last executing test programs:

8.489691485s ago: executing program 4 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0)
io_submit(r1, 0x200000000000000a, &(0x7f0000000700)=[&(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x700, r2, 0x0, 0x0, 0x100000000}])
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000005c0)='\x00'})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)

8.1375075s ago: executing program 4 (id=393):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x2, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94)

8.03903316s ago: executing program 4 (id=394):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
mmap(&(0x7f000015a000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}})
r4 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000080)="11000000", 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40859)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000040baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b040e70f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
read$FUSE(r0, &(0x7f0000019200)={0x2020}, 0x2020)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x0)
syz_io_uring_setup(0x46b1, &(0x7f0000000140)={0x0, 0xf4d2, 0x20, 0x9, 0x35c, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000000))
landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2, 0x2}, 0xe, 0x0)

7.335668541s ago: executing program 1 (id=397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x138, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x31}}}}, [@NL80211_ATTR_VENDOR_DATA={0x100, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004)

7.119202924s ago: executing program 1 (id=398):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r0 = socket$inet6(0xa, 0x1, 0x9e)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c)
listen(r0, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000050900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a0104000000000000000001000000eefe0b400000000028000480240001800b000100657874686472000014000280080001400000000e08000440000000220900010073797a3000000000140000001100010000000000000000000700000a685c5be4c429e5b1238fef8e5b7951d17d391fdba64b72fc4b922e41"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000"], 0xd0}}, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffdde}, 0x8c0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0xc, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x36}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0x5, 0x12d5c}}, 0x44)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e24, 0x1, 0xcd}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

7.074948821s ago: executing program 4 (id=399):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x62, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x70, 0x65, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x12, 0x1}, {0x0, 0x1}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x0, 0xb, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x20000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000180)=@x86={0xb, 0xf6, 0xe, 0x0, 0x0, 0x1, 0xe, 0x8, 0xe, 0x10, 0x10, 0x2, 0x0, 0xfffffffe, 0x3, 0xa, 0x5, 0x1, 0x2, '\x00', 0x0, 0xb33})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000070000040000000000600000000000000"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
setpriority(0x0, 0x0, 0x9)
r6 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3})
mq_timedreceive(r6, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r6, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mq_timedreceive(r6, &(0x7f0000000300)=""/140, 0x8c, 0x1000, &(0x7f0000000100)={0x0, 0x989680})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x400454a4, &(0x7f0000000040))

5.934004953s ago: executing program 1 (id=407):
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r0, 0x0, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
syz_open_dev$media(0x0, 0x103, 0x0)
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

5.126001064s ago: executing program 0 (id=409):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x33, 0x2, 0x0, "b43d70dde5db03e6c9000000c600024e00", 0x584e4f53})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
r1 = fanotify_init(0x200, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
r5 = syz_usb_connect$uac1(0x5, 0x78, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x3, 0xc0, 0xe5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x53, 0xff, 0x7f, {0x7, 0x25, 0x1, 0x82, 0x10, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x7, 0x5, {0x7, 0x25, 0x1, 0x41, 0xae, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x5, 0xf, 0xff, 0x3}, 0x38, &(0x7f0000000200)={0x5, 0xf, 0x38, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1, 0x6, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x80, 0x4, 0x4, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0xd, 0x1000}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3ff, 0x0, 0x8, [0x3f0f, 0xc0]}]}, 0x4, [{0x2, &(0x7f0000000480)=@string={0x2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x813}}, {0x35, &(0x7f0000000640)=@string={0x35, 0x3, "04eaafc966fc26331991b471f8e6a072bffbe111dbd716d901147bd169ccc8be0c9d49ff3f4e79d95f3bab11a993f37a52d463"}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x20, 0x3, 0x2, {0x2, 0x9}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x20, 0x14, 0xbe, "147d6fa6d175ea393e3cdb32d8903a39c536c348a7a5f877f94dbcbad9296f85a99d50375b3356c7956da2a17aedd1d2ae142650e103c43a77eadb150ed69be2313b72395259250f4d6c699f3c26e1347ff8c35235f38d4b84bfc36318a49d58c30718b125ba5703344626bdaaedc85d44d78fd4116d9aa101c57b4f0f34950cc9bbf1d2a9802cd7204d67e2a54c09af78c0a98e4640e95acf9f902f3ab284fa4cc7fa4a84b9d329e948d6314a6cdb1cabde04b6c205ab6e7b28507cea61"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x81, 0x3, "43db2a"}, &(0x7f0000000a00)={0x20, 0x82, 0x2, "ad35"}, &(0x7f0000000a40)={0x20, 0x83, 0x3, ' X+'}, &(0x7f0000000a80)={0x20, 0x84, 0x2, "fc4b"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "22d430"}})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0)
r6 = dup(r0)
fanotify_mark(r1, 0x1, 0x48001059, r6, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

4.951526792s ago: executing program 4 (id=410):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x126, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x114, 0x1, 0x1, 0x3, 0x40, 0xf7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xb, {{0xb, 0x24, 0x6, 0x0, 0x0, "2889329d3b3f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x269, 0x3360, 0xfc}, [@mbim={0xc, 0x24, 0x1b, 0xd, 0x7, 0x81, 0x0, 0x3, 0x9}, @mdlm_detail={0xb0, 0x24, 0x13, 0x4, "1040642f532d0e4f3cd1d355760c0512e66933d8369491c0f853f15817d4774cf5c333fe6681e5417ddfd8425e902f1fde70881cd34bbd3e5ada9ffdbe5bd59202b627a7b6c306b132984355712522aeda90b70d8f31f155f9257b10c07f8fe233a33f0f72387a9703fa44273906e5ad467a2fbc6fd3d6f31a6ed7289ef5bc84641d83a61f53ae923e858cc259b0e3a915220ee01007d6ada62e78d5cfaff8b36d3e77af357bbf599602dd21"}, @country_functional={0xe, 0x24, 0x7, 0x4, 0x6, [0x3, 0xf, 0x6, 0x101]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x29, 0xa, 0xbe}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x1}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0x8, 0x35, 0x8, 0x2}, 0x50, &(0x7f0000000040)={0x5, 0xf, 0x50, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "39c50acfd8255aeb1392e6b726cb00f3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2d, 0x46, 0xfd, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xbc, "5f4c0438242b03febefb031d577fc447"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x51, 0xf7, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0xfd, 0x9000}, @ptm_cap={0x3}]}, 0x5, [{0x9b, &(0x7f0000000240)=@string={0x9b, 0x3, "28ecb08067b22f446564c19bb8a751651e1b60f0d97e977aeead6d666cb4f77e5b65fc03b82179bb75d47c71123efda8c72dd1329757f4870395f3efd52471b01b3f05bf3a0313c30e6c48c28c2cfd4a943b5f624ef601896329df4c9cb96978d1d4fd86f19cbc556bf510cf6e1fe9661773f50de717d6a80d653d7a8ce3d771b59d39b69701b1f2419dc857fae3d920fee0be8727563646b8"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x457}}, {0xe7, &(0x7f0000000340)=@string={0xe7, 0x3, "c9083e1146c0da0f08bfeff25bfd18a59a81ce72e617ffe46ba0e868d884e16a5dd95df9c1782d12c6fe6ed9ec01b6bdbb013f4c806e9cffd7842a6208b7db236a7004f3feaf7233bc0089f459cf58a6c3c7e6cfe685ac54247188d6e798f0a5677a0bd59a726d20202ed615117b9a43bfed3ef29d15476ab0dbb5317526f10e9607f76d4a9da621d4aa2ca6b4d725569abbff9a446423f07d8d3738d397a38c3fa6925e9dc64242d8ee04e98aff06e534074ff48fefe95e09b8d6c32a3a443e089e7a25bd1b6bd084c5e54d428b7cdc9cd4bb246321d4e509d423672c0fe749022bf66348"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41c}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x126, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x114, 0x1, 0x1, 0x3, 0x40, 0xf7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xb, {{0xb, 0x24, 0x6, 0x0, 0x0, "2889329d3b3f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x269, 0x3360, 0xfc}, [@mbim={0xc, 0x24, 0x1b, 0xd, 0x7, 0x81, 0x0, 0x3, 0x9}, @mdlm_detail={0xb0, 0x24, 0x13, 0x4, "1040642f532d0e4f3cd1d355760c0512e66933d8369491c0f853f15817d4774cf5c333fe6681e5417ddfd8425e902f1fde70881cd34bbd3e5ada9ffdbe5bd59202b627a7b6c306b132984355712522aeda90b70d8f31f155f9257b10c07f8fe233a33f0f72387a9703fa44273906e5ad467a2fbc6fd3d6f31a6ed7289ef5bc84641d83a61f53ae923e858cc259b0e3a915220ee01007d6ada62e78d5cfaff8b36d3e77af357bbf599602dd21"}, @country_functional={0xe, 0x24, 0x7, 0x4, 0x6, [0x3, 0xf, 0x6, 0x101]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x29, 0xa, 0xbe}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x1}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0x8, 0x35, 0x8, 0x2}, 0x50, &(0x7f0000000040)={0x5, 0xf, 0x50, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "39c50acfd8255aeb1392e6b726cb00f3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2d, 0x46, 0xfd, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xbc, "5f4c0438242b03febefb031d577fc447"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x51, 0xf7, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0xfd, 0x9000}, @ptm_cap={0x3}]}, 0x5, [{0x9b, &(0x7f0000000240)=@string={0x9b, 0x3, "28ecb08067b22f446564c19bb8a751651e1b60f0d97e977aeead6d666cb4f77e5b65fc03b82179bb75d47c71123efda8c72dd1329757f4870395f3efd52471b01b3f05bf3a0313c30e6c48c28c2cfd4a943b5f624ef601896329df4c9cb96978d1d4fd86f19cbc556bf510cf6e1fe9661773f50de717d6a80d653d7a8ce3d771b59d39b69701b1f2419dc857fae3d920fee0be8727563646b8"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x457}}, {0xe7, &(0x7f0000000340)=@string={0xe7, 0x3, "c9083e1146c0da0f08bfeff25bfd18a59a81ce72e617ffe46ba0e868d884e16a5dd95df9c1782d12c6fe6ed9ec01b6bdbb013f4c806e9cffd7842a6208b7db236a7004f3feaf7233bc0089f459cf58a6c3c7e6cfe685ac54247188d6e798f0a5677a0bd59a726d20202ed615117b9a43bfed3ef29d15476ab0dbb5317526f10e9607f76d4a9da621d4aa2ca6b4d725569abbff9a446423f07d8d3738d397a38c3fa6925e9dc64242d8ee04e98aff06e534074ff48fefe95e09b8d6c32a3a443e089e7a25bd1b6bd084c5e54d428b7cdc9cd4bb246321d4e509d423672c0fe749022bf66348"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41c}}]}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)

4.819255958s ago: executing program 1 (id=411):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd67, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0xe}, {0x0, 0xb}, {0x10, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0x80, 0x100003}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x13, 0x6, "8d4d900f8d26d76d068c63b9cf5a33"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd67, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0xe}, {0x0, 0xb}, {0x10, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0x80, 0x100003}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x13, 0x6, "8d4d900f8d26d76d068c63b9cf5a33"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

3.472447272s ago: executing program 1 (id=416):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc0102030109021b000100000010020b08"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000280)=0x204)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000380)=0x2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf2516000036fb297880140002e2766574683100000000e294d51782d6d08a8245b9000000000000000500020001000000"], 0x34}, 0x1, 0x0, 0x0, 0xc014}, 0x800)

3.307347086s ago: executing program 3 (id=418):
r0 = socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0)

3.288622172s ago: executing program 3 (id=419):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4)
socket$inet6(0xa, 0x0, 0x10000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5d419fb19aaad77c})
socket$inet6(0xa, 0x400000000001, 0x0)
r2 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040))
unshare(0x22020600)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3.279078257s ago: executing program 0 (id=420):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x62, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x70, 0x65, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x12, 0x1}, {0x0, 0x1}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x0, 0xb, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x20000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000180)=@x86={0xb, 0xf6, 0xe, 0x0, 0x0, 0x1, 0xe, 0x8, 0xe, 0x10, 0x10, 0x2, 0x0, 0xfffffffe, 0x3, 0xa, 0x5, 0x1, 0x2, '\x00', 0x0, 0xb33})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000070000040000000000600000000000000"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
setpriority(0x0, 0x0, 0x9)
r6 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3})
mq_timedreceive(r6, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r6, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mq_timedreceive(r6, &(0x7f0000000300)=""/140, 0x8c, 0x1000, &(0x7f0000000100)={0x0, 0x989680})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x400454a4, &(0x7f0000000040))

3.07936477s ago: executing program 4 (id=421):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000180)={0x400000000000000, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0)
syz_open_dev$loop(0x0, 0x75f, 0xa382)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[])
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x7, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}})
ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="000200000000e9ff"])
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.078614282s ago: executing program 3 (id=422):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x6, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x34, 0xfb, 0x0, 0x1, [@nested={0x2d, 0x13, 0x0, 0x1, [@generic="783cabcf3de8f3c211caac293bfba1f6c66248e2705bfdeaf3e518701e75b6870e949c9efe541264de"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002e2f49c2e00040a24040201041a0000120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc0702, 0x0)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1)

2.610591166s ago: executing program 2 (id=424):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd50}, {0x85, 0x0, 0x0, 0xd4}}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000200)=""/30, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

2.495478059s ago: executing program 2 (id=425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x20, r2, 0x1, 0xfffffffd, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params]}, 0x20}}, 0x40)

2.453822257s ago: executing program 2 (id=426):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)

2.395161973s ago: executing program 2 (id=427):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r1=>0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x10001dd2, 0x9, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x8000, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x101, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x200006, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000000), 0x4)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x918)
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)

2.330090216s ago: executing program 0 (id=428):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002000010027bd7000000000000a0080800000f4031600000014000200fc02"], 0x30}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x3000000}, 0x0)

2.191319004s ago: executing program 0 (id=429):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000041a9e50b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})

2.105861366s ago: executing program 0 (id=430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x1, 0x0, 0x3, {0xa, 0x0, 0xa1}}, 0x18}}, 0x0)
r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x4e7, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xf0, {0x9, 0x21, 0xd, 0xf, 0x1, {0x22, 0x2bc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x2, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x4, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x6, 0x7, 0x1, 0x40, 0x9}, 0x26, &(0x7f0000000080)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x2, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0x4, 0x0, 0xe, [0xc0ff]}]}, 0x3, [{0xc3, &(0x7f00000000c0)=@string={0xc3, 0x3, "883c5b3c461ebab5ff2aaaf76ff3e89fccd3da1ef7484a14fdbb3c2cd45c8ccc0372dfb9bddffd888d65e9617b757241770eedbeb7a95226d90fb6818930fd6c2af94bde16cade283af4d148bdfdc9a5c5ed0307aab20d75c53e5de3c0e5dd76c0376daa0d402a3441e4c76e40f1c9cbdfd8fb3dc95f78176c9b1802c0867aa4c7d8fce680159e09e15822f83fba15cfd710a499850b48cfb4f7d5ffb32b5071b06e4550b42f330a835acb75db1aa155bc41793e82ae18c1d436986e8628505b19"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x424}}, {0x22, &(0x7f0000000200)=@string={0x22, 0x3, "81d9867a41eefb03f7039728c7cf93f5125d5edea4ac0cd674f3aceaa9145474"}}]})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff00000001, 0x0)
preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, 0x80000001, 0x3)

