last executing test programs:

8.954338418s ago: executing program 0 (id=181):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000059f000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf8600000000000007080000f0ff029abfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004601000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000c46923422eed8a9b9ab9b20b17437cfc821d3e7802a87233638d8cbba132efe98fd7b4d7dd83feb93ccec676250afc707a7a77e4576d1bc8924938e31a8ca5ea98bfe288d3109961a2b78c3742bf711bc8d26231a7d86b76cd8f1cbbaf3254d73e566da60129d7b1c28eb34a4e5488c450563e60fb78470f508160791b05ac4e505c9888eb5cc05c541520f36ceee6685b09b75af9"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00e30e07000000d044da356ac6538e0100fc1d3d44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={<r5=>0x0, @remote, @dev}, &(0x7f0000000500)=0xc)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0xc, 0x8, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x4, 0x8001}, 0x3, 0x3}})
sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8000, @remote, 0xe5e}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x40}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_ep_write(r3, 0xcd, 0x61, &(0x7f00000005c0)="c814eb371f7c8ef82f51be7cd5591bec82dfae75c45d34288b9e6634de487bb250ec6117f92dc44002c7714f278aefc495e86a0f79776a324785fa975fc18865698df0c08ce44bd67fb4a0e2352ec89125846327d13ed73c175642f27fd0a445ab")

8.797048871s ago: executing program 2 (id=182):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x8010)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x0, 0x4, 0xff, 0x2200, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r3, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, 'kmem_cache_free\x00'}, {0x20, '['}], 0xa, "5130b27badc797c66be7b3bfb7f6ee88f0b6786b67e6db09fe85a941"}, 0x3f)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000003020835700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r9 = signalfd(r6, &(0x7f0000000340)={[0x8]}, 0x8)
fcntl$setlease(r9, 0x400, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0xc4}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000180)={0x20, 0xe, 0xc, "0000b617fd4ca9feb5b37480"}, 0x0, 0x0, 0x0, 0x0, 0x0})

6.896139335s ago: executing program 2 (id=189):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200)=0xfffffffc, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendto$inet6(r4, &(0x7f0000000300)="d0d5f7a7", 0x4, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x80000000, 0xfffffffd, {0x3}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x48}}, 0x0)

6.810592965s ago: executing program 0 (id=190):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
eventfd(0xffffffff)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x2, 0x0, 0x0, 0x42, 0x5c})
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf00001, 0x1})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a30000000000500010007000000580008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780060001404e"], 0x80}}, 0x40800)
clock_gettime(0x0, &(0x7f0000000480)={<r1=>0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000340)={0x4, 0x74, 0x2, 0x1, 0x800, 0x8, 0xff, 0x8}, &(0x7f0000000380)={0xfff, 0x7, 0x7f, 0x3, 0x2, 0x7fff, 0x7fffffff, 0x6}, &(0x7f00000003c0)={0x0, 0xfffffffffffffff9, 0x3, 0x100000001, 0x6, 0xb30, 0x2, 0x2}, &(0x7f00000004c0)={r1, r2+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x3]}, 0x8})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800)
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae00081902010000000009240202b034000000090585da20"], 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0)
r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0)
preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000580)=""/219, 0xdb}], 0x2, 0x182, 0x0)
close(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000800)

5.505857312s ago: executing program 3 (id=196):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x58, 0x29, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x8}, {0x0, 0x9}, {0x2, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x40, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5}}, @tclass_kind_options=@c_netem={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)='.\x00\x00\x00', 0x4}], 0x1}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @rand_addr, <r3=>0x0}, &(0x7f0000000100)=0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$getownex(r4, 0x10, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={0x0, 0x6b, 0x3d}, 0x0, &(0x7f0000000280)="f4677f981900c4ad13f8224aff7f7afc6ec8e882ef9dbc24b7804256a4fade47456d2d89e0f071de94f5e3fbaff7fce15d79fcd5401a71e5f7d3b77bd7d33eb31c5155442b96a1d2b33d39cbd7c842a5ca2d1e70bff0f56c1d71a0ff180167531d6b9907006c82616221ed", &(0x7f0000000180)="800a4312af4353d02cef25ccf6ca313c75f109f570e5d62f4e835264f0a9c491c976af585fc7ec03e7890426c897f12cf0dd4deabff663a567985e9bb0")

5.37253365s ago: executing program 3 (id=197):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x79}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg$sock(r1, &(0x7f0000001dc0), 0x213, 0x0)

5.279369743s ago: executing program 0 (id=199):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.108413028s ago: executing program 3 (id=202):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x47f, 0x400000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x32}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x80)
ppoll(&(0x7f0000000200)=[{r1, 0x14}, {0xffffffffffffffff, 0xc2a4}, {r4, 0x84}, {r2}, {r5, 0x524c}, {r2, 0x200}, {r3, 0x2000}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0)
stat(&(0x7f0000004b00)='./cgroup\x00', &(0x7f0000004b40))
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)

5.067885348s ago: executing program 2 (id=203):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e505f89, 0x5, 0x200000e4, 0x2, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x40, r3, 0x5}, 0xc)
close(0x4)

4.776391167s ago: executing program 2 (id=204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
socket(0x11, 0x800000003, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)='`', 0x1}], 0x1}}], 0x1, 0x2c000011)
sendto(r3, &(0x7f00000002c0)='q', 0x100000, 0x8000, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000ecff0f11000001000000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000300)=""/186, 0x41000, 0x14e640a775c045a2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x4, 0x8, 0x9}, {0x4, 0x4, 0xe, 0x6}, {0x0, 0x5, 0x8, 0x8}, {0x4, 0x2, 0xe, 0x4}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x4, 0x1, 0xc}, {0x4, 0x3, 0x3, 0x2}, {0x0, 0x5, 0xf, 0x9}, {0x2, 0x1, 0x1, 0x2}], 0x10, 0x7, @void, @value}, 0x94)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6)

4.104466729s ago: executing program 1 (id=205):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x7}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x4}, {{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x2000c8c0) (fail_nth: 5)

3.26954268s ago: executing program 3 (id=206):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xb42, 0x0, 0x3, 0x2}, {0x2, 0x60, 0x4, 0xffff}, {0x7, 0x2, 0xfb, 0x4}, {0x0, 0x6, 0x5, 0xdab5}]}, 0x10) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "cfdafc01"}, @local=@item_012={0x1, 0x2, 0x2, '['}]}}, 0x0}, 0x0)

3.158600865s ago: executing program 1 (id=207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00030010003904fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="4eb1988d422200042c0012800800010067726500200002"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844)

2.932514421s ago: executing program 1 (id=208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)=0x200000b)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000000440)=""/108, 0x6c}], 0x6}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0)

2.678257455s ago: executing program 1 (id=209):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, 0x0, 0x0, 0x60, 0x0)

2.601860439s ago: executing program 1 (id=210):
preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)

2.455451165s ago: executing program 1 (id=211):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
pwritev2(r1, 0x0, 0x0, 0x1, 0x8003, 0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x26000400)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0)
poll(&(0x7f0000000040)=[{r2, 0x2124}], 0x1, 0x11ff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6020480)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80006)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x110000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cdc10004267726f7570", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5)
sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf252600000008000300", @ANYRES32=r6], 0x28}}, 0xc0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

1.930143362s ago: executing program 0 (id=215):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async)
r1 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1000}, 0x0, 0xfffffffe, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

1.832361982s ago: executing program 0 (id=216):
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "1cff13"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "b48a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "0614af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xff, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, "861b36"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x51)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket(0x200000000000011, 0x2, 0x80000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x9, 0x2}, {0x2, 0x5}, {0xf, 0x4}]}, @enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0x2, 0x2c}, {0x9, 0x200}, {0x5, 0x7}, {0x10, 0x81}, {0x5}, {0x7, 0x10f}, {0xe, 0x2}, {0xc, 0x400}, {0x10, 0xb}]}, @var={0xa, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xfffff801}}]}}, &(0x7f0000000500)=""/180, 0xc2, 0xb4, 0x1, 0xf, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x281, 0xf5, &(0x7f00000002c0)=""/245, 0x41100, 0x18, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x8, 0xfffff801}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x2, 0x7}, {0x5, 0x1, 0xf}, {0x2, 0x4, 0xb, 0x7}], 0x10, 0x8, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x7)

1.790771978s ago: executing program 4 (id=217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xfffd, 0x0, 0x0, @loopback}, 0x1c)

1.770116173s ago: executing program 3 (id=218):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x801, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18c})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
dup(r5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xf17c6ff0a457fbf4)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x30, 0xa, 0x2, "325c5ff50adb00008d0900", 0x35303553})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000440)="2e0f10cfb82c008ee0b86e008ee813a018030f013a66b80500000066b9090000000f01c12e0f3026663664660fc7b309000fc7ab0d00b8e5000f00d8", 0x3c}], 0x1, 0x8, &(0x7f00000004c0)=[@vmwrite={0x8, 0x0, 0x17, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}], 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

1.60278701s ago: executing program 2 (id=219):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dcbbc7cb890d1fcf552b094d420a6ab94cd0116181cb2d26a6a51331a02402640de18e30725cd7b8be5890a23f3c854d5e6b243204f5c23efac2372a21558dbb691fbd9ce8732261d5809cb04ccd0edb6ecdb68c75dd2ca6cd14759ba", @ANYBLOB=',\x00'])
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x1e0, 0x130, 0x98, 0x98, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffff, 0x0, 'ipvlan0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x3, 0x12}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2092)
mmap$KVM_VCPU(&(0x7f0000e16000/0x2000)=nil, 0x0, 0x0, 0x43033, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x31f0d2, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
io_uring_enter(r4, 0x4794, 0x10d2, 0x0, &(0x7f0000000100)={[0x100000000]}, 0x8)
ftruncate(0xffffffffffffffff, 0x2000009)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
splice(0xffffffffffffffff, &(0x7f00000020c0)=0x67b9, r0, 0x0, 0x5, 0x8)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff004)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002240)=""/20, 0x14}], 0x1}, 0x700)

1.602350468s ago: executing program 4 (id=220):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, 0x0, 0x0, 0x60, 0x0)

1.42839074s ago: executing program 4 (id=221):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x2}}, './file0\x00'})
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000014c0), 0x4)
write$vga_arbiter(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x8)
ppoll(&(0x7f0000000080)=[{r0, 0x4b9ce50e2ea3b2d8}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x2001000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
pselect6(0x40, &(0x7f00000000c0)={0x6, 0x35, 0x9a, 0x5, 0x6, 0x7e2b, 0x7, 0x9}, 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5ed92fb3ab951a43bd019d837aac16223d0a873402900502493e687e490f626a0592b157959896408c1fc8ec7a3b4aa42c6d89c45226ca605d2a73d3d6e62131de1597be5e408999c4acb05ddd409975d870222df199af5e9796f7fb61cb66984f0792471dab67898540e6dd35f61d9b41039f5b1c89f4f776ea8660b313cfbe67000000")
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0], 0x9})
r3 = syz_open_dev$dri(0x0, 0xd21, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40004)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {0x0}], 0x2}}], 0x1, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={r2, r4, 0x0, 0x7, 0x400087c3, 0x66, 0x2, 0xc0284ef, 0x7, 0x0, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110b5000000000006000000000000009500000000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000880)=[{0x2, 0x3, {0x0, 0x0, 0x4}, {0x1, 0x0, 0xe}, 0x1, 0x1}, {0x3, 0x0, {0x2, 0x1, 0x4}, {0x1}, 0xff, 0xff}], 0x40)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0)

1.3907494s ago: executing program 2 (id=222):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x2, 0x1b1)
pidfd_send_signal(r0, 0x11, &(0x7f0000000140)={0x1e, 0x3}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, r1, 0x502, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x4000054)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@updsa={0x180, 0x1a, 0xb11, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x100000000, 0x0, 0x0, 0x0, 0x970}, {}, {0x0, 0x0, 0x4}, 0x0, 0x3503, 0xa}, [@algo_crypt={0x48, 0x2, {{'xchacha20-neon\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256-asm\x00'}}}]}, 0x180}}, 0x0)
r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000100000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c0007090502", @ANYRES8=r0, @ANYRES16=r2], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000800010109025000010106500009040000ff02020000052406000005240002000d240f010000000000000000000c240703000003000300050009058103200000000a0905820220000000000905030208"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0)

819.100129ms ago: executing program 3 (id=223):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000059f000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf8600000000000007080000f0ff029abfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004601000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000c46923422eed8a9b9ab9b20b17437cfc821d3e7802a87233638d8cbba132efe98fd7b4d7dd83feb93ccec676250afc707a7a77e4576d1bc8924938e31a8ca5ea98bfe288d3109961a2b78c3742bf711bc8d26231a7d86b76cd8f1cbbaf3254d73e566da60129d7b1c28eb34a4e5488c450563e60fb78470f508160791b05ac4e505c9888eb5cc05c541520f36ceee6685b09b75af9"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00e30e07000000d044da356ac6538e0100fc1d3d44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={<r5=>0x0, @remote, @dev}, &(0x7f0000000500)=0xc)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0xc, 0x8, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x4, 0x8001}, 0x3, 0x3}})
sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8000, @remote, 0xe5e}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x40}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)

556.8647ms ago: executing program 4 (id=224):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)='.\x00\x00\x00', 0x4}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) (fail_nth: 5)

