f95fd3fcc68a5947a250a5aa517f9ee122643d9176cd268f12aec526a8372c7567b16231b19d53a3307165c97e923f33b2794b37131bbed7736e72b124600398feb2ebba14e1e0751381e08356d3763cea4d7a0fbc9d38f707cec6ca731fd7a08f851381dd6cce9929db3686820f2ef669899bf5862f0f885eba31eed4eef36a6c86e3ec9e75813b6f633294935c83bc8966f4a3bc56dc2159128750cb1cf3dc9371d372efffd9d34cba4d2a1f2d4eaa2b0be5d0ddd850aae603138aaccc88da302cf6c334d48e23a582f9a1656a4b057ecb284691b62c7c968ca8e70e1ce3e63f3303fd0142a211ba797f930fcf5a7bfc66951412a464a35e8a21995a47806dd3d59d024dc97ad5576f4ec11bc9e958b65290fb4f89136e6cf47ef65cb38c4194383ead2fd6682f1ea3a82547189f42db41cf9c7d9e268aa3ed66a1a7fee9b2c733a0f771e7feab9dcee7bab092113387f20488ab61748798469c572509c5226da7afd9f5b133f8c92c3a0f9375065905ff5e426ee078867e35c11a0dfcd4919941e3f990897505d081d1e5dc72366ff109543951e70b3befd8664fadca58a45da165d5837a69929b9e471b5a27f54f90bd173662b60aa55cbf81cc743fcb42331096d4f2e9709e300633aa4c8dac5f1845f900781000e94eb783574e7fa002ada02e84646df48c73f0829d6f8342cad5efd1c7963c50a4c59bcf3e2816d4b690fd4eb487e88cdcdc13040bc93fc8f34fe0a2fbfa4b8e03d0e034d83467820c32ee126d5283d710cd2dca195069b7f8426e595a5852088978f219dedd9b68010af4b3754c7a1c83a292e15f945af6f0470b47990e6a8827f4f62d285dd2790a935beedb1304a926d84df0edd6c3fae7969b4916a72c4056978e42d236cffa7e0a68210fefc283a907d40f3fbc4d20870ad478f7054f60f87443330655d00b3512ecb3692b326c2ebdc05bbd2323f732e1d7b11272cc7161516258ca2b21d874c4a44ee493215f2480834613dba33624dbcf162d040271df5861e508894ff818d60c329775f94b604c714c16a3d23c2969a243eadb309f5d9f0b415daa536fe64ca952c1b7601fad6f02c5ee5b76c10fb286de1c9ce89372efef9da0c8521a091046a3d7c0887f3396da819a328f7cf0c76b34b4237ef06dad6604c826345fe73b565b5aad0a73b2f2e89519ae281764679018c619b11d7b1dd42c4ba724c8cac5e41d9562793fef9733b748e2372b2f5d34473e542673161b57445d9153159f2fc54868fd0f5b5f0a4fb389fac612c5bfc9f4aeae064d37867e85a72ea60ff7cabbcbfadef3fafec75c0df3986713933727656eda9fca04654a2780b6e84664ea81a1a6c3b6b53a8d8b61fc3f317ade7422f6adc50bb7cd6a41ad5400a044cf76bfc8a6b6790842512a47c18acfaff9123a45948e81353b48a2c0f9e10c7689cacf87c75534d32aebe6169b85afa2f09363dfc587c2056c5ce0df4a2e26b90420595bc1060d76c3891399da3e74a1224f09572be7d161bdeb1a21d019e2822a90f5ef9922280b746e2003745b790f25d70d1de196fdbf395ec226cd3082eeb851b65490bea69df98e11eff57b701818ab68d007d0e08d10cfcc0bfba064435e1d7f91a9c22b473033d56094b7494b67fd792fa0caf598c451241e812552c72dba634f4118ca89ffca77de2a02259646f31254da55672beff4e4845bc60161a6ef15f2787383b6a2426637fe54b1dfdcf023a858c3141d5cc8d06da8bc29af75469532e66058b4bfa16981599131375fa3ffa6cde617618c959430ada19604c2d5d59360d6eaafe30ba46ff42dd83f68518be20a93c6a6249d34b041cd5e2467a4d24872e6d6e695ffa2f4bafd545b84d336865fc387dcdf357e2c232a368d873e81a0dd253331be3f3730d5b2460bfbccd4d0cad9b1759a7faf8dbdd7bb5f5bcf39ded551b69b2e4c24a082340182913f2fd2e18942297de91bc2a8578579385f5f40a080501413eb51664e8b2d550ab94223c518b298e4a648ad96d9073076be48d3ccab3eb89bbcf64dccb94cb73ebdc33969023635a7d3f6b3754ecae06c2b10a7b7538546b323bc2d7692e130cedb365446aee699d1f986b3c9416a40ffa2389c95681e6317ac7c6a587edeff6f4f3b43d0fcbd803b2e2710bfff9128f21b7fea85c1d10628e89387c904b5293bfa4b347e00a0ef153d233526ec744d29fa0322b5b1490133bfff30ef73382c988aab801d7e9ea450d79cf7055b4213d2349bdd3cc8dbca3e098d3fa6e2da2f9fb174262f5e5a6e8a61003111d238dfd6cb44ac25ffacec6180864b035d7abbf2bfaeff56975722f80f2b7ecea8ed15b2fa8af0e8ff0015a29172f6011d08b7c831a67b3871f20e0f2e0d3170210d47e5f098eb55ed1426f714a9bd091fe82d0783dc3a7aba6a78175dd3b37e4f97f508f51263f80f902fc3b9b3fc2ee566d39bd50b288897d096168f2fa7ddead63f4e3e6cd01671f626ddb76a2b6b129cc23e68c1d9679af0e2c43bbafd9fab45fca9d28e8c6cab86bd5aa30c5122d595e82c04604a4ffcedc10b1d6cef4dda665c0851ecc3b7f1c743317b652189d8bc413d4d925bf5c9cea5ca041da7ed1922bd632dbd81f076235e55ba68e688368291c7d1eb69c3442a586fc23a2ae13ce79d057554e4fd0a0e4d6a3ec0f45efa11913152ad5f3ffca5d1799630c8085171e260d50811d63d8dfd129b03d67c130461e8e970dac460cbdf4b10bd962037aa8fe649e273906bb3a03d366ed2e3c63d0904cac153c51752bea6a6925794c47f33fc4152a18c215588b44bfe55e78fd2393438c803fd3a291e08ef8c6c43b45e9f32fb25abb8d8bbe48167e57e230b4fd0f8806231f8c91adacd165500f472431370874c8e84a6539c9fca7987b6dc6274ba7d0bf78e92e12e814166719ffdc5f2133cac179dc533a0e4b74ae3722f1b25274ea633729e8b994cc83f3e62e419abf375ea37c4143ce642367e7616cc0881fcae719e7eae066e8c7cdb18e6296f74ad37cc712b944a5341034a032f9666239740b9c2e59df9238a9d63e7d0c3373b8b3485530088fdd98178c7204b308e0a6d0c55159074d1dec4af821931be36d6a684c6bda3903af9d8c8506478fa674a416a6001d1fada3e114d6780b52c9603c45966f75361f3b44f2ce195b50f7061e3ab30b948e3444d97efbacd0ec4958523bf29a0f2fd5fdbbf8be59d894c6c16d0d9765e1daad6bb129ea9659f304335d1916bb81f1cf001ff66d36e10ecaf5aa75cc1b748ff1e6aea737df7c74ed17b79cce0f3f72ec2a4d8353d856706d161d71e6524af6e6b5a20145f18ce486e5963941ebcb568b55940a6e39a410fb65814c54f41d2b4f6f1220d340e215cc8b2548b3ade39f55b511188cdfdfe7c119b890d820c6e19655560ade287ed95f27e75741461c4bcd13aaeefbefdc09d1474892d907b1cdf2eb7edaf10b4496dfde1382a8e558bc3c327993d961a4fb44ffeb881ee89f1ddf89acc12e341a160976cbf964f6d1be038346cd231c67ac6cdc76661a8a6e409436d5a8ff4e9f726e1e136ebcd16e6d6d066e8abb636d003368e6ea499ee01cedc9afc6d1205c523cc5260b35d16c9d15b13e171619d2bcc3957f0a2f520cf71dba6a891ce682280109bac09fe4de89e77d2a6e8c96587997805a431d0de3e203cdb8464a17149b5a6045cfcca1dfd5b52ecb2058282140e2966e9c5c60785c043827fa5b7e81c942326df5143d3e8264196bb9b84faea83d1733f6072b9711b13ec9277fa6debc46e24d825151fc191ba4a0cab8164b6f8cb19bd2bb7870040462df2de2e21d1da3907ea6365548f49b560fe5c15378041ffea9fa9c90cf382225fa474567c43bf38fd3674f31a2e4c21399e061612d807942ebd696934fb0513b2d1d0ca1289b1f2590bebc4b92fe1e2c4e621a0302a75315eed9c016d8bc8a5a5067ab4e7e516e9dd0325524d8e3cc8b5635cd19af02c6e1dbcd0b52f01940f6c5158f226b9c1d00da1679a5892c3361ac39a377367a2f20446dcb347312cec1fb261a5c83a1d2eabc4cde2c3db9e0bec5779f22acdb5dc76edd34ae7b8d406657b5b6b11c26733faf8558dd51485d232f94303d8c4bbfeca8391189cc306813c0a39935c39bbff4b40206479e843cffc21d00d6174cd2635433d59c48e2cebda5e6bc45fbd15422ebdcbd87cefc5a996d4e6787f2188224dcd39a53819764ad77e325a369449044475ca87f2f25ee333d8726254e8554ab1fab8715133839191e7809df3a8ca8609a2c1cb3de1dc4fb2a280ce9aaf9e267b86ac56e1885e99c063f6e5e9ae186669797be19d215ef04ee29c8504ac3505925ef1af541b86d784c8569e830b87991db40c3dc11f49d87c4e931f7ced8799467f5a0e8e51e620909ac8742eaa598428e003f3aa1e1193c4cb78a885db60ab8d506eabf482a828f859797fc74e8a084d3a3aea14b903e7f7d6ece896edfbbf24aded865d56e02c8ac4b7bb3668e5579ac471eef13b4ae93824c3af1af5b1c1a38d110ea2aa152f5450c35147171ac183320d4b471fd109adefd0ede85de67c2bf473d36e3d2348293c8cce850354bf019f110d9d5e6b0d0672f32d44ba75cc43b4e884091e164b75bbd2e05e19567a12e71fd842f2fddd9e4d78e544ec63e433255a58cb8e37fa4290c0a2a064d8a610eeec00e63b4dbf981c893e763b9e02f6134278d52f43bea4b33918d8c3d5223c07521bdd904cc0758ade69669a9fb646871d3128d6230caa5d18a5a92eefd0a52234033e6044ab16b24b08ae93dba871b4f1717f62c3c69a4f80508d9cb53dbeb2a2ac2a214b5d9c453b047fe3bca7c51def69ebb8b8703940d903a258cdf9609c484619108d0af014fc3b22d95ae99e7787c9202e175a9ba9da9bd938146d96616fe4da30a60176ce52ee1efcf391af568ce4f41b264685095af2a05f81e174817258e7e41f66316c40559331021f32a2b7bdd0a3dfa71740165f6700b9c11c6419626c5cde026d55b934651b4f9bbd4030d4566feed82bfa01c8a26a3e9291ff0dc7388127decf29093fd4389726734a94141a6c86153dca76bfc2cf4fe288c0ab357b3402878727258df13e0e972cf488b35f5131eea7f628c2023110a95918425b22f525d5af3b1ba35547556b574189259b8d0a051f0da834a6c70a4521fd968e92de6312a936d484fcc2a2579ca06206b7b108d015e2e3be00078cca5bc14bb079358134becc6045f129f20468ca9ac6a7ff411d95b8992ad57c6d83d9a26b21e731b1ec260442607739d3a1bdf51d547782599e5ae03e1a3ca90530cbda40919e07f32e1d61f1e1e0ac0eb68f6207cfbfd8109a2af92776be7888ace3b481a8e91b8d17cbdaef214518c25d4e3d62bc0c817c326320a6f05b7fecc2cdca8b87f437799cb80ce7fa1688e66a8715c27c046bd9511b4bf79e4338e798c59448216285798c9830f7cb7a488b83977144b453918f88335a17839747a8218e3ccccbb64d2ec02c20eb6dbe762543dea3611dd95aef68667fedbc083ded664a33526f50d94c9221984c1e6034d9f05864767badd68d07c5d24fad58d1f4ee6efecc3f9704717e6af44c4a489fbdc341790264969c323b81c7720974d10a9726accdd936ecaa57dfe0b147ceb114ef38cb13ea94baf84c2ba664dffd3c77825460914785b2efe5e385f4be0de", 0xff0, 0x2}, {&(0x7f0000000440)="300af27344a50195227146b8db1c7007628b1a676b869597658cebe124ceca282f2f0b61eb5fd4f118c294aaf8f932a7e0ea6030f9849a86a5aec097eba6013c21acd5ba18adf45482a3b7d4218c5422c80dcae805ecc3409a7e7b0d3b1013193ecddfc9e7c9ed6d36571cf11233ba5155aca3de98dd7fd18c742ec7a99af0129be917fbfc1f4af5460a0de577ccbd6fe7a6ca8581eeda02752b103a9f1bfb06e142eeb6040db577911d2e7a21b90c8e3197483c65e8b593906db93c42569cc61e166ad7ac740ca3c51e8bfc2695", 0xce, 0x2}, {&(0x7f0000000540)="8f646dcdf59a6c8f7cda182f03b6192af841432c66758f89e9305d8c743f4b58ab39cab8a7bbd61db9b3708df3c56ce3ca31e29ed8e4010215a78c9484209b6cd9d3bd97f9d64e378fc9c2cf406edf24cfb245ddc1289cf4640ede33ed05b5f028fdd6669dc4d9796489b6097f4e034586ee9bce3c92e9270adfd03e4d2600367f23beecd163b345269f86bbbdfc5778e8157d55a6cd0327d64071d74fce9fc8ba9a13ffd47055ab531c", 0xaa, 0x2}, {&(0x7f0000000640)="4d851546972f53e3086953b1f234292d31361a1a685ace8c95ebb435af78d45ff8383d2ad8433878de3030ef60e5d6a0cfdfa15119c94634e0505adff1249a4071d0e7ae8a137c8c3d9caf7b6c53cca792a698a8000cadbacd5f6ed5a221febc5183291d4042a79df5f94ef13a84cbf3c2473d7ecde349fdcde98aa9626a41fd2b781d63c3f8ee9c7b1a16504a96b75815d1", 0x92, 0x3}]}, 0x6}, 0x1)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$TCXONC(r4, 0x540a, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ptrace(0x10, 0x0)
ptrace$setopts(0x4200, 0x0, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="b65b9a821ac423b0bb9c3d4d964b187eb5dfa7a45c05b31068857e698c91412f0a678f2220230cfaf947564634171620fe0dca6b6a", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000c000088084000080240002007b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1080009800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220400098024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000300070000003800008024000100000000000000000000000000000000000000000000000000000000000000000006000500ff7f000004000980040009801400020077673000"/226], 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

2.196539325s ago: executing program 2 (id=985):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r1], 0x2c}}, 0x20008000)

2.09141257s ago: executing program 2 (id=986):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0xc}, 0x1c)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.585924245s ago: executing program 3 (id=987):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x286082)
ioctl$BLKTRACETEARDOWN(r0, 0x1265, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x220280, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
r3 = dup(r2)
read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0x2020)
write$UHID_CREATE2(r3, &(0x7f0000000200)=ANY=[], 0x118)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d)

1.539063912s ago: executing program 0 (id=988):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
r3 = socket$inet(0x2, 0x4, 0x9)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

1.422276572s ago: executing program 1 (id=989):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async)
r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\t\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00', 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

1.314012477s ago: executing program 3 (id=990):
r0 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/123)
shmctl$IPC_RMID(r0, 0x0)
syz_emit_ethernet(0x110, &(0x7f0000000080)={@random="2120c6c3bf27", @remote, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0xc738, 0x0, 0x1}], @llc={@snap={0x1, 0xab, "1085", "30df60", 0x6007, "7b9f99bcae03e02eeb10f124de214f77174478b8478b688170ad477be0621a14d19a5001b1c2dbe8c171885d46a9f02e5da58d0c95610b308a6e6222689a61118165c346f2146714b7bfb60f3ae70b9ffed5483823111ce9cd784e4058cd8c04b886095d8edcc8885c71908059f7bfa6f5dec163657a68e95e8b36c178127e5c1883cb98b792b1bf11e168adbb829893c51ddba74dca19d98315cca9f871046d0bcdc70bee3c1d0c99a628c1733e493b4683c66f62da939cbdab904b7d25c909f150c26c193aec9528edece727ae521c7e012a2ee1dd266fea23771f1bf96a9b933a488a63dd4d3c55029f6d74"}}}}}}, &(0x7f00000001c0)={0x0, 0x3, [0x42d, 0x5bf, 0x8dc, 0x140]})
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/181)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9ce}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x991}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa3e8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8fdb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000c805)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/151)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2a0100, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x6537, 0x0, 0x1, 0xffffffff, '\x00', 0x0, r2, 0x0, 0x1, 0x4}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r4=>0x0, 0x40, 0x7800, 0xfffffffa, 0x80000001, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x65, 0x0, 0x4, 0x2f, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x7, 0xaa, [@empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x3, [{0x2, 0xe, "cef0ffbc1aef88b9393cc21b"}, {0x7, 0x3, "83"}, {0x6, 0x8, "f8b566704bf1"}]}, @lsrr={0x83, 0x7, 0x92, [@broadcast]}, @timestamp={0x44, 0x10, 0x6f, 0x0, 0x2, [0x1, 0x1, 0x2]}, @noop]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xd1, 0x0, r3, 0xf5, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000780)={0x5, 0x1, {0x54, 0xb, 0x1, {0x2000, 0xd503}, {0x8, 0xb7}, @const={0x3ff, {0x100, 0x7, 0x6678, 0x1}}}, {0x55, 0x6, 0x401, {0x7, 0x4}, {0x3, 0x5}, @cond=[{0x1, 0x100, 0x7, 0x0, 0x8, 0xa}, {0x63, 0x6, 0x9, 0x8, 0x1}]}})
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000c80)={&(0x7f0000000840)={{@my=0x1, 0x975}, {@hyper, 0xb0c}, 0x400, "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"}, 0x418, 0x8})