1.92577554s ago: executing program 1 (id=431):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x9, 0x1000, 0x1})
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket(0x80000000000000a, 0x2, 0x0) (async)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108)
syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="b20456000000000000000000000100"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000140)={0x4, 0x1}) (async)
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000140)={0x4, 0x1})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) (async)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000740)='devices.deny\x00', 0x2, 0x0) (async)
r7 = openat$cgroup_devices(r0, &(0x7f0000000740)='devices.deny\x00', 0x2, 0x0)
ioctl$FICLONE(r4, 0x40049409, r7)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300})
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000201e30200000000000000000a00000806001240000200004400018006000340000300002c000180140003000000000000000000000000000000000114000400fc0200000000000000008000000000010c000280040001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

1.402288479s ago: executing program 3 (id=432):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x15, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0x1, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value=0xa00}, 0x94)

1.40203715s ago: executing program 3 (id=433):
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

626.654256ms ago: executing program 2 (id=434):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x53}, 0x2) (async)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10003, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x1, 0x3, 0xf8, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x69, 0x1000000003, 0xfffffffffffffffe, 0x2, 0x6, 0x27, 0x96, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6, 0x6, 0x3, 0x0, 0x3, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffffa, 0x2, 0xe, 0x40, 0x0, 0x9, 0x200000000000101, 0x2, 0x9, 0x66, 0x6, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfbfffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xfffffffffffffffc, 0x2, 0x7, 0x2, 0x5, 0x10fff, 0x6, 0x4, 0x9, 0x5, 0x0, 0x4, 0xfff, 0x5, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x6, 0x200, 0x7, 0xe53f, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00003, 0xb, 0xe]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001300)="3d0445", 0x3}, {0x0}], 0x2}}], 0x3, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) (async)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x8, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x36fb, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x3, 0xbdb], 0xffff1001, 0x120182})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x4, 0x3], 0x1, 0x202}) (async)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

585.829791ms ago: executing program 0 (id=435):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, <r4=>0x0})
fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000010c0)={0x1, @pix={0x3, 0x8000, 0x32315659, 0x8, 0x10, 0x6, 0x5, 0x6, 0x1, 0x7, 0x2, 0x6}})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r7, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4040040)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r9 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1000000, 0xfffffffc}})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

467.332538ms ago: executing program 3 (id=436):
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000718000/0x2000)=nil, 0x2000, 0x2000000, 0x810, 0xffffffffffffffff, 0x8000000)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3, 0x46, 0x0, 0x0, 0x0, 0x1, {0x0, r1}})
r2 = socket(0x10, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xae}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x8}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8001}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfb}}]}, 0x60}}, 0x10)
mremap(&(0x7f00000e3000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x0, 0xb4a0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x7800, 0x0, 0x9}})

0s ago: executing program 2 (id=437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe2)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001180)=[@in6={0xa, 0x4e21, 0x30000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5a9d}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @local}], 0x3c)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3})
add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22a", 0x4f, 0xfffffffffffffffe)
getpgid(0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000280))
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x40}}, 0x880)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x6, 0x0, 0x80000000, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

kernel console output (not intermixed with test programs):