180.939095ms ago: executing program 0 (id=225):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04230d00c90001"], 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x61, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0xfffffffffffffe56, 0x70, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r7)
syz_usb_connect(0x2, 0x4c7, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xdd, 0xa2, 0x42, 0x10, 0x1199, 0x68c0, 0x9af4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b5, 0x1, 0x9, 0x6, 0x50, 0xf, [{{0x9, 0x4, 0x8, 0x8, 0xf, 0xcc, 0xc9, 0x7c, 0xbb, [@generic={0x64, 0x30, "56addcd9e43e207364812607c15d28c798d5653cba9a7474dd61e423f87f07ec341bfee23137c9c46c4c4fc00115cf5377239ae072a52366a3301e8cf407e5a8167a9782f0f166770c26204c3a0793894ccf91f469822c783a2fea2cbe5c7c5b9832"}, @generic={0x5d, 0x23, "9d42e396dfbbe1567299bc84d99ee74c0b8df492a2be4c478d9161c324a85501a4bfcd195c62d9004e24ec4df0c2438cb51f3166e2d8b955babfb2cebcc187218b8c61531c8440426a57cb315adeea9af90853cdbef9bed815e7fd"}], [{{0x9, 0x5, 0xb, 0x2, 0x400, 0x4, 0x2, 0x7, [@generic={0xdf, 0x21, "67235c9ed681efc9019b80d0315549e9f1e66caf2ab3f2aba0989cec84cf7da148d50f667bab11be1027d6521335968c235b94ff4cfd0db5598e2172ce7aad9c647f7e355baf17ecae7b72f88a4a66773f1042aaed9273f81ef95827bff39e66e2c25d5144b35a16ba3954917526f37036863bf135bf532b73b3a0edf2f5823a9b03a3219ced10091cba380d42f5c41aced7fb3c7d2c32a26fccd946476bf551ccc14062a60cdf6eb14a66a6f00eb477a1ae993eedc959a17b4b3b426525cdafe0b3fd0025f5fa25887896193c32871c0bd6f8a7a8aca26492cf350771"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x9f, 0xc0, 0x1, [@generic={0x96, 0x22, "2e90cd5c8a93612fcc3ea015bca0340f3450e9f1064d2327b6b3ab40d89b6f705c51d50ec0255b877134af0406e0dd016a94a2c7201fd9b38eec56afc5b9105beda4f7d279e9fd763cfb951d68859759eec56b4f5dc508bb965561c0a96c95e85fd90a08f2941d93b1e98a74973d489819fd582890af6e3a6267d3e41fbefc232889222c08feeb70d7066210698fd8100bd1a356"}, @generic={0xc2, 0xf, "7058b648484e225a05343a580c671ada97ede9a1d2761628336fb5bd6fdd5ffd9a0c715a7c818e2d9104154867ad9862b94dba8f87638df9d62c8cbae11071eddea7c46a595ce3f10ddb0b43a4fc5e6ff42ff71f27ad75fa9278c4606cefa717b8ee7429079d8ebc66b9932c7d69411e379b051865b2d10fc6e25e928aaa293a0fc4f302cd2d0ec207ed4a5278217329988f7745482c920570ae2828b0ad35584c75d31d52dbc3288a46e7bd95c3c0bed32157e7dddc6df86df9ba2ecc85e586"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x3, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0xc3ffdf15055b483, 0x1, 0x6, 0x64}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x5, 0x6a, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x7}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0xe, 0x9, 0xa9, [@generic={0x27, 0x21, "fceacf1c2b7e430ae77b909878ad586c886d9f5be671e3539f5ac3e24270e5dd832a558b3a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xff, 0x8, 0x7, [@generic={0x6b, 0x1, "f6d278590a2167403554cf4605283062697f58408b505964784c7b8dad2da82838eed3d19165b1290cbfc9f074f9e1fbc913eebaa5f13371505be627b805288b0ecd268657500d53d4cabe5e7db509d406ab5772b1ed779809746f8fa96bf91cb94e31394a0dbf0f86"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x4, 0x3, 0xc}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x4, 0x80}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x81, 0x9, 0xf}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x9, 0x3, [@generic={0x41, 0xc, "769c1685f9b8afa66a66b0d13849b9ffdbea61b33296a7aa661a3ab19521b8da65a45d9a89b45fec5fbd4b715cf56fef0669b401069ad099f161cb7f83eb60"}, @generic={0x2e, 0x21, "93eb485cd6bd69c281e875d4beb957d65fbb5b7a1209fc1ab51f38e5da214a7f6076328e49796b21dc215ae2"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xae, 0x2d, 0xb}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x7596762abcd7415e, 0x3, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x71, 0x3}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x8, 0x7f, 0x10, 0x1}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x5, 0x8}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x144b}}, {0xca, &(0x7f0000000280)=@string={0xca, 0x3, "be403bb69e6ba88af9bd380ba869622248c58ce3b82b2b56ced380f6624e5011fc412b55f9fe989fc38c09db7474bf409f2510751ac5659f62f1b3f8c3616772b3472e0c8a43f1c975673a0ea23c97490db0cf90ddaeaece8f50feabfbf405fed4ba4683c36a15e4596377e1f8a6b828d05777b15484605549366aa076ead91707bf5401ab4c3d4bc6434bb42dc1d0637db3c4f2579b35d918e1c0af3800eb59180124a07656b3bab9efda955b9ccccfe2bf129d146230e445f162a288dc1cfb43d68a9d1da97d24"}}]})
sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f7ee25bd7000fcdbdf2502000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r9 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10)
recvmsg$unix(r9, &(0x7f0000001000)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000d00)=""/145, 0x91}, {&(0x7f0000000dc0)=""/248, 0xf8}, {&(0x7f0000000ec0)=""/128, 0x80}], 0x6, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10042)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
close(r6)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c00030000000000000000007581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

90.74262ms ago: executing program 4 (id=226):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002000010000000000ce2f305586e07d436c658f2c0000001f3db42c328dab4e46000a10140000000007000077ab3635732c000014000200fc0000000000000000000000000000000500160032000000140001002001"], 0x4c}}, 0x40000)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="68010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf270cd531ab51c445254400000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x24000001}, 0x44044)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)

0s ago: executing program 4 (id=227):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x109040, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x128}], 0x1, 0x400)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0)

kernel console output (not intermixed with test programs):