pipe(&(0x7f0000000cc0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fsetxattr$security_capability(r5, &(0x7f0000000d00), &(0x7f0000000d40)=@v1={0x1000000, [{0x80}]}, 0xc, 0x3)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001140)={&(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x5, 0xa, 0x8, 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000001180)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000f80)=[0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x5, 0x0, r9})
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
accept4$inet6(r10, &(0x7f0000001200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000001240)=0x1c, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xa}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0x40)
quotactl_fd$Q_GETINFO(r10, 0xffffffff80000502, 0xee00, &(0x7f00000013c0))
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000001400)={0x2, @sdr={0x32314d59, 0xcda}})
r11 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil)
shmctl$SHM_STAT(r11, 0xd, &(0x7f0000001500)=""/72)
getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000001580), &(0x7f00000015c0)=0x4)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001600)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3ff, 0x7fffffff, 0x4, 0x4, 0xfff, 0x7fffffff}, {0x6, 0x1, 0x1, 0x4, 0x180000000000000, 0x2}], ['\x00', '\x00']})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.247426916s ago: executing program 3 (id=991):
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r1, 0x6)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x180, 0x0, 0x0, 0x200000, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x97, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xda8}}, {{{0x9, 0x5, 0x81, 0x3, 0x418, 0x7f, 0x7, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000600)={0x18, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000002780)={0x24, 0x0, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000004f00), 0x40, 0x40000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
close_range(r0, 0xffffffffffffffff, 0x0)

1.193640118s ago: executing program 0 (id=992):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r4}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffd, 0x3}}, 0x10)
bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
sendfile(r8, r8, 0x0, 0x80001d00c0d1)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, 0xffffffffffffffff, 0x10000000)
r9 = syz_io_uring_setup(0x7a5f, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x94, 0x3, {"5f19d046c998f562f15e465aa7f78858"}, 0x9, 0x9b, 0x7ff}, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x118)

818.086503ms ago: executing program 4 (id=993):
r0 = openat$kvm(0x0, &(0x7f0000000780), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000000))

722.434599ms ago: executing program 4 (id=994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={0x64, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x48054}, 0xa000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000010bd28090900000000000109022400010000500009047faa010300020009210100080122070009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "b50a6efb"}, @global=@item_012={0x1, 0x1, 0x7, "aa"}]}}, 0x0}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0xc, 0x2, {0x101, "fd19926807118754258b32cc8d11cd6a"}}}, @qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_ALPHA={0x8, 0x4, 0x7}, @TCA_PIE_LIMIT={0x8, 0x2, 0x40000000}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_BETA={0x8, 0x5, 0x15}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x88}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0x0, 0xe, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x7]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

599.594858ms ago: executing program 1 (id=995):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x7, {0xe7ff, 0x1, 0xfff, 0x870}})
r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000011c0)=@overlay={0x2, 0x9, 0x4, 0x204, 0x80, {0x0, 0x2710}, {0x3, 0x8, 0x7, 0x8, 0x55, 0x80, "0ad750b3"}, 0x80000008, 0x3, {}, 0x5b})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0)

453.624175ms ago: executing program 1 (id=996):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r1], 0x2c}}, 0x404c814)

394.862096ms ago: executing program 1 (id=997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800400018000100000000000000000002008000000000090000000006001500060000001400d480100003800c0001800500020000000000"], 0x38}}, 0x0)

243.777532ms ago: executing program 1 (id=998):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f0000000000000000070000", @ANYRES32, @ANYBLOB="0000520006000500010000000800", @ANYRES16], 0x2c}}, 0x20008000)

0s ago: executing program 1 (id=999):
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0)
fallocate(r0, 0x0, 0x9e1f, 0x575)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x84, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x84}, 0x1, 0x0, 0x0, 0x44001}, 0x20000040)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="db69c6000000739e2a7b996763a7b875c3e4ce1c1c33900c1697fdf17f1d0f9815c7e327e9b0076bb1bc7dc33f756efbea2c76f198189edfa420e34ec74c9f86d692598bfe755aa90322c2533466b6723e48634d4b84c6314bdaa504be29fd1bf1d4e96840be162dc98379f4ea728da00c48c20d7309ccb40bb4f4a9dd6a581dbeb4993a3d46eb96aaddf5f3f73801af31b06efcbb47781431e6f7b968d0462dad5c3bb1da75a62f7bf5f07a56"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_io_uring_setup(0x4000491c, &(0x7f0000000140)={0x0, 0x7fff, 0x2000, 0x3, 0x1d1, 0x0, r0}, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000000c0)=""/74)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0x410e, 0x4)
sendmsg$can_raw(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r7}, 0x10, &(0x7f0000000380)={&(0x7f00000012c0)=@can={{0x4}, 0x5, 0x2, 0x0, 0x0, "3e21f5eb3f27061e"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
io_uring_enter(r2, 0x1003516, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

72139][  T797] usb 3-1: config 0 descriptor??
[  313.405043][ T5875] usb 5-1: USB disconnect, device number 34
[  313.754672][  T797] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  313.790697][  T797] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32
[  313.965664][ T8598] SET target dimension over the limit!
[  313.971658][ T5875] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  314.143512][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  314.156593][ T5875] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  314.166540][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.194495][ T5875] usb 5-1: config 0 descriptor??
[  314.270398][ T8604] xt_l2tp: invalid flags combination: 8
[  314.442960][  T796] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  314.612403][  T797] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  314.642397][  T796] usb 4-1: Using ep0 maxpacket: 8
[  314.660595][  T796] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  314.669159][  T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.679497][  T796] usb 4-1: config 0 has no interface number 0
[  314.680057][ T5875] uclogic 0003:5543:0522.000A: unknown main item tag 0x0
[  314.685788][  T796] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  314.708298][  T796] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  314.717708][  T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.732505][  T796] usb 4-1: Product: syz
[  314.752815][ T5875] uclogic 0003:5543:0522.000A: unknown main item tag 0x0
[  314.760430][ T5875] uclogic 0003:5543:0522.000A: unknown main item tag 0x0
[  314.767212][  T796] usb 4-1: Manufacturer: syz
[  314.767753][ T5875] uclogic 0003:5543:0522.000A: unknown main item tag 0x0
[  314.785892][  T797] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  314.797939][  T796] usb 4-1: SerialNumber: syz
[  314.804484][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.812836][ T5875] uclogic 0003:5543:0522.000A: unknown main item tag 0x0
[  314.820663][ T5875] uclogic 0003:5543:0522.000A: unknown main item tag 0x0
[  314.826362][  T796] usb 4-1: config 0 descriptor??
[  314.831090][  T797] usb 2-1: config 0 descriptor??
[  314.841544][  T797] cp210x 2-1:0.0: cp210x converter detected
[  314.872065][  T796] iowarrior 4-1:0.186: no interrupt-in endpoint found
[  314.943377][ T5875] uclogic 0003:5543:0522.000A: hidraw0: USB HID v1.01 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0
[  315.000813][  T796] usb 3-1: USB disconnect, device number 28
[  315.128269][ T5945] usb 5-1: USB disconnect, device number 35
[  315.233062][ T8620] vlan2: entered promiscuous mode
[  315.238191][ T8620] bridge0: entered promiscuous mode
[  315.259228][  T797] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  315.305898][ T8620] bridge0: port 3(hsr0) entered blocking state
[  315.320614][ T8620] bridge0: port 3(hsr0) entered disabled state
[  315.327698][ T8620] hsr0: entered allmulticast mode
[  315.333226][ T8620] hsr_slave_0: entered allmulticast mode
[  315.339201][ T8620] hsr_slave_1: entered allmulticast mode
[  315.346925][ T8620] hsr0: entered promiscuous mode
[  315.357799][ T8620] bridge0: port 3(hsr0) entered blocking state
[  315.364172][ T8620] bridge0: port 3(hsr0) entered forwarding state
[  315.445214][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.454188][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.471768][  T797] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121
[  315.522323][  T797] cp210x 2-1:0.0: GPIO initialisation failed: -121
[  315.538560][  T797] usb 2-1: cp210x converter now attached to ttyUSB0
[  315.673878][ T5904] usb 2-1: USB disconnect, device number 34
[  315.682691][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  315.691072][ T5904] cp210x 2-1:0.0: device disconnected
[  316.581764][ T5904] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  316.754394][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.652'.
[  316.764329][  T796] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  316.861817][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  316.942922][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  316.954272][  T796] usb 2-1: Using ep0 maxpacket: 16
[  316.973926][  T796] usb 2-1: unable to get BOS descriptor or descriptor too short
[  316.995076][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  317.007576][  T796] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  317.022822][  T796] usb 2-1: config 13 has no interface number 0
[  317.128231][  T796] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  317.173133][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  317.231275][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.237805][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.250543][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.312835][ T5904] usb 5-1: Product: syz
[  317.317085][ T5904] usb 5-1: Manufacturer: syz
[  317.327604][  T796] usb 2-1: config 13 interface 50 has no altsetting 0
[  317.393914][ T5945] usb 4-1: USB disconnect, device number 35
[  317.621846][ T5904] usb 5-1: SerialNumber: syz
[  317.645030][ T5904] usb 5-1: config 0 descriptor??
[  317.651934][ T8630] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  317.706724][  T796] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  317.774255][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.861109][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  317.861129][   T29] audit: type=1800 audit(1772044764.046:479): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.654" name="bus" dev="tmpfs" ino=635 res=0 errno=0
[  318.085174][  T796] usb 2-1: Product: syz
[  318.089445][  T796] usb 2-1: Manufacturer: syz
[  318.094863][  T796] usb 2-1: SerialNumber: syz
[  318.151635][ T8633] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  318.459436][  T796] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  318.507461][  T796] usb 2-1: MIDIStreaming interface descriptor not found
[  318.634242][ T8649] hub 1-0:1.0: USB hub found
[  318.651859][ T8649] hub 1-0:1.0: 1 port detected
[  318.761659][  T796] usb 2-1: USB disconnect, device number 35
[  319.728615][ T5904] usb 5-1: USB disconnect, device number 36
[  320.401720][ T5904] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  320.561659][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  320.570142][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0
[  320.591759][ T5904] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  320.631680][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.640067][ T5904] usb 5-1: Product: syz
[  320.649420][ T5904] usb 5-1: Manufacturer: syz
[  320.658329][ T5904] usb 5-1: SerialNumber: syz
[  320.677011][ T5904] usb 5-1: config 0 descriptor??
[  321.013930][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'.
[  321.184996][ T5904] gs_usb 5-1:0.0: Couldn't get device config: (err=-32)
[  321.211757][ T5904] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32
[  321.231705][ T5827] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  321.405094][ T5827] usb 2-1: Using ep0 maxpacket: 8
[  321.415140][ T5827] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[  321.426189][   T29] audit: type=1800 audit(1772044767.626:480): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.667" name="bus" dev="tmpfs" ino=866 res=0 errno=0
[  321.467969][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.622497][ T5827] usb 2-1: config 0 has no interface number 0
[  321.639757][ T5827] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  321.729679][ T5827] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  321.754691][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.807798][ T5827] usb 2-1: Product: syz
[  321.830960][ T8697] netlink: 'syz.0.668': attribute type 3 has an invalid length.
[  321.842213][ T5827] usb 2-1: Manufacturer: syz
[  321.849956][ T5827] usb 2-1: SerialNumber: syz
[  321.876964][ T5827] usb 2-1: config 0 descriptor??