 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[   78.941460][   T30] audit: type=1326 audit(1757561287.688:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[   78.976921][ T5872] Bluetooth: hci4: command tx timeout
[   78.985639][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   78.994767][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.015551][ T5919] usb 5-1: Using ep0 maxpacket: 32
[   79.015643][   T30] audit: type=1326 audit(1757561287.688:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[   79.023148][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[   79.072711][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   79.155694][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.164392][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.195442][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   79.225474][ T5995] netlink: 'syz.2.11': attribute type 10 has an invalid length.
[   79.264616][ T5995] bridge0: port 3(team0) entered blocking state
[   79.326758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.335948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   79.365281][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   79.391049][ T5995] bridge0: port 3(team0) entered disabled state
[   79.401061][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   79.424203][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   79.443409][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.452099][ T5995] team0: entered allmulticast mode
[   79.460382][ T5995] team_slave_0: entered allmulticast mode
[   79.471266][ T5919] usb 5-1: config 0 descriptor??
[   79.482828][ T5995] team_slave_1: entered allmulticast mode
[   79.490320][ T5986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   79.530836][ T5995] team0: entered promiscuous mode
[   79.581569][ T5919] hub 5-1:0.0: USB hub found
[   79.588241][ T5995] team_slave_0: entered promiscuous mode
[   79.596141][ T5995] team_slave_1: entered promiscuous mode
[   79.603503][ T5995] bridge0: port 3(team0) entered blocking state
[   79.609910][ T5995] bridge0: port 3(team0) entered forwarding state
[   79.688722][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.742827][ T5919] hub 5-1:0.0: 2 ports detected
[   79.794479][ T5999] usb usb8: usbfs: process 5999 (syz.0.13) did not claim interface 0 before use
[   80.105476][ T6003] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15'.
[   80.151071][ T5919] hub 5-1:0.0: set hub depth failed
[   80.186782][ T5919] usb 5-1: USB disconnect, device number 2
[   80.295202][ T6009] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET)
[   80.804631][ T6020] input: syz1 as /devices/virtual/input/input5
[   80.847358][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'.
[   80.977890][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'.
[   81.950292][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   82.138271][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   82.155098][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   82.268844][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   82.496183][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   82.583551][ T5919] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.595198][ T5934] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   82.612867][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.666195][ T5919] usb 1-1: config 0 descriptor??
[   82.755150][ T5934] usb 5-1: Using ep0 maxpacket: 16
[   82.772223][ T5934] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   82.822180][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.873953][ T5934] usb 5-1: Product: syz
[   82.897227][ T5934] usb 5-1: Manufacturer: syz
[   82.901853][ T5934] usb 5-1: SerialNumber: syz
[   82.986960][ T5934] usb 5-1: config 0 descriptor??
[   83.020457][ T5934] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   83.092070][ T6043] tipc: Started in network mode
[   83.123265][ T5934] usb 5-1: Detected FT232H
[   83.134847][ T5919] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max
[   83.135211][ T6043] tipc: Node identity 3ae306d707e8, cluster identity 4711
[   83.234441][ T5934] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   83.293546][ T5919] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   83.350156][ T6043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.514228][ T6043] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   83.662149][ T5934] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5
[   83.672699][ T5934] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   83.674458][ T6045] syzkaller0: entered promiscuous mode
[   83.734214][ T6045] syzkaller0: entered allmulticast mode
[   83.867686][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'.
[   83.994217][ T6045] tipc: Resetting bearer <eth:syzkaller0>
[   84.051113][    T9] usb 5-1: USB disconnect, device number 3
[   84.120864][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   84.140874][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   84.148694][    T9] ftdi_sio 5-1:0.0: device disconnected
[   84.343472][ T6042] tipc: Disabling bearer <eth:syzkaller0>
[   84.463818][ T6053] trusted_key: encrypted_key: keylen parameter is missing
[   84.489797][ T6053] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   84.705367][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.709057][ T6057] FAULT_INJECTION: forcing a failure.
[   84.709057][ T6057] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   84.727720][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT(full) 
[   84.727741][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   84.727758][ T6057] Call Trace:
[   84.727765][ T6057]  <TASK>
[   84.727771][ T6057]  dump_stack_lvl+0x189/0x250
[   84.727795][ T6057]  ? __pfx____ratelimit+0x10/0x10
[   84.727813][ T6057]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.727832][ T6057]  ? __pfx__printk+0x10/0x10
[   84.727853][ T6057]  ? __might_fault+0xb0/0x130
[   84.727885][ T6057]  should_fail_ex+0x414/0x560
[   84.727914][ T6057]  _copy_from_user+0x2d/0xb0
[   84.727936][ T6057]  video_usercopy+0x354/0x14f0
[   84.727965][ T6057]  ? __pfx___video_do_ioctl+0x10/0x10
[   84.727984][ T6057]  ? __pfx_video_usercopy+0x10/0x10
[   84.728013][ T6057]  ? __fget_files+0x2a/0x420
[   84.728031][ T6057]  ? __fget_files+0x2a/0x420
[   84.728044][ T6057]  ? __fget_files+0x3a0/0x420
[   84.728061][ T6057]  v4l2_ioctl+0x18d/0x1e0
[   84.728079][ T6057]  ? __pfx_v4l2_ioctl+0x10/0x10
[   84.728097][ T6057]  __se_sys_ioctl+0xfc/0x170
[   84.728120][ T6057]  do_syscall_64+0xfa/0x3b0
[   84.728135][ T6057]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.728148][ T6057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.728163][ T6057]  ? clear_bhb_loop+0x60/0xb0
[   84.728181][ T6057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.728196][ T6057] RIP: 0033:0x7fbe6b78eba9
[   84.728214][ T6057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.728227][ T6057] RSP: 002b:00007fbe6c6e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   84.728243][ T6057] RAX: ffffffffffffffda RBX: 00007fbe6b9d5fa0 RCX: 00007fbe6b78eba9
[   84.728255][ T6057] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000003
[   84.728264][ T6057] RBP: 00007fbe6c6e6090 R08: 0000000000000000 R09: 0000000000000000
[   84.728274][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.728282][ T6057] R13: 00007fbe6b9d6038 R14: 00007fbe6b9d5fa0 R15: 00007fbe6baffa28
[   84.728308][ T6057]  </TASK>
[   85.252360][ T6066] FAULT_INJECTION: forcing a failure.
[   85.252360][ T6066] name failslab, interval 1, probability 0, space 0, times 1
[   85.366709][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) 
[   85.366725][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   85.366731][ T6066] Call Trace:
[   85.366735][ T6066]  <TASK>
[   85.366740][ T6066]  dump_stack_lvl+0x189/0x250
[   85.366756][ T6066]  ? __pfx____ratelimit+0x10/0x10
[   85.366767][ T6066]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.366778][ T6066]  ? __pfx__printk+0x10/0x10
[   85.366793][ T6066]  ? __pfx___might_resched+0x10/0x10
[   85.366801][ T6066]  ? fs_reclaim_acquire+0x7d/0x100
[   85.366819][ T6066]  should_fail_ex+0x414/0x560
[   85.366836][ T6066]  should_failslab+0xa8/0x100
[   85.366852][ T6066]  __kmalloc_noprof+0xcb/0x4f0
[   85.366865][ T6066]  ? tomoyo_encode+0x28b/0x550
[   85.366878][ T6066]  tomoyo_encode+0x28b/0x550
[   85.366890][ T6066]  tomoyo_realpath_from_path+0x58d/0x5d0
[   85.366901][ T6066]  ? tomoyo_domain+0xd9/0x130
[   85.366914][ T6066]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   85.366928][ T6066]  tomoyo_path_number_perm+0x1e8/0x5a0
[   85.366943][ T6066]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   85.366965][ T6066]  ? __lock_acquire+0xab9/0xd20
[   85.366989][ T6066]  ? __fget_files+0x2a/0x420
[   85.366999][ T6066]  ? __fget_files+0x2a/0x420
[   85.367006][ T6066]  ? __fget_files+0x3a0/0x420
[   85.367013][ T6066]  ? __fget_files+0x2a/0x420
[   85.367023][ T6066]  security_file_ioctl+0xcb/0x2d0
[   85.367037][ T6066]  __se_sys_ioctl+0x47/0x170
[   85.367053][ T6066]  do_syscall_64+0xfa/0x3b0
[   85.367068][ T6066]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.367083][ T6066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.367098][ T6066]  ? clear_bhb_loop+0x60/0xb0
[   85.367116][ T6066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.367130][ T6066] RIP: 0033:0x7fe57498eba9
[   85.367144][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.367154][ T6066] RSP: 002b:00007fe5757fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.367165][ T6066] RAX: ffffffffffffffda RBX: 00007fe574bd5fa0 RCX: 00007fe57498eba9
[   85.367177][ T6066] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[   85.367183][ T6066] RBP: 00007fe5757fb090 R08: 0000000000000000 R09: 0000000000000000
[   85.367189][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.367194][ T6066] R13: 00007fe574bd6038 R14: 00007fe574bd5fa0 R15: 00007fe574cffa28
[   85.367209][ T6066]  </TASK>
[   85.367222][ T6066] ERROR: Out of memory at tomoyo_realpath_from_path.
[   85.844892][ T5953] usb 1-1: USB disconnect, device number 2
[   86.149982][ T6077] netlink: 'syz.3.34': attribute type 4 has an invalid length.
[   86.435152][    T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   86.614434][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   86.683172][   T10] cfg80211: failed to load regulatory.db
[   86.689589][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[   86.728969][    T9] usb 4-1: config 219 has an invalid interface number: 147 but max is 1
[   86.850878][    T9] usb 4-1: config 219 has an invalid interface number: 147 but max is 1
[   86.901450][    T9] usb 4-1: config 219 has 1 interface, different from the descriptor's value: 2
[   86.951239][    T9] usb 4-1: config 219 has no interface number 0
[   87.005175][    T9] usb 4-1: config 219 interface 147 has no altsetting 0
[   87.032837][    T9] usb 4-1: config 219 interface 147 has no altsetting 1
[   87.056980][    T9] usb 4-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=9e.d4
[   87.071479][ T6032] syz.2.22 (6032): drop_caches: 1
[   87.086770][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.094857][    T9] usb 4-1: Product: syz
[   87.108920][    T9] usb 4-1: Manufacturer: syz
[   87.135388][    T9] usb 4-1: SerialNumber: syz
[   87.155339][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   87.308428][ T5919] usb 5-1: Using ep0 maxpacket: 16
[   87.317546][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.335348][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.353701][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.399277][ T5919] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   87.425581][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.426751][    T9] HFC-S_USB 4-1:219.147: probe with driver HFC-S_USB failed with error -5
[   87.454858][    T9] usb 4-1: USB disconnect, device number 2
[   87.468442][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.498852][ T5919] usb 5-1: config 0 descriptor??
[   87.527594][ T6106] tipc: Started in network mode
[   87.536943][ T6106] tipc: Node identity d64af3daeeda, cluster identity 4711
[   87.544457][ T6106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.567682][ T6106] syzkaller0: entered promiscuous mode
[   87.573170][ T6106] syzkaller0: entered allmulticast mode
[   87.613974][ T6109] TCP: TCP_TX_DELAY enabled
[   87.627421][   T10] usb 1-1: config 0 has no interfaces?
[   87.636530][   T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   87.656235][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.674505][   T10] usb 1-1: Product: syz
[   87.682180][   T10] usb 1-1: Manufacturer: syz
[   87.687636][   T10] usb 1-1: SerialNumber: syz
[   87.695946][   T10] usb 1-1: config 0 descriptor??
[   87.924759][ T6099] netlink: 104 bytes leftover after parsing attributes in process `syz.0.40'.
[   87.945308][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.954215][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.040917][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[   88.049224][ T5919] usbhid 5-1:0.0: can't add hid device: -32
[   88.055448][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[   88.080573][ T5919] usb 5-1: USB disconnect, device number 4
[   88.285971][ T6126] syzkaller0: entered promiscuous mode
[   88.292360][ T6126] syzkaller0: entered allmulticast mode
[   88.321204][ T6104] tipc: Resetting bearer <eth:syzkaller0>
[   88.344208][ T6104] tipc: Disabling bearer <eth:syzkaller0>
[   88.377825][ T6126] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   88.453993][ T5919] IPVS: starting estimator thread 0...
[   88.463359][ T6128] IPVS: dh: FWM 3 0x00000003 - no destination available
[   88.480891][    C1] IPVS: dh: FWM 3 0x00000003 - no destination available
[   88.565226][ T6130] IPVS: using max 30 ests per chain, 72000 per kthread
[   89.507908][   T30] kauditd_printk_skb: 63 callbacks suppressed
[   89.507924][   T30] audit: type=1326 audit(1757561299.258:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dd38eba9 code=0x7ffc0000
[   89.731691][   T30] audit: type=1326 audit(1757561299.288:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dd38eba9 code=0x7ffc0000
[   89.792121][   T30] audit: type=1326 audit(1757561299.288:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fb9dd38eba9 code=0x7ffc0000
[   89.818356][   T30] audit: type=1326 audit(1757561299.288:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9dd38eba9 code=0x7ffc0000
[   89.840352][    C1] vkms_vblank_simulate: vblank timer overrun
[   90.071825][   T30] audit: type=1326 audit(1757561299.288:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb9dd38eba9 code=0x7ffc0000
[   90.093846][    C1] vkms_vblank_simulate: vblank timer overrun
[   90.232490][    T9] usb 1-1: USB disconnect, device number 3
[   90.305162][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.526553][   T10] usb 3-1: Using ep0 maxpacket: 16
[   90.566719][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.598430][   T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[   90.641564][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.685714][   T10] usb 3-1: config 0 descriptor??
[   91.065210][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   91.109020][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.116219][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   91.173710][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.195120][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.222484][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.240214][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.267147][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.275140][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.307899][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.316858][    T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[   91.327980][ T5926] usb 5-1: Using ep0 maxpacket: 8
[   91.344913][ T5926] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   91.365250][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.382951][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.396240][ T5926] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   91.409698][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.421343][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.431162][    T9] usb 1-1: config 0 descriptor??
[   91.437444][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.459351][   T10] sunplus 0003:04FC:05D8.0002: unknown main item tag 0x0
[   91.472373][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.488268][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.499162][   T10] sunplus 0003:04FC:05D8.0002: hidraw0: USB HID vff.fd Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0
[   91.530060][ T5926] usb 5-1: Product: ࠧ
[   91.542400][ T5926] usb 5-1: SerialNumber: ࠓ
[   91.693014][ T6172] syzkaller1: entered promiscuous mode
[   91.699238][ T6172] syzkaller1: entered allmulticast mode
[   91.729850][ T6172] FAULT_INJECTION: forcing a failure.
[   91.729850][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.763000][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) 
[   91.763022][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   91.763035][ T6172] Call Trace:
[   91.763042][ T6172]  <TASK>
[   91.763050][ T6172]  dump_stack_lvl+0x189/0x250
[   91.763073][ T6172]  ? __pfx____ratelimit+0x10/0x10
[   91.763089][ T6172]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.763106][ T6172]  ? __pfx__printk+0x10/0x10
[   91.763126][ T6172]  ? __might_fault+0xb0/0x130
[   91.763159][ T6172]  should_fail_ex+0x414/0x560
[   91.763186][ T6172]  _copy_from_iter+0x1de/0x1790
[   91.763211][ T6172]  ? _copy_from_iter+0x24f/0x1790
[   91.763232][ T6172]  ? __pfx__copy_from_iter+0x10/0x10
[   91.763247][ T6172]  ? sock_alloc_send_pskb+0x875/0x990
[   91.763271][ T6172]  ? __pfx__copy_from_iter+0x10/0x10
[   91.763291][ T6172]  ? page_copy_sane+0x16a/0x280
[   91.763307][ T6172]  copy_page_from_iter+0xdd/0x170
[   91.763325][ T6172]  skb_copy_datagram_from_iter+0x306/0x720
[   91.763354][ T6172]  tun_get_user+0x1691/0x3e20
[   91.763386][ T6172]  ? aa_file_perm+0x44d/0x1550
[   91.763403][ T6172]  ? __pfx_tun_get_user+0x10/0x10
[   91.763419][ T6172]  ? _parse_integer_limit+0x1ae/0x1f0
[   91.763445][ T6172]  ? __lock_acquire+0xab9/0xd20
[   91.763472][ T6172]  ? ref_tracker_alloc+0x318/0x460
[   91.763486][ T6172]  ? __lock_acquire+0xab9/0xd20
[   91.763509][ T6172]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   91.763530][ T6172]  ? tun_get+0x1c/0x2f0
[   91.763550][ T6172]  ? tun_get+0x1c/0x2f0
[   91.763565][ T6172]  ? tun_get+0x1c/0x2f0
[   91.763587][ T6172]  tun_chr_write_iter+0x113/0x200
[   91.763607][ T6172]  vfs_write+0x5c9/0xb30
[   91.763634][ T6172]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   91.763651][ T6172]  ? __pfx_vfs_write+0x10/0x10
[   91.763678][ T6172]  ? __fget_files+0x2a/0x420
[   91.763708][ T6172]  ksys_write+0x145/0x250
[   91.763731][ T6172]  ? __pfx_ksys_write+0x10/0x10
[   91.763748][ T6172]  ? rcu_is_watching+0x15/0xb0
[   91.763768][ T6172]  ? do_syscall_64+0xbe/0x3b0
[   91.763790][ T6172]  do_syscall_64+0xfa/0x3b0