850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.965841][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.980209][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.991048][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.145829][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.168475][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.177325][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.189387][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.199332][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.300446][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.332922][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.355343][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   63.370678][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.422924][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.559820][    T9] usb 3-1: Using ep0 maxpacket: 16
[   63.563494][ T5894] process 'syz.4.5' launched './file0' with NULL argv: empty string added
[   63.594961][    T9] usb 3-1: config 0 has an invalid interface number: 53 but max is 0
[   63.603208][    T9] usb 3-1: config 0 has no interface number 0
[   63.615068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.623375][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.638918][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.690814][    T9] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   63.833996][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.864808][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.872848][    T9] usb 3-1: Product: syz
[   63.883298][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.945017][    T9] usb 3-1: Manufacturer: syz
[   63.949656][    T9] usb 3-1: SerialNumber: syz
[   63.950103][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.981503][ T5836] Bluetooth: hci1: command tx timeout
[   63.987052][ T5833] Bluetooth: hci0: command tx timeout
[   63.990008][ T5831] Bluetooth: hci3: command tx timeout
[   64.006162][    T9] usb 3-1: config 0 descriptor??
[   64.042901][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.050931][ T5831] Bluetooth: hci2: command tx timeout
[   64.050972][ T5831] Bluetooth: hci4: command tx timeout
[   64.063508][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.091747][ T5899] Zero length message leads to an empty skb
[   64.267244][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.299754][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.504827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.694751][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.716989][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   64.740137][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   64.794774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.803750][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   64.815765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   64.874947][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.914568][ T5884] usb 5-1: Using ep0 maxpacket: 16
[   64.949609][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.978315][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   65.020960][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   65.049854][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.082431][ T5884] usb 5-1: config 0 descriptor??
[   65.110553][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   65.127708][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   65.138695][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   65.164519][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   65.194892][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.228952][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.309096][ T5904] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   65.346054][ T5883] usb 4-1: config 0 has no interfaces?
[   65.351818][ T5883] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   65.368462][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   65.376099][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.394168][ T5883] usb 4-1: config 0 descriptor??
[   65.445599][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'.
[   65.720643][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.092225][ T5836] Bluetooth: hci1: command tx timeout
[   66.097795][ T5831] Bluetooth: hci0: command tx timeout
[   66.097807][ T5833] Bluetooth: hci3: command tx timeout
[   66.125450][ T5836] Bluetooth: hci4: command tx timeout
[   66.129307][ T5833] Bluetooth: hci2: command tx timeout
[   66.151447][ T5892] usb 3-1: USB disconnect, device number 2
[   66.234035][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.706642][ T5928] loop7: detected capacity change from 0 to 16384
[   67.738050][ T5882] usb 4-1: USB disconnect, device number 2
[   68.099240][ T5887] usb 1-1: USB disconnect, device number 2
[   68.466227][ T5882] usb 5-1: USB disconnect, device number 2
[   68.733881][ T5937] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   68.938329][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   69.191423][ T5944] FAULT_INJECTION: forcing a failure.
[   69.191423][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   69.254963][ T5883] usb 1-1: Using ep0 maxpacket: 16
[   69.272326][ T5883] usb 1-1: config 8 has an invalid interface number: 206 but max is 0
[   69.308815][ T5883] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   69.317036][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.3.14 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[   69.317060][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   69.317074][ T5944] Call Trace:
[   69.317081][ T5944]  <TASK>
[   69.317088][ T5944]  dump_stack_lvl+0x241/0x360
[   69.317125][ T5944]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.317147][ T5944]  ? __pfx__printk+0x10/0x10
[   69.317170][ T5944]  ? __pfx_lock_release+0x10/0x10
[   69.317195][ T5944]  should_fail_ex+0x3b0/0x4e0
[   69.317220][ T5944]  _copy_from_iter+0x1e9/0x1c20
[   69.317238][ T5944]  ? __virt_addr_valid+0x183/0x530
[   69.317268][ T5944]  ? __pfx__copy_from_iter+0x10/0x10
[   69.317287][ T5944]  ? __virt_addr_valid+0x183/0x530
[   69.317306][ T5944]  ? __virt_addr_valid+0x183/0x530
[   69.317329][ T5944]  ? __virt_addr_valid+0x45f/0x530
[   69.317348][ T5944]  ? __phys_addr_symbol+0x2f/0x70
[   69.317367][ T5944]  ? __check_object_size+0x47a/0x730
[   69.317390][ T5944]  netlink_sendmsg+0x73d/0xcb0
[   69.317418][ T5944]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.317438][ T5944]  ? aa_sock_msg_perm+0x91/0x160
[   69.317466][ T5944]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.317481][ T5944]  __sock_sendmsg+0x221/0x270
[   69.317504][ T5944]  ____sys_sendmsg+0x52a/0x7e0
[   69.317529][ T5944]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.317544][ T5944]  ? __fget_files+0x2a/0x410
[   69.317567][ T5944]  ? __fget_files+0x2a/0x410
[   69.317594][ T5944]  __sys_sendmsg+0x269/0x350
[   69.317614][ T5944]  ? __pfx___sys_sendmsg+0x10/0x10
[   69.317642][ T5944]  ? do_sys_openat2+0x17a/0x1d0
[   69.317683][ T5944]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   69.317703][ T5944]  ? do_syscall_64+0x100/0x230
[   69.317727][ T5944]  ? do_syscall_64+0xb6/0x230
[   69.317751][ T5944]  do_syscall_64+0xf3/0x230
[   69.317771][ T5944]  ? clear_bhb_loop+0x35/0x90
[   69.317790][ T5944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.317817][ T5944] RIP: 0033:0x7fc937b8cd29
[   69.317836][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.317848][ T5944] RSP: 002b:00007fc9389d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.317866][ T5944] RAX: ffffffffffffffda RBX: 00007fc937da5fa0 RCX: 00007fc937b8cd29
[   69.317877][ T5944] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[   69.317887][ T5944] RBP: 00007fc9389d8090 R08: 0000000000000000 R09: 0000000000000000
[   69.317896][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.317905][ T5944] R13: 0000000000000000 R14: 00007fc937da5fa0 R15: 00007fc937ecfa28
[   69.317928][ T5944]  </TASK>
[   69.771990][ T5883] usb 1-1: config 8 has no interface number 0
[   69.793506][ T5883] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[   69.838716][ T5883] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   69.858050][ T5883] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   69.871787][ T5883] usb 1-1: config 8 interface 206 has no altsetting 0
[   69.912520][ T5883] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[   69.926411][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.935011][ T5883] usb 1-1: Product: syz
[   69.939349][ T5883] usb 1-1: Manufacturer: syz
[   69.944062][ T5883] usb 1-1: SerialNumber: syz
[   70.227845][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   70.389437][ T5950] kvm: emulating exchange as write
[   70.418827][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.494604][ T5882] usb 4-1: Using ep0 maxpacket: 16
[   70.496489][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.574501][ T5882] usb 4-1: config 0 has an invalid interface number: 53 but max is 0
[   70.654555][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.804567][ T5887] usb 2-1: Using ep0 maxpacket: 32
[   70.844691][ T5882] usb 4-1: config 0 has no interface number 0
[   70.853838][ T5887] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   70.873906][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.910150][ T5887] usb 2-1: config 0 descriptor??
[   70.919421][ T5887] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   70.958164][ T5882] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   71.058447][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.173628][ T5882] usb 4-1: Product: syz
[   71.241327][ T5883] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected
[   71.264659][ T5882] usb 4-1: Manufacturer: syz
[   71.281025][ T5882] usb 4-1: SerialNumber: syz
[   71.303583][ T5883] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[   71.314893][ T5882] usb 4-1: config 0 descriptor??
[   71.324738][ T5887] gspca_vc032x: reg_w err -71
[   71.334904][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.341139][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.347470][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.368818][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.374189][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.394001][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.413418][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.419270][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.444837][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.445321][ T5883] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[   71.450334][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.531454][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.553345][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.703635][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   71.712182][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[   71.712901][ T5883] usb 1-1: USB disconnect, device number 3
[   71.754520][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.801319][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.832057][ T5883] garmin_gps 1-1:8.206: device disconnected
[   71.839210][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.880170][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.902441][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.919634][ T5887] gspca_vc032x: I2c Bus Busy Wait 00
[   71.933208][ T5887] gspca_vc032x: Unknown sensor...
[   71.955227][ T5887] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[   72.152667][ T5887] usb 2-1: USB disconnect, device number 2
[   72.394560][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   72.576554][  T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.759351][  T972] usb 3-1: Using ep0 maxpacket: 16
[   72.776443][  T972] usb 3-1: config 0 has an invalid interface number: 53 but max is 0
[   72.785482][  T972] usb 3-1: config 0 has no interface number 0
[   72.792169][ T5884] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   72.811188][  T972] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   72.820551][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.828881][  T972] usb 3-1: Product: syz
[   72.836824][  T972] usb 3-1: Manufacturer: syz
[   72.841898][  T972] usb 3-1: SerialNumber: syz
[   72.849755][  T972] usb 3-1: config 0 descriptor??
[   72.866606][ T5884] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   72.875804][ T5884] usb 1-1: config 1 has no interface number 1
[   72.882017][ T5884] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[   73.040111][ T5884] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.099169][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.184656][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.224582][ T5884] usb 1-1: Product: syz
[   73.269535][ T5884] usb 1-1: Manufacturer: syz
[   73.292632][ T5884] usb 1-1: SerialNumber: syz
[   73.863042][ T5884] usb 1-1: USB disconnect, device number 4
[   74.569074][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.647770][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.944699][   T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   75.034229][ T5887] usb 4-1: USB disconnect, device number 3
[   75.050529][ T5884] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   75.227771][   T25] usb 1-1: Using ep0 maxpacket: 32
[   75.343130][ T5887] usb 3-1: USB disconnect, device number 3
[   75.373141][ T5884] usb 2-1: config 0 has an invalid interface number: 189 but max is 0
[   75.383192][ T5884] usb 2-1: config 0 has no interface number 0
[   75.390563][ T5884] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   75.402005][ T5884] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[   75.413918][ T5884] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[   75.425494][ T5884] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   75.445550][ T5884] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   75.466646][ T5884] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[   75.477870][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.489264][ T5884] usb 2-1: Product: syz
[   75.493476][ T5884] usb 2-1: Manufacturer: syz
[   75.530109][ T5884] usb 2-1: SerialNumber: syz
[   75.543829][ T5884] usb 2-1: config 0 descriptor??
[   75.556140][ T5992] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[   75.570512][ T5884] ums-alauda 2-1:0.189: USB Mass Storage device detected
[   75.660207][ T5884] scsi host1: usb-storage 2-1:0.189
[   75.726689][   T25] usb 1-1: unable to get BOS descriptor or descriptor too short
[   75.765699][   T25] usb 1-1: unable to read config index 0 descriptor/start: -71
[   75.780777][   T25] usb 1-1: can't read configurations, error -71
[   76.249261][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   76.262290][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.475254][   T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   76.503220][ T5887] usb 4-1: Using ep0 maxpacket: 16
[   76.504583][ T5882] usb 3-1: Using ep0 maxpacket: 32
[   76.523474][ T6011] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   76.533522][ T6011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   76.551822][ T5887] usb 4-1: config 0 has an invalid interface number: 53 but max is 0
[   76.561625][ T5887] usb 4-1: config 0 has no interface number 0
[   76.581061][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short
[   76.594168][ T5882] usb 3-1: config 244 has an invalid interface number: 68 but max is 0
[   76.604108][ T5882] usb 3-1: config 244 has no interface number 0
[   76.613829][ T5887] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   76.621098][ T5882] usb 3-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8
[   76.633284][ T5882] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[   76.644620][   T25] usb 1-1: Using ep0 maxpacket: 32
[   76.656142][ T5882] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[   76.669759][   T25] usb 1-1: config 0 has an invalid interface number: 219 but max is 0
[   76.683646][   T25] usb 1-1: config 0 has no interface number 0
[   76.696337][   T25] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   76.707815][ T3509] scsi 1:0:0:0: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[   76.731024][ T5882] usb 3-1: config 244 interface 68 has no altsetting 0
[   76.738823][ T3509] scsi 1:0:0:1: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[   76.759580][   T25] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[   76.796304][ T5882] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.11
[   76.811097][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.829506][   T25] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[   76.843075][ T5882] usb 3-1: Product: syz
[   76.849320][ T5882] usb 3-1: Manufacturer: syz
[   76.858099][ T5882] usb 3-1: SerialNumber: syz
[   76.862782][   T25] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   76.873884][   T25] usb 1-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   76.890370][ T6008] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   76.912197][   T25] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[   76.922437][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.933482][   T25] usb 1-1: Product: syz
[   76.938963][   T25] usb 1-1: Manufacturer: syz
[   76.943944][   T25] usb 1-1: SerialNumber: syz
[   76.948841][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.976715][   T25] usb 1-1: config 0 descriptor??
[   76.999097][ T6009] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   77.068682][ T3509] sd 1:0:0:0: Attached scsi generic sg1 type 0
[   77.082799][ T3509] sd 1:0:0:1: Attached scsi generic sg2 type 0
[   77.147010][ T5887] usb 4-1: Product: syz
[   77.159482][ T5882] comedi comedi0: Endpoint has wrong direction
[   77.176751][ T5882] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device.
[   77.179881][ T5887] usb 4-1: Manufacturer: syz
[   77.205928][ T5882] usb 3-1: USB disconnect, device number 4
[   77.224536][ T5887] usb 4-1: SerialNumber: syz
[   77.245793][   T25] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz)
[   77.268714][ T5887] usb 4-1: config 0 descriptor??
[   77.326452][   T25] usb 1-1: USB disconnect, device number 6
[   78.172210][ T6026] kernel profiling enabled (shift: 9)
[   78.183410][   T29] audit: type=1326 audit(1737681578.042:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   78.450811][   T29] audit: type=1326 audit(1737681578.072:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   78.493908][ T5882] usb 2-1: USB disconnect, device number 3
[   78.503091][ T3438] sd 1:0:0:0: [sdb] Media removed, stopped polling
[   78.523021][ T3578] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[   78.558519][ T3578] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[   78.571662][   T29] audit: type=1326 audit(1737681578.072:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   78.593938][ T3578] sd 1:0:0:1: [sdc] Sense not available.
[   78.600599][ T3578] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[   78.612017][   T29] audit: type=1326 audit(1737681578.072:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   78.634888][ T3578] sd 1:0:0:1: [sdc] 0-byte physical blocks
[   78.653669][ T3438] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[   78.662995][ T3578] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled
[   78.676925][ T6035] netlink: 192 bytes leftover after parsing attributes in process `syz.1.40'.
[   78.708927][ T3578] sd 1:0:0:1: [sdc] Asking for cache data failed
[   78.737008][ T3578] sd 1:0:0:1: [sdc] Assuming drive cache: write through
[   78.745163][   T29] audit: type=1326 audit(1737681578.072:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   78.851763][   T29] audit: type=1326 audit(1737681578.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   78.911372][ T3578] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[   78.953888][   T29] audit: type=1326 audit(1737681578.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   79.005105][ T6043] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET)
[   79.097782][ T5842] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[   79.150299][   T25] usb 4-1: USB disconnect, device number 4
[   79.211157][   T29] audit: type=1326 audit(1737681578.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000
[   79.703085][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.44'.