[  321.998779][ T5827] iowarrior 2-1:0.186: no interrupt-in endpoint found
[  322.035407][ T8690] xt_policy: output policy not valid in PREROUTING and INPUT
[  322.067490][   T51] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10
[  322.633292][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.645846][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.059078][ T5827] usb 5-1: USB disconnect, device number 37
[  323.071690][  T796] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  323.653421][  T796] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  323.681725][  T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  323.772423][  T796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  323.850019][  T796] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  323.860503][  T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.874875][  T796] usb 4-1: Product: syz
[  323.880249][  T796] usb 4-1: Manufacturer: syz
[  323.891785][  T796] usb 4-1: SerialNumber: syz
[  323.908432][  T796] usb 4-1: config 0 descriptor??
[  323.924150][ T8708] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  324.102458][   T51] Bluetooth: hci0: command tx timeout
[  324.180898][ T5827] usb 2-1: USB disconnect, device number 36
[  324.234911][ T8722] IPv6: NLM_F_CREATE should be specified when creating new route
[  324.274039][ T8722] netlink: 'syz.0.674': attribute type 1 has an invalid length.
[  324.412223][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.676'.
[  324.553366][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.597339][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.862791][ T5827] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  325.035294][ T8736] hub 9-0:1.0: USB hub found
[  325.040342][ T8736] hub 9-0:1.0: 1 port detected
[  325.073633][ T5827] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  325.110064][ T5827] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  325.120455][ T5827] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  325.131298][ T5827] usb 2-1: config 220 has no interface number 2
[  325.140179][ T5827] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  325.153714][ T5827] usb 2-1: config 220 interface 0 has no altsetting 0
[  325.271249][ T5827] usb 2-1: config 220 interface 76 has no altsetting 0
[  325.326533][ T5827] usb 2-1: config 220 interface 1 has no altsetting 0
[  325.420531][ T5827] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  325.476743][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.487220][ T5827] usb 2-1: Product: syz
[  325.493613][ T5827] usb 2-1: Manufacturer: syz
[  325.531892][ T5827] usb 2-1: SerialNumber: syz
[  325.572226][ T8740] kvm: kvm [8739]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000000f0
[  325.610337][ T8740] kvm: kvm [8739]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  325.656621][  T796] usb 4-1: USB disconnect, device number 36
[  325.835758][ T5827] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  325.865953][ T5827] uvcvideo 2-1:220.0: No valid video chain found.
[  325.895265][ T5827] usb 2-1: selecting invalid altsetting 0
[  325.985813][ T5827] usb 2-1: selecting invalid altsetting 0
[  326.004055][ T5827] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  326.045462][ T5827] usb 2-1: USB disconnect, device number 37
[  326.217558][   T29] audit: type=1800 audit(1772044772.416:481): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.680" name="bus" dev="tmpfs" ino=887 res=0 errno=0
[  326.313953][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.682'.
[  326.521085][   T29] audit: type=1326 audit(1772044772.716:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  326.578378][   T29] audit: type=1326 audit(1772044772.746:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  326.650312][   T29] audit: type=1326 audit(1772044772.746:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  326.862978][ T8755] bridge0: port 3(hsr0) entered disabled state
[  326.869391][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.877843][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.914176][   T29] audit: type=1326 audit(1772044772.746:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  326.992261][   T29] audit: type=1326 audit(1772044772.746:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  327.117549][   T29] audit: type=1326 audit(1772044772.746:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  327.212395][   T29] audit: type=1326 audit(1772044772.746:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  327.283953][   T29] audit: type=1326 audit(1772044772.746:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  327.354995][   T29] audit: type=1326 audit(1772044772.746:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f48e2b9c629 code=0x7ffc0000
[  327.695548][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.762405][ T8755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.803663][ T8755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.942782][ T5902] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  328.153492][ T5902] usb 5-1: Using ep0 maxpacket: 32
[  328.165020][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.194714][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.224116][ T5902] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  328.261686][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.290789][ T5902] usb 5-1: config 0 descriptor??
[  328.349215][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  328.361650][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.399202][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  328.419562][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.440229][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  328.457298][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.476564][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  328.496776][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.611078][  T797] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  328.954488][ T5902] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  328.994396][  T797] usb 3-1: Using ep0 maxpacket: 32
[  329.004319][  T797] usb 3-1: config 0 interface 0 has no altsetting 0
[  329.053767][  T797] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  329.073259][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.103032][  T797] usb 3-1: Product: syz
[  329.116639][  T797] usb 3-1: Manufacturer: syz
[  329.125717][  T797] usb 3-1: SerialNumber: syz
[  329.152169][ T5902] usb 5-1: USB disconnect, device number 38
[  329.175204][  T797] usb 3-1: config 0 descriptor??
[  329.198264][ T8794] fido_id[8794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  329.372930][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  329.413711][ T8801] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  329.679523][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  329.709825][  T797] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  329.738505][  T797] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32
[  329.791707][ T5945] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  329.989803][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short
[  330.029548][ T5945] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  330.071519][ T5945] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  330.140575][ T5945] usb 2-1: config 1 interface 0 has no altsetting 0
[  330.180960][ T5945] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  330.215339][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.233988][ T5945] usb 2-1: Product: syz
[  330.244480][ T5945] usb 2-1: Manufacturer: syz
[  330.255058][ T5945] usb 2-1: SerialNumber: syz
[  330.271450][ T8807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  330.507280][  T796] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  330.739875][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.759315][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.779128][ T5945] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input23
[  330.804753][  T796] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  330.838056][  T796] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  330.872889][  T796] usb 5-1: Manufacturer: syz
[  330.927074][  T796] usb 5-1: config 0 descriptor??
[  331.015774][   T42] usb 2-1: USB disconnect, device number 38
[  331.363324][   T42] usb 3-1: USB disconnect, device number 29
[  331.488834][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a
[  331.505379][ T8829] kvm_intel: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b
[  331.518221][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956
[  331.541840][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5
[  331.555412][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea
[  331.566400][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939
[  331.577798][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  331.587459][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56
[  331.643272][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8
[  331.666117][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262
[  331.675063][ T8829] kvm: kvm [8828]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  331.697655][ T8829] kvm_intel: kvm [8828]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2
[  331.716872][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[  332.140187][  T796] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71
[  332.149517][  T796] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71
[  332.161692][  T796] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71
[  332.201908][  T796] uclogic 0003:256C:006D.000C: failed probing parameters: -71
[  332.210145][  T796] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71
[  332.230188][  T796] usb 5-1: USB disconnect, device number 39
[  332.262032][   T42] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  332.435500][   T42] usb 2-1: Using ep0 maxpacket: 32
[  332.443614][   T42] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  332.461120][   T42] usb 2-1: config 0 has no interface number 0
[  332.469868][   T42] usb 2-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.484898][   T42] usb 2-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.497595][   T42] usb 2-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  332.512129][   T42] usb 2-1: config 0 interface 6 has no altsetting 0
[  332.558373][   T42] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  332.567913][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.597891][   T42] usb 2-1: config 0 descriptor??
[  333.104599][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  333.104616][   T29] audit: type=1800 audit(1772044779.306:499): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.711" name="bus" dev="tmpfs" ino=444 res=0 errno=0
[  333.235637][ T8866] Cannot find del_set index 2 as target
[  333.792468][ T5904] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  333.952809][ T5904] usb 3-1: Using ep0 maxpacket: 32
[  333.972486][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0
[  333.991168][ T5904] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  334.021149][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.062305][ T5904] usb 3-1: Product: syz
[  334.066654][ T5904] usb 3-1: Manufacturer: syz
[  334.071256][ T5904] usb 3-1: SerialNumber: syz
[  334.094048][ T5904] usb 3-1: config 0 descriptor??
[  334.360722][   T42] uclogic 0003:28BD:0933.000D: interface is invalid, ignoring
[  334.473352][ T5875] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  334.623622][ T8884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.716'.
[  334.634096][ T5875] usb 4-1: Using ep0 maxpacket: 32
[  334.646089][ T5904] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  334.655843][ T5875] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  334.664432][ T5875] usb 4-1: config 0 has no interface number 0
[  334.671178][ T5875] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  334.682534][ T5904] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32
[  334.726027][ T5875] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  334.737685][ T5875] usb 4-1: config 0 interface 85 has no altsetting 0
[  334.754763][ T8884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.716'.
[  334.754919][ T5875] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  334.780043][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.791756][ T5875] usb 4-1: Product: syz
[  334.796012][ T5875] usb 4-1: Manufacturer: syz
[  334.801112][ T5875] usb 4-1: SerialNumber: syz
[  334.820297][ T5875] usb 4-1: config 0 descriptor??
[  334.861180][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'.
[  334.971665][ T5904] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  335.051104][ T5875] appletouch 4-1:0.85: Failed to read mode from device.
[  335.083990][ T5875] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  335.112035][ T5875] usb 4-1: USB disconnect, device number 37
[  335.151897][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  335.160239][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.174044][ T5904] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  335.184166][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.192591][ T5904] usb 1-1: Product: syz
[  335.197241][ T5904] usb 1-1: Manufacturer: syz
[  335.202519][ T5904] usb 1-1: SerialNumber: syz
[  335.210193][ T5904] usb 1-1: config 0 descriptor??
[  335.225041][ T5904] gspca_main: stk014-2.14.0 probing 05e1:0893
[  335.238773][ T5904] usb 1-1: selecting invalid altsetting 1
[  335.275734][ T5945] usb 3-1: USB disconnect, device number 30
[  335.302620][  T797] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  335.422219][ T5904] gspca_stk014: reg_r err -71
[  335.427028][ T5904] stk014 1-1:0.0: probe with driver stk014 failed with error -71
[  335.444163][ T5904] usb 1-1: USB disconnect, device number 32
[  335.464819][  T797] usb 5-1: unable to get BOS descriptor or descriptor too short
[  335.474844][  T797] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  335.487066][  T797] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  335.498295][  T797] usb 5-1: config 1 interface 0 has no altsetting 0
[  335.506997][  T797] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  335.516369][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.524436][  T797] usb 5-1: Product: syz
[  335.528756][  T797] usb 5-1: Manufacturer: syz
[  335.533422][  T797] usb 5-1: SerialNumber: syz
[  335.543524][ T8891] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  335.578958][ T5945] usb 2-1: USB disconnect, device number 39
[  335.969745][  T797] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input25
[  336.180387][  T797] usb 5-1: USB disconnect, device number 40
[  336.183305][ T5177] pxrc 5-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  336.425950][   T29] audit: type=1800 audit(1772044782.626:500): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.725" name="bus" dev="tmpfs" ino=460 res=0 errno=0
[  336.446397][ T5875] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  336.628466][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  336.737497][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.760751][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  336.871004][ T5875] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  336.900484][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.973014][ T5875] usb 2-1: config 0 descriptor??
[  337.088386][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'.
[  337.159613][ T8921] Cannot find del_set index 2 as target
[  337.273956][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'.
[  337.453460][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.485828][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.182975][ T5875] usbhid 2-1:0.0: can't add hid device: -71
[  338.190307][ T5875] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  338.247597][ T5875] usb 2-1: USB disconnect, device number 40
[  338.715596][ T8943] input: syz0 as /devices/virtual/input/input26
[  338.722190][ T5875] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  338.886549][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  338.903228][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0
[  338.919841][ T5875] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  338.954045][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.091954][ T5875] usb 2-1: Product: syz
[  339.096176][ T5875] usb 2-1: Manufacturer: syz
[  339.100821][ T5875] usb 2-1: SerialNumber: syz
[  339.108115][ T5875] usb 2-1: config 0 descriptor??
[  340.080671][ T5945] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  340.098196][ T5875] gs_usb 2-1:0.0: Couldn't get device config: (err=-32)
[  340.139011][ T5875] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32
[  340.190329][ T8961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  340.244731][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short
[  340.254461][ T5945] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  340.605048][ T5945] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  340.652546][ T5945] usb 5-1: config 1 interface 0 has no altsetting 0
[  340.668616][ T5945] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  340.679713][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.688503][ T5945] usb 5-1: Product: syz
[  340.692819][ T5945] usb 5-1: Manufacturer: syz
[  340.697924][ T5945] usb 5-1: SerialNumber: syz
[  340.795490][ T8951] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  340.859551][  T797] usb 2-1: USB disconnect, device number 41
[  341.181744][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  341.212727][ T5945] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input27
[  341.393927][ T5902] usb 3-1: device descriptor read/64, error -71
[  341.438954][ T5945] usb 5-1: USB disconnect, device number 41
[  341.662316][ T8976] xt_TCPMSS: Only works on TCP SYN packets
[  341.671719][ T5902] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  341.872045][ T5902] usb 3-1: device descriptor read/64, error -71
[  341.981959][ T5902] usb usb3-port1: attempt power cycle
[  342.341752][ T5902] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  342.382422][ T5902] usb 3-1: device descriptor read/8, error -71
[  342.635611][ T8992] veth1_to_bond: entered allmulticast mode
[  342.645505][ T5902] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  342.682347][ T5902] usb 3-1: device descriptor read/8, error -71
[  342.685973][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.710865][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.740552][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'.
[  342.800600][ T5902] usb usb3-port1: unable to enumerate USB device
[  342.856124][ T8994] veth1_to_bond (unregistering): left allmulticast mode
[  342.881471][ T8994] bond0: (slave bond_slave_1): Releasing backup interface
[  342.940561][ T5945] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  343.115491][ T5945] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  343.125927][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.141792][ T5945] usb 4-1: Product: syz
[  343.154058][ T5945] usb 4-1: Manufacturer: syz
[  343.167140][ T5945] usb 4-1: SerialNumber: syz
[  343.291226][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'.