[   91.763804][ T6172]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.763819][ T6172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.763835][ T6172]  ? clear_bhb_loop+0x60/0xb0
[   91.763855][ T6172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.763871][ T6172] RIP: 0033:0x7fe57498eba9
[   91.763886][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.763899][ T6172] RSP: 002b:00007fe5757fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   91.763916][ T6172] RAX: ffffffffffffffda RBX: 00007fe574bd5fa0 RCX: 00007fe57498eba9
[   91.763927][ T6172] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000003
[   91.763936][ T6172] RBP: 00007fe5757fb090 R08: 0000000000000000 R09: 0000000000000000
[   91.763945][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   91.763953][ T6172] R13: 00007fe574bd6038 R14: 00007fe574bd5fa0 R15: 00007fe574cffa28
[   91.763980][ T6172]  </TASK>
[   92.091806][    T9] cypress 0003:04B4:DE61.0003: hidraw1: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.0-1/input0
[   92.274587][ T6166] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   92.327542][    T9] usb 1-1: USB disconnect, device number 4
[   92.430633][ T5926] usb 5-1: 0:2 : does not exist
[   92.463754][ T5926] usb 5-1: USB disconnect, device number 5
[   92.520917][   T10] usb 3-1: USB disconnect, device number 2
[   92.555744][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'.
[   92.564242][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.599583][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'.
[   92.621541][ T6175] fido_id[6175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   92.831855][ T6190] netlink: 256 bytes leftover after parsing attributes in process `syz.2.69'.
[   92.841246][ T6190] unsupported nlmsg_type 40
[   92.848117][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   92.886025][ T6191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.898626][ T6191] syzkaller0: entered promiscuous mode
[   92.904118][ T6191] syzkaller0: entered allmulticast mode
[   92.940205][ T6191] tipc: Resetting bearer <eth:syzkaller0>
[   93.095445][  T121] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   93.455629][  T121] usb 3-1: Using ep0 maxpacket: 8
[   93.462955][  T121] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30
[   93.548861][  T121] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11
[   93.568631][  T121] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.594138][  T121] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   93.659064][ T6183] tipc: Resetting bearer <eth:syzkaller0>
[   93.666343][  T121] usb 3-1: config 0 interface 0 has no altsetting 0
[   93.673127][  T121] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   93.686017][  T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.703378][  T121] usb 3-1: config 0 descriptor??
[   93.993463][   T10] tipc: Node number set to 949023706
[   94.020973][ T6211] FAULT_INJECTION: forcing a failure.
[   94.020973][ T6211] name failslab, interval 1, probability 0, space 0, times 0
[   94.038623][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) 
[   94.038644][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.038654][ T6211] Call Trace:
[   94.038660][ T6211]  <TASK>
[   94.038668][ T6211]  dump_stack_lvl+0x189/0x250
[   94.038691][ T6211]  ? __pfx____ratelimit+0x10/0x10
[   94.038711][ T6211]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.038730][ T6211]  ? __pfx__printk+0x10/0x10
[   94.038755][ T6211]  ? __pfx___might_resched+0x10/0x10
[   94.038771][ T6211]  ? fs_reclaim_acquire+0x7d/0x100
[   94.038799][ T6211]  should_fail_ex+0x414/0x560
[   94.038828][ T6211]  should_failslab+0xa8/0x100
[   94.038853][ T6211]  __kmalloc_noprof+0xcb/0x4f0
[   94.038873][ T6211]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[   94.038900][ T6211]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[   94.038929][ T6211]  genl_family_rcv_msg_doit+0xb8/0x300
[   94.038957][ T6211]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   94.038986][ T6211]  ? apparmor_capable+0x137/0x1b0
[   94.039008][ T6211]  ? bpf_lsm_capable+0x9/0x20
[   94.039028][ T6211]  ? security_capable+0x7e/0x2e0
[   94.039059][ T6211]  genl_rcv_msg+0x60e/0x790
[   94.039087][ T6211]  ? __pfx_genl_rcv_msg+0x10/0x10
[   94.039106][ T6211]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   94.039134][ T6211]  ? __pfx_nl80211_register_mgmt+0x10/0x10
[   94.039150][ T6211]  ? __pfx_nl80211_post_doit+0x10/0x10
[   94.039171][ T6211]  ? __asan_memcpy+0x40/0x70
[   94.039189][ T6211]  ? __pfx_ref_tracker_free+0x10/0x10
[   94.039213][ T6211]  netlink_rcv_skb+0x205/0x470
[   94.039228][ T6211]  ? __lock_acquire+0xab9/0xd20
[   94.039251][ T6211]  ? __pfx_genl_rcv_msg+0x10/0x10
[   94.039273][ T6211]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   94.039309][ T6211]  ? down_read+0x1ad/0x2e0
[   94.039331][ T6211]  genl_rcv+0x28/0x40
[   94.039349][ T6211]  netlink_unicast+0x82c/0x9e0
[   94.039382][ T6211]  ? __pfx_netlink_unicast+0x10/0x10
[   94.039407][ T6211]  ? netlink_sendmsg+0x642/0xb30
[   94.039423][ T6211]  ? skb_put+0x11b/0x210
[   94.039445][ T6211]  netlink_sendmsg+0x805/0xb30
[   94.039478][ T6211]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.039500][ T6211]  ? aa_sock_msg_perm+0xf1/0x1d0
[   94.039518][ T6211]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   94.039535][ T6211]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.039554][ T6211]  __sock_sendmsg+0x21c/0x270
[   94.039581][ T6211]  ____sys_sendmsg+0x505/0x830
[   94.039607][ T6211]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.039637][ T6211]  ? import_iovec+0x74/0xa0
[   94.039661][ T6211]  ___sys_sendmsg+0x21f/0x2a0
[   94.039684][ T6211]  ? __pfx____sys_sendmsg+0x10/0x10
[   94.039741][ T6211]  ? __fget_files+0x2a/0x420
[   94.039755][ T6211]  ? __fget_files+0x3a0/0x420
[   94.039780][ T6211]  __x64_sys_sendmsg+0x19b/0x260
[   94.039803][ T6211]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   94.039833][ T6211]  ? __pfx_ksys_write+0x10/0x10
[   94.039851][ T6211]  ? rcu_is_watching+0x15/0xb0
[   94.039873][ T6211]  ? do_syscall_64+0xbe/0x3b0
[   94.039895][ T6211]  do_syscall_64+0xfa/0x3b0
[   94.039911][ T6211]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.039927][ T6211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.039943][ T6211]  ? clear_bhb_loop+0x60/0xb0
[   94.039964][ T6211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.039979][ T6211] RIP: 0033:0x7f4714b8eba9
[   94.039994][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.040008][ T6211] RSP: 002b:00007f4712df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.040025][ T6211] RAX: ffffffffffffffda RBX: 00007f4714dd5fa0 RCX: 00007f4714b8eba9
[   94.040038][ T6211] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[   94.040048][ T6211] RBP: 00007f4712df6090 R08: 0000000000000000 R09: 0000000000000000
[   94.040062][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.040072][ T6211] R13: 00007f4714dd6038 R14: 00007f4714dd5fa0 R15: 00007f4714effa28
[   94.040100][ T6211]  </TASK>
[   94.226469][ T6183] tipc: Disabling bearer <eth:syzkaller0>
[   94.639810][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.680528][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.016651][ T6233] netlink: 168 bytes leftover after parsing attributes in process `syz.1.80'.
[   95.031726][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   95.053260][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   95.061266][ T5926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   95.828739][ T5926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   95.884918][ T6235] Zero length message leads to an empty skb
[   96.018199][  T121] usbhid 3-1:0.0: can't add hid device: -71
[   96.024211][  T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   96.045553][  T121] usb 3-1: USB disconnect, device number 3
[   96.051844][ T6247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.095339][ T5926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   96.497917][  T121] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   96.675215][  T121] usb 3-1: Using ep0 maxpacket: 16
[   96.770198][  T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.792217][  T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.882096][  T121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   97.081444][ T6270] trusted_key: syz.4.88 sent an empty control message without MSG_MORE.
[   97.108350][  T121] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   97.143839][  T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.189564][  T121] usb 3-1: config 0 descriptor??
[   97.325784][   T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   97.432043][ T5926] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.485302][   T43] usb 1-1: Using ep0 maxpacket: 16
[   97.492244][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.502818][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   97.514045][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   97.523752][   T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   97.533587][   T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.548557][   T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   97.557855][   T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   97.565907][   T43] usb 1-1: Manufacturer: syz
[   97.573070][   T43] usb 1-1: config 0 descriptor??
[   97.597598][ T5926] usb 2-1: config 0 has no interfaces?
[   97.606202][ T5926] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   97.615520][   T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   97.624952][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.644302][ T5926] usb 2-1: Product: syz
[   97.651402][ T5926] usb 2-1: Manufacturer: syz
[   97.657133][ T5926] usb 2-1: SerialNumber: syz
[   97.679212][ T5926] usb 2-1: config 0 descriptor??
[   97.822575][ T6249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.84'.
[   97.831533][ T6249] netlink: 43 bytes leftover after parsing attributes in process `syz.2.84'.
[   97.840340][ T6249] netlink: 'syz.2.84': attribute type 6 has an invalid length.
[   97.848979][ T6249] netlink: 'syz.2.84': attribute type 5 has an invalid length.
[   97.857000][ T6249] netlink: 43 bytes leftover after parsing attributes in process `syz.2.84'.
[   97.888342][  T121] usbhid 3-1:0.0: can't add hid device: -71
[   97.894745][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.907753][  T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   97.978109][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.983255][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.998536][  T121] usb 3-1: USB disconnect, device number 4
[   98.005975][   T10] usb 4-1: unable to read config index 0 descriptor/start: -71
[   98.032788][   T10] usb 4-1: can't read configurations, error -71
[   98.040489][ T6269] veth0_macvtap: left promiscuous mode
[   98.071008][ T5926] usb 2-1: USB disconnect, device number 2
[   98.425306][ T5919] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   98.595643][ T5919] usb 5-1: Using ep0 maxpacket: 16
[   98.613444][ T5919] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config
[   98.636136][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.660494][ T5919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   98.672812][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.688493][ T5919] usb 5-1: Product: syz
[   98.707581][ T5919] usb 5-1: Manufacturer: syz
[   98.722749][ T5919] usb 5-1: SerialNumber: syz
[   98.935179][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   99.036679][ T5919] usb 5-1: 0:2 : does not exist
[   99.087608][ T5919] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   99.112800][ T5919] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[   99.134059][ T5919] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5)
[   99.145175][   T10] usb 4-1: Using ep0 maxpacket: 32
[   99.153887][   T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   99.210592][ T5919] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5)
[   99.283114][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.346105][   T10] usb 4-1: config 0 descriptor??
[   99.362724][ T5919] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[   99.375318][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   99.388285][ T5919] usb 5-1: USB disconnect, device number 6
[   99.425830][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.557546][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   99.609858][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   99.729938][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   99.752864][   T10] usb 4-1: media controller created
[   99.759887][ T6288] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[   99.989873][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.053119][   T10] az6027: usb out operation failed. (-71)
[  100.088159][   T10] az6027: usb out operation failed. (-71)
[  100.135155][   T10] stb0899_attach: Driver disabled by Kconfig
[  100.155417][ T5926] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  100.165614][   T10] az6027: no front-end attached
[  100.165614][   T10] 
[  100.185607][   T10] az6027: usb out operation failed. (-71)
[  100.195661][   T43] rc_core: IR keymap rc-hauppauge not found
[  100.208035][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  100.245651][   T43] Registered IR keymap rc-empty
[  100.270643][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.342728][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.401107][   T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  100.512626][   T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  100.540612][ T5926] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  100.551380][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  100.572176][ T5926] usb 3-1: config 0 has no interface number 0
[  100.612720][ T5926] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  100.624999][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  100.654972][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  100.660522][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.668213][ T5926] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  100.747238][   T10] usb 4-1: USB disconnect, device number 4
[  100.753202][ T5926] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  100.771628][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.795489][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.824496][ T5926] usb 3-1: config 0 descriptor??
[  100.871036][ T6303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.896417][ T6321] netlink: 'syz.4.100': attribute type 10 has an invalid length.
[  100.898503][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.951506][ T5926] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  100.974013][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.025534][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.054426][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  101.059665][ T6321] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.085282][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.105238][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.135234][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.176484][ T6282] usb 3-1: USB disconnect, device number 5
[  101.182358][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  101.240330][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.310653][   T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  101.367509][   T43] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  101.464213][   T43] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  101.518721][   T43] usb 1-1: USB disconnect, device number 5
[  101.690698][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  101.887244][   T10] usb 4-1: Using ep0 maxpacket: 16
[  101.904355][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.940752][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.984409][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  102.055913][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  102.225157][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.364447][   T10] usb 4-1: config 0 descriptor??
[  102.660381][ T6337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.104'.
[  102.891698][ T6316] program syz.3.101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.998344][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'.
[  103.031301][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.069889][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.247614][ T6343] syzkaller1: tun_chr_ioctl cmd 1074025677
[  103.253731][ T6343] syzkaller1: linktype set to 823
[  103.348363][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  103.354384][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  103.418048][   T10] usb 4-1: USB disconnect, device number 5
[  103.470584][ T6350] netlink: 'syz.3.108': attribute type 29 has an invalid length.
[  104.859776][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[  104.879635][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'.
[  105.075287][  T980] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  105.136250][ T6282] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.228443][  T980] usb 2-1: device descriptor read/64, error -71
[  105.241163][ T6390] pim6reg1: entered promiscuous mode
[  105.255555][ T6390] pim6reg1: entered allmulticast mode
[  105.346446][ T6282] usb 1-1: Using ep0 maxpacket: 8
[  105.355933][ T6282] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  105.508039][ T6282] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  105.520732][ T6282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.533101][ T6282] usb 1-1: string descriptor 0 read error: -22
[  105.539622][ T6282] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.552583][ T6282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.565371][  T980] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  105.592809][ T6282] usb 1-1: 0:2 : does not exist
[  105.815271][  T980] usb 2-1: device descriptor read/64, error -71
[  105.928176][  T980] usb usb2-port1: attempt power cycle
[  106.136729][ T6396] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  106.228869][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  106.295275][  T980] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  106.340738][  T980] usb 2-1: device descriptor read/8, error -71
[  106.518416][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.534390][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.547192][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  106.561011][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.597469][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.615205][  T980] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  106.639833][   T10] usb 3-1: config 0 descriptor??
[  106.666103][  T980] usb 2-1: device descriptor read/8, error -71
[  106.787180][  T980] usb usb2-port1: unable to enumerate USB device
[  106.845777][ T6406] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.126'.
[  106.857044][ T6406] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �`]��I�q�!�>�s���*��!)\�+`
[  106.999389][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  107.016579][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  107.036103][ T6413] binder: 6412:6413 unknown command 0