[   79.845078][ T5882] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.945439][ T6063] netlink: 'syz.4.45': attribute type 11 has an invalid length.
[   79.953469][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'.
[   80.092179][ T5882] usb 2-1: Using ep0 maxpacket: 16
[   80.101066][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   80.127017][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   80.143790][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   80.156607][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.209946][ T5882] usb 2-1: Product: syz
[   80.218743][ T5882] usb 2-1: Manufacturer: syz
[   80.230193][ T5882] usb 2-1: SerialNumber: syz
[   80.257196][ T5882] usb 2-1: config 0 descriptor??
[   80.287152][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   80.298592][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   80.326263][ T6066] warning: `syz.4.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.712224][ T6073] mmap: syz.3.49 (6073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   80.743505][ T6073] FAULT_INJECTION: forcing a failure.
[   80.743505][ T6073] name failslab, interval 1, probability 0, space 0, times 1
[   80.781764][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.3.49 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[   80.781782][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   80.781788][ T6073] Call Trace:
[   80.781792][ T6073]  <TASK>
[   80.781797][ T6073]  dump_stack_lvl+0x241/0x360
[   80.781823][ T6073]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.781845][ T6073]  ? __pfx__printk+0x10/0x10
[   80.781869][ T6073]  ? kmem_cache_alloc_noprof+0x48/0x380
[   80.781892][ T6073]  ? __pfx___might_resched+0x10/0x10
[   80.781918][ T6073]  should_fail_ex+0x3b0/0x4e0
[   80.781944][ T6073]  should_failslab+0xac/0x100
[   80.781965][ T6073]  ? vm_area_dup+0x61/0x290
[   80.781985][ T6073]  kmem_cache_alloc_noprof+0x70/0x380
[   80.782009][ T6073]  vm_area_dup+0x61/0x290
[   80.782032][ T6073]  __split_vma+0x1cb/0xc50
[   80.782061][ T6073]  ? validate_chain+0x11e/0x5920
[   80.782085][ T6073]  ? __pfx___split_vma+0x10/0x10
[   80.782103][ T6073]  ? _prb_read_valid+0xa39/0xac0
[   80.782134][ T6073]  ? mark_lock+0x9a/0x360
[   80.782156][ T6073]  vms_gather_munmap_vmas+0x2e6/0x1600
[   80.782176][ T6073]  ? __lock_acquire+0x1397/0x2100
[   80.782207][ T6073]  ? mtree_range_walk+0x6fd/0x8e0
[   80.782232][ T6073]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[   80.782261][ T6073]  ? mas_find+0x8c0/0xbb0
[   80.782289][ T6073]  __mmap_region+0x7c4/0x2d30
[   80.782339][ T6073]  ? __pfx___mmap_region+0x10/0x10
[   80.782368][ T6073]  ? __schedule+0x1874/0x4be0
[   80.782428][ T6073]  ? arch_get_unmapped_area_topdown+0x28e/0xc50
[   80.782458][ T6073]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[   80.782489][ T6073]  ? mm_get_unmapped_area+0xa8/0xd0
[   80.782517][ T6073]  ? cap_mmap_addr+0x163/0x2c0
[   80.782540][ T6073]  mmap_region+0x226/0x2c0
[   80.782570][ T6073]  do_mmap+0x97a/0x10d0
[   80.782591][ T6073]  ? mtree_load+0x23a/0x9c0
[   80.782623][ T6073]  ? __pfx_do_mmap+0x10/0x10
[   80.782645][ T6073]  ? __pfx_down_write_killable+0x10/0x10
[   80.782661][ T6073]  ? common_file_perm+0x1a6/0x210
[   80.782690][ T6073]  __se_sys_remap_file_pages+0xaea/0xc00
[   80.782722][ T6073]  ? __pfx___se_sys_remap_file_pages+0x10/0x10
[   80.782744][ T6073]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   80.782766][ T6073]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   80.782786][ T6073]  ? do_syscall_64+0x100/0x230
[   80.782815][ T6073]  ? __x64_sys_remap_file_pages+0x20/0xc0
[   80.782835][ T6073]  do_syscall_64+0xf3/0x230
[   80.782858][ T6073]  ? clear_bhb_loop+0x35/0x90
[   80.782893][ T6073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.782927][ T6073] RIP: 0033:0x7fc937b8cd29
[   80.782942][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.782954][ T6073] RSP: 002b:00007fc9389d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[   80.782972][ T6073] RAX: ffffffffffffffda RBX: 00007fc937da5fa0 RCX: 00007fc937b8cd29
[   80.782984][ T6073] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 000000002013e000
[   80.782994][ T6073] RBP: 00007fc9389d8090 R08: 0000000000000001 R09: 0000000000000000
[   80.783003][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.783012][ T6073] R13: 0000000000000000 R14: 00007fc937da5fa0 R15: 00007fc937ecfa28
[   80.783036][ T6073]  </TASK>
[   80.896310][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   81.239444][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.254235][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.352272][ T5882] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   81.380282][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'.
[   81.468926][ T6074] delete_channel: no stack
[   81.579064][ T5882] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[   81.602458][ T5882] em28xx 2-1:0.0: No AC97 audio processor
[   81.651397][ T5882] usb 2-1: USB disconnect, device number 4
[   81.673941][ T5882] em28xx 2-1:0.0: Disconnecting em28xx
[   81.742506][ T5882] em28xx 2-1:0.0: Freeing device
[   81.804727][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   81.862456][ T5918] udevd[5918]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[   81.881530][ T5842] udevd[5842]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[   81.908089][   T80] cfg80211: failed to load regulatory.db
[   82.006499][   T25] usb 4-1: Using ep0 maxpacket: 16
[   82.019526][   T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   82.028824][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.044568][   T25] usb 4-1: Product: syz
[   82.074174][   T25] usb 4-1: Manufacturer: syz
[   82.085760][   T25] usb 4-1: SerialNumber: syz
[   82.101069][   T25] r8152-cfgselector 4-1: Unknown version 0x0000
[   82.134666][   T25] r8152-cfgselector 4-1: config 0 descriptor??
[   82.192329][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[   82.265426][   T80] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.393724][   T25] r8152-cfgselector 4-1: Needed 2 retries to read version
[   82.451384][   T80] usb 3-1: Using ep0 maxpacket: 16
[   82.476389][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[   82.482971][   T80] usb 3-1: config 0 has an invalid interface number: 53 but max is 0
[   82.499863][   T80] usb 3-1: config 0 has no interface number 0
[   82.543291][   T80] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   82.552887][   T80] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.561759][   T80] usb 3-1: Product: syz
[   82.566251][   T80] usb 3-1: Manufacturer: syz
[   82.570908][   T80] usb 3-1: SerialNumber: syz
[   82.606577][   T80] usb 3-1: config 0 descriptor??
[   82.664622][   T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   82.871320][ T6104] xt_hashlimit: size too large, truncated to 1048576
[   82.925382][   T25] usb 1-1: Using ep0 maxpacket: 8
[   82.967989][   T25] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   82.989863][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.025843][   T25] usb 1-1: Product: syz
[   83.043543][ T5887] r8152-cfgselector 4-1: USB disconnect, device number 5
[   83.053946][   T25] usb 1-1: Manufacturer: syz
[   83.062022][   T25] usb 1-1: SerialNumber: syz
[   83.073033][   T25] usb 1-1: config 0 descriptor??
[   83.668468][ T6095] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   83.684326][ T6095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   83.822115][ T5892] usb 1-1: USB disconnect, device number 7
[   84.707374][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.62'.
[   84.824716][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.861599][ T6126] FAULT_INJECTION: forcing a failure.
[   84.861599][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   84.901453][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.0.63 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[   84.901479][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   84.901489][ T6126] Call Trace:
[   84.901495][ T6126]  <TASK>
[   84.901507][ T6126]  dump_stack_lvl+0x241/0x360
[   84.901537][ T6126]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.901561][ T6126]  ? __pfx__printk+0x10/0x10
[   84.901588][ T6126]  ? snprintf+0xda/0x120
[   84.901610][ T6126]  should_fail_ex+0x3b0/0x4e0
[   84.901637][ T6126]  _copy_to_user+0x31/0xb0
[   84.901659][ T6126]  simple_read_from_buffer+0xca/0x150
[   84.901681][ T6126]  proc_fail_nth_read+0x1e9/0x250
[   84.901704][ T6126]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.901733][ T6126]  ? rw_verify_area+0x55e/0x6f0
[   84.901756][ T6126]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.901777][ T6126]  vfs_read+0x1fc/0xb70
[   84.901794][ T6126]  ? fdget_pos+0x254/0x320
[   84.901817][ T6126]  ? __pfx___mutex_lock+0x10/0x10
[   84.901841][ T6126]  ? __pfx_vfs_read+0x10/0x10
[   84.901860][ T6126]  ? __fget_files+0x2a/0x410
[   84.901882][ T6126]  ? __fget_files+0x395/0x410
[   84.901902][ T6126]  ? __fget_files+0x2a/0x410
[   84.901932][ T6126]  ksys_read+0x18f/0x2b0
[   84.901950][ T6126]  ? __pfx_ksys_read+0x10/0x10
[   84.901967][ T6126]  ? do_syscall_64+0x100/0x230
[   84.901993][ T6126]  ? do_syscall_64+0xb6/0x230
[   84.902017][ T6126]  do_syscall_64+0xf3/0x230
[   84.902039][ T6126]  ? clear_bhb_loop+0x35/0x90
[   84.902058][ T6126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.902081][ T6126] RIP: 0033:0x7f3ace98b73c
[   84.902096][ T6126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   84.902109][ T6126] RSP: 002b:00007f3acf786030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   84.902127][ T6126] RAX: ffffffffffffffda RBX: 00007f3aceba5fa0 RCX: 00007f3ace98b73c
[   84.902139][ T6126] RDX: 000000000000000f RSI: 00007f3acf7860a0 RDI: 0000000000000005
[   84.902149][ T6126] RBP: 00007f3acf786090 R08: 0000000000000000 R09: 0000000000000000
[   84.902159][ T6126] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001
[   84.902169][ T6126] R13: 0000000000000000 R14: 00007f3aceba5fa0 R15: 00007f3aceccfa28
[   84.902196][ T6126]  </TASK>
[   85.246533][ T5892] usb 5-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config
[   85.256820][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.377162][ T5892] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   85.444608][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.452658][ T5892] usb 5-1: SerialNumber: syz
[   85.894602][   T80] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   85.949127][ T5887] usb 3-1: USB disconnect, device number 5
[   86.234545][   T80] usb 4-1: Using ep0 maxpacket: 16
[   86.246291][   T80] usb 4-1: config 0 has an invalid interface number: 53 but max is 0
[   86.280376][   T80] usb 4-1: config 0 has no interface number 0
[   86.323699][   T80] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   86.333954][   T80] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.347618][   T80] usb 4-1: Product: syz
[   86.371503][   T80] usb 4-1: Manufacturer: syz
[   86.384667][  T972] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.401528][   T80] usb 4-1: SerialNumber: syz
[   86.584599][  T972] usb 1-1: Using ep0 maxpacket: 16
[   86.592060][   T80] usb 4-1: config 0 descriptor??
[   86.621937][  T972] usb 1-1: config 0 has an invalid interface number: 53 but max is 0
[   86.630400][  T972] usb 1-1: config 0 has no interface number 0
[   86.950880][  T972] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   86.960456][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.969107][  T972] usb 1-1: Product: syz
[   86.973467][  T972] usb 1-1: Manufacturer: syz
[   86.978159][  T972] usb 1-1: SerialNumber: syz
[   87.066458][  T972] usb 1-1: config 0 descriptor??
[   87.360953][ T5892] usb 5-1: 0:2 : does not exist
[   87.391757][ T5892] usb 5-1: USB disconnect, device number 3
[   87.699077][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'.
[   87.716853][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.905357][ T5833] Bluetooth: hci1: hardware error 0x02
[   88.034657][   T80] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   88.186551][   T80] usb 2-1: config index 0 descriptor too short (expected 539, got 27)
[   88.195331][   T80] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4
[   88.255239][   T80] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1023
[   88.297931][   T80] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   88.347264][   T80] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.380255][   T80] usb 2-1: Product: syz
[   88.389670][   T80] usb 2-1: Manufacturer: syz
[   88.401490][   T80] usb 2-1: SerialNumber: syz
[   88.420164][   T80] usb 2-1: config 0 descriptor??
[   88.512933][   T80] hub 2-1:0.0: bad descriptor, ignoring hub
[   88.542787][   T80] hub 2-1:0.0: probe with driver hub failed with error -5
[   88.587728][   T80] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[   88.693889][   T80] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[   88.758063][ T6156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.782531][   T80] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -22
[   88.949849][   T80] usb 1-1: USB disconnect, device number 8
[   88.964910][ T5887] usb 2-1: USB disconnect, device number 5
[   89.192661][ T5887] usb 4-1: USB disconnect, device number 6
[   89.676362][   T80] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   89.684291][ T5882] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   89.837063][ T5882] usb 1-1: config 0 has an invalid interface number: 229 but max is 0
[   89.854514][   T80] usb 3-1: Using ep0 maxpacket: 8
[   89.859846][ T5882] usb 1-1: config 0 has no interface number 0
[   89.871545][   T80] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[   89.901961][ T5882] usb 1-1: New USB device found, idVendor=e748, idProduct=7698, bcdDevice=38.cc
[   90.055149][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   90.079383][   T80] usb 3-1: config 2 has no interface number 0
[   90.144089][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.190782][   T80] usb 3-1: config 2 interface 31 has no altsetting 0
[   90.207270][ T5882] usb 1-1: Product: syz
[   90.225806][ T5882] usb 1-1: Manufacturer: syz
[   90.237937][   T80] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   90.252931][ T5882] usb 1-1: SerialNumber: syz
[   90.263286][   T80] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.300206][ T5882] usb 1-1: config 0 descriptor??
[   90.340531][ T6181] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.79'.
[   90.372751][   T80] usb 3-1: Product: syz
[   90.403048][   T80] usb 3-1: Manufacturer: syz
[   90.411175][ T5882] usb 1-1: bad CDC descriptors
[   90.424691][   T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   90.459189][   T80] usb 3-1: SerialNumber: syz
[   90.464583][  T972] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   90.691272][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'.
[   90.700257][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.752382][  T972] usb 2-1: Using ep0 maxpacket: 16
[   90.789936][  T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.801986][  T972] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   90.812791][  T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   90.822832][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.832561][   T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   90.858129][   T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   90.872045][  T972] usb 2-1: config 0 descriptor??
[   90.875222][ T5882] usb 1-1: USB disconnect, device number 9
[   90.909765][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   90.918917][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.918948][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.918977][ T5887] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   90.918997][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.945746][ T5887] usb 5-1: config 0 descriptor??
[   90.953781][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.023638][ T6177] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   91.038796][   T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   91.093808][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'.
[   91.176815][   T80] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[   91.222621][   T80] usb 3-1: USB disconnect, device number 6
[   91.472422][ T5887] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   91.661153][ T5887] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6
[   91.918262][ T5887] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[   91.992531][ T5887] usb 5-1: USB disconnect, device number 4
[   92.074798][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   92.256494][   T25] usb 3-1: config 0 has an invalid interface number: 216 but max is 0
[   92.267092][   T25] usb 3-1: config 0 has no interface number 0
[   92.314219][   T25] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   92.445540][   T25] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   92.501920][ T6194] FAULT_INJECTION: forcing a failure.
[   92.501920][ T6194] name failslab, interval 1, probability 0, space 0, times 0
[   92.515141][ T6185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.524071][ T6194] CPU: 0 UID: 0 PID: 6194 Comm: syz.4.84 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[   92.524095][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   92.524104][ T6194] Call Trace:
[   92.524112][ T6194]  <TASK>
[   92.524119][ T6194]  dump_stack_lvl+0x241/0x360
[   92.524148][ T6194]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.524170][ T6194]  ? __pfx__printk+0x10/0x10
[   92.524193][ T6194]  ? fs_reclaim_acquire+0x93/0x130
[   92.524211][ T6194]  ? __pfx___might_resched+0x10/0x10
[   92.524230][ T6194]  should_fail_ex+0x3b0/0x4e0
[   92.524256][ T6194]  should_failslab+0xac/0x100
[   92.524278][ T6194]  __kmalloc_noprof+0xdd/0x4c0
[   92.524297][ T6194]  ? kstrtouint_from_user+0x128/0x190
[   92.524311][ T6194]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[   92.524332][ T6194]  tomoyo_realpath_from_path+0xcf/0x5e0
[   92.524359][ T6194]  tomoyo_path_number_perm+0x236/0x860
[   92.524381][ T6194]  ? __lock_acquire+0x1397/0x2100
[   92.524401][ T6194]  ? tomoyo_path_number_perm+0x206/0x860
[   92.524428][ T6194]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   92.524485][ T6194]  ? __fget_files+0x2a/0x410
[   92.524508][ T6194]  ? __fget_files+0x2a/0x410
[   92.524533][ T6194]  security_file_ioctl+0xc6/0x2a0
[   92.524555][ T6194]  __se_sys_ioctl+0x46/0x170
[   92.524573][ T6194]  do_syscall_64+0xf3/0x230
[   92.524596][ T6194]  ? clear_bhb_loop+0x35/0x90
[   92.524615][ T6194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.524638][ T6194] RIP: 0033:0x7f510cf8cd29
[   92.524653][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.524665][ T6194] RSP: 002b:00007f510de3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   92.524682][ T6194] RAX: ffffffffffffffda RBX: 00007f510d1a5fa0 RCX: 00007f510cf8cd29
[   92.524693][ T6194] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000003
[   92.524703][ T6194] RBP: 00007f510de3a090 R08: 0000000000000000 R09: 0000000000000000
[   92.524712][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.524721][ T6194] R13: 0000000000000000 R14: 00007f510d1a5fa0 R15: 00007f510d2cfa28
[   92.524745][ T6194]  </TASK>
[   92.526410][ T6194] ERROR: Out of memory at tomoyo_realpath_from_path.
[   92.832437][   T25] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[   92.857540][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.890317][   T25] usb 3-1: Product: syz
[   92.898909][   T25] usb 3-1: Manufacturer: syz
[   92.908610][   T25] usb 3-1: SerialNumber: syz
[   92.927426][   T25] usb 3-1: config 0 descriptor??
[   92.978970][    T8] usb 4-1: USB disconnect, device number 7
[   93.021237][ T6188] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   93.036067][ T6188] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   93.094581][   T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   93.143414][ T6188] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   93.230828][   T25] snd-usb-audio 3-1:0.216: probe with driver snd-usb-audio failed with error -2
[   93.243688][ T6188] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   93.250929][   T25] usb 3-1: USB disconnect, device number 7