[  343.387784][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  343.424561][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  343.450751][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  343.471345][ T5945] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  343.536471][   T29] audit: type=1800 audit(1772044789.736:501): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.751" name="bus" dev="tmpfs" ino=501 res=0 errno=0
[  343.542272][ T5945] usb 4-1: USB disconnect, device number 38
[  343.718727][ T9012] vlan2: entered promiscuous mode
[  343.863440][ T9012] bridge0: entered promiscuous mode
[  344.531669][ T5945] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  344.813848][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short
[  344.823541][ T5945] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  344.835117][ T5945] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  344.849082][ T5945] usb 3-1: config 1 interface 0 has no altsetting 0
[  344.899023][ T5945] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  344.930470][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.971709][ T5945] usb 3-1: Product: syz
[  344.986920][ T5945] usb 3-1: Manufacturer: syz
[  345.007930][ T5945] usb 3-1: SerialNumber: syz
[  345.047088][ T9019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  345.155477][ T9025] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed
[  345.155499][ T9025] kvm: kvm [9024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000000f0
[  345.199206][ T9025] kvm: kvm [9024]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  345.353329][ T9034] sit1: entered allmulticast mode
[  345.587776][ T5945] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input28
[  345.816803][   T42] usb 3-1: USB disconnect, device number 35
[  346.361870][  T796] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  346.373354][ T9053] dlm: Unknown command passed to DLM device : 33
[  346.373354][ T9053] 
[  346.446613][   T29] audit: type=1326 audit(1772044792.636:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.479939][   T29] audit: type=1326 audit(1772044792.636:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.531114][ T9061] bond2: option mode: invalid value (255)
[  346.538248][   T29] audit: type=1326 audit(1772044792.636:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.564981][   T29] audit: type=1326 audit(1772044792.636:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.565556][ T9061] bond2 (unregistering): Released all slaves
[  346.587768][  T796] usb 1-1: not running at top speed; connect to a high speed hub
[  346.624200][  T796] usb 1-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config
[  346.635691][  T796] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  346.641703][   T29] audit: type=1326 audit(1772044792.636:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.644873][  T796] usb 1-1: config 1 has no interface number 1
[  346.675934][  T796] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  346.691760][ T5903] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  346.707008][  T796] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  346.723641][  T796] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  346.726999][   T29] audit: type=1326 audit(1772044792.636:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.733369][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.766563][   T29] audit: type=1326 audit(1772044792.636:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.783850][  T796] usb 1-1: Product: syz
[  346.808407][  T796] usb 1-1: Manufacturer: syz
[  346.817336][  T796] usb 1-1: SerialNumber: syz
[  346.857267][   T29] audit: type=1326 audit(1772044792.636:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.881925][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  346.884323][   T29] audit: type=1326 audit(1772044792.636:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dbd39c629 code=0x7ffc0000
[  346.890851][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short
[  346.943803][ T5903] usb 3-1: config 7 has an invalid interface number: 67 but max is 0
[  346.951978][ T5903] usb 3-1: config 7 has no interface number 0
[  346.971344][ T5903] usb 3-1: string descriptor 0 read error: -22
[  346.991769][ T5903] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  347.023099][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.063679][ T9046] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 !
[  347.081839][ T5945] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  347.095426][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.114021][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.257719][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  347.261095][ T5875] usb 3-1: USB disconnect, device number 36
[  347.266176][ T5945] usb 2-1: config 0 has no interface number 0
[  347.299018][ T5945] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  347.337769][ T5945] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  347.361800][ T5945] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  347.382804][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.411194][ T5945] usb 2-1: config 0 descriptor??
[  347.437781][ T5945] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  347.625925][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.649173][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.668862][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.710943][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.721132][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.738125][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.749441][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.763615][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.783215][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.810805][  T796] usb 1-1: USB disconnect, device number 33
[  347.836172][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.892688][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.915217][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.922414][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  347.981494][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.006354][ T6639] udevd[6639]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.044425][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.093806][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.112919][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.718735][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.816871][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.825216][ T5902] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  348.902063][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  348.908954][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.036566][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.060408][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.070075][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.197833][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.292136][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.411000][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.418818][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.428576][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.435844][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.443320][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  349.454984][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  349.477696][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.484396][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  349.666615][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.679382][ T5902] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  349.690425][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.720372][ T5902] usb 3-1: Product: syz
[  349.725411][ T9066] iowarrior 2-1:0.1: Error -90 while submitting URB
[  349.732583][ T5902] usb 3-1: Manufacturer: syz
[  349.740380][ T5902] usb 3-1: SerialNumber: syz
[  349.756683][   T42] usb 2-1: USB disconnect, device number 42
[  349.789111][ T5902] usb 3-1: config 0 descriptor??
[  349.816662][ T9086] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  349.923434][ T5875] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  349.933370][  T797] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  350.144582][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  350.156734][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  350.214576][  T797] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  350.226340][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  350.247766][  T797] usb 5-1: unable to read config index 0 descriptor/start: -61
[  350.257919][  T797] usb 5-1: can't read configurations, error -61
[  350.273071][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  350.382325][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.772'.
[  350.391779][  T797] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  350.440898][ T5875] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  350.457119][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.487752][ T5875] usb 4-1: Product: syz
[  350.504196][ T5875] usb 4-1: Manufacturer: syz
[  350.518920][ T5875] usb 4-1: SerialNumber: syz
[  350.540675][ T5875] usb 4-1: config 0 descriptor??
[  350.553623][  T797] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  350.571413][  T797] usb 5-1: unable to read config index 0 descriptor/start: -61
[  350.586425][ T9089] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  350.619118][  T797] usb 5-1: can't read configurations, error -61
[  350.648437][  T797] usb usb5-port1: attempt power cycle
[  350.654119][ T5945] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  350.931718][ T5875] rc_core: IR keymap rc-imon-rsc not found
[  350.948444][ T5875] Registered IR keymap rc-empty
[  350.953670][ T5945] usb 2-1: device descriptor read/64, error -71
[  351.021378][ T5875] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  351.066043][ T9100] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  351.105071][ T5875] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31
[  351.265852][ T5945] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  351.411690][ T5945] usb 2-1: device descriptor read/64, error -71
[  351.523555][ T5945] usb usb2-port1: attempt power cycle
[  351.682106][  T797] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  351.732353][  T797] usb 5-1: unable to get BOS descriptor or descriptor too short
[  351.765614][  T797] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  351.800537][ T5902] usb 3-1: USB disconnect, device number 37
[  351.809881][  T797] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  351.851046][  T797] usb 5-1: config 1 interface 0 has no altsetting 0
[  351.871669][ T5945] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  351.879960][  T797] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  351.906523][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.923973][ T5945] usb 2-1: device descriptor read/8, error -71
[  351.950854][  T797] usb 5-1: Product: syz
[  352.004762][  T797] usb 5-1: Manufacturer: syz
[  352.024096][  T797] usb 5-1: SerialNumber: syz
[  352.083416][ T9105] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  352.161739][ T5945] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  352.224748][ T5945] usb 2-1: device descriptor read/8, error -71
[  352.282376][ T9114] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  352.345075][ T5945] usb usb2-port1: unable to enumerate USB device
[  352.526495][  T797] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input32
[  352.703533][ T5945] usb 5-1: USB disconnect, device number 44
[  353.047805][ T5945] usb 4-1: USB disconnect, device number 39
[  353.128030][   T29] kauditd_printk_skb: 59 callbacks suppressed
[  353.128048][   T29] audit: type=1326 audit(1772044799.326:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.2.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd39c629 code=0x0
[  353.162207][ T5904] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  353.174811][ T9126] =======================================================
[  353.174811][ T9126] WARNING: The mand mount option has been deprecated and
[  353.174811][ T9126]          and is ignored by this kernel. Remove the mand
[  353.174811][ T9126]          option from the mount to silence this warning.
[  353.174811][ T9126] =======================================================
[  353.325259][ T5904] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  353.334765][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.344307][ T5904] usb 1-1: Product: syz
[  353.348583][ T5904] usb 1-1: Manufacturer: syz
[  353.353244][ T5904] usb 1-1: SerialNumber: syz
[  353.362506][ T5904] usb 1-1: config 0 descriptor??
[  353.471689][  T796] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  353.771091][ T5904] hso 1-1:0.0: Failed to find INT IN ep
[  353.777425][ T5904] usb-storage 1-1:0.0: USB Mass Storage device detected
[  353.901696][  T796] usb 3-1: Using ep0 maxpacket: 32
[  353.910652][  T796] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  353.937662][  T796] usb 3-1: config 0 has no interface number 0
[  353.974781][  T796] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  353.994450][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.994476][  T796] usb 3-1: Product: syz
[  353.994491][  T796] usb 3-1: Manufacturer: syz
[  353.994504][  T796] usb 3-1: SerialNumber: syz
[  354.031775][  T796] usb 3-1: config 0 descriptor??
[  354.037227][  T796] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  354.069449][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.111535][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.158585][ T9138] veth3: entered allmulticast mode
[  354.240503][  T796] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  354.265029][  T796] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  354.372023][ T9144] bridge0: port 3(hsr0) entered blocking state
[  354.390568][ T9144] bridge0: port 3(hsr0) entered disabled state
[  354.521770][ T9144] hsr0: entered allmulticast mode
[  354.527030][ T9144] hsr_slave_0: entered allmulticast mode
[  354.564222][ T9144] hsr_slave_1: entered allmulticast mode
[  354.676023][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  354.677312][   T24] usb 3-1: USB disconnect, device number 38
[  354.719243][  T797] usb 1-1: USB disconnect, device number 34
[  354.746303][ T9144] hsr0: entered promiscuous mode
[  354.753165][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  354.881358][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  354.925228][   T24] quatech2 3-1:0.51: device disconnected
[  355.143304][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  355.292255][ T9144] bridge0: port 3(hsr0) entered blocking state
[  355.298557][ T9144] bridge0: port 3(hsr0) entered forwarding state
[  355.395111][ T9152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.437618][ T9156] syzkaller0: entered promiscuous mode
[  355.475470][ T9156] syzkaller0: entered allmulticast mode
[  355.661711][   T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  355.953861][   T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  355.974759][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.013384][ T9147] tipc: Resetting bearer <eth:syzkaller0>
[  356.019351][   T24] usb 3-1: Product: syz
[  356.032615][   T24] usb 3-1: Manufacturer: syz
[  356.042069][   T24] usb 3-1: SerialNumber: syz
[  356.056845][ T9147] tipc: Disabling bearer <eth:syzkaller0>
[  356.076666][   T24] usb 3-1: config 0 descriptor??
[  356.656592][ T9161] ip6t_srh: unknown srh match flags  5F28
[  356.665172][ T9181] FAULT_INJECTION: forcing a failure.
[  356.665172][ T9181] name failslab, interval 1, probability 0, space 0, times 0
[  356.691851][   T24] airspy 3-1:0.0: Board ID: 00
[  356.697525][   T24] airspy 3-1:0.0: Firmware version: 
[  356.718068][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.1.788 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  356.718088][ T9181] Tainted: [L]=SOFTLOCKUP
[  356.718092][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  356.718099][ T9181] Call Trace:
[  356.718104][ T9181]  <TASK>
[  356.718109][ T9181]  dump_stack_lvl+0xe8/0x150
[  356.718130][ T9181]  should_fail_ex+0x412/0x560
[  356.718145][ T9181]  should_failslab+0xa8/0x100
[  356.718159][ T9181]  __kmalloc_noprof+0xe8/0x760
[  356.718170][ T9181]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  356.718188][ T9181]  tomoyo_realpath_from_path+0xe3/0x5d0
[  356.718205][ T9181]  ? tomoyo_path_number_perm+0x219/0x630
[  356.718216][ T9181]  tomoyo_path_number_perm+0x246/0x630
[  356.718227][ T9181]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  356.718239][ T9181]  ? __lock_acquire+0x6b5/0x2cf0
[  356.718257][ T9181]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  356.718283][ T9181]  ? __fget_files+0x2a/0x420
[  356.718299][ T9181]  ? __fget_files+0x2a/0x420
[  356.718311][ T9181]  ? __fget_files+0x3a0/0x420
[  356.718324][ T9181]  ? __fget_files+0x2a/0x420
[  356.718339][ T9181]  security_file_ioctl+0xc3/0x2a0
[  356.718357][ T9181]  __se_sys_ioctl+0x47/0x170
[  356.718369][ T9181]  do_syscall_64+0x14d/0xf80
[  356.718383][ T9181]  ? trace_irq_disable+0x3b/0x150
[  356.718398][ T9181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.718408][ T9181]  ? clear_bhb_loop+0x40/0x90
[  356.718420][ T9181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.718430][ T9181] RIP: 0033:0x7f48e2b9c629
[  356.718441][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.718449][ T9181] RSP: 002b:00007f48e3b1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.718462][ T9181] RAX: ffffffffffffffda RBX: 00007f48e2e16090 RCX: 00007f48e2b9c629
[  356.718469][ T9181] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  356.718475][ T9181] RBP: 00007f48e3b1d090 R08: 0000000000000000 R09: 0000000000000000
[  356.718482][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.718488][ T9181] R13: 00007f48e2e16128 R14: 00007f48e2e16090 R15: 00007f48e2f3fa48
[  356.718503][ T9181]  </TASK>
[  356.718507][ T9181] ERROR: Out of memory at tomoyo_realpath_from_path.
[  357.316025][  T796] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  357.474639][  T796] usb 5-1: unable to get BOS descriptor or descriptor too short
[  357.484122][  T796] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  357.503614][  T796] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  357.524609][  T796] usb 5-1: config 1 interface 0 has no altsetting 0
[  357.537178][  T796] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  357.561754][  T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.561836][ T5875] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  357.569776][  T796] usb 5-1: Product: syz
[  357.569796][  T796] usb 5-1: Manufacturer: syz
[  357.569809][  T796] usb 5-1: SerialNumber: syz
[  357.621295][ T9186] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  357.802157][ T5875] usb 1-1: unable to read config index 0 descriptor/start: -61
[  357.810362][ T5875] usb 1-1: can't read configurations, error -61
[  358.017052][ T5875] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  358.025695][   T24] airspy 3-1:0.0: usb_control_msg() failed -110 request 11
[  358.042504][   T24] airspy 3-1:0.0: Registered as swradio24
[  358.048547][   T24] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  358.071670][ T9191] loop7: detected capacity change from 16383 to 0
[  358.141253][  T796] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input33
[  358.199899][ T5875] usb 1-1: unable to read config index 0 descriptor/start: -61
[  358.209774][ T5875] usb 1-1: can't read configurations, error -61
[  358.239110][ T5875] usb usb1-port1: attempt power cycle
[  358.338254][  T797] usb 5-1: USB disconnect, device number 45
[  358.384215][   T24] usb 3-1: USB disconnect, device number 39
[  358.583111][ T5875] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  358.673576][ T5875] usb 1-1: unable to read config index 0 descriptor/start: -61
[  358.682936][ T5875] usb 1-1: can't read configurations, error -61
[  358.921824][ T5875] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  358.956183][ T5875] usb 1-1: unable to read config index 0 descriptor/start: -61
[  358.976808][ T5875] usb 1-1: can't read configurations, error -61
[  358.989743][ T5875] usb usb1-port1: unable to enumerate USB device
[  359.136161][ T9213] Cannot find del_set index 2 as target
[  359.591826][ T5903] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  359.751689][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  359.760765][ T5903] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  359.770346][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.779968][ T5903] usb 4-1: Product: syz
[  359.784534][ T5903] usb 4-1: Manufacturer: syz
[  359.789315][ T5903] usb 4-1: SerialNumber: syz
[  359.799927][ T5903] usb 4-1: config 0 descriptor??
[  360.014849][ T5903] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  361.027682][ T9228] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  361.075543][ T9232] kvm: pic: non byte write
[  361.080726][ T9232] FAULT_INJECTION: forcing a failure.