[  107.054183][ T6413] binder: 6412:6413 ioctl c0306201 200000000080 returned -22
[  107.064609][   T10] usb 3-1: USB disconnect, device number 6
[  107.894223][ T6282] usb 1-1: USB disconnect, device number 6
[  108.425208][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  108.590548][ T6445] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  109.120971][ T6460] syzkaller1: entered promiscuous mode
[  109.151521][ T6460] syzkaller1: entered allmulticast mode
[  109.485459][ T6446] delete_channel: no stack
[  109.885542][ T6478] warning: `syz.4.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.995182][   T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  110.203122][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.223323][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.252283][    T9] IPVS: starting estimator thread 0...
[  110.259180][ T6482] IPVS: dh: FWM 3 0x00000003 - no destination available
[  110.269329][    C0] IPVS: dh: FWM 3 0x00000003 - no destination available
[  110.295285][   T43] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  110.355282][ T6483] IPVS: using max 32 ests per chain, 76800 per kthread
[  110.401789][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.432369][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'.
[  110.473239][   T43] usb 2-1: config 0 descriptor??
[  110.548628][ T6489] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[  111.502348][ T5919] IPVS: starting estimator thread 0...
[  111.519299][ T6504] netlink: 104 bytes leftover after parsing attributes in process `syz.2.154'.
[  111.605226][ T6505] IPVS: using max 50 ests per chain, 120000 per kthread
[  111.935644][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  112.095571][   T10] usb 1-1: Using ep0 maxpacket: 8
[  112.426628][   T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  112.479595][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  112.509587][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  112.558823][   T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  112.723873][   T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  112.837313][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.969258][   T43] usb 2-1: USB disconnect, device number 7
[  113.142328][   T10] usb 1-1: GET_CAPABILITIES returned 0
[  113.167214][   T10] usbtmc 1-1:16.0: can't read capabilities
[  113.425389][   T43] usb 1-1: USB disconnect, device number 7
[  113.715665][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  113.955271][   T10] usb 5-1: device descriptor read/64, error -71
[  114.100158][   T30] audit: type=1326 audit(1757561323.848:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500bd8eba9 code=0x7ffc0000
[  114.155510][   T30] audit: type=1326 audit(1757561323.848:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500bd8eba9 code=0x7ffc0000
[  114.195349][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  114.355281][   T10] usb 5-1: device descriptor read/64, error -71
[  114.373440][ T6537] process 'syz.0.164' launched './file1' with NULL argv: empty string added
[  114.441072][ T6539] tipc: Started in network mode
[  114.464973][ T6539] tipc: Node identity 6e8f15c3d611, cluster identity 4711
[  114.479728][   T10] usb usb5-port1: attempt power cycle
[  114.495512][ T6539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.585917][ T6540] syzkaller0: entered promiscuous mode
[  114.591411][ T6540] syzkaller0: entered allmulticast mode
[  114.644894][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.166'.
[  114.683401][ T6545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.166'.
[  114.839391][ T6543] tipc: Resetting bearer <eth:syzkaller0>
[  114.875272][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  114.935845][   T10] usb 5-1: device descriptor read/8, error -71
[  115.056447][ T6547] tipc: Resetting bearer <eth:syzkaller0>
[  115.175199][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  115.206655][   T10] usb 5-1: device descriptor read/8, error -71
[  115.217742][ T6547] tipc: Disabling bearer <eth:syzkaller0>
[  115.269132][ T6556] netlink: 'syz.0.167': attribute type 10 has an invalid length.
[  115.325487][   T10] usb usb5-port1: unable to enumerate USB device
[  115.379703][ T6556] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.471259][ T6553] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  116.473742][ T6577] netlink: 56 bytes leftover after parsing attributes in process `syz.4.173'.
[  117.588291][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[  117.724624][ T6595] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  118.172844][ T6606] FAULT_INJECTION: forcing a failure.
[  118.172844][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.298126][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.1.183 Not tainted syzkaller #0 PREEMPT(full) 
[  118.298142][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  118.298152][ T6606] Call Trace:
[  118.298157][ T6606]  <TASK>
[  118.298162][ T6606]  dump_stack_lvl+0x189/0x250
[  118.298183][ T6606]  ? __pfx____ratelimit+0x10/0x10
[  118.298194][ T6606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.298205][ T6606]  ? __pfx__printk+0x10/0x10
[  118.298218][ T6606]  ? __might_fault+0xb0/0x130
[  118.298236][ T6606]  should_fail_ex+0x414/0x560
[  118.298254][ T6606]  _copy_from_iter+0x1de/0x1790
[  118.298269][ T6606]  ? rcu_is_watching+0x15/0xb0
[  118.298280][ T6606]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  118.298293][ T6606]  ? __pfx__copy_from_iter+0x10/0x10
[  118.298305][ T6606]  ? __build_skb_around+0x257/0x3e0
[  118.298317][ T6606]  ? netlink_sendmsg+0x642/0xb30
[  118.298327][ T6606]  ? skb_put+0x11b/0x210
[  118.298339][ T6606]  netlink_sendmsg+0x6b2/0xb30
[  118.298354][ T6606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.298365][ T6606]  ? aa_sock_msg_perm+0xf1/0x1d0
[  118.298376][ T6606]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.298386][ T6606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.298396][ T6606]  __sock_sendmsg+0x21c/0x270
[  118.298413][ T6606]  ____sys_sendmsg+0x505/0x830
[  118.298428][ T6606]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.298444][ T6606]  ? import_iovec+0x74/0xa0
[  118.298458][ T6606]  ___sys_sendmsg+0x21f/0x2a0
[  118.298471][ T6606]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.298500][ T6606]  ? __fget_files+0x2a/0x420
[  118.298508][ T6606]  ? __fget_files+0x3a0/0x420
[  118.298520][ T6606]  __x64_sys_sendmsg+0x19b/0x260
[  118.298534][ T6606]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.298550][ T6606]  ? __pfx_ksys_write+0x10/0x10
[  118.298561][ T6606]  ? rcu_is_watching+0x15/0xb0
[  118.298573][ T6606]  ? do_syscall_64+0xbe/0x3b0
[  118.298585][ T6606]  do_syscall_64+0xfa/0x3b0
[  118.298594][ T6606]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.298602][ T6606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.298611][ T6606]  ? clear_bhb_loop+0x60/0xb0
[  118.298623][ T6606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.298631][ T6606] RIP: 0033:0x7fb9dd38eba9
[  118.298646][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.298653][ T6606] RSP: 002b:00007fb9de301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.298667][ T6606] RAX: ffffffffffffffda RBX: 00007fb9dd5d5fa0 RCX: 00007fb9dd38eba9
[  118.298674][ T6606] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000006
[  118.298679][ T6606] RBP: 00007fb9de301090 R08: 0000000000000000 R09: 0000000000000000
[  118.298684][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.298689][ T6606] R13: 00007fb9dd5d6038 R14: 00007fb9dd5d5fa0 R15: 00007fb9dd6ffa28
[  118.298710][ T6606]  </TASK>
[  119.435688][ T6617] Invalid logical block size (34)
[  119.535727][   T30] audit: type=1326 audit(1757561329.238:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe6b78eba9 code=0x0
[  119.667011][ T6623] input: syz1 as /devices/virtual/input/input8
[  120.451227][ T6631] netlink: set zone limit has 4 unknown bytes
[  120.555659][ T6645] binder: BINDER_SET_CONTEXT_MGR already set
[  120.618091][ T6645] binder: 6644:6645 ioctl 4018620d 200000000100 returned -16
[  120.885351][ T6282] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  121.015310][  T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.050489][ T6282] usb 2-1: Using ep0 maxpacket: 8
[  121.058670][ T6282] usb 2-1: unable to get BOS descriptor or descriptor too short
[  121.076767][ T6282] usb 2-1: config 50 has an invalid interface number: 75 but max is 0
[  121.085630][ T6282] usb 2-1: config 50 has no interface number 0
[  121.102264][ T6282] usb 2-1: config 50 interface 75 altsetting 42 endpoint 0x3 has invalid maxpacket 592, setting to 64
[  121.120206][ T6282] usb 2-1: config 50 interface 75 altsetting 42 bulk endpoint 0x2 has invalid maxpacket 32
[  121.148439][ T6661] tipc: Started in network mode
[  121.171299][ T6282] usb 2-1: config 50 interface 75 has no altsetting 0
[  121.179497][ T6661] tipc: Node identity c28a6d0ad906, cluster identity 4711
[  121.190630][ T6661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.205561][  T980] usb 3-1: Using ep0 maxpacket: 16
[  121.209068][ T6282] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  121.229734][ T6282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.241700][  T980] usb 3-1: config 0 has an invalid interface number: 217 but max is 0
[  121.242559][ T6662] syzkaller0: entered promiscuous mode
[  121.260175][ T6282] usb 2-1: Product: syz
[  121.264369][ T6282] usb 2-1: Manufacturer: syz
[  121.268993][  T980] usb 3-1: config 0 has no interface number 0
[  121.269023][  T980] usb 3-1: config 0 interface 217 has no altsetting 0
[  121.271716][  T980] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8
[  121.288494][ T6662] syzkaller0: entered allmulticast mode
[  121.304424][ T6282] usb 2-1: SerialNumber: syz
[  121.316900][ T6661] tipc: Resetting bearer <eth:syzkaller0>
[  121.331908][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.340712][ T6660] tipc: Resetting bearer <eth:syzkaller0>
[  121.359947][ T6642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  121.377032][ T6660] tipc: Disabling bearer <eth:syzkaller0>
[  121.381659][  T980] usb 3-1: Product: syz
[  121.403189][  T980] usb 3-1: Manufacturer: syz
[  121.415148][  T980] usb 3-1: SerialNumber: syz
[  121.433538][  T980] usb 3-1: config 0 descriptor??
[  121.575203][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  121.587118][ T6282] radioshark 2-1:50.75: Invalid radioSHARK device
[  121.593567][ T6282] radioshark 2-1:50.75: probe with driver radioshark failed with error -22
[  121.631794][ T6282] usbhid 2-1:50.75: couldn't find an input interrupt endpoint
[  121.655997][  T980] usb 3-1: USB disconnect, device number 7
[  121.659469][ T6282] usb 2-1: USB disconnect, device number 8
[  121.735214][    T9] usb 1-1: device descriptor read/64, error -71
[  122.004574][ T6675] netlink: 'syz.4.201': attribute type 1 has an invalid length.
[  122.012478][ T6675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.201'.
[  122.129619][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  122.379886][    T9] usb 1-1: device descriptor read/64, error -71
[  122.523869][    T9] usb usb1-port1: attempt power cycle
[  122.776608][ T6683] syzkaller1: entered promiscuous mode
[  122.782176][ T6683] syzkaller1: entered allmulticast mode
[  122.856505][ T6686] mmap: syz.2.205 (6686): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  122.995469][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  123.036437][    T9] usb 1-1: device descriptor read/8, error -71
[  123.155435][  T121] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  123.285288][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  123.335347][  T121] usb 3-1: Using ep0 maxpacket: 32
[  123.336244][    T9] usb 1-1: device descriptor read/8, error -71
[  123.349800][  T121] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  123.364068][  T121] usb 3-1: config 0 has no interface number 0
[  123.386386][  T121] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  123.399074][  T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.417428][  T121] usb 3-1: Product: syz
[  123.424784][  T121] usb 3-1: Manufacturer: syz
[  123.439273][  T121] usb 3-1: SerialNumber: syz
[  123.452908][  T121] usb 3-1: config 0 descriptor??
[  123.462637][  T121] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  123.469066][    T9] usb usb1-port1: unable to enumerate USB device
[  123.535205][ T6282] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  123.677236][  T121] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  123.695281][   T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  123.714071][ T6282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.736883][  T121] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  123.748482][ T6282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.768548][ T6282] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  123.796961][ T6282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.813208][ T6282] usb 2-1: config 0 descriptor??
[  123.867983][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  123.881388][   T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  123.891052][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.899111][   T43] usb 4-1: Product: syz
[  123.903419][   T43] usb 4-1: Manufacturer: syz
[  123.908061][   T43] usb 4-1: SerialNumber: syz
[  123.931682][   T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  123.993623][  T121] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  124.033304][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.042601][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.085611][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[  124.120054][ T6690] team0: entered promiscuous mode
[  124.125735][ T6690] team_slave_0: entered promiscuous mode
[  124.132181][ T6690] team_slave_1: entered promiscuous mode
[  124.144924][ T6690] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  124.154164][ T6690] bridge0: port 3(macvlan2) entered blocking state
[  124.161362][ T6690] bridge0: port 3(macvlan2) entered disabled state
[  124.168925][ T6690] macvlan2: entered allmulticast mode
[  124.174570][ T6690] team0: entered allmulticast mode
[  124.182224][ T6690] team_slave_0: entered allmulticast mode
[  124.188760][ T6690] team_slave_1: entered allmulticast mode
[  124.221923][ T6694] binder: 6693:6694 ioctl c0306201 200000000080 returned -14
[  124.231364][ T6690] macvlan2: entered promiscuous mode
[  124.254184][ T6690] bridge0: port 3(macvlan2) entered blocking state
[  124.260986][ T6690] bridge0: port 3(macvlan2) entered forwarding state
[  124.349218][ T6282] usbhid 2-1:0.0: can't add hid device: -71
[  124.355456][ T6282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  124.382791][ T6282] usb 2-1: USB disconnect, device number 9
[  124.513236][    T9] usb 4-1: USB disconnect, device number 6
[  124.595682][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  124.597365][   T10] usb 3-1: USB disconnect, device number 8
[  124.633652][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  124.686358][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  124.726125][   T10] quatech2 3-1:0.51: device disconnected
[  124.730724][ T6707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.742142][ T6707] syzkaller0: entered promiscuous mode
[  124.748041][ T6707] syzkaller0: entered allmulticast mode
[  124.807578][ T6707] tipc: Resetting bearer <eth:syzkaller0>
[  125.043335][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[  125.219811][ T6706] tipc: Disabling bearer <eth:syzkaller0>
[  125.309119][  T121] usb 4-1: Service connection timeout for: 256
[  125.339151][  T121] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  125.383286][  T121] ath9k_htc: Failed to initialize the device
[  125.419198][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[  125.561108][ T6737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.597214][ T6737] syzkaller0: entered promiscuous mode
[  125.602746][ T6737] syzkaller0: entered allmulticast mode
[  125.662669][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[  125.673734][ T6736] tipc: Resetting bearer <eth:syzkaller0>
[  125.690205][ T6736] tipc: Disabling bearer <eth:syzkaller0>
[  125.705253][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.765226][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  125.955487][   T10] usb 5-1: Using ep0 maxpacket: 32
[  126.018661][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.097794][   T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.40
[  126.114568][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.139850][   T10] usb 5-1: Product: 횭楢䢌麣쇣谡ញἌ퉲扣⥥흫搤ಂ㔑ƾ唡㳁놛ݖ易ꯢ䠯ꛣ簩랶ᠪ즢낯쨿褴쨇퍽❆엳᫥㏄咃蓸ໜ┚࡭ॏޗ딼휑㞠
[  126.224607][   T10] usb 5-1: Manufacturer: ᔟ
[  126.234864][   T10] usb 5-1: SerialNumber: Б
[  126.260753][ T6751] syzkaller1: tun_chr_ioctl cmd 1074025672
[  126.295885][ T6751] syzkaller1: ignored: set checksum enabled
[  126.325820][ T6751] syzkaller1: tun_chr_ioctl cmd 21731
[  126.482322][   T10] usbhid 5-1:1.0: can't add hid device: -71
[  126.489341][   T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  126.514495][   T10] usb 5-1: USB disconnect, device number 11
[  126.835131][  T980] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  126.995579][  T980] usb 3-1: Using ep0 maxpacket: 16
[  127.014028][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.028220][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.050255][  T980] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  127.060470][  T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.074129][  T980] usb 3-1: config 0 descriptor??
[  127.075525][  T121] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  127.150090][   T30] audit: type=1326 audit(1757561336.898:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.174663][   T30] audit: type=1326 audit(1757561336.898:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.202147][   T30] audit: type=1326 audit(1757561336.898:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.234535][   T30] audit: type=1326 audit(1757561336.898:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.262750][   T30] audit: type=1326 audit(1757561336.898:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.297570][  T121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  127.307003][  T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.315269][ T6282] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  127.323471][   T30] audit: type=1326 audit(1757561336.898:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.337016][  T121] usb 4-1: Product: syz
[  127.374752][   T30] audit: type=1326 audit(1757561336.898:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.375964][  T121] usb 4-1: Manufacturer: syz
[  127.423693][  T121] usb 4-1: SerialNumber: syz
[  127.440373][  T121] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  127.463071][   T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  127.496019][ T6282] usb 5-1: Using ep0 maxpacket: 32
[  127.505849][ T6282] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  127.518636][ T6282] usb 5-1: config 0 has no interface number 0