[   93.315573][ T6188] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   93.372669][ T6188] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   93.393826][ T6188] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   93.443700][ T6188] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   93.457500][ T6188] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   93.474940][ T6188] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   93.484015][ T6188] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   93.515510][ T6188] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   93.545864][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.689221][   T25] usb 2-1: USB disconnect, device number 6
[   93.814709][   T80] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   93.974578][   T80] usb 5-1: Using ep0 maxpacket: 16
[   93.991259][   T80] usb 5-1: config 0 has an invalid interface number: 53 but max is 0
[   94.003217][   T80] usb 5-1: config 0 has no interface number 0
[   94.023091][   T80] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   94.032802][   T80] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.041131][   T80] usb 5-1: Product: syz
[   94.050036][   T80] usb 5-1: Manufacturer: syz
[   94.134529][   T80] usb 5-1: SerialNumber: syz
[   94.182586][   T80] usb 5-1: config 0 descriptor??
[   94.311485][ T6222] FAULT_INJECTION: forcing a failure.
[   94.311485][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.370846][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.1.94 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[   94.370870][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   94.370879][ T6222] Call Trace:
[   94.370885][ T6222]  <TASK>
[   94.370892][ T6222]  dump_stack_lvl+0x241/0x360
[   94.370922][ T6222]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.370944][ T6222]  ? __pfx__printk+0x10/0x10
[   94.370971][ T6222]  ? snprintf+0xda/0x120
[   94.370993][ T6222]  should_fail_ex+0x3b0/0x4e0
[   94.371018][ T6222]  _copy_to_user+0x31/0xb0
[   94.371038][ T6222]  simple_read_from_buffer+0xca/0x150
[   94.371062][ T6222]  proc_fail_nth_read+0x1e9/0x250
[   94.371083][ T6222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.371105][ T6222]  ? rw_verify_area+0x55e/0x6f0
[   94.371125][ T6222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.371141][ T6222]  vfs_read+0x1fc/0xb70
[   94.371154][ T6222]  ? fdget_pos+0x254/0x320
[   94.371171][ T6222]  ? __pfx___mutex_lock+0x10/0x10
[   94.371190][ T6222]  ? __pfx_vfs_read+0x10/0x10
[   94.371205][ T6222]  ? __fget_files+0x2a/0x410
[   94.371223][ T6222]  ? __fget_files+0x395/0x410
[   94.371238][ T6222]  ? __fget_files+0x2a/0x410
[   94.371260][ T6222]  ksys_read+0x18f/0x2b0
[   94.371274][ T6222]  ? __pfx_ksys_read+0x10/0x10
[   94.371287][ T6222]  ? do_syscall_64+0x100/0x230
[   94.371307][ T6222]  ? do_syscall_64+0xb6/0x230
[   94.371326][ T6222]  do_syscall_64+0xf3/0x230
[   94.371344][ T6222]  ? clear_bhb_loop+0x35/0x90
[   94.371359][ T6222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.371379][ T6222] RIP: 0033:0x7f51f5d8b73c
[   94.371391][ T6222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   94.371401][ T6222] RSP: 002b:00007f51f6cbc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.371416][ T6222] RAX: ffffffffffffffda RBX: 00007f51f5fa5fa0 RCX: 00007f51f5d8b73c
[   94.371425][ T6222] RDX: 000000000000000f RSI: 00007f51f6cbc0a0 RDI: 0000000000000005
[   94.371433][ T6222] RBP: 00007f51f6cbc090 R08: 0000000000000000 R09: 0000000000000000
[   94.371441][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.371448][ T6222] R13: 0000000000000000 R14: 00007f51f5fa5fa0 R15: 00007f51f60cfa28
[   94.371467][ T6222]  </TASK>
[   94.793528][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.97'.
[   94.844616][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[   95.404654][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[   95.410921][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout
[   95.491515][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[   95.543466][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   95.824555][ T5887] usb 2-1: Using ep0 maxpacket: 16
[   95.844983][ T5887] usb 2-1: config 0 has an invalid interface number: 53 but max is 0
[   95.894651][ T5887] usb 2-1: config 0 has no interface number 0
[   95.895766][ T5883] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   95.939082][ T5887] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[   95.948390][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.961175][ T5887] usb 2-1: Product: syz
[   95.968550][ T5887] usb 2-1: Manufacturer: syz
[   95.981748][ T5887] usb 2-1: SerialNumber: syz
[   95.989863][ T5887] usb 2-1: config 0 descriptor??
[   96.423460][ T5883] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   96.544521][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   96.614533][   T80] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   96.627578][ T5883] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   96.696248][ T5887] usb 3-1: Using ep0 maxpacket: 16
[   96.704265][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   96.730349][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   96.762898][ T5892] usb 5-1: USB disconnect, device number 5
[   96.824217][ T5883] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   96.839831][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   96.858031][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.873212][ T5887] usb 3-1: Product: syz
[   96.880631][ T5887] usb 3-1: Manufacturer: syz
[   96.887822][ T5887] usb 3-1: SerialNumber: syz
[   96.924164][ T5887] usb 3-1: config 0 descriptor??
[   96.936982][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.949779][ T5887] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   96.960497][ T5887] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[   97.095593][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.110324][   T80] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   97.131561][ T6254] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   97.213136][   T80] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   97.223548][   T80] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   97.232698][   T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.249232][ T5883] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   97.275287][ T6263] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[   97.390974][   T80] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   97.553273][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[   97.559585][ T5887] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[   97.559589][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout
[   97.568000][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout
[   97.755498][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.765551][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.808661][ T5887] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[   97.816140][ T5887] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[   97.843507][ T5887] em28xx 3-1:0.0: No AC97 audio processor
[   98.267286][ T5887] usb 3-1: USB disconnect, device number 8
[   98.273882][ T5887] em28xx 3-1:0.0: Disconnecting em28xx
[   98.348667][ T5887] em28xx 3-1:0.0: Freeing device
[   99.013400][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[   99.116592][   T80] usb 4-1: USB disconnect, device number 8
[   99.184572][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   99.286773][  T972] usb 2-1: USB disconnect, device number 7
[   99.314254][ T5887] usb 1-1: USB disconnect, device number 10
[   99.365345][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.387409][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   99.441992][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.482166][ T5883] usb 5-1: config 0 descriptor??
[   99.511837][ T5883] pwc: Askey VC010 type 2 USB webcam detected.
[   99.602651][ T6286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   99.644686][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[   99.651415][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout
[   99.651428][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout
[   99.917865][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00
[   99.927642][ T5883] pwc: recv_control_msg error -32 req 02 val 2700
[   99.935152][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00
[   99.943176][ T5883] pwc: recv_control_msg error -32 req 04 val 1000
[   99.952192][ T5883] pwc: recv_control_msg error -32 req 04 val 1300
[   99.988558][ T5883] pwc: recv_control_msg error -32 req 04 val 1400
[  100.008330][ T5883] pwc: recv_control_msg error -32 req 02 val 2000
[  100.228096][ T5883] pwc: recv_control_msg error -71 req 04 val 1500
[  100.249694][ T5883] pwc: recv_control_msg error -71 req 02 val 2500
[  100.379767][ T6302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.395557][ T5883] pwc: recv_control_msg error -71 req 02 val 2400
[  100.424845][ T6306] FAULT_INJECTION: forcing a failure.
[  100.424845][ T6306] name failslab, interval 1, probability 0, space 0, times 0
[  100.426937][ T5883] pwc: recv_control_msg error -71 req 02 val 2600
[  100.471517][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.115 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[  100.471540][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  100.471549][ T6306] Call Trace:
[  100.471555][ T6306]  <TASK>
[  100.471561][ T6306]  dump_stack_lvl+0x241/0x360
[  100.471592][ T6306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.471615][ T6306]  ? __pfx__printk+0x10/0x10
[  100.471649][ T6306]  should_fail_ex+0x3b0/0x4e0
[  100.471675][ T6306]  should_failslab+0xac/0x100
[  100.471697][ T6306]  ? skb_clone+0x20c/0x390
[  100.471714][ T6306]  kmem_cache_alloc_noprof+0x70/0x380
[  100.471741][ T6306]  skb_clone+0x20c/0x390
[  100.471761][ T6306]  __netlink_deliver_tap+0x3cc/0x7f0
[  100.471788][ T6306]  ? netlink_deliver_tap+0x2e/0x1b0
[  100.471804][ T6306]  netlink_deliver_tap+0x19d/0x1b0
[  100.471822][ T6306]  netlink_unicast+0x7c4/0x990
[  100.471863][ T6306]  ? __pfx_netlink_unicast+0x10/0x10
[  100.471884][ T6306]  ? __virt_addr_valid+0x45f/0x530
[  100.471905][ T6306]  ? __phys_addr_symbol+0x2f/0x70
[  100.471924][ T6306]  ? __check_object_size+0x47a/0x730
[  100.471948][ T6306]  netlink_sendmsg+0x8e4/0xcb0
[  100.471976][ T6306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.471997][ T6306]  ? aa_sock_msg_perm+0x91/0x160
[  100.472027][ T6306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.472042][ T6306]  __sock_sendmsg+0x221/0x270
[  100.472064][ T6306]  ____sys_sendmsg+0x52a/0x7e0
[  100.472090][ T6306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.472104][ T6306]  ? __fget_files+0x2a/0x410
[  100.472128][ T6306]  ? __fget_files+0x2a/0x410
[  100.472157][ T6306]  __sys_sendmsg+0x269/0x350
[  100.472180][ T6306]  ? __pfx___sys_sendmsg+0x10/0x10
[  100.472209][ T6306]  ? do_sys_openat2+0x17a/0x1d0
[  100.472255][ T6306]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  100.472276][ T6306]  ? do_syscall_64+0x100/0x230
[  100.472302][ T6306]  ? do_syscall_64+0xb6/0x230
[  100.472326][ T6306]  do_syscall_64+0xf3/0x230
[  100.472348][ T6306]  ? clear_bhb_loop+0x35/0x90
[  100.472368][ T6306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.472391][ T6306] RIP: 0033:0x7fc937b8cd29
[  100.472406][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.472419][ T6306] RSP: 002b:00007fc9389d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.472437][ T6306] RAX: ffffffffffffffda RBX: 00007fc937da5fa0 RCX: 00007fc937b8cd29
[  100.472448][ T6306] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  100.472458][ T6306] RBP: 00007fc9389d8090 R08: 0000000000000000 R09: 0000000000000000
[  100.472466][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.472473][ T6306] R13: 0000000000000000 R14: 00007fc937da5fa0 R15: 00007fc937ecfa28
[  100.472499][ T6306]  </TASK>
[  100.754401][ T5883] pwc: recv_control_msg error -71 req 02 val 2900
[  100.772907][ T5883] pwc: recv_control_msg error -71 req 02 val 2800
[  100.837792][ T5883] pwc: recv_control_msg error -71 req 04 val 1100
[  100.845426][   T80] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  100.856461][ T5883] pwc: recv_control_msg error -71 req 04 val 1200
[  100.918328][ T5883] pwc: Registered as video103.
[  100.980761][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  101.044534][  T972] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  101.088504][   T80] usb 2-1: config 0 has an invalid interface number: 189 but max is 0
[  101.125918][   T80] usb 2-1: config 0 has no interface number 0
[  101.134903][ T5883] usb 5-1: USB disconnect, device number 6
[  101.169628][   T80] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  101.208213][  T972] usb 3-1: unable to get BOS descriptor set
[  101.234509][   T80] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  101.264555][   T80] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  101.267437][  T972] usb 3-1: string descriptor 0 read error: -22
[  101.314955][  T972] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  101.337681][   T80] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  101.351044][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.385702][  T972] usb 3-1: config 0 descriptor??
[  101.434540][   T80] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  101.489395][   T80] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  101.581001][   T80] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.612393][   T80] usb 2-1: Product: syz
[  101.627894][  T972] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  101.678093][   T80] usb 2-1: Manufacturer: syz
[  101.682752][   T80] usb 2-1: SerialNumber: syz
[  101.695002][  T972] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  101.835421][  T972] dib0700: firmware download failed at 7 with -22
[  101.872642][  T972] usb 3-1: USB disconnect, device number 9
[  101.964688][   T80] usb 2-1: config 0 descriptor??
[  101.973083][ T6301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  101.991012][   T80] ums-alauda 2-1:0.189: USB Mass Storage device detected
[  102.021090][   T80] scsi host1: usb-storage 2-1:0.189
[  102.074530][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  102.134661][ T5883] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  102.339470][ T5887] usb 1-1: config 0 has no interfaces?
[  102.354108][ T5887] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  102.385565][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.396707][ T5887] usb 1-1: config 0 descriptor??
[  102.406273][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.426862][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  102.460049][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.491252][ T5883] usb 5-1: config 0 descriptor??
[  102.579467][ T5883] pwc: Askey VC010 type 2 USB webcam detected.
[  103.109110][ T3438] scsi 1:0:0:0: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  103.174352][ T3438] scsi 1:0:0:1: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  103.251771][ T3438] scsi 1:0:0:0: Attached scsi generic sg1 type 0
[  103.275319][ T3438] scsi 1:0:0:1: Attached scsi generic sg2 type 0
[  103.412425][   T80] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  103.423355][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00
[  103.430482][   T25] usb 2-1: USB disconnect, device number 8
[  103.442363][ T3438] sd 1:0:0:0: [sdb] Media removed, stopped polling
[  103.456562][ T5883] pwc: recv_control_msg error -32 req 02 val 2700
[  103.475285][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00
[  103.483077][ T5883] pwc: recv_control_msg error -32 req 04 val 1000
[  103.494941][ T5883] pwc: recv_control_msg error -32 req 04 val 1300
[  103.509627][   T11] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  103.536557][   T11] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  103.540446][ T3438] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  103.570202][ T5883] pwc: recv_control_msg error -32 req 04 val 1400
[  103.572110][   T11] sd 1:0:0:1: [sdc] Sense not available.
[  103.588444][ T5883] pwc: recv_control_msg error -32 req 02 val 2000
[  103.596598][   T11] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[  103.603983][   T11] sd 1:0:0:1: [sdc] 0-byte physical blocks
[  103.640477][   T11] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled
[  103.648613][   T80] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  103.662157][   T11] sd 1:0:0:1: [sdc] Asking for cache data failed
[  103.677198][   T11] sd 1:0:0:1: [sdc] Assuming drive cache: write through
[  103.695960][   T80] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  103.758993][   T80] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  103.783369][   T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.791676][   T11] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[  103.798914][ T6020] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  103.804707][  T972] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  103.852967][ T5883] pwc: recv_control_msg error -71 req 04 val 1500
[  103.872917][ T5883] pwc: recv_control_msg error -71 req 02 val 2500
[  103.880234][ T5883] pwc: recv_control_msg error -71 req 02 val 2400
[  103.888546][ T6336] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  103.929243][   T80] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  103.972463][ T5883] pwc: recv_control_msg error -71 req 02 val 2600
[  104.013026][ T5883] pwc: recv_control_msg error -71 req 02 val 2900
[  104.038229][ T5883] pwc: recv_control_msg error -71 req 02 val 2800
[  104.079248][  T972] usb 4-1: Using ep0 maxpacket: 16
[  104.090200][ T5883] pwc: recv_control_msg error -71 req 04 val 1100
[  104.090663][  T972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.112959][  T972] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  104.122979][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.158570][ T5883] pwc: recv_control_msg error -71 req 04 val 1200
[  104.172294][ T5883] pwc: Registered as video103.
[  104.187476][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  104.270747][ T5883] usb 5-1: USB disconnect, device number 7
[  104.444526][  T972] usb 4-1: Product: syz
[  104.469133][  T972] usb 4-1: Manufacturer: syz
[  104.502319][  T972] usb 4-1: SerialNumber: syz
[  104.541319][  T972] usb 4-1: config 0 descriptor??
[  104.588552][ T5919] udevd[5919]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  104.596769][ T6020] udevd[6020]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  104.820183][  T972] usb 4-1: Limiting number of CPorts to U8_MAX
[  104.881001][  T972] usb 4-1: Not enough endpoints found in device, aborting!
[  104.898286][ T5883] usb 1-1: USB disconnect, device number 11
[  104.972204][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  105.321526][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  105.434666][ T5883] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  105.465521][    T8] usb 4-1: USB disconnect, device number 9
[  105.633762][ T5883] usb 1-1: Using ep0 maxpacket: 32
[  105.670956][ T5883] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  105.713710][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.784499][ T5883] usb 1-1: Product: syz
[  105.812595][ T5883] usb 1-1: Manufacturer: syz
[  105.844495][ T5883] usb 1-1: SerialNumber: syz
[  105.862257][ T5883] usb 1-1: config 0 descriptor??
[  105.944796][ T5883] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  105.950538][  T972] usb 3-1: USB disconnect, device number 10
[  106.038145][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  106.307004][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.348974][    T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  106.534976][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.576037][    T8] usb 2-1: config 0 descriptor??
[  106.599090][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[  106.664719][ T5887] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  106.971831][ T5887] usb 5-1: config 0 has an invalid interface number: 189 but max is 0
[  107.058432][ T5887] usb 5-1: config 0 has no interface number 0
[  107.066742][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[  107.090421][    T8] pwc: recv_control_msg error -32 req 02 val 2700
[  107.097096][ T5887] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  107.129593][    T8] pwc: recv_control_msg error -32 req 02 val 2c00