[  361.080726][ T9232] name failslab, interval 1, probability 0, space 0, times 0
[  361.093589][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.1.803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  361.093619][ T9232] Tainted: [L]=SOFTLOCKUP
[  361.093626][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  361.093641][ T9232] Call Trace:
[  361.093649][ T9232]  <TASK>
[  361.093656][ T9232]  dump_stack_lvl+0xe8/0x150
[  361.093687][ T9232]  should_fail_ex+0x412/0x560
[  361.093712][ T9232]  should_failslab+0xa8/0x100
[  361.093735][ T9232]  __kmalloc_noprof+0xe8/0x760
[  361.093754][ T9232]  ? tomoyo_encode+0x28b/0x550
[  361.093780][ T9232]  tomoyo_encode+0x28b/0x550
[  361.093803][ T9232]  tomoyo_realpath_from_path+0x58d/0x5d0
[  361.093820][ T9232]  ? tomoyo_path_number_perm+0x219/0x630
[  361.093831][ T9232]  tomoyo_path_number_perm+0x246/0x630
[  361.093842][ T9232]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  361.093854][ T9232]  ? __lock_acquire+0x6b5/0x2cf0
[  361.093873][ T9232]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  361.093899][ T9232]  ? __fget_files+0x2a/0x420
[  361.093914][ T9232]  ? __fget_files+0x2a/0x420
[  361.093927][ T9232]  ? __fget_files+0x3a0/0x420
[  361.093940][ T9232]  ? __fget_files+0x2a/0x420
[  361.093955][ T9232]  security_file_ioctl+0xc3/0x2a0
[  361.093973][ T9232]  __se_sys_ioctl+0x47/0x170
[  361.093985][ T9232]  do_syscall_64+0x14d/0xf80
[  361.094000][ T9232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.094010][ T9232]  ? clear_bhb_loop+0x40/0x90
[  361.094023][ T9232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.094033][ T9232] RIP: 0033:0x7f48e2b9c629
[  361.094043][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.094053][ T9232] RSP: 002b:00007f48e3b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  361.094064][ T9232] RAX: ffffffffffffffda RBX: 00007f48e2e15fa0 RCX: 00007f48e2b9c629
[  361.094072][ T9232] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  361.094077][ T9232] RBP: 00007f48e3b3f090 R08: 0000000000000000 R09: 0000000000000000
[  361.094083][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.094089][ T9232] R13: 00007f48e2e16038 R14: 00007f48e2e15fa0 R15: 00007f48e2f3fa48
[  361.094104][ T9232]  </TASK>
[  361.094132][ T9232] ERROR: Out of memory at tomoyo_realpath_from_path.
[  361.670618][ T5903] gspca_sunplus: reg_r err -32
[  361.680456][ T5903] sunplus 4-1:0.0: probe with driver sunplus failed with error -32
[  361.781525][ T5903] usb 4-1: USB disconnect, device number 40
[  362.548742][ T9248] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  362.561902][ T5904] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  362.591696][ T9248] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  362.599280][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'.
[  362.640554][ T9248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  362.790462][ T5904] usb 1-1: config 0 has an invalid interface number: 25 but max is 0
[  362.798749][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.810065][ T5904] usb 1-1: config 0 has no interface number 0
[  362.816534][ T5904] usb 1-1: config 0 interface 25 has no altsetting 0
[  362.824557][ T5904] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  362.833885][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.867732][ T5904] usb 1-1: config 0 descriptor??
[  363.207089][ T9233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.261667][   T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  363.467290][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  363.508345][   T24] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  363.525092][   T24] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  363.558286][   T24] usb 5-1: config 1 interface 0 has no altsetting 0
[  363.583139][   T24] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  363.598979][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.618974][   T24] usb 5-1: Product: syz
[  363.632903][   T24] usb 5-1: Manufacturer: syz
[  363.659493][   T24] usb 5-1: SerialNumber: syz
[  363.708687][ T9259] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  364.125262][   T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input35
[  364.306458][   T24] usb 1-1: USB disconnect, device number 39
[  364.332593][ T5904] usb 5-1: USB disconnect, device number 46
[  364.338634][    C0] pxrc 5-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  364.356089][ T9279] binder: 9278:9279 ioctl c0306201 2000000003c0 returned -14
[  364.781658][   T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  364.942088][   T24] usb 1-1: Using ep0 maxpacket: 32
[  364.961219][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  364.987391][   T24] usb 1-1: config 0 has no interface number 0
[  364.999534][   T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  365.032419][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.057074][   T24] usb 1-1: Product: syz
[  365.061264][   T24] usb 1-1: Manufacturer: syz
[  365.078498][   T24] usb 1-1: SerialNumber: syz
[  365.094380][   T24] usb 1-1: config 0 descriptor??
[  365.117289][   T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  365.138099][   T24] usb 1-1: selecting invalid altsetting 1
[  365.155676][   T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  365.170635][   T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  365.182790][   T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  365.199071][   T24] usb 1-1: media controller created
[  365.201712][ T5904] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  365.243173][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  365.517886][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  365.559723][ T5904] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  365.568602][ T5904] usb 5-1: config 0 has no interface number 0
[  365.576804][ T5904] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  365.669435][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  365.678813][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.689068][ T5904] usb 5-1: Product: syz
[  365.702762][ T5904] usb 5-1: Manufacturer: syz
[  365.712089][ T5904] usb 5-1: SerialNumber: syz
[  365.724830][ T5904] usb 5-1: config 0 descriptor??
[  365.736920][ T9294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  365.804362][  T796] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  365.954058][ T9294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  365.977543][  T796] usb 4-1: Using ep0 maxpacket: 16
[  366.010124][  T796] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config
[  366.035069][  T796] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  366.097121][  T796] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  366.106617][  T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.116875][  T796] usb 4-1: Product: syz
[  366.121818][  T796] usb 4-1: Manufacturer: syz
[  366.126637][  T796] usb 4-1: SerialNumber: syz
[  366.144663][  T796] usb 4-1: config 0 descriptor??
[  366.189795][ T5904] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  366.200396][ T5904] asix 5-1:0.188: probe with driver asix failed with error -61
[  366.584430][   T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  366.602063][   T24] zl10353_read_register: readreg error (reg=127, ret==-110)
[  366.613531][ T9283] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  366.643217][   T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  366.750536][   T24] usb 1-1: USB disconnect, device number 40
[  367.125221][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.134223][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.245625][  T797] usb 4-1: USB disconnect, device number 41
[  367.347123][ T9272] syz.1.812 (9272): drop_caches: 1
[  367.491758][ T5904] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  367.576129][ T9328] RDS: rds_bind could not find a transport for fe80::1c, load rds_tcp or rds_rdma?
[  367.651686][ T5904] usb 1-1: Using ep0 maxpacket: 16
[  367.745725][ T9331] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  367.759159][ T9331] fuse: Unknown parameter '0xffffffffffffffff'
[  367.809746][ T5904] usb 1-1: config 0 has an invalid interface number: 135 but max is 0
[  367.824312][ T5904] usb 1-1: config 0 has no interface number 0
[  367.838128][ T5904] usb 1-1: config 0 interface 135 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  367.857587][ T5904] usb 1-1: config 0 interface 135 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  367.877497][ T5904] usb 1-1: config 0 interface 135 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  367.909725][ T5904] usb 1-1: config 0 interface 135 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  367.947470][ T5904] usb 1-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8
[  367.981228][ T5904] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  368.009647][ T5904] usb 1-1: config 0 interface 135 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  368.034537][ T5904] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x9 has invalid maxpacket 19665, setting to 1024
[  368.041689][   T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  368.068137][ T5904] usb 1-1: config 0 interface 135 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  368.089991][ T5904] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  368.117237][ T5904] usb 1-1: config 0 interface 135 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  368.133115][   T51] Bluetooth: hci3: unexpected event for opcode 0x0c26
[  368.141836][ T5904] usb 1-1: config 0 interface 135 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  368.144327][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.158047][ T5904] usb 1-1: New USB device found, idVendor=0f92, idProduct=0001, bcdDevice=66.e3
[  368.175048][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.183170][ T5904] usb 1-1: Product: 〉
[  368.187451][ T5904] usb 1-1: Manufacturer: ဇ
[  368.193952][ T5904] usb 1-1: SerialNumber: ᠁
[  368.198495][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.208242][ T5904] usb 1-1: config 0 descriptor??
[  368.214203][ T9320] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  368.223042][ T9320] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  368.225126][   T24] usb 2-1: config index 0 descriptor too short (expected 3133, got 61)
[  368.230640][ T9320] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  368.268275][   T24] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[  368.284660][ T5875] usb 5-1: USB disconnect, device number 47
[  368.314778][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.337951][   T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  368.359864][   T24] usb 2-1: config 0 has no interface number 0
[  368.369722][   T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  368.387795][   T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  368.404864][  T797] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  368.426470][   T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  368.448777][   T24] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  368.496172][   T24] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  368.512823][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.544024][   T24] usb 2-1: config 0 descriptor??
[  368.552850][ T9342] netlink: 68 bytes leftover after parsing attributes in process `syz.4.829'.
[  368.561806][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'.
[  368.574634][   T24] gspca_main: spca561-2.14.0 probing abcd:cdee
[  368.581991][  T797] usb 4-1: Using ep0 maxpacket: 16
[  368.585209][ T5904] usb 1-1: USB disconnect, device number 41
[  368.616979][  T797] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  368.641895][  T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.671811][  T797] usb 4-1: config 0 has no interface number 0
[  368.678186][  T797] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  368.711097][  T797] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  368.722175][  T797] usb 4-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  368.745733][  T797] usb 4-1: config 0 interface 223 has no altsetting 0
[  368.764450][  T797] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  368.788194][  T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.798328][  T797] usb 4-1: Product: syz
[  368.803336][  T797] usb 4-1: Manufacturer: syz
[  368.808109][  T797] usb 4-1: SerialNumber: syz
[  368.835684][  T797] usb 4-1: config 0 descriptor??
[  368.885376][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'.
[  368.895430][ T9347] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  369.050775][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.059794][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.084353][   T24] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  369.095449][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  369.103215][   T24] usb 2-1: MIDIStreaming interface descriptor not found
[  369.381806][ T5875] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  369.405720][  T797] usb 4-1: Can not set alternate setting to 1, error: -71
[  369.427239][  T797] synaptics_usb 4-1:0.223: probe with driver synaptics_usb failed with error -71
[  369.458370][  T797] usb 4-1: USB disconnect, device number 42
[  369.535378][ T5875] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  369.545698][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.557036][ T5875] usb 3-1: config 0 descriptor??
[  369.561663][ T5904] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  369.721709][ T5904] usb 1-1: Using ep0 maxpacket: 32
[  369.728697][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.739348][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  369.748545][ T5904] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  369.757773][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.765918][  T796] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  369.776044][ T5904] usb 1-1: config 0 descriptor??
[  369.931699][  T796] usb 5-1: Using ep0 maxpacket: 32
[  369.938786][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.950391][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.960665][  T796] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  369.982204][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.009664][  T796] usb 5-1: config 0 descriptor??
[  370.050438][ T5875] usb 3-1: Cannot set MAC address
[  370.072517][ T5875] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  370.111252][ T5875] usb 3-1: USB disconnect, device number 40
[  370.402654][ T9375] ptrace attach of "./syz-executor exec"[7223] was attempted by ""[9375]
[  370.452986][  T796] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  370.581853][ T5875] usb 2-1: USB disconnect, device number 47
[  370.748630][  T796] usb 5-1: USB disconnect, device number 48
[  370.961744][ T5904] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  370.976580][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'.
[  371.074088][ T5875] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  371.131677][ T5904] usb 3-1: Using ep0 maxpacket: 16
[  371.144551][ T5904] usb 3-1: config 0 has an invalid interface number: 60 but max is 0
[  371.153286][ T5904] usb 3-1: config 0 has no interface number 0
[  371.171527][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a
[  371.180662][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.209184][ T5904] usb 3-1: Product: syz
[  371.218122][ T5904] usb 3-1: Manufacturer: syz
[  371.228274][ T5904] usb 3-1: SerialNumber: syz
[  371.241380][ T5904] usb 3-1: config 0 descriptor??
[  371.253396][ T5875] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  371.255628][ T5904] gspca_main: spca500-2.14.0 probing 046d:0900
[  371.262764][ T5875] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  371.285307][ T5875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  371.297913][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  371.313922][ T5875] usb 2-1: config 1 has no interface number 0
[  371.321950][ T5875] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  371.341334][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.369684][ T5875] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  371.465457][ T5904] gspca_spca500: reg write: error -71
[  371.475338][ T5904] gspca_spca500: reg write: error -71
[  371.484369][ T5904] gspca_spca500: reg write: error -71
[  371.490556][ T5904] gspca_spca500: reg write: error -71
[  371.497545][ T5904] gspca_spca500: reg write: error -71
[  371.504594][ T5904] gspca_spca500: reg write: error -71
[  371.510780][ T5904] gspca_spca500: reg write: error -71
[  371.517218][ T5904] gspca_spca500: reg write: error -71
[  371.523337][ T5904] gspca_spca500: reg write: error -71
[  371.529152][ T5904] gspca_spca500: reg write: error -71
[  371.537916][ T5904] gspca_spca500: reg write: error -71
[  371.543860][ T5904] gspca_spca500: reg write: error -71
[  371.549795][ T5904] gspca_spca500: reg write: error -71
[  371.555622][ T5904] gspca_spca500: reg write: error -71
[  371.564421][ T5875] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  371.580990][ T5875] snd_usb_pod 2-1:1.1: invalid control EP
[  371.584301][ T5904] usb 3-1: USB disconnect, device number 41
[  371.588083][ T5875] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  371.599991][ T5875] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  371.608361][ T5875] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  371.797032][ T5875] usb 2-1: USB disconnect, device number 48
[  372.268724][ T9403] syzkaller1: entered promiscuous mode
[  372.282074][ T9403] syzkaller1: entered allmulticast mode
[  372.324032][ T5875] usb 1-1: USB disconnect, device number 42
[  372.751809][ T5904] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  372.816948][ T9413] kvm: kvm [9412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000040c2
[  372.833567][ T9413] kvm: kvm [9412]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  372.885761][ T9413] kvm: kvm [9412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x400
[  373.034636][ T5904] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  373.073604][ T5904] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  373.109367][ T5904] usb 5-1: config 220 interface 0 has no altsetting 0
[  373.150658][ T5904] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  373.174453][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.205394][ T5904] usb 5-1: Product: syz
[  373.223009][ T5904] usb 5-1: Manufacturer: syz
[  373.235261][ T5904] usb 5-1: SerialNumber: syz
[  373.499027][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'.
[  373.568410][ T5904] usb 5-1: USB disconnect, device number 49
[  373.904245][   T29] audit: type=1800 audit(1772044820.086:571): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.850" name="bus" dev="tmpfs" ino=595 res=0 errno=0
[  373.982626][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'.