[  127.519757][   T30] audit: type=1326 audit(1757561336.898:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.525012][ T6282] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  127.558301][  T980] playstation 0003:054C:05C4.0004: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[  127.645154][   T30] audit: type=1326 audit(1757561336.898:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.645992][ T6282] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  127.711807][  T980] playstation 0003:054C:05C4.0004: Invalid reportID received, expected 18 got 0
[  127.731677][   T30] audit: type=1326 audit(1757561336.898:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4714b8eba9 code=0x7ffc0000
[  127.735098][  T980] playstation 0003:054C:05C4.0004: Failed to retrieve DualShock4 pairing info: -22
[  127.757106][ T6282] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  127.792850][ T6282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.798917][  T980] playstation 0003:054C:05C4.0004: Failed to get MAC address from DualShock4
[  127.821610][  T980] playstation 0003:054C:05C4.0004: Failed to create dualshock4.
[  127.822166][ T6282] usb 5-1: Product: syz
[  127.864128][ T6282] usb 5-1: Manufacturer: syz
[  127.874222][ T6282] usb 5-1: SerialNumber: syz
[  127.918259][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'.
[  127.974879][ T6282] usb 5-1: config 0 descriptor??
[  127.976203][  T980] playstation 0003:054C:05C4.0004: probe with driver playstation failed with error -22
[  127.990321][ T6770] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  128.003189][ T6770] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  128.017099][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.046668][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.082583][ T6282] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 96:70:5d:28:36:b1
[  128.103058][  T980] usb 3-1: USB disconnect, device number 9
[  128.141884][   T24] usb 4-1: USB disconnect, device number 7
[  128.511026][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  128.548117][   T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  128.570538][   T43] ath9k_htc: Failed to initialize the device
[  128.586404][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[  128.629359][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'.
[  128.638423][ T6787] netlink: 'syz.4.233': attribute type 21 has an invalid length.
[  128.665206][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[  128.706911][    T9] usb 2-1: Using ep0 maxpacket: 16
[  128.719492][    T9] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config
[  128.721221][ T1168] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.742364][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'.
[  128.751562][ T6787] netlink: 'syz.4.233': attribute type 21 has an invalid length.
[  128.763247][ T1168] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.772962][ T1168] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.779574][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.785368][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[  128.833132][ T1168] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.834274][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.870650][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.908341][    T9] usb 2-1: Product: syz
[  128.926580][    T9] usb 2-1: Manufacturer: syz
[  128.941659][    T9] usb 2-1: SerialNumber: syz
[  129.428706][ T6814] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002
[  130.061933][  T980] usb 5-1: USB disconnect, device number 12
[  130.071881][  T980] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  130.249341][ T6802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.241'.
[  130.866398][    T9] usb 2-1: 0:2 : does not exist
[  130.924502][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  131.001752][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  131.095186][    T9] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[  131.157546][    T9] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5)
[  131.297640][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  131.344978][    T9] usb 2-1: USB disconnect, device number 10
[  131.474836][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.088997][ T6897] netlink: 'syz.4.254': attribute type 4 has an invalid length.
[  132.127677][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'.
[  132.159079][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'.
[  132.276242][ T6903] netlink: 104 bytes leftover after parsing attributes in process `syz.3.256'.
[  132.330939][ T6899] netlink: 228 bytes leftover after parsing attributes in process `syz.1.255'.
[  132.388591][   T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  132.578302][   T43] usb 5-1: config 10 has an invalid interface number: 234 but max is 0
[  132.599311][   T43] usb 5-1: config 10 has no interface number 0
[  132.625628][   T43] usb 5-1: config 10 interface 234 has no altsetting 0
[  132.640989][   T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=25.db
[  132.654613][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.876846][   T43] usb 5-1: Product: syz
[  132.885910][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  132.892565][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  132.904867][   T43] usb 5-1: Manufacturer: syz
[  132.911705][   T43] usb 5-1: SerialNumber: syz
[  132.935544][ T5934] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  133.449062][   T43] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[  133.467125][ T5934] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  133.477986][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.488835][ T5934] usb 1-1: Product: syz
[  133.492997][ T5934] usb 1-1: Manufacturer: syz
[  133.514548][   T43] gspca_sn9c20x: Write register 1000 failed -71
[  133.520792][ T5934] usb 1-1: SerialNumber: syz
[  133.535140][   T43] gspca_sn9c20x: Device initialization failed
[  133.541464][   T43] gspca_sn9c20x 5-1:10.234: probe with driver gspca_sn9c20x failed with error -71
[  133.547168][ T5934] usb 1-1: config 0 descriptor??
[  133.561895][   T43] usb 5-1: USB disconnect, device number 13
[  133.619505][ T5934] gspca_main: touptek-2.14.0 probing 0547:6801
[  133.650477][ T6917] capability: warning: `syz.1.258' uses deprecated v2 capabilities in a way that may be insecure
[  133.695486][ T6926] vivid-000: disconnect
[  133.826927][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.010203][ T6907] vivid-000: reconnect
[  134.015464][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.026468][ T6282] usb 1-1: USB disconnect, device number 12
[  134.675568][ T5934] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  134.837564][ T5934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.853640][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.876661][ T5934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  134.886461][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.959258][ T6944] kAFS: unable to lookup cell '/,'
[  134.985245][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  135.142789][ T5934] usb 5-1: usb_control_msg returned -32
[  135.155868][ T5934] usbtmc 5-1:16.0: can't read capabilities
[  135.157633][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.204016][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.238966][   T24] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  135.260200][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.291485][   T24] usb 3-1: config 0 descriptor??
[  135.317216][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  135.489225][   T10] usb 4-1: Using ep0 maxpacket: 16
[  135.499295][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.519833][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.260'.
[  135.538046][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.552019][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.554065][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.590520][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  135.605245][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.638753][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.646294][   T10] usb 4-1: config 0 descriptor??
[  135.723089][ T6282] usb 5-1: USB disconnect, device number 14
[  135.754850][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[  136.094413][   T10] koneplus 0003:1E7D:2E22.0005: item fetching failed at offset 0/2
[  136.112482][   T10] koneplus 0003:1E7D:2E22.0005: parse failed
[  136.122944][   T10] koneplus 0003:1E7D:2E22.0005: probe with driver koneplus failed with error -22
[  136.427675][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.440256][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.511326][ T6282] usb 4-1: USB disconnect, device number 8
[  137.065667][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'.
[  137.205830][ T6971] netlink: 376 bytes leftover after parsing attributes in process `syz.4.273'.
[  137.223854][ T6971] netlink: 376 bytes leftover after parsing attributes in process `syz.4.273'.
[  137.366773][ T6282] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  137.530511][ T6282] usb 2-1: config 0 has an invalid interface number: 33 but max is 0
[  137.538933][ T6282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.549438][ T6282] usb 2-1: config 0 has no interface number 0
[  137.566463][ T6282] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  137.589960][ T6282] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.623428][ T6282] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64
[  137.645383][ T6282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.659490][ T6282] usb 2-1: Product: syz
[  137.663693][ T6282] usb 2-1: Manufacturer: syz
[  137.671427][ T6282] usb 2-1: SerialNumber: syz
[  137.692472][ T6282] usb 2-1: config 0 descriptor??
[  137.720307][ T6969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.741540][ T6282] hdpvr 2-1:0.33: Could not find bulk-in endpoint
[  137.748302][ T6282] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12
[  138.009205][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.020131][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.087814][ T6984] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  138.122920][ T6981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.152059][ T6987] tipc: Resetting bearer <eth:syzkaller0>
[  138.207368][ T6977] tipc: Disabling bearer <eth:syzkaller0>
[  138.243392][ T6282] usb 2-1: USB disconnect, device number 11
[  138.286612][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  138.292630][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  138.323252][   T24] usb 3-1: USB disconnect, device number 10
[  138.785163][   T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  138.805493][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  138.937396][   T24] usb 3-1: config 0 has an invalid interface number: 29 but max is 0
[  138.945798][   T24] usb 3-1: config 0 has no interface number 0
[  138.951889][   T24] usb 3-1: config 0 interface 29 has no altsetting 0
[  138.965745][   T10] usb 4-1: Using ep0 maxpacket: 16
[  138.975949][   T10] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  138.978293][   T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  139.006878][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.018284][   T10] usb 4-1: config 0 has no interface number 0
[  139.025167][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  139.032870][   T24] usb 3-1: Product: syz
[  139.040701][   T24] usb 3-1: Manufacturer: syz
[  139.052402][   T10] usb 4-1: config 0 interface 237 has no altsetting 0
[  139.060790][   T24] usb 3-1: SerialNumber: syz
[  139.074069][   T24] usb 3-1: config 0 descriptor??
[  139.112012][   T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad
[  139.123361][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.131652][   T10] usb 4-1: Product: syz
[  139.149157][   T10] usb 4-1: Manufacturer: syz
[  139.155534][   T10] usb 4-1: SerialNumber: syz
[  139.175958][    T9] usb 5-1: device descriptor read/64, error -71
[  139.186209][   T10] usb 4-1: config 0 descriptor??
[  139.210854][   T10] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found
[  139.305131][ T5934] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  139.343974][   T24] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  139.412417][   T10] snd_usb_podhd 4-1:0.237: cannot get proper max packet size
[  139.425157][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  139.451917][   T10] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected
[  139.463232][   T10] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22
[  139.474501][ T5934] usb 2-1: Using ep0 maxpacket: 16
[  139.482113][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  139.503724][ T5934] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  139.513470][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.533043][ T5934] usb 2-1: Product: syz
[  139.537832][ T5934] usb 2-1: Manufacturer: syz
[  139.542434][ T5934] usb 2-1: SerialNumber: syz
[  139.552214][ T5934] usb 2-1: config 0 descriptor??
[  139.572587][ T5934] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  139.582676][    T9] usb 5-1: device descriptor read/64, error -71
[  139.589547][ T5934] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  139.616192][   T10] usb 4-1: USB disconnect, device number 9
[  139.696523][    T9] usb usb5-port1: attempt power cycle
[  139.716478][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.731440][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.754192][   T24] peak_usb 3-1:0.29 can0: sending command failure: -22
[  139.761793][   T24] peak_usb 3-1:0.29 can0: sending command failure: -22
[  139.770695][   T24] peak_usb 3-1:0.29 can0: sending command failure: -22
[  139.889846][   T24] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22
[  139.924464][   T24] usb 3-1: USB disconnect, device number 11
[  139.998129][ T5934] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  140.065242][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  140.101704][    T9] usb 5-1: device descriptor read/8, error -71
[  140.240229][ T5934] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  140.258579][ T5934] em28xx 2-1:0.0: board has no eeprom
[  140.355654][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  140.394275][    T9] usb 5-1: device descriptor read/8, error -71
[  140.463482][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'.
[  140.505476][    T9] usb usb5-port1: unable to enumerate USB device
[  140.555266][ T5934] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  140.567829][ T5934] em28xx 2-1:0.0: dvb set to bulk mode.
[  140.573686][    T9] em28xx 2-1:0.0: Binding DVB extension
[  140.621096][   T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  140.735016][    T9] em28xx 2-1:0.0: Registering input extension
[  140.777912][   T24] usb 1-1: config 0 has an invalid interface number: 185 but max is 0
[  140.786529][   T24] usb 1-1: config 0 has no interface number 0
[  140.792641][   T24] usb 1-1: config 0 interface 185 has no altsetting 0
[  140.801692][   T24] usb 1-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=ce.fc
[  140.810873][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.819700][   T24] usb 1-1: Product: syz
[  140.824097][   T24] usb 1-1: Manufacturer: syz
[  140.828792][   T24] usb 1-1: SerialNumber: syz
[  140.835573][   T24] usb 1-1: config 0 descriptor??
[  140.844815][   T24] em28xx 1-1:0.185: audio device (eb1a:50a6): interface 185, class 1
[  141.057828][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.077475][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.102971][   T24] usb 1-1: USB disconnect, device number 13
[  141.141381][   T10] usb 2-1: USB disconnect, device number 12
[  141.147855][ T7006] em28xx 2-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[  141.158935][   T10] em28xx 2-1:0.0: Disconnecting em28xx
[  141.171333][   T10] em28xx 2-1:0.0: Closing input extension
[  141.561532][ T7040] macvtap1: entered allmulticast mode
[  141.569036][ T7040] veth0_macvtap: entered allmulticast mode
[  141.832762][ T7046] FAULT_INJECTION: forcing a failure.
[  141.832762][ T7046] name failslab, interval 1, probability 0, space 0, times 0
[  141.847553][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.4.296 Not tainted syzkaller #0 PREEMPT(full) 
[  141.847582][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  141.847591][ T7046] Call Trace:
[  141.847598][ T7046]  <TASK>
[  141.847605][ T7046]  dump_stack_lvl+0x189/0x250
[  141.847630][ T7046]  ? __pfx____ratelimit+0x10/0x10
[  141.847647][ T7046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.847666][ T7046]  ? __pfx__printk+0x10/0x10
[  141.847694][ T7046]  ? __pfx___might_resched+0x10/0x10
[  141.847715][ T7046]  should_fail_ex+0x414/0x560
[  141.847744][ T7046]  should_failslab+0xa8/0x100
[  141.847769][ T7046]  __kmalloc_cache_noprof+0x70/0x3d0
[  141.847790][ T7046]  ? tcf_proto_create+0x65/0x330
[  141.847815][ T7046]  tcf_proto_create+0x65/0x330
[  141.847841][ T7046]  tc_new_tfilter+0x11aa/0x15b0
[  141.847886][ T7046]  ? __pfx_tc_new_tfilter+0x10/0x10
[  141.847903][ T7046]  ? __dev_queue_xmit+0x1d79/0x3b50
[  141.847960][ T7046]  ? __pfx_tc_new_tfilter+0x10/0x10
[  141.847978][ T7046]  rtnetlink_rcv_msg+0x7cf/0xb70
[  141.848001][ T7046]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  141.848017][ T7046]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  141.848032][ T7046]  ? ref_tracker_free+0x63a/0x7d0
[  141.848049][ T7046]  ? __asan_memcpy+0x40/0x70
[  141.848067][ T7046]  ? __pfx_ref_tracker_free+0x10/0x10
[  141.848081][ T7046]  ? __skb_clone+0x63/0x7a0
[  141.848111][ T7046]  netlink_rcv_skb+0x205/0x470
[  141.848130][ T7046]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  141.848149][ T7046]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.848178][ T7046]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.848204][ T7046]  netlink_unicast+0x82c/0x9e0
[  141.848237][ T7046]  ? __pfx_netlink_unicast+0x10/0x10
[  141.848263][ T7046]  ? netlink_sendmsg+0x642/0xb30
[  141.848278][ T7046]  ? skb_put+0x11b/0x210
[  141.848303][ T7046]  netlink_sendmsg+0x805/0xb30
[  141.848329][ T7046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.848351][ T7046]  ? aa_sock_msg_perm+0xf1/0x1d0
[  141.848369][ T7046]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.848387][ T7046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.848405][ T7046]  __sock_sendmsg+0x21c/0x270
[  141.848432][ T7046]  ____sys_sendmsg+0x505/0x830
[  141.848458][ T7046]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.848487][ T7046]  ? import_iovec+0x74/0xa0
[  141.848512][ T7046]  ___sys_sendmsg+0x21f/0x2a0
[  141.848535][ T7046]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.848597][ T7046]  ? __fget_files+0x2a/0x420
[  141.848612][ T7046]  ? __fget_files+0x3a0/0x420
[  141.848637][ T7046]  __x64_sys_sendmsg+0x19b/0x260
[  141.848660][ T7046]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.848691][ T7046]  ? __pfx_ksys_write+0x10/0x10
[  141.848718][ T7046]  ? do_syscall_64+0xbe/0x3b0
[  141.848740][ T7046]  do_syscall_64+0xfa/0x3b0
[  141.848758][ T7046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.848773][ T7046]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.848790][ T7046]  ? clear_bhb_loop+0x60/0xb0