[  107.163390][ T6377] netlink: 108 bytes leftover after parsing attributes in process `syz.3.133'.
[  107.185395][    T8] pwc: recv_control_msg error -32 req 04 val 1000
[  107.204557][ T5887] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  107.248873][    T8] pwc: recv_control_msg error -32 req 04 val 1300
[  107.269452][ T5887] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  107.293279][    T8] pwc: recv_control_msg error -32 req 04 val 1400
[  107.312892][    T8] pwc: recv_control_msg error -32 req 02 val 2000
[  107.343287][ T5887] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  107.398702][ T5887] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  107.460258][ T5887] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  107.520759][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.530480][    T8] pwc: recv_control_msg error -71 req 04 val 1500
[  107.557952][    T8] pwc: recv_control_msg error -71 req 02 val 2500
[  107.586163][ T5887] usb 5-1: Product: syz
[  107.594017][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[  107.601807][ T5887] usb 5-1: Manufacturer: syz
[  107.628698][ T5887] usb 5-1: SerialNumber: syz
[  107.635970][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[  107.654817][ T5887] usb 5-1: config 0 descriptor??
[  107.662099][ T6372] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  107.670114][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[  107.696574][ T5887] ums-alauda 5-1:0.189: USB Mass Storage device detected
[  107.705477][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[  107.713905][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[  107.755444][ T5887] scsi host1: usb-storage 5-1:0.189
[  107.763326][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[  107.816862][    T8] pwc: Registered as video103.
[  107.839980][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  107.893258][ T5884] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  107.993568][    T8] usb 2-1: USB disconnect, device number 9
[  108.054654][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  108.072988][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  108.126715][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  108.173989][ T5884] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  108.185499][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.242483][ T5884] usb 4-1: Product: syz
[  108.260333][ T5884] usb 4-1: Manufacturer: syz
[  108.280578][ T5884] usb 4-1: SerialNumber: syz
[  108.302261][ T5884] usb 4-1: config 0 descriptor??
[  108.354756][ T5884] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  108.447373][ T5884] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  108.598415][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  108.778107][    T8] usb 2-1: Using ep0 maxpacket: 16
[  108.791620][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  108.803709][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  108.830250][    T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  108.846565][   T12] scsi 1:0:0:0: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  108.846849][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.858250][   T12] scsi 1:0:0:1: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  108.871260][    T8] usb 2-1: Product: syz
[  108.880985][    T8] usb 2-1: Manufacturer: syz
[  108.891814][    T8] usb 2-1: SerialNumber: syz
[  108.902706][    T8] usb 2-1: config 0 descriptor??
[  108.917650][   T12] scsi 1:0:0:0: Attached scsi generic sg1 type 0
[  108.945774][ T5884] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  108.981579][   T12] sd 1:0:0:1: Attached scsi generic sg2 type 0
[  109.029117][    T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  109.086661][    T8] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  109.154164][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.167905][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.213880][ T5884] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  109.224904][ T5884] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  109.250812][ T5884] em28xx 4-1:0.0: No AC97 audio processor
[  109.324692][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  109.358143][ T5884] usb 4-1: USB disconnect, device number 10
[  109.381965][ T5884] em28xx 4-1:0.0: Disconnecting em28xx
[  109.398843][ T5884] em28xx 4-1:0.0: Freeing device
[  109.514597][ T5882] usb 3-1: Using ep0 maxpacket: 16
[  109.533577][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.556748][    T8] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  109.594252][ T5882] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  109.721644][ T3438] sd 1:0:0:0: [sdb] Media removed, stopped polling
[  109.722022][ T5887] usb 5-1: USB disconnect, device number 8
[  109.728877][   T11] sd 1:0:0:1: [sdc] Media removed, stopped polling
[  109.750214][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  109.765583][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.768176][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.780455][ T3438] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  109.796733][ T5883] gspca_stk1135: reg_w 0x353 err -71
[  109.804158][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  109.810935][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.858463][    T8] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  109.880549][    T8] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  109.893713][ T5883] gspca_stk1135: Sensor write failed
[  109.895817][ T6397] fuse: Bad value for 'group_id'
[  109.899390][   T11] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[  109.910519][    T8] em28xx 2-1:0.0: No AC97 audio processor
[  109.916538][ T5882] usb 3-1: config 0 descriptor??
[  109.931509][ T6397] fuse: Bad value for 'group_id'
[  109.937609][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  109.963282][    T8] usb 2-1: USB disconnect, device number 10
[  109.998200][    T8] em28xx 2-1:0.0: Disconnecting em28xx
[  110.011122][    T8] em28xx 2-1:0.0: Freeing device
[  110.017989][ T6397] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  110.092190][ T5883] gspca_stk1135: Sensor write failed
[  110.143434][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'.
[  110.185340][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  110.215023][ T5883] gspca_stk1135: Sensor read failed
[  110.220317][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  110.229827][ T5883] gspca_stk1135: Sensor read failed
[  110.235165][ T5883] gspca_stk1135: Detected sensor type unknown (0x0)
[  110.241903][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  110.269583][ T5883] gspca_stk1135: Sensor read failed
[  110.275359][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  110.283237][ T5883] gspca_stk1135: Sensor read failed
[  110.295543][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  110.303183][ T5883] gspca_stk1135: Sensor write failed
[  110.309909][ T5883] gspca_stk1135: serial bus timeout: status=0x00
[  110.586014][ T5883] gspca_stk1135: Sensor write failed
[  110.615954][ T5883] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  110.788387][ T5883] usb 1-1: USB disconnect, device number 12
[  110.893932][ T6413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.984557][  T972] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  111.007764][ T6413] bridge1: entered promiscuous mode
[  111.072927][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  111.116532][ T5829] udevd[5829]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  111.140926][  T972] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  111.160931][  T972] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  111.231569][  T972] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  111.258067][  T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.285252][ T6409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  111.298768][  T972] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  111.364882][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  111.528001][    T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  111.544667][ T5883] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  111.547387][    T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  111.581700][    T8] usb 2-1: config 1 has no interface number 1
[  111.598621][    T8] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  111.624046][    T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  111.660456][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.687455][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.732134][    T8] usb 2-1: Product: syz
[  111.740642][ T6347] udevd[6347]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  111.762582][    T8] usb 2-1: Manufacturer: syz
[  111.780500][    T8] usb 2-1: SerialNumber: syz
[  111.908408][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  112.064507][ T5883] usb 1-1: Using ep0 maxpacket: 16
[  112.277166][ T5883] usb 1-1: config 0 has an invalid interface number: 53 but max is 0
[  112.303581][    T8] usb 2-1: USB disconnect, device number 11
[  112.354522][ T5883] usb 1-1: config 0 has no interface number 0
[  112.454806][ T5883] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[  112.546395][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.586390][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  112.622558][ T5883] usb 1-1: Product: syz
[  112.675869][ T5883] usb 1-1: Manufacturer: syz
[  112.714552][ T5883] usb 1-1: SerialNumber: syz
[  113.073399][ T5832] usb 3-1: USB disconnect, device number 11
[  113.116209][ T5883] usb 1-1: config 0 descriptor??
[  113.252937][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  113.530358][    T8] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  113.550594][    T8] usb 5-1: config 0 has no interface number 0
[  113.575550][    T8] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  113.660312][    T8] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  113.692377][    T8] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  113.764641][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.803418][    T8] usb 5-1: Product: syz
[  113.808057][    T8] usb 5-1: Manufacturer: syz
[  113.812659][    T8] usb 5-1: SerialNumber: syz
[  113.904530][ T5832] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  113.951909][    T8] usb 5-1: config 0 descriptor??
[  113.983175][    T8] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  113.998247][ T5887] usb 4-1: USB disconnect, device number 11
[  114.021943][    T8] vmk80xx 5-1:0.255: probe with driver vmk80xx failed with error -22
[  114.267242][ T6437] syz_tun: entered allmulticast mode
[  114.589158][ T5832] usb 2-1: Using ep0 maxpacket: 16
[  114.623776][ T5882] usb 1-1: USB disconnect, device number 13
[  114.632286][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  114.644236][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  114.654590][ T5832] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  114.670635][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.681145][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  114.690979][ T5832] usb 2-1: SerialNumber: syz
[  114.714171][ T6429] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  115.262591][ T5832] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  115.284733][    T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  115.439213][ T5832] usb 2-1: USB disconnect, device number 12
[  115.614553][    T8] usb 1-1: Using ep0 maxpacket: 16
[  115.636952][    T8] usb 1-1: config 0 has an invalid interface number: 53 but max is 0
[  115.777880][    T8] usb 1-1: config 0 has no interface number 0
[  115.790007][ T5895] usb 5-1: USB disconnect, device number 9
[  115.814341][    T8] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[  115.834858][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  115.873612][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.914104][    T8] usb 1-1: Product: syz
[  115.934173][    T8] usb 1-1: Manufacturer: syz
[  115.947452][    T8] usb 1-1: SerialNumber: syz
[  116.011972][    T8] usb 1-1: config 0 descriptor??
[  116.141096][ T6453] fuse: Bad value for 'group_id'
[  116.149988][ T5884] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  116.167216][ T5884] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.179988][ T6453] fuse: Bad value for 'group_id'
[  116.188254][ T5884] usb 3-1: config 1 has no interface number 1
[  116.198580][ T5884] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  116.209222][ T5884] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.223613][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.235707][ T6453] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  116.256176][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.265098][ T5884] usb 3-1: Product: syz
[  116.269376][ T5884] usb 3-1: Manufacturer: syz
[  116.274113][ T5884] usb 3-1: SerialNumber: syz
[  116.374750][ T5883] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  116.503982][ T6459] netlink: 108 bytes leftover after parsing attributes in process `syz.4.153'.
[  116.579627][ T5883] usb 4-1: config 0 has an invalid interface number: 189 but max is 0
[  116.596744][ T5883] usb 4-1: config 0 has no interface number 0
[  116.604145][ T5883] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  116.693114][ T5883] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  116.788493][ T5883] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  116.803154][ T5884] usb 3-1: USB disconnect, device number 12
[  116.866810][ T5883] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  116.895007][ T5883] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  116.985673][ T5883] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  117.041167][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.060861][ T5883] usb 4-1: Product: syz
[  117.074140][ T5883] usb 4-1: Manufacturer: syz
[  117.083301][ T5883] usb 4-1: SerialNumber: syz
[  117.300374][ T5883] usb 4-1: config 0 descriptor??
[  117.308691][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.336919][ T6455] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  117.345228][ T5883] ums-alauda 4-1:0.189: USB Mass Storage device detected
[  117.366714][ T5883] scsi host1: usb-storage 4-1:0.189
[  118.441521][ T5883] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  118.498228][ T3509] scsi 1:0:0:0: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  118.551431][ T3509] scsi 1:0:0:1: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  118.675907][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.738777][ T3509] scsi 1:0:0:0: Attached scsi generic sg1 type 0
[  118.780141][ T3509] scsi 1:0:0:1: Attached scsi generic sg2 type 0
[  118.850712][ T5883] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  118.867988][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.886130][ T5883] usb 2-1: Product: syz
[  118.895911][ T5883] usb 2-1: Manufacturer: syz
[  118.964572][ T5883] usb 2-1: SerialNumber: syz
[  118.989794][ T5883] usb 2-1: config 0 descriptor??
[  119.002914][ T5882] usb 1-1: USB disconnect, device number 14
[  119.039512][ T5883] usb 2-1: ucan: probing device on interface #0
[  119.048352][ T5883] usb 2-1: ucan: invalid EP count (0)
[  119.072879][ T5883] usb 2-1: ucan: probe failed; try to update the device firmware
[  119.093459][    T8] usb 4-1: USB disconnect, device number 12
[  119.101925][ T3509] sd 1:0:0:0: [sdb] Media removed, stopped polling
[  119.108720][ T3438] sd 1:0:0:1: [sdc] Media removed, stopped polling
[  119.188701][ T3509] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  119.227815][ T3438] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[  119.229491][ T5982] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  119.923958][ T6479] bridge1: entered promiscuous mode
[  119.948668][ T6479] bridge1: entered allmulticast mode
[  119.968697][ T6479] team0: Port device bridge1 added
[  119.982098][ T5895] usb 2-1: USB disconnect, device number 13
[  120.670915][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  120.993692][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  121.368537][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  121.391827][ T6347] udevd[6347]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  121.464821][    T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  121.624675][    T8] usb 2-1: Using ep0 maxpacket: 16
[  121.638816][    T8] usb 2-1: config 0 has an invalid interface number: 53 but max is 0
[  121.722081][    T8] usb 2-1: config 0 has no interface number 0
[  121.743605][    T8] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[  121.894284][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.914536][    T8] usb 2-1: Product: syz
[  121.918707][    T8] usb 2-1: Manufacturer: syz
[  121.923276][    T8] usb 2-1: SerialNumber: syz
[  121.950365][    T8] usb 2-1: config 0 descriptor??
[  122.050485][ T6516] xt_l2tp: missing protocol rule (udp|l2tpip)
[  122.544574][    T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  122.714619][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  122.905229][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  122.935195][ T5884] usb 1-1: config 0 has an invalid interface number: 53 but max is 0
[  122.948168][    T8] usb 3-1: Using ep0 maxpacket: 16
[  123.000922][ T5884] usb 1-1: config 0 has no interface number 0
[  123.033905][    T8] usb 3-1: config 0 has an invalid interface number: 53 but max is 0
[  123.068317][    T8] usb 3-1: config 0 has no interface number 0
[  123.184610][ T5884] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[  123.195248][    T8] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[  123.227127][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.236529][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.259611][ T5884] usb 1-1: Product: syz
[  123.294829][ T5884] usb 1-1: Manufacturer: syz
[  123.312527][ T5884] usb 1-1: SerialNumber: syz
[  123.312633][    T8] usb 3-1: Product: syz
[  123.334970][ T5884] usb 1-1: config 0 descriptor??
[  123.342178][    T8] usb 3-1: Manufacturer: syz
[  123.353676][    T8] usb 3-1: SerialNumber: syz
[  123.376685][    T8] usb 3-1: config 0 descriptor??
[  124.433959][ T5883] usb 2-1: USB disconnect, device number 14
[  124.618083][ T5882] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  124.779088][ T5882] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  124.794153][ T5882] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  124.817653][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  124.843458][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.926593][ T6540] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  124.971232][ T5882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  125.085465][ T6548] fuse: Unknown parameter '�fd0x0000000000000004'
[  125.338429][ T5895] usb 5-1: USB disconnect, device number 10
[  125.455760][ T5882] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  125.489037][ T5883] usb 1-1: USB disconnect, device number 15
[  125.605680][ T5882] usb 2-1: Using ep0 maxpacket: 32
[  125.650272][ T5882] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[  125.681064][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.721446][ T5882] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  125.752444][ T5882] usb 2-1: config 0 has no interface number 1
[  125.762605][ T5882] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  125.787435][ T5882] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  125.814154][ T5895] usb 3-1: USB disconnect, device number 13
[  125.833866][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.885079][ T5882] usb 2-1: Product: syz
[  125.889289][ T5882] usb 2-1: Manufacturer: syz
[  125.893901][ T5882] usb 2-1: SerialNumber: syz
[  125.933558][ T5882] usb 2-1: config 0 descriptor??
[  125.944545][ T5883] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  126.116303][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.134779][ T5883] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  126.160698][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.170989][ T5882] kaweth 2-1:0.235: Firmware present in device.
[  126.194579][ T5883] usb 1-1: config 0 descriptor??
[  126.202639][ T5883] pwc: Askey VC010 type 2 USB webcam detected.