[  374.341690][ T5875] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  374.431666][ T5902] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[  374.516075][ T5875] usb 3-1: config 24 has 1 interface, different from the descriptor's value: 2
[  374.526213][ T5875] usb 3-1: config 24 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  374.541306][ T9443] kvm: pic: non byte write
[  374.557717][ T5875] usb 3-1: config 24 interface 0 has no altsetting 0
[  374.569536][ T5875] usb 3-1: config 24 interface 0 has no altsetting 1
[  374.589726][ T5875] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25
[  374.717929][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.726567][ T5875] usb 3-1: Product: syz
[  374.731048][ T5875] usb 3-1: Manufacturer: syz
[  374.735948][ T5875] usb 3-1: SerialNumber: syz
[  374.740855][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  374.752029][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  374.765805][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  374.971111][   T29] audit: type=1800 audit(1772044821.166:572): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.854" name="file0" dev="fuse" ino=2 res=0 errno=0
[  375.150453][ T5875] usb 3-1: selecting invalid altsetting 0
[  375.167891][ T5875] usb 3-1: selecting invalid altsetting 0
[  375.206576][ T5875] usb 3-1: selecting invalid altsetting 0
[  375.217580][ T5875] usb 3-1: selecting invalid altsetting 0
[  375.225921][ T5875] usb 3-1: selecting invalid altsetting 0
[  375.232291][ T5875] usb 3-1: selecting invalid altsetting 0
[  375.476611][ T5875] usb 3-1: USB disconnect, device number 42
[  375.566974][ T8655] udevd[8655]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:24.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.162526][  T797] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  376.340247][  T797] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  376.356573][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.373345][  T797] usb 5-1: Product: syz
[  376.383493][  T797] usb 5-1: Manufacturer: syz
[  376.394265][  T797] usb 5-1: SerialNumber: syz
[  376.787476][ T9466] binder: 9464:9466 ioctl c0306201 0 returned -14
[  376.798662][ T9466] binder: BINDER_SET_CONTEXT_MGR already set
[  376.804795][ T9466] binder: 9464:9466 ioctl 4018620d 200000000040 returned -16
[  377.144548][ T5902] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8
[  377.169105][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.210123][  T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  377.238671][ T5902] usb 2-1: config 0 descriptor??
[  377.247924][  T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  377.262499][ T9479] FAULT_INJECTION: forcing a failure.
[  377.262499][ T9479] name failslab, interval 1, probability 0, space 0, times 0
[  377.282222][ T5902] usb 2-1: can't set config #0, error -71
[  377.299701][ T5902] usb 2-1: USB disconnect, device number 49
[  377.306173][  T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  377.321787][ T9479] CPU: 1 UID: 0 PID: 9479 Comm: syz.1.864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.321806][ T9479] Tainted: [L]=SOFTLOCKUP
[  377.321811][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  377.321820][ T9479] Call Trace:
[  377.321825][ T9479]  <TASK>
[  377.321831][ T9479]  dump_stack_lvl+0xe8/0x150
[  377.321850][ T9479]  should_fail_ex+0x412/0x560
[  377.321871][ T9479]  should_failslab+0xa8/0x100
[  377.321885][ T9479]  __kmalloc_noprof+0xe8/0x760
[  377.321896][ T9479]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  377.321913][ T9479]  tomoyo_realpath_from_path+0xe3/0x5d0
[  377.321931][ T9479]  ? tomoyo_path_number_perm+0x219/0x630
[  377.321941][ T9479]  tomoyo_path_number_perm+0x246/0x630
[  377.321953][ T9479]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  377.321965][ T9479]  ? __lock_acquire+0x6b5/0x2cf0
[  377.321984][ T9479]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  377.322010][ T9479]  ? __fget_files+0x2a/0x420
[  377.322026][ T9479]  ? __fget_files+0x2a/0x420
[  377.322038][ T9479]  ? __fget_files+0x3a0/0x420
[  377.322051][ T9479]  ? __fget_files+0x2a/0x420
[  377.322066][ T9479]  security_file_ioctl+0xc3/0x2a0
[  377.322083][ T9479]  __se_sys_ioctl+0x47/0x170
[  377.322096][ T9479]  do_syscall_64+0x14d/0xf80
[  377.322111][ T9479]  ? trace_irq_disable+0x3b/0x150
[  377.322126][ T9479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.322135][ T9479]  ? clear_bhb_loop+0x40/0x90
[  377.322148][ T9479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.322160][ T9479] RIP: 0033:0x7f48e2b9c629
[  377.322171][ T9479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.322180][ T9479] RSP: 002b:00007f48e3b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.322191][ T9479] RAX: ffffffffffffffda RBX: 00007f48e2e15fa0 RCX: 00007f48e2b9c629
[  377.322199][ T9479] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  377.322205][ T9479] RBP: 00007f48e3b3f090 R08: 0000000000000000 R09: 0000000000000000
[  377.322211][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.322217][ T9479] R13: 00007f48e2e16038 R14: 00007f48e2e15fa0 R15: 00007f48e2f3fa48
[  377.322232][ T9479]  </TASK>
[  377.322237][ T9479] ERROR: Out of memory at tomoyo_realpath_from_path.
[  377.558221][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a
[  377.571091][  T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  377.591006][  T797] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  377.625616][ T9479] kvm_intel: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b
[  377.641086][  T797] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  377.663910][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956
[  377.673667][  T797] usb 5-1: USB disconnect, device number 50
[  377.690829][ T9474] kvm: kvm [9473]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a
[  377.714133][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5
[  377.737948][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea
[  377.748794][ T9474] kvm_intel: kvm [9473]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b
[  377.772352][ T9474] kvm: kvm [9473]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956
[  377.786209][ T9474] kvm: kvm [9473]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5
[  377.837330][ T9479] kvm_pr_unimpl_wrmsr: 9 callbacks suppressed
[  377.837351][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262
[  377.885657][ T9474] kvm: kvm [9473]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262
[  377.894728][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  377.952482][ T9479] kvm: kvm [9478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x216d
[  377.966787][ T9474] kvm: kvm [9473]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  378.045888][ T9474] kvm: kvm [9473]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x216d
[  378.173457][ T9489] loop7: detected capacity change from 0 to 16383
[  378.231949][  T797] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  378.411664][  T797] usb 5-1: device descriptor read/64, error -71
[  378.441673][ T5875] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  378.637556][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short
[  378.662513][ T5875] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  378.667917][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.676368][  T797] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  378.680208][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.691657][ T5875] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  378.775801][ T5875] usb 4-1: config 1 interface 0 has no altsetting 0
[  378.817767][ T5875] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  378.831750][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.861888][  T797] usb 5-1: device descriptor read/64, error -71
[  378.869755][ T5875] usb 4-1: Product: syz
[  378.872446][ T9511] FAULT_INJECTION: forcing a failure.
[  378.872446][ T9511] name failslab, interval 1, probability 0, space 0, times 0
[  378.878598][ T5875] usb 4-1: Manufacturer: syz
[  378.901746][ T9511] CPU: 0 UID: 0 PID: 9511 Comm: syz.2.873 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.901774][ T9511] Tainted: [L]=SOFTLOCKUP
[  378.901780][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  378.901791][ T9511] Call Trace:
[  378.901799][ T9511]  <TASK>
[  378.901807][ T9511]  dump_stack_lvl+0xe8/0x150
[  378.901835][ T9511]  should_fail_ex+0x412/0x560
[  378.901860][ T9511]  should_failslab+0xa8/0x100
[  378.901881][ T9511]  __kmalloc_noprof+0xe8/0x760
[  378.901901][ T9511]  ? sock_kmalloc+0xd6/0x160
[  378.901920][ T9511]  ? do_ipv6_setsockopt+0x85e/0x31c0
[  378.901944][ T9511]  sock_kmalloc+0xd6/0x160
[  378.901973][ T9511]  do_ipv6_setsockopt+0x20a7/0x31c0
[  378.902005][ T9511]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  378.902025][ T9511]  ? get_pid_task+0x20/0x1f0
[  378.902041][ T9511]  ? get_pid_task+0x20/0x1f0
[  378.902054][ T9511]  ? get_pid_task+0x20/0x1f0
[  378.902080][ T9511]  ? __lock_acquire+0x6b5/0x2cf0
[  378.902114][ T9511]  ? aa_sk_perm+0x6d5/0x900
[  378.902139][ T9511]  ? __pfx_aa_sk_perm+0x10/0x10
[  378.902159][ T9511]  ? __fget_files+0x2a/0x420
[  378.902180][ T9511]  ? aa_sock_opt_perm+0xff/0x1a0
[  378.902204][ T9511]  ipv6_setsockopt+0x59/0x170
[  378.902226][ T9511]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  378.902247][ T9511]  do_sock_setsockopt+0x17c/0x1b0
[  378.902276][ T9511]  __x64_sys_setsockopt+0x13d/0x1b0
[  378.902303][ T9511]  do_syscall_64+0x14d/0xf80
[  378.902327][ T9511]  ? trace_irq_disable+0x3b/0x150
[  378.902351][ T9511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.902367][ T9511]  ? clear_bhb_loop+0x40/0x90
[  378.902388][ T9511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.902405][ T9511] RIP: 0033:0x7f2dbd39c629
[  378.902422][ T9511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.902435][ T9511] RSP: 002b:00007f2dbe2da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  378.902454][ T9511] RAX: ffffffffffffffda RBX: 00007f2dbd615fa0 RCX: 00007f2dbd39c629
[  378.902468][ T9511] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003
[  378.902479][ T9511] RBP: 00007f2dbe2da090 R08: 0000000000000003 R09: 0000000000000000
[  378.902490][ T9511] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  378.902501][ T9511] R13: 00007f2dbd616038 R14: 00007f2dbd615fa0 R15: 00007f2dbd73fa48
[  378.902530][ T9511]  </TASK>
[  378.906636][ T5875] usb 4-1: SerialNumber: syz
[  379.162005][  T797] usb usb5-port1: attempt power cycle
[  379.255874][ T9491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  379.345540][ T5903] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  379.521687][ T5903] usb 1-1: Using ep0 maxpacket: 8
[  379.528789][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  379.545286][ T5903] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  379.561830][  T797] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  379.564758][ T5903] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  379.593001][  T797] usb 5-1: device descriptor read/8, error -71
[  379.606126][ T5903] usb 1-1: Product: syz
[  379.619161][ T5903] usb 1-1: Manufacturer: syz
[  379.634379][ T5903] usb 1-1: SerialNumber: syz
[  379.673097][ T5875] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input36
[  379.736627][ T5875] usb 4-1: USB disconnect, device number 43
[  379.852196][  T797] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  379.863675][ T5903] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[  379.882839][  T797] usb 5-1: device descriptor read/8, error -71
[  379.893223][ T5903] usb 1-1: Handspring Visor / Palm OS: port 109, is for unknown use
[  379.923218][ T5903] usb 1-1: Handspring Visor / Palm OS: port 211, is for unknown use
[  379.943235][ T5903] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  380.012689][  T797] usb usb5-port1: unable to enumerate USB device
[  380.064567][ T5903] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  380.078244][ T5903] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  380.107788][ T5903] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  380.306408][ T9510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.334282][ T9510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.425083][ T5902] usb 1-1: USB disconnect, device number 43
[  380.443318][ T5902] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  380.537089][ T5902] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  380.595021][ T5902] visor 1-1:1.0: device disconnected
[  381.177112][ T9549] input: syz0 as /devices/virtual/input/input37
[  381.651666][  T796] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  381.838623][  T796] usb 5-1: device descriptor read/64, error -71
[  382.121778][  T796] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  382.444720][  T796] usb 5-1: device descriptor read/64, error -71
[  382.582638][  T796] usb usb5-port1: attempt power cycle
[  382.588346][ T9564] program syz.1.887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  382.598960][ T9565] program syz.1.887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  382.639577][ T9567] program syz.1.887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  382.705675][ T5903] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  382.903778][ T5903] usb 4-1: Using ep0 maxpacket: 16
[  382.910879][ T5903] usb 4-1: config 6 has an invalid interface number: 227 but max is 0
[  382.919768][ T5903] usb 4-1: config 6 has no interface number 0
[  382.928279][ T5903] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79
[  382.938847][  T796] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  382.946669][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.962358][ T5903] usb 4-1: Product: syz
[  382.966639][ T5903] usb 4-1: Manufacturer: syz
[  382.971236][ T5903] usb 4-1: SerialNumber: syz
[  382.982461][  T796] usb 5-1: device descriptor read/8, error -71
[  383.007485][ T5903] kalmia 4-1:6.227: probe with driver kalmia failed with error -22
[  383.206868][ T5945] usb 4-1: USB disconnect, device number 44
[  383.231977][ T5903] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  383.253403][  T796] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  383.302405][  T796] usb 5-1: device descriptor read/8, error -71
[  383.423939][  T796] usb usb5-port1: unable to enumerate USB device
[  383.432370][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short
[  383.602504][ T5903] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  383.661873][ T5903] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  383.676393][ T5903] usb 2-1: config 1 interface 0 has no altsetting 0
[  383.688852][ T5903] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  383.698441][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.707952][ T5903] usb 2-1: Product: syz
[  383.716495][ T5903] usb 2-1: Manufacturer: syz
[  383.721262][ T5903] usb 2-1: SerialNumber: syz
[  383.753848][ T9575] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  384.214508][ T5903] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input38
[  384.256638][ T5903] usb 2-1: USB disconnect, device number 50
[  384.256758][    C1] pxrc 2-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  384.288167][ T5177] pxrc 2-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  384.696116][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'.
[  385.057970][ T9613] syzkaller0: entered promiscuous mode
[  385.091703][ T9613] syzkaller0: entered allmulticast mode
[  385.278215][ T9618] netlink: 104 bytes leftover after parsing attributes in process `syz.4.900'.
[  385.658361][ T5903] IPVS: starting estimator thread 0...
[  385.672110][ T5902] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  385.758033][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'.
[  385.771819][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  385.823533][ T9631] IPVS: using max 30 ests per chain, 72000 per kthread
[  385.875291][ T5902] usb 4-1: config 0 has an invalid interface number: 213 but max is 0
[  385.883899][ T5902] usb 4-1: config 0 has no interface number 0
[  385.890427][ T5902] usb 4-1: config 0 interface 213 altsetting 101 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.909471][ T5902] usb 4-1: config 0 interface 213 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.927876][ T5902] usb 4-1: config 0 interface 213 has no altsetting 0
[  385.940605][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  385.959792][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.983696][ T5902] usb 4-1: config 0 descriptor??
[  386.418983][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.427654][ T5875] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  386.439564][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.540125][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.549679][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.614303][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.629158][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.639299][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.655681][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.671725][ T5902] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  386.683553][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.706034][ T5902] logitech 0003:046D:CA04.000F: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input213
[  386.718076][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  386.741254][ T5902] logitech 0003:046D:CA04.000F: no inputs found
[  386.761522][ T5875] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  386.770701][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.809540][ T5902] usb 4-1: USB disconnect, device number 45
[  386.859954][ T5875] usb 5-1: config 0 descriptor??
[  386.899752][ T5875] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  386.993781][ T9638] fido_id[9638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  387.824879][ T9649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'.