[  141.848810][ T7046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.848826][ T7046] RIP: 0033:0x7fbe6b78eba9
[  141.848841][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.848854][ T7046] RSP: 002b:00007fbe6c6e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.848872][ T7046] RAX: ffffffffffffffda RBX: 00007fbe6b9d5fa0 RCX: 00007fbe6b78eba9
[  141.848884][ T7046] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000006
[  141.848895][ T7046] RBP: 00007fbe6c6e6090 R08: 0000000000000000 R09: 0000000000000000
[  141.848905][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.848914][ T7046] R13: 00007fbe6b9d6038 R14: 00007fbe6b9d5fa0 R15: 00007fbe6baffa28
[  141.848943][ T7046]  </TASK>
[  142.294351][   T10] em28xx 2-1:0.0: Freeing device
[  142.883322][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[  143.087287][ T6282] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  143.653512][ T6282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.672991][ T6282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.708952][ T6282] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.748774][ T6282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.765879][ T6282] usb 1-1: Product: syz
[  143.776744][ T6282] usb 1-1: Manufacturer: syz
[  143.803625][ T6282] usb 1-1: SerialNumber: syz
[  144.243011][ T7067] usb usb8: usbfs: process 7067 (syz.2.302) did not claim interface 0 before use
[  144.253822][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  144.253835][   T30] audit: type=1400 audit(1757561353.988:94): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=7066 comm="syz.2.302"
[  144.995236][  T121] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  145.175607][  T121] usb 2-1: Using ep0 maxpacket: 16
[  145.191217][  T121] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  145.212017][  T121] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.235083][  T121] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.260455][  T121] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.288060][  T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.309943][  T121] usb 2-1: Product: syz
[  145.320988][  T121] usb 2-1: Manufacturer: syz
[  145.343018][  T121] usb 2-1: SerialNumber: syz
[  145.585452][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  145.673225][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.682104][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.735212][   T10] usb 4-1: Using ep0 maxpacket: 32
[  145.743423][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.755480][   T10] usb 4-1: config 0 has no interfaces?
[  145.764596][   T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  145.789513][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.799645][   T10] usb 4-1: Product: syz
[  145.803812][   T10] usb 4-1: Manufacturer: syz
[  145.808457][   T10] usb 4-1: SerialNumber: syz
[  145.820442][   T10] usb 4-1: config 0 descriptor??
[  146.021960][ T6282] usb 1-1: 0:2 : does not exist
[  146.047834][ T6282] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  146.086778][ T7093] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  146.111913][ T7094] loop2: detected capacity change from 0 to 7
[  146.115417][ T6282] usb 1-1: USB disconnect, device number 14
[  146.136950][  T121] usb 2-1: 0:2 : does not exist
[  146.141704][ T7094] Dev loop2: unable to read RDB block 7
[  146.159484][  T121] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  146.176562][ T7094]  loop2: AHDI p1 p2
[  146.180496][ T7094] loop2: partition table partially beyond EOD, truncated
[  146.207297][  T121] usb 2-1: USB disconnect, device number 13
[  146.222529][ T7094] loop2: p1 start 1668641394 is beyond EOD, truncated
[  146.281228][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  146.771693][ T7117] netlink: 'syz.1.317': attribute type 20 has an invalid length.
[  146.813085][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'.
[  146.928411][    T9] usb 4-1: USB disconnect, device number 10
[  147.029684][ T7124] fuse: Bad value for 'user_id'
[  147.034663][ T7124] fuse: Bad value for 'user_id'
[  147.145145][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  147.310982][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.323205][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  147.332471][  T121] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  147.397016][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  147.411307][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  147.421872][   T10] usb 2-1: SerialNumber: syz
[  147.630702][  T121] usb 1-1: Using ep0 maxpacket: 8
[  147.657600][  T121] usb 1-1: config 0 has no interfaces?
[  147.681387][ T7114] netlink: 'syz.1.317': attribute type 20 has an invalid length.
[  147.800874][   T10] usb 2-1: 0:2 : does not exist
[  147.841286][   T10] usb 2-1: unit 5: unexpected type 0x09
[  148.013925][   T10] usb 2-1: USB disconnect, device number 14
[  148.364202][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.485283][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  149.035405][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  149.047915][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.077329][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.097445][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  149.242923][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  149.252564][   T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  149.261075][   T10] usb 2-1: Manufacturer: syz
[  149.293710][   T10] usb 2-1: config 0 descriptor??
[  149.503312][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'.
[  149.571001][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'.
[  149.653437][ T7146] team_slave_0: entered promiscuous mode
[  149.659346][ T7146] team_slave_1: entered promiscuous mode
[  149.671729][ T7149] ptrace attach of "./syz-executor exec"[5876] was attempted by "./syz-executor exec"[7149]
[  149.722933][ T7146] macvtap1: entered promiscuous mode
[  149.743629][ T7146] team0: entered promiscuous mode
[  149.746760][   T10] hid_parser_main: 153 callbacks suppressed
[  149.746778][   T10] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[  149.784152][ T7146] macvtap1: entered allmulticast mode
[  149.812833][ T7146] team0: entered allmulticast mode
[  149.834363][   T10] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  149.865449][ T7146] team_slave_0: entered allmulticast mode
[  149.877571][ T7146] team_slave_1: entered allmulticast mode
[  149.889215][ T7146] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  149.942754][ T7148] team0: left allmulticast mode
[  149.976849][ T7148] team_slave_0: left allmulticast mode
[  149.977154][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.984731][ T7148] team_slave_1: left allmulticast mode
[  150.027289][ T7148] team0: left promiscuous mode
[  150.065586][ T7148] team_slave_0: left promiscuous mode
[  150.071224][ T7148] team_slave_1: left promiscuous mode
[  150.104151][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.244890][ T6282] usb 2-1: USB disconnect, device number 15
[  150.541183][ T7161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.581617][ T7167] FAULT_INJECTION: forcing a failure.
[  150.581617][ T7167] name failslab, interval 1, probability 0, space 0, times 0
[  150.621021][ T7167] CPU: 0 UID: 0 PID: 7167 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) 
[  150.621044][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.621054][ T7167] Call Trace:
[  150.621060][ T7167]  <TASK>
[  150.621064][ T7167]  dump_stack_lvl+0x189/0x250
[  150.621081][ T7167]  ? __pfx____ratelimit+0x10/0x10
[  150.621091][ T7167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.621103][ T7167]  ? __pfx__printk+0x10/0x10
[  150.621120][ T7167]  ? netlink_unicast+0x82c/0x9e0
[  150.621144][ T7167]  ? ___sys_sendmsg+0x21f/0x2a0
[  150.621162][ T7167]  ? do_syscall_64+0xfa/0x3b0
[  150.621191][ T7167]  should_fail_ex+0x414/0x560
[  150.621211][ T7167]  should_failslab+0xa8/0x100
[  150.621226][ T7167]  kmem_cache_alloc_noprof+0x73/0x3c0
[  150.621239][ T7167]  ? skb_clone+0x212/0x3a0
[  150.621254][ T7167]  skb_clone+0x212/0x3a0
[  150.621277][ T7167]  __netlink_deliver_tap+0x404/0x850
[  150.621306][ T7167]  ? netlink_deliver_tap+0x2e/0x1b0
[  150.621325][ T7167]  netlink_deliver_tap+0x19c/0x1b0
[  150.621343][ T7167]  netlink_sendskb+0x68/0x140
[  150.621360][ T7167]  netlink_unicast+0x397/0x9e0
[  150.621373][ T7167]  ? __asan_memcpy+0x40/0x70
[  150.621388][ T7167]  ? __pfx_netlink_unicast+0x10/0x10
[  150.621411][ T7167]  netlink_rcv_skb+0x28c/0x470
[  150.621429][ T7167]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  150.621449][ T7167]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.621484][ T7167]  ? netlink_deliver_tap+0x2e/0x1b0
[  150.621503][ T7167]  netlink_unicast+0x82c/0x9e0
[  150.621522][ T7167]  ? __pfx_netlink_unicast+0x10/0x10
[  150.621537][ T7167]  ? netlink_sendmsg+0x642/0xb30
[  150.621546][ T7167]  ? skb_put+0x11b/0x210
[  150.621562][ T7167]  netlink_sendmsg+0x805/0xb30
[  150.621589][ T7167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.621610][ T7167]  ? aa_sock_msg_perm+0xf1/0x1d0
[  150.621629][ T7167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.621645][ T7167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.621655][ T7167]  __sock_sendmsg+0x21c/0x270
[  150.621672][ T7167]  ____sys_sendmsg+0x505/0x830
[  150.621687][ T7167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.621704][ T7167]  ? import_iovec+0x74/0xa0
[  150.621728][ T7167]  ___sys_sendmsg+0x21f/0x2a0
[  150.621751][ T7167]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.621801][ T7167]  ? __fget_files+0x2a/0x420
[  150.621809][ T7167]  ? __fget_files+0x3a0/0x420
[  150.621822][ T7167]  __x64_sys_sendmsg+0x19b/0x260
[  150.621835][ T7167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.621852][ T7167]  ? __pfx_ksys_write+0x10/0x10
[  150.621870][ T7167]  ? rcu_is_watching+0x15/0xb0
[  150.621892][ T7167]  ? do_syscall_64+0xbe/0x3b0
[  150.621913][ T7167]  do_syscall_64+0xfa/0x3b0
[  150.621929][ T7167]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.621944][ T7167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.621953][ T7167]  ? clear_bhb_loop+0x60/0xb0
[  150.621964][ T7167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.621972][ T7167] RIP: 0033:0x7fbe6b78eba9
[  150.621982][ T7167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.621991][ T7167] RSP: 002b:00007fbe6c6a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.622002][ T7167] RAX: ffffffffffffffda RBX: 00007fbe6b9d6180 RCX: 00007fbe6b78eba9
[  150.622014][ T7167] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000006
[  150.622024][ T7167] RBP: 00007fbe6c6a4090 R08: 0000000000000000 R09: 0000000000000000
[  150.622035][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.622048][ T7167] R13: 00007fbe6b9d6218 R14: 00007fbe6b9d6180 R15: 00007fbe6baffa28
[  150.622076][ T7167]  </TASK>
[  151.225396][  T121] usb 1-1: string descriptor 0 read error: -71
[  151.232210][  T121] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.276069][  T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.306431][ T7164] syzkaller0: entered promiscuous mode
[  151.311968][ T7164] syzkaller0: entered allmulticast mode
[  151.333386][  T121] usb 1-1: config 0 descriptor??
[  151.365741][  T121] usb 1-1: can't set config #0, error -71
[  151.400949][  T121] usb 1-1: USB disconnect, device number 15
[  151.986848][ T7158] tipc: Resetting bearer <eth:syzkaller0>
[  152.003562][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[  152.066693][ T7158] tipc: Disabling bearer <eth:syzkaller0>
[  152.417850][ T7182] vlan3: entered allmulticast mode
[  152.459826][ T7182] bridge0: entered allmulticast mode
[  152.586889][ T7182] bridge1: port 1(vlan3) entered blocking state
[  152.602610][ T7182] bridge1: port 1(vlan3) entered disabled state
[  152.611085][ T7182] vlan3: entered promiscuous mode
[  152.622565][ T7182] bridge0: entered promiscuous mode
[  152.686900][ T7185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.721807][ T7185] syzkaller0: entered promiscuous mode
[  152.752330][ T7185] syzkaller0: entered allmulticast mode
[  152.788077][ T7185] tipc: Resetting bearer <eth:syzkaller0>
[  152.962636][ T7184] tipc: Resetting bearer <eth:syzkaller0>
[  152.992550][ T7184] tipc: Disabling bearer <eth:syzkaller0>
[  153.113716][ T7201] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  153.195312][  T121] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  153.355115][  T121] usb 1-1: Using ep0 maxpacket: 16
[  153.439770][  T121] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.507119][  T121] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.616689][  T121] usb 1-1: config 0 interface 0 has no altsetting 0
[  153.626134][  T121] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  153.685686][  T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.752363][ T7212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.759704][ T7212] syzkaller0: entered promiscuous mode
[  153.769263][ T7212] syzkaller0: entered allmulticast mode
[  153.798142][  T121] usb 1-1: config 0 descriptor??
[  153.837889][ T7212] tipc: Resetting bearer <eth:syzkaller0>
[  153.848279][ T7214] syzkaller1: entered promiscuous mode
[  153.858921][ T7214] syzkaller1: entered allmulticast mode
[  153.879870][ T7211] tipc: Resetting bearer <eth:syzkaller0>
[  153.908644][ T7211] tipc: Disabling bearer <eth:syzkaller0>
[  154.341607][  T121] apple 0003:05AC:0247.0007: fixing up Magic Keyboard JIS report descriptor
[  154.353697][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.395229][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.414229][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.426988][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.444650][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.475097][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.504774][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.543206][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.570910][  T121] apple 0003:05AC:0247.0007: unknown main item tag 0x0
[  154.660386][  T121] apple 0003:05AC:0247.0007: unexpected long global item
[  154.722256][  T121] apple 0003:05AC:0247.0007: parse failed
[  154.750778][  T121] apple 0003:05AC:0247.0007: probe with driver apple failed with error -22
[  154.834888][  T121] usb 1-1: USB disconnect, device number 16
[  155.790288][ T7234] syz.1.348 (7234): drop_caches: 1
[  156.195422][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  156.345319][    T9] usb 1-1: device descriptor read/64, error -71
[  156.404299][ T7243] fuse: Bad value for 'group_id'
[  156.426511][ T7243] fuse: Bad value for 'group_id'
[  156.455244][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  156.603718][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  156.612203][   T10] usb 2-1: device descriptor read/64, error -71
[  156.755126][  T121] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  156.757851][    T9] usb 1-1: device descriptor read/64, error -71
[  156.865203][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  156.887057][    T9] usb usb1-port1: attempt power cycle
[  156.946730][  T121] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0
[  156.956622][  T121] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0
[  156.995148][  T121] usb 5-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0
[  157.004932][  T121] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.005217][   T10] usb 2-1: device descriptor read/64, error -71
[  157.029616][  T121] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  157.045359][  T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.057933][  T121] usb 5-1: Product: syz
[  157.062138][  T121] usb 5-1: Manufacturer: syz
[  157.075331][  T121] usb 5-1: SerialNumber: syz
[  157.087964][  T121] usb 5-1: config 0 descriptor??
[  157.103328][  T121] ir_toy 5-1:0.0: required endpoints not found
[  157.185805][   T10] usb usb2-port1: attempt power cycle
[  157.245795][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  157.327686][    T9] usb 1-1: device descriptor read/8, error -71
[  157.565337][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  157.586916][    T9] usb 1-1: device descriptor read/8, error -71
[  157.595265][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  157.626748][   T10] usb 2-1: device descriptor read/8, error -71
[  157.697155][    T9] usb usb1-port1: unable to enumerate USB device
[  157.878197][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  157.945770][   T10] usb 2-1: device descriptor read/8, error -71
[  158.059676][   T10] usb usb2-port1: unable to enumerate USB device
[  158.167813][ T7259] bond_slave_0: entered promiscuous mode
[  158.173687][ T7259] bond_slave_1: entered promiscuous mode
[  158.180513][ T7259] macsec1: entered promiscuous mode
[  158.185843][ T7259] bond0: entered promiscuous mode
[  158.191217][ T7259] macsec1: entered allmulticast mode
[  158.197142][ T7259] bond0: entered allmulticast mode
[  158.202250][ T7259] bond_slave_0: entered allmulticast mode
[  158.208039][ T7259] bond_slave_1: entered allmulticast mode
[  158.216945][ T7259] bond0: left allmulticast mode
[  158.221816][ T7259] bond_slave_0: left allmulticast mode
[  158.227421][ T7259] bond_slave_1: left allmulticast mode
[  158.232914][ T7259] bond0: left promiscuous mode
[  158.239457][ T7259] bond_slave_0: left promiscuous mode
[  158.244963][ T7259] bond_slave_1: left promiscuous mode
[  158.270557][ T7257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.277639][ T7260] syzkaller0: entered promiscuous mode
[  158.283189][ T7260] syzkaller0: entered allmulticast mode
[  158.298981][ T7257] tipc: Resetting bearer <eth:syzkaller0>
[  158.310754][ T7256] tipc: Resetting bearer <eth:syzkaller0>
[  158.332704][ T7256] tipc: Disabling bearer <eth:syzkaller0>
[  158.792510][ T7283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.804045][ T7283] syzkaller0: entered promiscuous mode
[  158.810366][ T7283] syzkaller0: entered allmulticast mode
[  158.845802][ T7283] tipc: Resetting bearer <eth:syzkaller0>
[  158.878063][ T7282] tipc: Resetting bearer <eth:syzkaller0>
[  158.889379][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.913898][ T7282] tipc: Disabling bearer <eth:syzkaller0>
[  158.915910][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.225845][ T6282] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  159.236998][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'.
[  159.251766][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'.
[  159.423860][   T24] usb 5-1: USB disconnect, device number 19
[  159.430056][ T6282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.455552][ T6282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.475492][ T6282] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  159.504392][ T6282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.556078][ T6282] usb 3-1: config 0 descriptor??
[  159.637627][ T7316] netlink: 'syz.4.378': attribute type 10 has an invalid length.