[  126.224614][ T5884] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  126.224616][ T5895] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  126.387455][ T5895] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  126.406587][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.416956][ T5884] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  126.424575][ T5895] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  126.433326][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.454689][ T5895] usb 3-1: config 1 has no interface number 1
[  126.455334][ T5884] usb 4-1: config 0 descriptor??
[  126.471676][ T5895] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  126.478384][ T5884] pwc: Askey VC010 type 2 USB webcam detected.
[  126.501815][ T5895] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.525173][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  126.535300][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.543752][ T5895] usb 3-1: Product: syz
[  126.555817][ T5895] usb 3-1: Manufacturer: syz
[  126.561021][ T5895] usb 3-1: SerialNumber: syz
[  126.634238][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00
[  126.641834][ T5883] pwc: recv_control_msg error -32 req 02 val 2700
[  126.650426][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00
[  126.657959][ T5883] pwc: recv_control_msg error -32 req 04 val 1000
[  126.672285][ T5883] pwc: recv_control_msg error -32 req 04 val 1300
[  126.690190][ T5883] pwc: recv_control_msg error -32 req 04 val 1400
[  126.702296][ T5883] pwc: recv_control_msg error -32 req 02 val 2000
[  126.888162][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00
[  126.906154][ T5884] pwc: recv_control_msg error -32 req 02 val 2700
[  126.917485][ T5883] pwc: recv_control_msg error -71 req 04 val 1500
[  126.928537][ T5883] pwc: recv_control_msg error -71 req 02 val 2500
[  126.938438][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00
[  126.945949][ T5895] usb 3-1: USB disconnect, device number 14
[  126.952086][ T5883] pwc: recv_control_msg error -71 req 02 val 2400
[  126.964596][ T5884] pwc: recv_control_msg error -32 req 04 val 1000
[  126.971793][ T5883] pwc: recv_control_msg error -71 req 02 val 2600
[  126.979134][ T5884] pwc: recv_control_msg error -32 req 04 val 1300
[  126.988179][ T5882] kaweth 2-1:0.235: Error reading configuration (-71), no net device created
[  127.005040][ T5882] kaweth 2-1:0.235: probe with driver kaweth failed with error -5
[  127.014306][ T5883] pwc: recv_control_msg error -71 req 02 val 2900
[  127.025711][ T5884] pwc: recv_control_msg error -32 req 04 val 1400
[  127.043148][ T5883] pwc: recv_control_msg error -71 req 02 val 2800
[  127.052786][ T5884] pwc: recv_control_msg error -32 req 02 val 2000
[  127.073005][ T5883] pwc: recv_control_msg error -71 req 04 val 1100
[  127.081392][ T5884] pwc: recv_control_msg error -71 req 02 val 2100
[  127.100675][ T5882] kaweth 2-1:0.0: Firmware present in device.
[  127.107415][ T5883] pwc: recv_control_msg error -71 req 04 val 1200
[  127.113975][ T5884] pwc: recv_control_msg error -71 req 04 val 1500
[  127.124698][ T5882] kaweth 2-1:0.0: Error reading configuration (-71), no net device created
[  127.144929][ T5884] pwc: recv_control_msg error -71 req 02 val 2500
[  127.151637][ T5883] pwc: Registered as video103.
[  127.156878][ T5882] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  127.169664][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  127.179487][ T5884] pwc: recv_control_msg error -71 req 02 val 2400
[  127.199891][ T5884] pwc: recv_control_msg error -71 req 02 val 2600
[  127.210763][ T5882] usb 2-1: USB disconnect, device number 15
[  127.229049][ T5884] pwc: recv_control_msg error -71 req 02 val 2900
[  127.254940][ T5883] usb 1-1: USB disconnect, device number 16
[  127.277119][ T5884] pwc: recv_control_msg error -71 req 02 val 2800
[  127.303530][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[  127.320180][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[  127.364697][ T5884] pwc: Registered as video103.
[  127.412378][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.430171][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  127.505521][ T5884] usb 4-1: USB disconnect, device number 13
[  127.604541][ T5882] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  127.774548][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  127.796289][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.809392][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.834676][ T5882] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  127.855402][ T5882] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  127.865337][ T5883] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  127.876681][ T5882] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  127.893728][ T5882] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.903450][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  127.909386][ T6572] netlink: 108 bytes leftover after parsing attributes in process `syz.3.183'.
[  127.912593][ T5882] usb 2-1: SerialNumber: syz
[  127.933421][ T6565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  127.942545][ T5882] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  127.952948][ T5882] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  128.004853][ T5895] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  128.034684][ T5883] usb 1-1: Using ep0 maxpacket: 16
[  128.041199][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  128.056586][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  128.070789][ T5883] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  128.079967][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.090217][ T5883] usb 1-1: Product: syz
[  128.094375][ T5883] usb 1-1: Manufacturer: syz
[  128.099043][ T5883] usb 1-1: SerialNumber: syz
[  128.107755][ T5883] usb 1-1: config 0 descriptor??
[  128.115614][ T5883] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  128.125000][ T5883] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  128.153199][ T5884] usb 2-1: USB disconnect, device number 16
[  128.175052][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.186495][ T5895] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  128.196116][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.206009][ T5895] usb 3-1: config 0 descriptor??
[  128.217514][ T5895] pwc: Askey VC010 type 2 USB webcam detected.
[  128.234609][ T5882] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  128.386484][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.397775][ T5882] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  128.407221][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.418111][ T5882] usb 4-1: config 0 descriptor??
[  128.427169][ T5882] pwc: Askey VC010 type 2 USB webcam detected.
[  128.637824][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00
[  128.647668][ T5895] pwc: recv_control_msg error -32 req 02 val 2700
[  128.658434][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00
[  128.672638][ T5895] pwc: recv_control_msg error -32 req 04 val 1000
[  128.681969][ T5895] pwc: recv_control_msg error -32 req 04 val 1300
[  128.699221][ T5895] pwc: recv_control_msg error -32 req 04 val 1400
[  128.715014][ T5895] pwc: recv_control_msg error -32 req 02 val 2000
[  128.728364][ T5883] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  128.832553][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00
[  128.840212][ T5882] pwc: recv_control_msg error -32 req 02 val 2700
[  128.847925][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00
[  128.855565][ T5882] pwc: recv_control_msg error -32 req 04 val 1000
[  128.863719][ T5882] pwc: recv_control_msg error -32 req 04 val 1300
[  128.871428][ T5882] pwc: recv_control_msg error -32 req 04 val 1400
[  128.879212][ T5882] pwc: recv_control_msg error -32 req 02 val 2000
[  128.892687][ T5882] pwc: recv_control_msg error -71 req 02 val 2100
[  128.905479][ T5882] pwc: recv_control_msg error -71 req 04 val 1500
[  128.912329][ T5882] pwc: recv_control_msg error -71 req 02 val 2500
[  128.919341][ T5882] pwc: recv_control_msg error -71 req 02 val 2400
[  128.926334][ T5882] pwc: recv_control_msg error -71 req 02 val 2600
[  128.926869][ T5895] pwc: recv_control_msg error -71 req 04 val 1500
[  128.933262][ T5882] pwc: recv_control_msg error -71 req 02 val 2900
[  128.942837][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.948359][ T5882] pwc: recv_control_msg error -71 req 02 val 2800
[  128.962924][ T5882] pwc: recv_control_msg error -71 req 04 val 1100
[  128.966669][ T5895] pwc: recv_control_msg error -71 req 02 val 2500
[  128.973304][ T5882] pwc: recv_control_msg error -71 req 04 val 1200
[  128.979843][ T5895] pwc: recv_control_msg error -71 req 02 val 2400
[  128.983278][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.991245][ T5895] pwc: recv_control_msg error -71 req 02 val 2600
[  129.010093][ T5882] pwc: Registered as video103.
[  129.013802][ T5895] pwc: recv_control_msg error -71 req 02 val 2900
[  129.017238][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  129.023349][ T5895] pwc: recv_control_msg error -71 req 02 val 2800
[  129.043916][ T5882] usb 4-1: USB disconnect, device number 14
[  129.044969][ T5895] pwc: recv_control_msg error -71 req 04 val 1100
[  129.061071][ T5883] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  129.063990][ T5895] pwc: recv_control_msg error -71 req 04 val 1200
[  129.069743][ T5883] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  129.076837][ T5895] pwc: Registered as video103.
[  129.083691][ T5883] em28xx 1-1:0.0: No AC97 audio processor
[  129.096421][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  129.107211][ T5883] usb 1-1: USB disconnect, device number 17
[  129.114847][ T5883] em28xx 1-1:0.0: Disconnecting em28xx
[  129.136060][ T5883] em28xx 1-1:0.0: Freeing device
[  129.165787][ T5895] usb 3-1: USB disconnect, device number 15
[  129.206170][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  129.364575][ T5884] usb 2-1: Using ep0 maxpacket: 16
[  129.391295][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  129.422712][ T5884] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  129.441337][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  129.472019][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.481287][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  129.496994][ T5884] usb 2-1: SerialNumber: syz
[  129.510567][ T6580] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  129.645400][ T6588] capability: warning: `syz.4.188' uses 32-bit capabilities (legacy support in use)
[  129.744002][ T5884] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  129.762005][ T5884] usb 2-1: USB disconnect, device number 17
[  129.791703][ T6591] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.190'.
[  129.801117][ T6591] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  129.934558][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  129.944635][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  130.044640][ T5882] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  130.084620][ T5883] usb 3-1: Using ep0 maxpacket: 8
[  130.092440][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.108155][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.109222][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  130.119050][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  130.130627][ T5895] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  130.148530][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.148702][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  130.166276][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.171528][ T5883] usb 3-1: config 0 descriptor??
[  130.178115][ T6588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  130.190153][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  130.224703][ T5882] usb 1-1: Using ep0 maxpacket: 32
[  130.257540][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  130.287151][ T5882] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  130.297815][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.306516][ T5882] usb 1-1: Product: syz
[  130.311090][ T5882] usb 1-1: Manufacturer: syz
[  130.315813][ T5882] usb 1-1: SerialNumber: syz
[  130.323454][ T5882] usb 1-1: config 0 descriptor??
[  130.330053][ T6591] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  130.347997][ T5882] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  130.533466][ T5832] usb 5-1: USB disconnect, device number 11
[  130.603838][ T5883] microsoft 0003:045E:009D.0002: unknown main item tag 0x0
[  130.613759][ T5895] usb 1-1: USB disconnect, device number 18
[  130.625207][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  130.653996][ T5883] microsoft 0003:045E:009D.0002: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0
[  130.682484][ T5883] microsoft 0003:045E:009D.0002: no inputs found
[  130.691107][ T5883] microsoft 0003:045E:009D.0002: could not initialize ff, continuing anyway
[  130.796640][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.824523][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.828315][  T972] usb 3-1: USB disconnect, device number 16
[  130.855740][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.881953][ T5882] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  130.891320][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.902079][ T5882] usb 2-1: config 0 descriptor??
[  130.904180][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'.
[  131.640626][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  131.652160][ T6598] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.691371][ T5882] usb 2-1: string descriptor 0 read error: -71
[  131.734206][  T972] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  131.735061][ T5882] uclogic 0003:5543:004D.0003: failed retrieving string descriptor #200: -71
[  131.769677][ T5882] uclogic 0003:5543:004D.0003: failed retrieving pen parameters: -71
[  131.794378][ T5882] uclogic 0003:5543:004D.0003: failed probing pen v2 parameters: -71
[  131.814219][ T5882] uclogic 0003:5543:004D.0003: failed probing parameters: -71
[  131.981647][ T5892] usb 1-1: config 0 has no interfaces?
[  131.988443][  T972] usb 5-1: Using ep0 maxpacket: 16
[  132.017897][ T5882] uclogic 0003:5543:004D.0003: probe with driver uclogic failed with error -71
[  132.017904][ T5892] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  132.017927][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.034168][ T5882] usb 2-1: USB disconnect, device number 18
[  132.071587][  T972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  132.101745][  T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.117777][ T5892] usb 1-1: config 0 descriptor??
[  132.133704][  T972] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  132.145765][  T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.162666][  T972] usb 5-1: Product: syz
[  132.171165][  T972] usb 5-1: Manufacturer: syz
[  132.183844][  T972] usb 5-1: SerialNumber: syz
[  132.200403][  T972] usb 5-1: config 0 descriptor??
[  132.222011][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  132.241889][  T972] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  132.263438][  T972] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  132.406423][    T8] usb 3-1: Using ep0 maxpacket: 16
[  132.431311][    T8] usb 3-1: config 0 has an invalid interface number: 53 but max is 0
[  132.440947][    T8] usb 3-1: config 0 has no interface number 0
[  132.474411][    T8] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2
[  132.496932][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.514625][    T8] usb 3-1: Product: syz
[  132.522458][    T8] usb 3-1: Manufacturer: syz
[  132.533255][    T8] usb 3-1: SerialNumber: syz
[  132.545944][    T8] usb 3-1: config 0 descriptor??
[  132.587250][ T6633] FAULT_INJECTION: forcing a failure.
[  132.587250][ T6633] name failslab, interval 1, probability 0, space 0, times 0
[  132.600616][ T6633] CPU: 0 UID: 0 PID: 6633 Comm: syz.1.205 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[  132.600641][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  132.600652][ T6633] Call Trace:
[  132.600659][ T6633]  <TASK>
[  132.600666][ T6633]  dump_stack_lvl+0x241/0x360
[  132.600701][ T6633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.600724][ T6633]  ? __pfx__printk+0x10/0x10
[  132.600759][ T6633]  should_fail_ex+0x3b0/0x4e0
[  132.600792][ T6633]  should_failslab+0xac/0x100
[  132.600815][ T6633]  ? skb_clone+0x20c/0x390
[  132.600832][ T6633]  kmem_cache_alloc_noprof+0x70/0x380
[  132.600858][ T6633]  skb_clone+0x20c/0x390
[  132.600877][ T6633]  __netlink_deliver_tap+0x3cc/0x7f0
[  132.600903][ T6633]  ? netlink_deliver_tap+0x2e/0x1b0
[  132.600918][ T6633]  netlink_deliver_tap+0x19d/0x1b0
[  132.600936][ T6633]  netlink_unicast+0x7c4/0x990
[  132.600968][ T6633]  ? __pfx_netlink_unicast+0x10/0x10
[  132.600990][ T6633]  ? __virt_addr_valid+0x45f/0x530
[  132.601012][ T6633]  ? __phys_addr_symbol+0x2f/0x70
[  132.601031][ T6633]  ? __check_object_size+0x47a/0x730
[  132.601057][ T6633]  netlink_sendmsg+0x8e4/0xcb0
[  132.601086][ T6633]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.601107][ T6633]  ? aa_sock_msg_perm+0x91/0x160
[  132.601137][ T6633]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.601154][ T6633]  __sock_sendmsg+0x221/0x270
[  132.601178][ T6633]  ____sys_sendmsg+0x52a/0x7e0
[  132.601205][ T6633]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.601221][ T6633]  ? __fget_files+0x2a/0x410
[  132.601245][ T6633]  ? __fget_files+0x2a/0x410
[  132.601274][ T6633]  __sys_sendmsg+0x269/0x350
[  132.601296][ T6633]  ? __pfx___sys_sendmsg+0x10/0x10
[  132.601325][ T6633]  ? do_sys_openat2+0x17a/0x1d0
[  132.601372][ T6633]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  132.601394][ T6633]  ? do_syscall_64+0x100/0x230
[  132.601421][ T6633]  ? do_syscall_64+0xb6/0x230
[  132.601446][ T6633]  do_syscall_64+0xf3/0x230
[  132.601469][ T6633]  ? clear_bhb_loop+0x35/0x90
[  132.601490][ T6633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.601521][ T6633] RIP: 0033:0x7f51f5d8cd29
[  132.601536][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.601550][ T6633] RSP: 002b:00007f51f6cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.601575][ T6633] RAX: ffffffffffffffda RBX: 00007f51f5fa5fa0 RCX: 00007f51f5d8cd29
[  132.601587][ T6633] RDX: 000000002000c8c0 RSI: 0000000020006040 RDI: 0000000000000003
[  132.601598][ T6633] RBP: 00007f51f6cbc090 R08: 0000000000000000 R09: 0000000000000000
[  132.601609][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.601619][ T6633] R13: 0000000000000000 R14: 00007f51f5fa5fa0 R15: 00007f51f60cfa28
[  132.601645][ T6633]  </TASK>
[  133.188880][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  133.195294][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  133.229448][  T972] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  133.381907][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[  133.430278][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.438937][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.454229][  T972] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  133.464494][  T972] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  133.472432][  T972] em28xx 5-1:0.0: No AC97 audio processor
[  133.484645][ T5883] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  133.489898][  T972] usb 5-1: USB disconnect, device number 12
[  133.540651][  T972] em28xx 5-1:0.0: Disconnecting em28xx
[  133.568384][  T972] em28xx 5-1:0.0: Freeing device
[  133.656127][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.667296][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.677802][ T5883] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  133.689075][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.729415][ T5883] usb 4-1: config 0 descriptor??
[  133.967511][ T5883] usbhid 4-1:0.0: can't add hid device: -71
[  133.984688][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  134.005877][ T5883] usb 4-1: USB disconnect, device number 15
[  134.121434][ T6654] FAULT_INJECTION: forcing a failure.
[  134.121434][ T6654] name failslab, interval 1, probability 0, space 0, times 0
[  134.138162][ T6654] CPU: 0 UID: 0 PID: 6654 Comm: syz.4.213 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[  134.138178][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  134.138184][ T6654] Call Trace:
[  134.138188][ T6654]  <TASK>
[  134.138193][ T6654]  dump_stack_lvl+0x241/0x360