[  387.872060][ T5902] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  388.030405][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short
[  388.041397][ T5902] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  388.053314][ T5902] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  388.069918][ T5902] usb 4-1: config 1 interface 0 has no altsetting 0
[  388.085844][ T5902] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  388.100226][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.113862][ T5902] usb 4-1: Product: syz
[  388.120429][ T5902] usb 4-1: Manufacturer: syz
[  388.128815][ T5902] usb 4-1: SerialNumber: syz
[  388.150781][ T9648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  388.531716][  T796] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  388.583400][ T5902] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39
[  388.622609][ T5902] usb 4-1: USB disconnect, device number 46
[  388.692461][  T796] usb 1-1: Using ep0 maxpacket: 16
[  388.707290][  T796] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  388.719815][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.728527][  T796] usb 1-1: Product: syz
[  388.734583][  T796] usb 1-1: Manufacturer: syz
[  388.739364][  T796] usb 1-1: SerialNumber: syz
[  388.750937][  T796] usb 1-1: config 0 descriptor??
[  388.763245][  T796] usb-storage 1-1:0.0: USB Mass Storage device detected
[  388.775252][  T796] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1
[  388.782889][  T796] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  388.782889][  T796]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  389.034667][ T5875] usb 5-1: USB disconnect, device number 59
[  389.074309][ T9663] hfs: unable to load iocharset "io#harset"
[  389.401812][ T5875] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  389.428687][ T5902] usb 1-1: USB disconnect, device number 44
[  389.458766][ T9685] kvm: pic: non byte write
[  389.572646][ T5875] usb 3-1: device descriptor read/64, error -71
[  389.811762][ T5875] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  389.831793][ T5903] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  389.949982][ T5875] usb 3-1: device descriptor read/64, error -71
[  390.001689][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  390.008300][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  390.019341][ T5903] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  390.028832][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.039840][ T5903] usb 4-1: config 0 descriptor??
[  390.061947][ T5875] usb usb3-port1: attempt power cycle
[  390.221758][  T796] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  390.251106][ T5903] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  390.391697][  T796] usb 1-1: Using ep0 maxpacket: 32
[  390.398199][  T796] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  390.411858][ T5875] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  390.420392][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  390.433534][ T5875] usb 3-1: device descriptor read/8, error -71
[  390.442054][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  390.455505][  T796] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  390.472011][  T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.494881][  T796] usb 1-1: config 0 descriptor??
[  390.500675][ T9689] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  390.513988][  T796] hub 1-1:0.0: USB hub found
[  390.681867][ T5875] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  390.702521][ T5875] usb 3-1: device descriptor read/8, error -71
[  390.710999][  T796] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  390.812362][ T5875] usb usb3-port1: unable to enumerate USB device
[  391.148017][  T796] hid-generic 0003:046D:C314.0010: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0
[  391.581799][ T9702] xt_addrtype: ipv6 does not support BROADCAST matching
[  391.600151][ T9702] QAT: failed to copy from user cfg_data.
[  391.724954][  T796] usb 1-1: USB disconnect, device number 45
[  391.997560][ T9711] binder: 9710:9711 ioctl c0046209 0 returned -22
[  392.366045][ T5903] usb 4-1: USB disconnect, device number 47
[  392.568408][   T29] audit: type=1800 audit(1772044838.646:573): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.927" name="bus" dev="tmpfs" ino=684 res=0 errno=0
[  393.291723][ T5945] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  393.480365][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short
[  393.506505][ T5945] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  393.518365][ T5945] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  393.530200][ T5945] usb 3-1: config 1 interface 0 has no altsetting 0
[  393.552949][ T5945] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  393.564233][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.576008][ T5945] usb 3-1: Product: syz
[  393.587324][ T5945] usb 3-1: Manufacturer: syz
[  393.593252][ T5945] usb 3-1: SerialNumber: syz
[  393.626087][ T9727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  393.963655][   T29] audit: type=1326 audit(1772044840.166:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.012138][   T29] audit: type=1326 audit(1772044840.166:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.065052][   T29] audit: type=1326 audit(1772044840.196:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.092730][ T5902] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  394.102381][   T29] audit: type=1326 audit(1772044840.206:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.166034][   T29] audit: type=1326 audit(1772044840.206:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.253622][ T5945] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40
[  394.283615][ T9744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.331933][ T5902] usb 4-1: Using ep0 maxpacket: 16
[  394.338093][   T29] audit: type=1326 audit(1772044840.206:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.393263][ T5902] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  394.405511][ T5902] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 3
[  394.418587][ T5902] usb 4-1: New USB device found, idVendor=086b, idProduct=0000, bcdDevice= 0.00
[  394.428299][   T29] audit: type=1326 audit(1772044840.206:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.437924][ T5945] usb 3-1: USB disconnect, device number 47
[  394.450560][    C0] pxrc 3-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  394.460896][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.483110][ T5177] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  394.498417][ T5177] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  394.548422][ T6565] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  394.557090][   T29] audit: type=1326 audit(1772044840.206:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.600635][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a
[  394.626036][ T5902] usb 4-1: 0:2 : does not exist
[  394.641310][   T29] audit: type=1326 audit(1772044840.206:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fed0f19c629 code=0x7ffc0000
[  394.672930][ T9745] kvm_intel: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b
[  394.683532][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956
[  394.752547][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5
[  394.785461][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea
[  394.847080][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939
[  394.874660][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  394.886027][ T9740] tipc: Disabling bearer <eth:syzkaller0>
[  394.894280][ T5902] usb 4-1: string descriptor 0 read error: -71
[  394.909836][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56
[  394.921695][ T5902] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  394.935476][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8
[  394.979824][ T9745] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262
[  395.095480][ T5902] usb 4-1: USB disconnect, device number 48
[  395.351826][ T5945] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  395.905736][ T5902] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  396.063712][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.076016][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  396.087009][ T5902] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  396.100127][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  396.110189][ T5902] usb 2-1: SerialNumber: syz
[  396.323078][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.334985][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.298409][ T9790] netlink: 68 bytes leftover after parsing attributes in process `syz.3.948'.
[  397.945688][ T9808] loop5: detected capacity change from 0 to 7
[  397.953396][ T9808] Dev loop5: unable to read RDB block 7
[  397.959086][ T9808]  loop5: AHDI p1 p2 p3
[  397.963875][ T9808] loop5: partition table partially beyond EOD, truncated
[  397.972467][ T9808] loop5: p1 size 29516645 extends beyond EOD, truncated
[  397.982964][ T9808] loop5: p2 start 1702059890 is beyond EOD, truncated
[  398.374042][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  398.374056][   T29] audit: type=1326 audit(1772044844.576:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dbd39c629 code=0x0
[  398.554509][ T5902] usb 2-1: 0:2 : does not exist
[  398.796336][ T5902] usb 2-1: USB disconnect, device number 51
[  399.100689][ T6639] udevd[6639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  399.871786][  T796] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  400.023593][  T796] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  400.041882][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  400.075319][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  400.100613][  T796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  400.102290][ T5902] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  400.125292][  T796] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  400.134538][  T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.392602][  T796] usb 1-1: config 0 descriptor??
[  400.650919][ T9861] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  400.673944][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'.
[  400.701187][ T9863] netlink: 68 bytes leftover after parsing attributes in process `syz.3.966'.
[  400.804984][  T796] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max
[  400.862504][  T796] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  401.091731][  T796] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  401.208727][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.216955][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.235430][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.243631][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.252583][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.270903][  T796] usb 3-1: config 0 interface 0 has no altsetting 0
[  401.282958][  T796] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[  401.305092][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.315885][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.324174][  T796] usb 3-1: Product: syz
[  401.328464][  T796] usb 3-1: Manufacturer: syz
[  401.334464][  T796] usb 3-1: SerialNumber: syz
[  401.339199][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.349120][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.359489][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.368113][  T796] usb 3-1: config 0 descriptor??
[  401.373868][ T9873] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  401.466625][ T5902] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  401.491726][   T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  401.595489][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'.
[  401.641642][ T5902] usb 2-1: Using ep0 maxpacket: 32
[  401.651813][   T24] usb 5-1: Using ep0 maxpacket: 8
[  401.661361][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0
[  401.680511][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  401.695829][   T24] usb 5-1: can't read configurations, error -61
[  401.709116][ T5902] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  401.725474][ T9867] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  401.739222][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.761646][ T5902] usb 2-1: Product: syz
[  401.772054][ T5902] usb 2-1: Manufacturer: syz
[  401.778897][ T5902] usb 2-1: SerialNumber: syz
[  401.793421][ T5902] usb 2-1: config 0 descriptor??
[  401.861700][   T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  401.951485][  T796] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  401.985661][  T796] usb 3-1: USB disconnect, device number 49
[  402.021860][   T24] usb 5-1: Using ep0 maxpacket: 8
[  402.027886][ T6639] udevd[6639]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.059150][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  402.081044][   T24] usb 5-1: can't read configurations, error -61
[  402.115283][   T24] usb usb5-port1: attempt power cycle
[  402.293483][ T5902] gs_usb 2-1:0.0: Couldn't get device config: (err=-32)
[  402.305392][ T5902] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32
[  402.311676][ T5945] usb 1-1: reset high-speed USB device number 46 using dummy_hcd
[  402.474560][   T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  402.481735][ T5945] usb 1-1: device descriptor read/64, error -32
[  402.512340][   T24] usb 5-1: Using ep0 maxpacket: 8
[  402.519952][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  402.528375][   T24] usb 5-1: can't read configurations, error -61
[  402.701693][   T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  402.742248][   T24] usb 5-1: Using ep0 maxpacket: 8
[  402.753914][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  402.764053][   T24] usb 5-1: can't read configurations, error -61
[  402.776410][ T5945] usb 1-1: reset high-speed USB device number 46 using dummy_hcd
[  402.786090][   T24] usb usb5-port1: unable to enumerate USB device
[  403.301796][ T5945] usb 1-1: device descriptor read/64, error -32
[  403.568987][ T5903] usb 2-1: USB disconnect, device number 52
[  404.240698][  T796] usb 1-1: USB disconnect, device number 46
[  404.361840][   T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  404.531697][ T5902] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  404.543281][   T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  404.555642][   T24] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  404.582269][   T24] usb 4-1: config 220 interface 0 has no altsetting 0
[  404.602190][   T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  404.617118][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.631637][   T24] usb 4-1: Product: syz
[  404.641867][   T24] usb 4-1: Manufacturer: syz
[  404.646739][   T24] usb 4-1: SerialNumber: syz
[  404.681762][ T5902] usb 5-1: device descriptor read/64, error -71
[  404.963810][ T5902] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  405.004614][   T24] usb 4-1: USB disconnect, device number 50
[  405.101768][ T5902] usb 5-1: device descriptor read/64, error -71
[  405.222505][ T5902] usb usb5-port1: attempt power cycle
[  405.431735][  T796] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  405.591661][ T5902] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  405.623708][ T5902] usb 5-1: device descriptor read/8, error -71
[  405.651687][  T796] usb 2-1: Using ep0 maxpacket: 32
[  405.662628][  T796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.673968][  T796] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  405.683759][ T9937] netlink: 92 bytes leftover after parsing attributes in process `syz.3.984'.
[  405.772046][  T796] usb 2-1: New USB device found, idVendor=0472, idProduct=cb01, bcdDevice=1b.c4
[  405.785860][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.800205][  T796] usb 2-1: Product: syz
[  405.806489][  T796] usb 2-1: Manufacturer: syz
[  405.817585][  T796] usb 2-1: SerialNumber: syz
[  405.833593][  T796] usb 2-1: config 0 descriptor??
[  405.871851][ T5902] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  405.892435][ T5902] usb 5-1: device descriptor read/8, error -71
[  406.001907][ T5902] usb usb5-port1: unable to enumerate USB device
[  406.064046][ T5902] usb 2-1: USB disconnect, device number 53
[  406.491742][   T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  406.673141][   T24] usb 3-1: Using ep0 maxpacket: 32
[  406.682678][   T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  406.691137][   T24] usb 3-1: config 0 has no interface number 0
[  406.701969][   T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  406.724979][   T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  406.734812][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.745433][   T24] usb 3-1: Product: syz
[  406.750036][   T24] usb 3-1: Manufacturer: syz
[  406.755404][   T24] usb 3-1: SerialNumber: syz
[  406.780673][   T24] usb 3-1: config 0 descriptor??
[  406.807438][   T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  406.807475][   T24] em28xx 3-1:0.132: Video interface 132 found:
[  406.878968][ T9952] CIFS: VFS: Malformed UNC in devname
[  406.887508][ T9952] loop2: detected capacity change from 0 to 7
[  406.904523][ T6639] Dev loop2: unable to read RDB block 7
[  406.910140][ T6639]  loop2: AHDI p1 p2 p3
[  406.917366][ T6639] loop2: partition table partially beyond EOD, truncated
[  406.926325][ T6639] loop2: p1 start 1601398130 is beyond EOD, truncated
[  406.933815][ T6639] loop2: p2 start 1702059890 is beyond EOD, truncated
[  406.958612][ T9952] Dev loop2: unable to read RDB block 7
[  406.982708][ T9952]  loop2: AHDI p1 p2 p3
[  406.996893][ T9952] loop2: partition table partially beyond EOD, truncated
[  407.017405][ T9952] loop2: p1 start 1601398130 is beyond EOD, truncated
[  407.031065][ T9952] loop2: p2 start 1702059890 is beyond EOD, truncated
[  407.211137][   T24] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  407.261732][  T797] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  407.353789][ T5827] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  407.411701][  T797] usb 1-1: Using ep0 maxpacket: 32
[  407.420213][  T797] usb 1-1: config 0 interface 0 has no altsetting 0
[  407.440713][  T797] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  407.461999][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.470089][  T797] usb 1-1: Product: syz
[  407.480175][  T797] usb 1-1: Manufacturer: syz
[  407.485828][  T797] usb 1-1: SerialNumber: syz
[  407.493739][  T797] usb 1-1: config 0 descriptor??
[  407.523674][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short
[  407.533279][ T5827] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  407.544875][ T5827] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024
[  407.567005][ T5827] usb 4-1: config 1 interface 0 has no altsetting 0
[  407.587321][ T5827] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  407.598080][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.606995][ T5827] usb 4-1: Product: syz
[  407.611311][ T5827] usb 4-1: Manufacturer: syz
[  407.621651][   T24] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  407.635466][ T5827] usb 4-1: SerialNumber: syz
[  407.644916][   T24] em28xx 3-1:0.132: board has no eeprom
[  407.651837][ T9962] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  407.722262][ T5902] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  407.742221][   T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  407.750251][   T24] em28xx 3-1:0.132: analog set to bulk mode.
[  407.756966][   T42] em28xx 3-1:0.132: Registering V4L2 extension
[  407.864226][  T796] usb 3-1: USB disconnect, device number 50
[  407.886663][   T42] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  407.897208][  T796] em28xx 3-1:0.132: Disconnecting em28xx
[  407.915994][ T5902] usb 5-1: config 0 has an invalid interface number: 127 but max is 0
[  407.952095][ T5902] usb 5-1: config 0 has no interface number 0
[  407.973136][ T5902] usb 5-1: config 0 interface 127 altsetting 170 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  407.995195][ T5902] usb 5-1: config 0 interface 127 altsetting 170 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.011752][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'.