[  159.725311][ T7320] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  159.788463][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.807091][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.836179][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[  159.949908][ T6282] usbhid 3-1:0.0: can't add hid device: -71
[  159.970137][ T6282] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  160.008564][ T6282] usb 3-1: USB disconnect, device number 12
[  160.210323][ T7324] netlink: 'syz.3.381': attribute type 2 has an invalid length.
[  160.465223][  T121] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  160.582037][ T7336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.604159][ T7336] syzkaller0: entered promiscuous mode
[  160.620102][ T7336] syzkaller0: entered allmulticast mode
[  160.636916][  T121] usb 4-1: config index 0 descriptor too short (expected 46945, got 27)
[  160.649797][  T121] usb 4-1: config 51 has too many interfaces: 173, using maximum allowed: 32
[  160.677016][  T121] usb 4-1: config 51 has an invalid descriptor of length 0, skipping remainder of the config
[  160.707440][  T121] usb 4-1: config 51 has 0 interfaces, different from the descriptor's value: 173
[  160.718585][ T7338] tipc: Resetting bearer <eth:syzkaller0>
[  160.749699][  T121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  160.749813][ T7338] tipc: Disabling bearer <eth:syzkaller0>
[  160.776672][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.895379][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  161.025365][  T121] usb 4-1: USB disconnect, device number 11
[  161.497926][ T7372] netlink: 180 bytes leftover after parsing attributes in process `syz.3.387'.
[  161.920067][    T9] IPVS: starting estimator thread 0...
[  162.015235][ T7384] IPVS: using max 30 ests per chain, 72000 per kthread
[  162.065298][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  162.299268][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  162.315267][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.326040][   T24] usb 1-1: Product: syz
[  162.330241][   T24] usb 1-1: Manufacturer: syz
[  162.334982][   T24] usb 1-1: SerialNumber: syz
[  162.365996][   T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  162.403379][ T6282] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  162.521954][ T7396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'.
[  162.667286][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.701818][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.777934][  T121] usb 1-1: USB disconnect, device number 21
[  162.957496][ T7404] unknown channel width for channel at 909000KHz?
[  163.380025][ T7413] netlink: 180 bytes leftover after parsing attributes in process `syz.1.398'.
[  163.467241][ T6282] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  163.474292][ T6282] ath9k_htc: Failed to initialize the device
[  163.596278][  T121] usb 1-1: ath9k_htc: USB layer deinitialized
[  163.807443][ T7427] kernel profiling enabled (shift: 63)
[  163.855517][ T7406] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[  163.878178][ T7427] profiling shift: 63 too large
[  164.085612][  T121] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  164.249938][  T121] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  164.260367][  T121] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  164.284490][  T121] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.319336][ T7438] netlink: 376 bytes leftover after parsing attributes in process `syz.0.406'.
[  164.344766][ T7438] netlink: 376 bytes leftover after parsing attributes in process `syz.0.406'.
[  164.378421][  T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.485126][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  165.645483][    T9] usb 1-1: Using ep0 maxpacket: 8
[  165.653475][    T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  165.673023][    T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  165.704537][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.736100][    T9] usb 1-1: language id specifier not provided by device, defaulting to English
[  165.755411][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  165.776821][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.809948][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.825434][    T9] usb 1-1: Product: ࠓ
[  165.833986][    T9] usb 1-1: Manufacturer: ࠧ
[  165.860826][    T9] usb 1-1: SerialNumber: 즯ﱦ㌦鄙熴犠﮿ᇡퟛᐁ텻챩뻈鴌ｉ丿㭟ᆫ鎩竳푒
[  165.926813][   T10] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  165.945008][   T10] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  165.972583][   T10] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  166.097745][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  166.190038][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.234275][ T7457] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  166.372483][ T7452] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  166.384192][    T9] usb 1-1: 0:2 : does not exist
[  166.443130][    T9] usb 1-1: USB disconnect, device number 22
[  166.451762][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.536110][  T980] usb 3-1: USB disconnect, device number 13
[  166.536184][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.584546][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.660051][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'.
[  167.002698][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.028800][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.036355][ T7480] 8021q: VLANs not supported on vcan0
[  167.037908][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.054164][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.066326][  T980] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  167.206996][   T10] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  167.235354][   T10] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input10
[  167.255534][  T980] usb 2-1: Using ep0 maxpacket: 8
[  167.286603][  T980] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping
[  167.334078][  T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.349206][  T980] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  167.384527][  T980] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  167.394659][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.407232][   T10] usb 5-1: USB disconnect, device number 20
[  167.413185][    C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  167.432572][  T980] usb 2-1: Product: syz
[  167.439433][  T980] usb 2-1: Manufacturer: syz
[  167.444086][  T980] usb 2-1: SerialNumber: syz
[  167.465761][  T980] usb 2-1: config 0 descriptor??
[  167.588812][ T7491] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  167.705483][   T43] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  167.754258][  T980] usb 2-1: USB disconnect, device number 20
[  167.795504][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  167.888225][   T43] usb 4-1: unable to get BOS descriptor or descriptor too short
[  167.908546][   T43] usb 4-1: not running at top speed; connect to a high speed hub
[  167.929649][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.950402][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.966212][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.972193][   T10] usb 5-1: config 0 has no interfaces?
[  167.975376][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.991751][   T43] usb 4-1: Product: syz
[  167.991768][   T43] usb 4-1: Manufacturer: syz
[  167.991782][   T43] usb 4-1: SerialNumber: syz
[  167.995670][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  168.039552][ T7504] loop2: detected capacity change from 0 to 7
[  168.039748][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.039770][   T10] usb 5-1: Product: syz
[  168.039783][   T10] usb 5-1: Manufacturer: syz
[  168.039796][   T10] usb 5-1: SerialNumber: syz
[  168.044105][   T10] usb 5-1: config 0 descriptor??
[  168.049360][ T5863] Dev loop2: unable to read RDB block 7
[  168.049408][ T5863]  loop2: AHDI p1 p2
[  168.049437][ T5863] loop2: partition table partially beyond EOD, truncated
[  168.049684][ T5863] loop2: p1 start 1668641394 is beyond EOD, truncated
[  168.064869][ T7504] Dev loop2: unable to read RDB block 7
[  168.064898][ T7504]  loop2: AHDI p1 p2
[  168.064923][ T7504] loop2: partition table partially beyond EOD, truncated
[  168.070662][ T7504] loop2: p1 start 1668641394 is beyond EOD, truncated
[  168.230188][   T43] usb 4-1: 0:2 : does not exist
[  168.230288][   T43] usb 4-1: unit 4 not found!
[  168.239781][   T43] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  168.285009][   T43] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  168.353915][   T43] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  168.372051][   T43] usb 4-1: USB disconnect, device number 12
[  168.394859][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.416008][   T10] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  168.577367][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  168.585517][   T10] usb 1-1: config 0 has no interface number 0
[  168.591739][   T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  168.602985][  T980] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  168.614054][   T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  168.627704][   T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  168.636813][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.647894][   T10] usb 1-1: config 0 descriptor??
[  168.655007][ T7506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  168.668930][   T10] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  168.755135][  T980] usb 2-1: device descriptor read/64, error -71
[  168.883703][    C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  168.892885][   T10] usb 1-1: USB disconnect, device number 23
[  168.995176][  T980] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  169.125150][  T980] usb 2-1: device descriptor read/64, error -71
[  169.235338][  T980] usb usb2-port1: attempt power cycle
[  169.575223][  T980] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  169.595782][  T980] usb 2-1: device descriptor read/8, error -71
[  169.645830][ T7515] misc userio: Begin command sent, but we're already running
[  170.115195][  T980] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  170.137021][  T980] usb 2-1: device descriptor read/8, error -71
[  170.205249][   T43] usb 5-1: USB disconnect, device number 21
[  170.245507][  T980] usb usb2-port1: unable to enumerate USB device
[  170.443388][ T7526] page: refcount:515 mapcount:0 mapping:ffff888144eaaaa0 index:0x200 pfn:0x54c00
[  170.453003][ T7526] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0
[  170.461501][ T7526] aops:hugetlbfs_aops ino:4238 dentry name(?):"anon_hugepage"
[  170.468946][ T7526] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff)
[  170.477085][ T7526] page_type: f4(hugetlb)
[  170.481313][ T7526] raw: 00fff00000000041 ffffc9001c3efe10 ffffc9001c3efe10 ffff888144eaaaa0
[  170.490133][ T7526] raw: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000
[  170.498702][ T7526] head: 00fff00000000041 ffffc9001c3efe10 ffffc9001c3efe10 ffff888144eaaaa0
[  170.507370][ T7526] head: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000
[  170.516037][ T7526] head: 00fff00000000009 ffffea0001530001 0000000000000000 0000000000000000
[  170.524780][ T7526] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200
[  170.533425][ T7526] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[  170.540707][ T7526] page_owner tracks the page as allocated
[  170.546945][ T7526] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 7115, tgid 7108 (syz.2.315), ts 146789888494, free_ts 145924846580
[  170.567691][ T7526]  post_alloc_hook+0x240/0x2a0
[  170.572544][ T7526]  get_page_from_freelist+0x21e4/0x22c0
[  170.578066][ T7526]  __alloc_frozen_pages_noprof+0x181/0x370
[  170.583847][ T7526]  alloc_buddy_hugetlb_folio+0xdf/0x1c0
[  170.589366][ T7526]  only_alloc_fresh_hugetlb_folio+0x8c/0x280
[  170.595325][ T7526]  alloc_surplus_hugetlb_folio+0x103/0x430
[  170.601113][ T7526]  alloc_hugetlb_folio+0xb1a/0x16a0
[  170.606287][ T7526]  hugetlb_fault+0x1dc2/0x2970
[  170.611030][ T7526]  handle_mm_fault+0x740/0x8e0
[  170.615771][ T7526]  __get_user_pages+0x1699/0x2ce0
[  170.620773][ T7526]  populate_vma_page_range+0x29f/0x3a0
[  170.626207][ T7526]  __mm_populate+0x24c/0x380
[  170.630780][ T7526]  vm_mmap_pgoff+0x387/0x4d0
[  170.635344][ T7526]  ksys_mmap_pgoff+0x587/0x760
[  170.640083][ T7526]  do_syscall_64+0xfa/0x3b0
[  170.644567][ T7526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.650436][ T7526] page last free pid 7082 tgid 7081 stack trace:
[  170.656736][ T7526]  free_unref_folios+0xdbd/0x1520
[  170.661742][ T7526]  folios_put_refs+0x559/0x640
[  170.666485][ T7526]  free_pages_and_swap_cache+0x277/0x520
[  170.672104][ T7526]  tlb_flush_mmu+0x3a0/0x680
[  170.676683][ T7526]  unmap_page_range+0x3b31/0x4370
[  170.681695][ T7526]  unmap_vmas+0x399/0x580
[  170.686004][ T7526]  exit_mmap+0x248/0xb50
[  170.690229][ T7526]  __mmput+0x118/0x430
[  170.694273][ T7526]  exit_mm+0x1da/0x2c0
[  170.698319][ T7526]  do_exit+0x648/0x2300
[  170.702464][ T7526]  do_group_exit+0x21c/0x2d0
[  170.707030][ T7526]  get_signal+0x1286/0x1340
[  170.711527][ T7526]  arch_do_signal_or_restart+0x9a/0x750
[  170.717053][ T7526]  exit_to_user_mode_loop+0x75/0x110
[  170.722322][ T7526]  do_syscall_64+0x2bd/0x3b0
[  170.726892][ T7526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.732852][ T7526] ------------[ cut here ]------------
[  170.738286][ T7526] kernel BUG at mm/filemap.c:154!
[  170.743307][ T7526] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  170.749525][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.0.435 Not tainted syzkaller #0 PREEMPT(full) 
[  170.758694][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  170.768737][ T7526] RIP: 0010:filemap_unaccount_folio+0x715/0x790
[  170.774958][ T7526] Code: a4 c9 ff 48 89 df 48 c7 c6 e0 3b 94 8b e8 63 f1 31 ff 90 0f 0b e8 2b a4 c9 ff 48 89 df 48 c7 c6 c0 3a 94 8b e8 4c f1 31 ff 90 <0f> 0b e8 14 a4 c9 ff 48 89 df 48 c7 c6 e0 3b 94 8b e8 35 f1 31 ff
[  170.794547][ T7526] RSP: 0018:ffffc9001c40ee20 EFLAGS: 00010046
[  170.800587][ T7526] RAX: 604ff729a8a17a00 RBX: ffffea0001530000 RCX: 604ff729a8a17a00
[  170.808533][ T7526] RDX: 0000000000000005 RSI: ffffffff8dba8b31 RDI: ffff88802e97da00
[  170.816485][ T7526] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a
[  170.824450][ T7526] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040
[  170.832411][ T7526] R13: 1ffffd40002a6000 R14: 1ffffd40002a6001 R15: ffffea0001530008
[  170.840469][ T7526] FS:  00007f47129916c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[  170.849380][ T7526] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.855940][ T7526] CR2: 000020000030e9f0 CR3: 000000007f730000 CR4: 00000000003526f0
[  170.863893][ T7526] Call Trace:
[  170.867149][ T7526]  <TASK>
[  170.870063][ T7526]  __filemap_remove_folio+0xc3/0x500
[  170.875332][ T7526]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  170.880697][ T7526]  ? __pfx___filemap_remove_folio+0x10/0x10
[  170.886569][ T7526]  ? _raw_spin_lock_irq+0xae/0xf0
[  170.891574][ T7526]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  170.897122][ T7526]  filemap_remove_folio+0xe6/0x1f0
[  170.902215][ T7526]  remove_inode_hugepages+0x594/0x1100
[  170.907657][ T7526]  ? __pfx_remove_inode_hugepages+0x10/0x10
[  170.913532][ T7526]  ? preempt_schedule_thunk+0x16/0x30
[  170.918883][ T7526]  ? up_write+0x1f2/0x420
[  170.923206][ T7526]  hugetlbfs_fallocate+0xbc7/0x1100
[  170.928399][ T7526]  ? aa_file_perm+0x13a/0x1550
[  170.933142][ T7526]  ? __rcu_read_unlock+0x84/0xe0
[  170.938058][ T7526]  ? __pfx_hugetlbfs_fallocate+0x10/0x10
[  170.943673][ T7526]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  170.949543][ T7526]  vfs_fallocate+0x669/0x7e0
[  170.954110][ T7526]  ? __pfx_vfs_fallocate+0x10/0x10
[  170.959209][ T7526]  madvise_vma_behavior+0x3254/0x3af0
[  170.964560][ T7526]  ? __lock_acquire+0xab9/0xd20
[  170.969389][ T7526]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  170.975087][ T7526]  ? finish_task_switch+0x266/0x950
[  170.980264][ T7526]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.985434][ T7526]  ? finish_task_switch+0x266/0x950
[  170.990609][ T7526]  ? rcu_is_watching+0x15/0xb0
[  170.995361][ T7526]  ? trace_sched_exit_tp+0x36/0x110
[  171.000532][ T7526]  ? __schedule+0x17ae/0x4cc0
[  171.005190][ T7526]  ? mas_prev_slot+0xb31/0xbb0
[  171.009927][ T7526]  ? find_vma_prev+0xfc/0x170
[  171.014580][ T7526]  ? __pfx_find_vma_prev+0x10/0x10
[  171.019673][ T7526]  madvise_walk_vmas+0x51c/0xa30
[  171.024587][ T7526]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  171.030024][ T7526]  ? blk_start_plug+0x6f/0x1b0
[  171.034760][ T7526]  madvise_do_behavior+0x38e/0x550
[  171.039846][ T7526]  ? __pfx_madvise_do_behavior+0x10/0x10
[  171.045454][ T7526]  ? down_read+0x1ad/0x2e0
[  171.049845][ T7526]  do_madvise+0x1bc/0x270
[  171.054148][ T7526]  ? __pfx_do_madvise+0x10/0x10
[  171.058977][ T7526]  __x64_sys_madvise+0xa7/0xc0
[  171.063717][ T7526]  do_syscall_64+0xfa/0x3b0
[  171.068211][ T7526]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.073379][ T7526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.079414][ T7526]  ? clear_bhb_loop+0x60/0xb0
[  171.084063][ T7526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.089924][ T7526] RIP: 0033:0x7f4714b8eba9
[  171.094313][ T7526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.113893][ T7526] RSP: 002b:00007f4712991038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  171.122281][ T7526] RAX: ffffffffffffffda RBX: 00007f4714dd6270 RCX: 00007f4714b8eba9
[  171.130226][ T7526] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000
[  171.138170][ T7526] RBP: 00007f4714c11e19 R08: 0000000000000000 R09: 0000000000000000
[  171.146115][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.154062][ T7526] R13: 00007f4714dd6308 R14: 00007f4714dd6270 R15: 00007f4714effa28
[  171.162009][ T7526]  </TASK>
[  171.165002][ T7526] Modules linked in:
[  171.168881][ T7526] ---[ end trace 0000000000000000 ]---
[  171.174309][ T7526] RIP: 0010:filemap_unaccount_folio+0x715/0x790
[  171.180529][ T7526] Code: a4 c9 ff 48 89 df 48 c7 c6 e0 3b 94 8b e8 63 f1 31 ff 90 0f 0b e8 2b a4 c9 ff 48 89 df 48 c7 c6 c0 3a 94 8b e8 4c f1 31 ff 90 <0f> 0b e8 14 a4 c9 ff 48 89 df 48 c7 c6 e0 3b 94 8b e8 35 f1 31 ff
[  171.200107][ T7526] RSP: 0018:ffffc9001c40ee20 EFLAGS: 00010046
[  171.206150][ T7526] RAX: 604ff729a8a17a00 RBX: ffffea0001530000 RCX: 604ff729a8a17a00
[  171.214094][ T7526] RDX: 0000000000000005 RSI: ffffffff8dba8b31 RDI: ffff88802e97da00
[  171.222141][ T7526] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a
[  171.230089][ T7526] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040
[  171.238122][ T7526] R13: 1ffffd40002a6000 R14: 1ffffd40002a6001 R15: ffffea0001530008
[  171.246070][ T7526] FS:  00007f47129916c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[  171.254972][ T7526] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.261549][ T7526] CR2: 000020000030e9f0 CR3: 000000007f730000 CR4: 00000000003526f0
[  171.269512][ T7526] Kernel panic - not syncing: Fatal exception
[  171.275784][ T7526] Kernel Offset: disabled
[  171.280092][ T7526] Rebooting in 86400 seconds..