[  408.030814][ T5902] usb 5-1: config 0 interface 127 has no altsetting 0
[  408.051065][ T5902] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  408.079781][ T5827] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input42
[  408.096169][   T42] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  408.103708][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.112806][   T42] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  408.122920][ T5902] usb 5-1: config 0 descriptor??
[  408.140319][   T42] em28xx 3-1:0.132: No AC97 audio processor
[  408.196661][   T42] usb 3-1: Decoder not found
[  408.216542][   T42] em28xx 3-1:0.132: failed to create media graph
[  408.286193][   T42] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  408.322313][ T5831] usb 4-1: USB disconnect, device number 51
[  408.339067][   T42] em28xx 3-1:0.132: Remote control support is not available for this card.
[  408.339327][ T9981] ==================================================================
[  408.355745][ T9981] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  408.363117][ T9981] Read of size 8 at addr ffff888032e34748 by task v4l_id/9981
[  408.370559][ T9981] 
[  408.372890][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.372907][ T9981] Tainted: [L]=SOFTLOCKUP
[  408.372912][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  408.372924][ T9981] Call Trace:
[  408.372932][ T9981]  <TASK>
[  408.372941][ T9981]  dump_stack_lvl+0xe8/0x150
[  408.372970][ T9981]  print_report+0xba/0x230
[  408.372991][ T9981]  ? v4l2_fh_open+0xac/0x420
[  408.373006][ T9981]  kasan_report+0x117/0x150
[  408.373018][ T9981]  ? v4l2_fh_open+0xac/0x420
[  408.373028][ T9981]  v4l2_fh_open+0xac/0x420
[  408.373038][ T9981]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  408.373055][ T9981]  em28xx_v4l2_open+0x157/0x9a0
[  408.373077][ T9981]  ? do_raw_spin_lock+0x12b/0x2f0
[  408.373098][ T9981]  v4l2_open+0x1bf/0x3a0
[  408.373118][ T9981]  chrdev_open+0x4cd/0x5e0
[  408.373140][ T9981]  ? __pfx_chrdev_open+0x10/0x10
[  408.373155][ T9981]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  408.373172][ T9981]  ? __pfx_chrdev_open+0x10/0x10
[  408.373183][ T9981]  do_dentry_open+0x785/0x14e0
[  408.373199][ T9981]  vfs_open+0x3b/0x340
[  408.373213][ T9981]  ? path_openat+0x2df0/0x3860
[  408.373231][ T9981]  path_openat+0x2e08/0x3860
[  408.373255][ T9981]  ? __pfx_stack_trace_save+0x10/0x10
[  408.373275][ T9981]  ? stack_depot_save_flags+0x33/0x810
[  408.373298][ T9981]  ? __pfx_path_openat+0x10/0x10
[  408.373307][ T9981]  ? __x64_sys_openat+0x138/0x170
[  408.373320][ T9981]  ? do_syscall_64+0x14d/0xf80
[  408.373334][ T9981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.373345][ T9981]  ? __lock_acquire+0x6b5/0x2cf0
[  408.373363][ T9981]  do_file_open+0x23e/0x4a0
[  408.373382][ T9981]  ? __pfx_do_file_open+0x10/0x10
[  408.373409][ T9981]  ? _raw_spin_unlock+0x28/0x50
[  408.373430][ T9981]  ? alloc_fd+0x64b/0x6c0
[  408.373457][ T9981]  do_sys_openat2+0x113/0x200
[  408.373470][ T9981]  ? __pfx_do_sys_openat2+0x10/0x10
[  408.373484][ T9981]  ? exc_page_fault+0x6a/0xc0
[  408.373499][ T9981]  ? do_user_addr_fault+0xc6f/0x1340
[  408.373520][ T9981]  __x64_sys_openat+0x138/0x170
[  408.373547][ T9981]  do_syscall_64+0x14d/0xf80
[  408.373572][ T9981]  ? trace_irq_disable+0x3b/0x150
[  408.373596][ T9981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.373606][ T9981]  ? clear_bhb_loop+0x40/0x90
[  408.373616][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.373626][ T9981] RIP: 0033:0x7f50bb4a7407
[  408.373638][ T9981] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  408.373646][ T9981] RSP: 002b:00007fff4c4a04a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  408.373662][ T9981] RAX: ffffffffffffffda RBX: 00007f50bbc68880 RCX: 00007f50bb4a7407
[  408.373676][ T9981] RDX: 0000000000000000 RSI: 00007fff4c4a0f1b RDI: ffffffffffffff9c
[  408.373689][ T9981] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  408.373699][ T9981] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  408.373716][ T9981] R13: 00007fff4c4a06f0 R14: 00007f50bbdcf000 R15: 0000562abff9b4d8
[  408.373737][ T9981]  </TASK>
[  408.373743][ T9981] 
[  408.384734][ T6649] pxrc 4-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  408.388706][ T9981] Allocated by task 42:
[  408.388717][ T9981]  kasan_save_track+0x3e/0x80
[  408.388736][ T9981]  __kasan_kmalloc+0x93/0xb0
[  408.388750][ T9981]  __kmalloc_cache_noprof+0x31c/0x660
[  408.388765][ T9981]  em28xx_v4l2_init+0x10b/0x2e70
[  408.388785][ T9981]  em28xx_init_extension+0x120/0x1c0
[  408.709760][ T9981]  process_scheduled_works+0xb02/0x1830
[  408.715309][ T9981]  worker_thread+0xa50/0xfc0
[  408.719903][ T9981]  kthread+0x388/0x470
[  408.723966][ T9981]  ret_from_fork+0x51e/0xb90
[  408.728546][ T9981]  ret_from_fork_asm+0x1a/0x30
[  408.733305][ T9981] 
[  408.735618][ T9981] Freed by task 42:
[  408.739406][ T9981]  kasan_save_track+0x3e/0x80
[  408.744090][ T9981]  kasan_save_free_info+0x46/0x50
[  408.749111][ T9981]  __kasan_slab_free+0x5c/0x80
[  408.753861][ T9981]  kfree+0x1c1/0x630
[  408.757749][ T9981]  em28xx_v4l2_init+0x1683/0x2e70
[  408.762759][ T9981]  em28xx_init_extension+0x120/0x1c0
[  408.768030][ T9981]  process_scheduled_works+0xb02/0x1830
[  408.773571][ T9981]  worker_thread+0xa50/0xfc0
[  408.778156][ T9981]  kthread+0x388/0x470
[  408.782209][ T9981]  ret_from_fork+0x51e/0xb90
[  408.786791][ T9981]  ret_from_fork_asm+0x1a/0x30
[  408.791545][ T9981] 
[  408.793856][ T9981] The buggy address belongs to the object at ffff888032e34000
[  408.793856][ T9981]  which belongs to the cache kmalloc-8k of size 8192
[  408.807905][ T9981] The buggy address is located 1864 bytes inside of
[  408.807905][ T9981]  freed 8192-byte region [ffff888032e34000, ffff888032e36000)
[  408.821862][ T9981] 
[  408.824173][ T9981] The buggy address belongs to the physical page:
[  408.830581][ T9981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32e30
[  408.839336][ T9981] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  408.847821][ T9981] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  408.855368][ T9981] page_type: f5(slab)
[  408.859349][ T9981] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122
[  408.867918][ T9981] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  408.876486][ T9981] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122
[  408.885142][ T9981] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  408.893798][ T9981] head: 00fff00000000003 ffffea0000cb8c01 00000000ffffffff 00000000ffffffff
[  408.902462][ T9981] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  408.911201][ T9981] page dumped because: kasan: bad access detected
[  408.917610][ T9981] page_owner tracks the page as allocated
[  408.923310][ T9981] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7034, tgid 7033 (syz.1.259), ts 216200542828, free_ts 216161269162
[  408.944570][ T9981]  post_alloc_hook+0x231/0x280
[  408.949332][ T9981]  get_page_from_freelist+0x24dc/0x2580
[  408.954870][ T9981]  __alloc_frozen_pages_noprof+0x18d/0x380
[  408.960662][ T9981]  allocate_slab+0x77/0x660
[  408.965155][ T9981]  refill_objects+0x331/0x3c0
[  408.969848][ T9981]  __pcs_replace_empty_main+0x2b9/0x620
[  408.975398][ T9981]  __kmalloc_cache_noprof+0x392/0x660
[  408.980762][ T9981]  audit_log_d_path+0xb8/0x1a0
[  408.985523][ T9981]  audit_log_d_path_exe+0x42/0x70
[  408.990538][ T9981]  audit_log_task+0x2c3/0x3d0
[  408.995203][ T9981]  audit_seccomp+0x85/0x190
[  408.999694][ T9981]  __seccomp_filter+0xd48/0x1ef0
[  409.004618][ T9981]  do_syscall_64+0xf4/0xf80
[  409.009120][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.015007][ T9981] page last free pid 6639 tgid 6639 stack trace:
[  409.021318][ T9981]  __free_frozen_pages+0xc2b/0xdb0
[  409.026416][ T9981]  __slab_free+0x263/0x2b0
[  409.030822][ T9981]  qlist_free_all+0x97/0x100
[  409.035397][ T9981]  kasan_quarantine_reduce+0x148/0x160
[  409.040839][ T9981]  __kasan_slab_alloc+0x22/0x80
[  409.045677][ T9981]  kmem_cache_alloc_noprof+0x2bc/0x650
[  409.051131][ T9981]  do_getname+0x2e/0x250
[  409.055363][ T9981]  do_sys_openat2+0xca/0x200
[  409.059946][ T9981]  __x64_sys_openat+0x138/0x170
[  409.064788][ T9981]  do_syscall_64+0x14d/0xf80
[  409.069371][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.075253][ T9981] 
[  409.077561][ T9981] Memory state around the buggy address:
[  409.083176][ T9981]  ffff888032e34600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.091229][ T9981]  ffff888032e34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.099311][ T9981] >ffff888032e34700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.107353][ T9981]                                               ^
[  409.113754][ T9981]  ffff888032e34780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.121799][ T9981]  ffff888032e34800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.129843][ T9981] ==================================================================
[  409.145323][  T796] em28xx 3-1:0.132: Closing input extension
[  409.148048][  T797] gs_usb 1-1:0.0: Couldn't get device config: (err=-110)
[  409.158680][  T797] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110
[  409.185519][   T29] audit: type=1800 audit(1772044855.386:606): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="bus" dev="tmpfs" ino=1049 res=0 errno=0
[  409.326686][ T9981] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  409.333941][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  409.344459][ T9981] Tainted: [L]=SOFTLOCKUP
[  409.348795][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  409.358859][ T9981] Call Trace:
[  409.362151][ T9981]  <TASK>
[  409.365092][ T9981]  vpanic+0x56c/0xa60
[  409.369093][ T9981]  ? __pfx_vpanic+0x10/0x10
[  409.373617][ T9981]  panic+0xc5/0xd0
[  409.377360][ T9981]  ? __pfx_panic+0x10/0x10
[  409.381789][ T9981]  ? preempt_schedule_thunk+0x16/0x30
[  409.387168][ T9981]  ? preempt_schedule_thunk+0x16/0x30
[  409.392537][ T9981]  ? v4l2_fh_open+0xac/0x420
[  409.397118][ T9981]  check_panic_on_warn+0x89/0xb0
[  409.402044][ T9981]  ? v4l2_fh_open+0xac/0x420
[  409.406624][ T9981]  end_report+0x73/0x180
[  409.410857][ T9981]  ? v4l2_fh_open+0xac/0x420
[  409.415441][ T9981]  kasan_report+0x128/0x150
[  409.419936][ T9981]  ? v4l2_fh_open+0xac/0x420
[  409.424517][ T9981]  v4l2_fh_open+0xac/0x420
[  409.428920][ T9981]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  409.434897][ T9981]  em28xx_v4l2_open+0x157/0x9a0
[  409.439745][ T9981]  ? do_raw_spin_lock+0x12b/0x2f0
[  409.444760][ T9981]  v4l2_open+0x1bf/0x3a0
[  409.448993][ T9981]  chrdev_open+0x4cd/0x5e0
[  409.453400][ T9981]  ? __pfx_chrdev_open+0x10/0x10
[  409.458326][ T9981]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  409.464657][ T9981]  ? __pfx_chrdev_open+0x10/0x10
[  409.469580][ T9981]  do_dentry_open+0x785/0x14e0
[  409.474343][ T9981]  vfs_open+0x3b/0x340
[  409.478401][ T9981]  ? path_openat+0x2df0/0x3860
[  409.483154][ T9981]  path_openat+0x2e08/0x3860
[  409.487749][ T9981]  ? __pfx_stack_trace_save+0x10/0x10
[  409.493120][ T9981]  ? stack_depot_save_flags+0x33/0x810
[  409.498594][ T9981]  ? __pfx_path_openat+0x10/0x10
[  409.503527][ T9981]  ? __x64_sys_openat+0x138/0x170
[  409.508551][ T9981]  ? do_syscall_64+0x14d/0xf80
[  409.513312][ T9981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.519400][ T9981]  ? __lock_acquire+0x6b5/0x2cf0
[  409.524334][ T9981]  do_file_open+0x23e/0x4a0
[  409.528833][ T9981]  ? __pfx_do_file_open+0x10/0x10
[  409.533856][ T9981]  ? _raw_spin_unlock+0x28/0x50
[  409.538702][ T9981]  ? alloc_fd+0x64b/0x6c0
[  409.543029][ T9981]  do_sys_openat2+0x113/0x200
[  409.547707][ T9981]  ? __pfx_do_sys_openat2+0x10/0x10
[  409.552900][ T9981]  ? exc_page_fault+0x6a/0xc0
[  409.557583][ T9981]  ? do_user_addr_fault+0xc6f/0x1340
[  409.562861][ T9981]  __x64_sys_openat+0x138/0x170
[  409.567710][ T9981]  do_syscall_64+0x14d/0xf80
[  409.572293][ T9981]  ? trace_irq_disable+0x3b/0x150
[  409.577312][ T9981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.583377][ T9981]  ? clear_bhb_loop+0x40/0x90
[  409.588046][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.593924][ T9981] RIP: 0033:0x7f50bb4a7407
[  409.598327][ T9981] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  409.617928][ T9981] RSP: 002b:00007fff4c4a04a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  409.626335][ T9981] RAX: ffffffffffffffda RBX: 00007f50bbc68880 RCX: 00007f50bb4a7407
[  409.634302][ T9981] RDX: 0000000000000000 RSI: 00007fff4c4a0f1b RDI: ffffffffffffff9c
[  409.642261][ T9981] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  409.650222][ T9981] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  409.658183][ T9981] R13: 00007fff4c4a06f0 R14: 00007f50bbdcf000 R15: 0000562abff9b4d8
[  409.666151][ T9981]  </TASK>
[  409.669545][ T9981] Kernel Offset: disabled
[  409.673861][ T9981] Rebooting in 86400 seconds..