[  134.138212][ T6654]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.138225][ T6654]  ? __pfx__printk+0x10/0x10
[  134.138239][ T6654]  ? fs_reclaim_acquire+0x93/0x130
[  134.138250][ T6654]  ? __pfx___might_resched+0x10/0x10
[  134.138262][ T6654]  should_fail_ex+0x3b0/0x4e0
[  134.138278][ T6654]  should_failslab+0xac/0x100
[  134.138291][ T6654]  __kmalloc_noprof+0xdd/0x4c0
[  134.138303][ T6654]  ? kstrtouint_from_user+0x128/0x190
[  134.138311][ T6654]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  134.138324][ T6654]  tomoyo_realpath_from_path+0xcf/0x5e0
[  134.138339][ T6654]  tomoyo_path_number_perm+0x236/0x860
[  134.138352][ T6654]  ? __lock_acquire+0x1397/0x2100
[  134.138364][ T6654]  ? tomoyo_path_number_perm+0x206/0x860
[  134.138378][ T6654]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  134.138412][ T6654]  ? __fget_files+0x2a/0x410
[  134.138427][ T6654]  ? __fget_files+0x2a/0x410
[  134.138441][ T6654]  security_file_ioctl+0xc6/0x2a0
[  134.138455][ T6654]  __se_sys_ioctl+0x46/0x170
[  134.138465][ T6654]  do_syscall_64+0xf3/0x230
[  134.138480][ T6654]  ? clear_bhb_loop+0x35/0x90
[  134.138492][ T6654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.138507][ T6654] RIP: 0033:0x7f510cf8cd29
[  134.138516][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.138524][ T6654] RSP: 002b:00007f510de3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.138536][ T6654] RAX: ffffffffffffffda RBX: 00007f510d1a5fa0 RCX: 00007f510cf8cd29
[  134.138542][ T6654] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000003
[  134.138548][ T6654] RBP: 00007f510de3a090 R08: 0000000000000000 R09: 0000000000000000
[  134.138555][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.138560][ T6654] R13: 0000000000000000 R14: 00007f510d1a5fa0 R15: 00007f510d2cfa28
[  134.138574][ T6654]  </TASK>
[  134.138579][ T6654] ERROR: Out of memory at tomoyo_realpath_from_path.
[  134.389098][ T5895] usb 1-1: USB disconnect, device number 19
[  134.614993][  T972] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  134.774832][  T972] usb 2-1: Using ep0 maxpacket: 16
[  134.793428][  T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.823132][ T5892] usb 3-1: USB disconnect, device number 17
[  134.881403][  T972] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  134.890849][ T5883] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  134.898468][  T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  134.898497][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.918240][  T972] usb 2-1: config 0 descriptor??
[  134.946711][ T6672] fuse: Bad value for 'group_id'
[  134.954972][ T6672] fuse: Bad value for 'group_id'
[  134.962374][ T6672] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  135.126606][ T5883] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  135.137652][ T5883] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  135.147060][ T5883] usb 1-1: config 1 has no interface number 1
[  135.160341][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[  135.169721][ T5883] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  135.178969][ T5883] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  135.198177][ T5883] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.208023][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.221146][ T5883] usb 1-1: Product: syz
[  135.242737][ T5883] usb 1-1: Manufacturer: syz
[  135.247613][ T5883] usb 1-1: SerialNumber: syz
[  135.334526][   T80] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  135.484779][   T80] usb 3-1: Using ep0 maxpacket: 32
[  135.496203][   T80] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.510138][   T80] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  135.529191][ T5883] usb 1-1: USB disconnect, device number 20
[  135.536844][   T80] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  135.561748][   T80] usb 3-1: config 0 interface 0 has no altsetting 0
[  135.578542][   T80] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  135.612070][   T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.637048][   T80] usb 3-1: config 0 descriptor??
[  135.737476][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.860521][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.871417][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.925002][ T5832] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  135.946215][ T6685] FAULT_INJECTION: forcing a failure.
[  135.946215][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.959614][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.4.224 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[  135.959637][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  135.959646][ T6685] Call Trace:
[  135.959652][ T6685]  <TASK>
[  135.959658][ T6685]  dump_stack_lvl+0x241/0x360
[  135.959690][ T6685]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.959718][ T6685]  ? __pfx__printk+0x10/0x10
[  135.959746][ T6685]  ? snprintf+0xda/0x120
[  135.959764][ T6685]  should_fail_ex+0x3b0/0x4e0
[  135.959790][ T6685]  _copy_to_user+0x31/0xb0
[  135.959813][ T6685]  simple_read_from_buffer+0xca/0x150
[  135.959836][ T6685]  proc_fail_nth_read+0x1e9/0x250
[  135.959859][ T6685]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.959882][ T6685]  ? rw_verify_area+0x55e/0x6f0
[  135.959906][ T6685]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.959926][ T6685]  vfs_read+0x1fc/0xb70
[  135.959943][ T6685]  ? fdget_pos+0x254/0x320
[  135.959964][ T6685]  ? __pfx___mutex_lock+0x10/0x10
[  135.959987][ T6685]  ? __pfx_vfs_read+0x10/0x10
[  135.960005][ T6685]  ? __fget_files+0x2a/0x410
[  135.960027][ T6685]  ? __fget_files+0x395/0x410
[  135.960047][ T6685]  ? __fget_files+0x2a/0x410
[  135.960084][ T6685]  ksys_read+0x18f/0x2b0
[  135.960103][ T6685]  ? __pfx_ksys_read+0x10/0x10
[  135.960118][ T6685]  ? do_syscall_64+0x100/0x230
[  135.960142][ T6685]  ? do_syscall_64+0xb6/0x230
[  135.960178][ T6685]  do_syscall_64+0xf3/0x230
[  135.960201][ T6685]  ? clear_bhb_loop+0x35/0x90
[  135.960221][ T6685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.960245][ T6685] RIP: 0033:0x7f510cf8b73c
[  135.960260][ T6685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  135.960274][ T6685] RSP: 002b:00007f510de3a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  135.960292][ T6685] RAX: ffffffffffffffda RBX: 00007f510d1a5fa0 RCX: 00007f510cf8b73c
[  135.960305][ T6685] RDX: 000000000000000f RSI: 00007f510de3a0a0 RDI: 0000000000000004
[  135.960315][ T6685] RBP: 00007f510de3a090 R08: 0000000000000000 R09: 0000000000000000
[  135.960325][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.960335][ T6685] R13: 0000000000000000 R14: 00007f510d1a5fa0 R15: 00007f510d2cfa28
[  135.960361][ T6685]  </TASK>
[  136.204652][ T5832] usb 4-1: Using ep0 maxpacket: 16
[  136.214303][   T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  136.222745][   T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  136.246467][   T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  136.254686][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  136.268481][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  136.324841][   T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  136.333143][   T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  136.350187][ T6690] netlink: 340 bytes leftover after parsing attributes in process `syz.4.226'.
[  136.369730][ T5832] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  136.381892][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.385203][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'.
[  136.390506][   T80] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  136.423363][ T5832] usb 4-1: Product: syz
[  136.428940][ T5832] usb 4-1: Manufacturer: syz
[  136.451847][ T5832] usb 4-1: SerialNumber: syz
[  136.461174][   T80] ==================================================================
[  136.471604][   T80] BUG: KASAN: stack-out-of-bounds in usb_check_int_endpoints+0x1fe/0x280
[  136.480041][   T80] Read of size 1 at addr ffffc9000213e831 by task kworker/1:1/80
[  136.487770][   T80] 
[  136.490103][   T80] CPU: 1 UID: 0 PID: 80 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[  136.490124][   T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  136.490136][   T80] Workqueue: usb_hub_wq hub_event
[  136.490173][   T80] Call Trace:
[  136.490179][   T80]  <TASK>
[  136.490186][   T80]  dump_stack_lvl+0x241/0x360
[  136.490214][   T80]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.490237][   T80]  ? __pfx__printk+0x10/0x10
[  136.490259][   T80]  ? _printk+0xd5/0x120
[  136.490281][   T80]  print_report+0x169/0x550
[  136.490299][   T80]  ? process_scheduled_works+0xa66/0x1840
[  136.490323][   T80]  ? kthread+0x7a9/0x920
[  136.490341][   T80]  ? ret_from_fork+0x4b/0x80
[  136.490357][   T80]  ? ret_from_fork_asm+0x1a/0x30
[  136.490372][   T80]  ? __virt_addr_valid+0xbd/0x530
[  136.490393][   T80]  ? usb_check_int_endpoints+0x1fe/0x280
[  136.490411][   T80]  kasan_report+0x143/0x180
[  136.490430][   T80]  ? usb_check_int_endpoints+0x1fe/0x280
[  136.490449][   T80]  usb_check_int_endpoints+0x1fe/0x280
[  136.490467][   T80]  thrustmaster_probe+0x47d/0xcb0
[  136.490485][   T80]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  136.490509][   T80]  ? __pfx_thrustmaster_probe+0x10/0x10
[  136.490525][   T80]  ? hid_match_id+0x308/0x330
[  136.490544][   T80]  ? hid_lookup_quirk+0x32e/0x580
[  136.490565][   T80]  hid_device_probe+0x3bf/0x710
[  136.490587][   T80]  ? really_probe+0x148/0xad0
[  136.490608][   T80]  ? __pfx_hid_device_probe+0x10/0x10
[  136.490626][   T80]  really_probe+0x2b9/0xad0
[  136.490650][   T80]  __driver_probe_device+0x1a2/0x390
[  136.490672][   T80]  driver_probe_device+0x50/0x430
[  136.490694][   T80]  __device_attach_driver+0x2d6/0x530
[  136.490714][   T80]  bus_for_each_drv+0x24e/0x2e0
[  136.490730][   T80]  ? __pfx___device_attach_driver+0x10/0x10
[  136.490750][   T80]  ? __pfx_bus_for_each_drv+0x10/0x10
[  136.490768][   T80]  __device_attach+0x333/0x520
[  136.490785][   T80]  ? __pfx_lock_release+0x10/0x10
[  136.490804][   T80]  ? __pfx___device_attach+0x10/0x10
[  136.490824][   T80]  ? do_raw_spin_unlock+0x13c/0x8b0
[  136.490841][   T80]  bus_probe_device+0x189/0x260
[  136.490858][   T80]  device_add+0x856/0xbf0
[  136.490879][   T80]  hid_add_device+0x3b6/0x520
[  136.490901][   T80]  usbhid_probe+0xb52/0xec0
[  136.490927][   T80]  usb_probe_interface+0x641/0xbb0
[  136.490950][   T80]  ? __pfx_usb_probe_interface+0x10/0x10
[  136.490966][   T80]  really_probe+0x2b9/0xad0
[  136.490989][   T80]  __driver_probe_device+0x1a2/0x390
[  136.491011][   T80]  driver_probe_device+0x50/0x430
[  136.491033][   T80]  __device_attach_driver+0x2d6/0x530
[  136.491055][   T80]  bus_for_each_drv+0x24e/0x2e0
[  136.491071][   T80]  ? __pfx___device_attach_driver+0x10/0x10
[  136.491092][   T80]  ? __pfx_bus_for_each_drv+0x10/0x10
[  136.491111][   T80]  __device_attach+0x333/0x520
[  136.491130][   T80]  ? __pfx_lock_release+0x10/0x10
[  136.491161][   T80]  ? __pfx___device_attach+0x10/0x10
[  136.491182][   T80]  ? do_raw_spin_unlock+0x13c/0x8b0
[  136.491202][   T80]  bus_probe_device+0x189/0x260
[  136.491220][   T80]  device_add+0x856/0xbf0
[  136.491240][   T80]  usb_set_configuration+0x1976/0x1fb0
[  136.491266][   T80]  usb_generic_driver_probe+0x88/0x140
[  136.491290][   T80]  usb_probe_device+0x1b8/0x380
[  136.491306][   T80]  ? __pfx_usb_probe_device+0x10/0x10
[  136.491320][   T80]  really_probe+0x2b9/0xad0
[  136.491342][   T80]  __driver_probe_device+0x1a2/0x390
[  136.491362][   T80]  driver_probe_device+0x50/0x430
[  136.491384][   T80]  __device_attach_driver+0x2d6/0x530
[  136.491405][   T80]  bus_for_each_drv+0x24e/0x2e0
[  136.491421][   T80]  ? __pfx___device_attach_driver+0x10/0x10
[  136.491442][   T80]  ? __pfx_bus_for_each_drv+0x10/0x10
[  136.491459][   T80]  __device_attach+0x333/0x520
[  136.491480][   T80]  ? __pfx___device_attach+0x10/0x10
[  136.491501][   T80]  bus_probe_device+0x189/0x260
[  136.491518][   T80]  device_add+0x856/0xbf0
[  136.491537][   T80]  usb_new_device+0x104a/0x19a0
[  136.491566][   T80]  ? __pfx_usb_new_device+0x10/0x10
[  136.491588][   T80]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.491608][   T80]  ? lockdep_hardirqs_on+0x99/0x150
[  136.491631][   T80]  hub_event+0x2d6d/0x5150
[  136.491673][   T80]  ? __pfx_hub_event+0x10/0x10
[  136.491697][   T80]  ? __pfx_lock_acquire+0x10/0x10
[  136.491716][   T80]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  136.491737][   T80]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  136.491760][   T80]  ? process_scheduled_works+0x976/0x1840
[  136.491785][   T80]  process_scheduled_works+0xa66/0x1840
[  136.491821][   T80]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.491849][   T80]  ? assign_work+0x364/0x3d0
[  136.491875][   T80]  worker_thread+0x870/0xd30
[  136.491896][   T80]  ? __kthread_parkme+0x169/0x1d0
[  136.491915][   T80]  ? __pfx_worker_thread+0x10/0x10
[  136.491932][   T80]  kthread+0x7a9/0x920
[  136.491951][   T80]  ? __pfx_kthread+0x10/0x10
[  136.491970][   T80]  ? __pfx_worker_thread+0x10/0x10
[  136.491987][   T80]  ? __pfx_kthread+0x10/0x10
[  136.492005][   T80]  ? __pfx_kthread+0x10/0x10
[  136.492025][   T80]  ? __pfx_kthread+0x10/0x10
[  136.492042][   T80]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.492062][   T80]  ? lockdep_hardirqs_on+0x99/0x150
[  136.492083][   T80]  ? __pfx_kthread+0x10/0x10
[  136.492102][   T80]  ret_from_fork+0x4b/0x80
[  136.492120][   T80]  ? __pfx_kthread+0x10/0x10
[  136.492146][   T80]  ret_from_fork_asm+0x1a/0x30
[  136.492169][   T80]  </TASK>
[  136.492176][   T80] 
[  137.004210][   T80] The buggy address belongs to stack of task kworker/1:1/80
[  137.011480][   T80]  and is located at offset 49 in frame:
[  137.017098][   T80]  thrustmaster_probe+0x0/0xcb0
[  137.021950][   T80] 
[  137.024261][   T80] This frame has 2 objects:
[  137.028746][   T80]  [32, 36) 'trans.i'
[  137.028757][   T80]  [48, 49) 'ep_addr.i'
[  137.032717][   T80] 
[  137.039152][   T80] The buggy address belongs to the virtual mapping at
[  137.039152][   T80]  [ffffc90002138000, ffffc90002141000) created by:
[  137.039152][   T80]  copy_process+0x5d1/0x3d50
[  137.056766][   T80] 
[  137.059088][   T80] The buggy address belongs to the physical page:
[  137.065492][   T80] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fa96
[  137.074236][   T80] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  137.081348][   T80] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  137.089978][   T80] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  137.098546][   T80] page dumped because: kasan: bad access detected
[  137.104950][   T80] page_owner tracks the page as allocated
[  137.110648][   T80] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 51, tgid 51 (kworker/u8:3), ts 3826283846, free_ts 0
[  137.128518][   T80]  post_alloc_hook+0x1f3/0x230
[  137.133277][   T80]  get_page_from_freelist+0x365c/0x37a0
[  137.138819][   T80]  __alloc_pages_noprof+0x292/0x710
[  137.144005][   T80]  alloc_pages_mpol_noprof+0x3e1/0x780
[  137.149462][   T80]  __vmalloc_node_range_noprof+0x9c9/0x1380
[  137.155340][   T80]  dup_task_struct+0x444/0x8c0
[  137.160094][   T80]  copy_process+0x5d1/0x3d50
[  137.164678][   T80]  kernel_clone+0x226/0x8e0
[  137.169166][   T80]  user_mode_thread+0x132/0x1a0
[  137.174001][   T80]  call_usermodehelper_exec_work+0x5c/0x230
[  137.179887][   T80]  process_scheduled_works+0xa66/0x1840
[  137.185423][   T80]  worker_thread+0x870/0xd30
[  137.190000][   T80]  kthread+0x7a9/0x920
[  137.194057][   T80]  ret_from_fork+0x4b/0x80
[  137.198465][   T80]  ret_from_fork_asm+0x1a/0x30
[  137.203306][   T80] page_owner free stack trace missing
[  137.208658][   T80] 
[  137.210970][   T80] Memory state around the buggy address:
[  137.216584][   T80]  ffffc9000213e700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  137.224631][   T80]  ffffc9000213e780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  137.232676][   T80] >ffffc9000213e800: f1 f1 f1 f1 04 f2 01 f3 00 00 00 00 00 00 00 00
[  137.240717][   T80]                                      ^
[  137.246330][   T80]  ffffc9000213e880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  137.254376][   T80]  ffffc9000213e900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  137.262423][   T80] ==================================================================
[  137.293329][ T5832] usb 4-1: config 0 descriptor??
[  137.323021][ T5832] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  137.340855][ T5832] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  137.384307][   T80] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  137.391541][   T80] CPU: 1 UID: 0 PID: 80 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0
[  137.401785][   T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  137.411839][   T80] Workqueue: usb_hub_wq hub_event
[  137.416870][   T80] Call Trace:
[  137.420136][   T80]  <TASK>
[  137.423054][   T80]  dump_stack_lvl+0x241/0x360
[  137.427725][   T80]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.432912][   T80]  ? __pfx__printk+0x10/0x10
[  137.437493][   T80]  ? preempt_schedule+0xe1/0xf0
[  137.442335][   T80]  ? vscnprintf+0x5d/0x90
[  137.446651][   T80]  panic+0x349/0x880
[  137.450537][   T80]  ? check_panic_on_warn+0x21/0xb0
[  137.455639][   T80]  ? __pfx_panic+0x10/0x10
[  137.460047][   T80]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  137.466016][   T80]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.472332][   T80]  ? print_report+0x502/0x550
[  137.477000][   T80]  check_panic_on_warn+0x86/0xb0
[  137.481941][   T80]  ? usb_check_int_endpoints+0x1fe/0x280
[  137.487561][   T80]  end_report+0x77/0x160
[  137.491791][   T80]  kasan_report+0x154/0x180
[  137.496287][   T80]  ? usb_check_int_endpoints+0x1fe/0x280
[  137.501909][   T80]  usb_check_int_endpoints+0x1fe/0x280
[  137.507363][   T80]  thrustmaster_probe+0x47d/0xcb0
[  137.512382][   T80]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  137.518359][   T80]  ? __pfx_thrustmaster_probe+0x10/0x10
[  137.523889][   T80]  ? hid_match_id+0x308/0x330
[  137.528556][   T80]  ? hid_lookup_quirk+0x32e/0x580
[  137.533571][   T80]  hid_device_probe+0x3bf/0x710
[  137.538414][   T80]  ? really_probe+0x148/0xad0
[  137.543084][   T80]  ? __pfx_hid_device_probe+0x10/0x10
[  137.548444][   T80]  really_probe+0x2b9/0xad0
[  137.552938][   T80]  __driver_probe_device+0x1a2/0x390
[  137.558214][   T80]  driver_probe_device+0x50/0x430
[  137.563230][   T80]  __device_attach_driver+0x2d6/0x530
[  137.568593][   T80]  bus_for_each_drv+0x24e/0x2e0
[  137.573427][   T80]  ? __pfx___device_attach_driver+0x10/0x10
[  137.579308][   T80]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.584670][   T80]  __device_attach+0x333/0x520
[  137.590668][   T80]  ? __pfx_lock_release+0x10/0x10
[  137.595952][   T80]  ? __pfx___device_attach+0x10/0x10
[  137.601234][   T80]  ? do_raw_spin_unlock+0x13c/0x8b0
[  137.606429][   T80]  bus_probe_device+0x189/0x260
[  137.611276][   T80]  device_add+0x856/0xbf0
[  137.615604][   T80]  hid_add_device+0x3b6/0x520
[  137.620321][   T80]  usbhid_probe+0xb52/0xec0
[  137.626661][   T80]  usb_probe_interface+0x641/0xbb0
[  137.631772][   T80]  ? __pfx_usb_probe_interface+0x10/0x10
[  137.637395][   T80]  really_probe+0x2b9/0xad0
[  137.641896][   T80]  __driver_probe_device+0x1a2/0x390
[  137.647180][   T80]  driver_probe_device+0x50/0x430
[  137.652206][   T80]  __device_attach_driver+0x2d6/0x530
[  137.657573][   T80]  bus_for_each_drv+0x24e/0x2e0
[  137.662414][   T80]  ? __pfx___device_attach_driver+0x10/0x10
[  137.668297][   T80]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.673654][   T80]  __device_attach+0x333/0x520
[  137.678410][   T80]  ? __pfx_lock_release+0x10/0x10
[  137.683429][   T80]  ? __pfx___device_attach+0x10/0x10
[  137.688717][   T80]  ? do_raw_spin_unlock+0x13c/0x8b0
[  137.693909][   T80]  bus_probe_device+0x189/0x260
[  137.698748][   T80]  device_add+0x856/0xbf0
[  137.703088][   T80]  usb_set_configuration+0x1976/0x1fb0
[  137.708546][   T80]  usb_generic_driver_probe+0x88/0x140
[  137.713997][   T80]  usb_probe_device+0x1b8/0x380
[  137.718839][   T80]  ? __pfx_usb_probe_device+0x10/0x10
[  137.724217][   T80]  really_probe+0x2b9/0xad0
[  137.728715][   T80]  __driver_probe_device+0x1a2/0x390
[  137.733992][   T80]  driver_probe_device+0x50/0x430
[  137.739013][   T80]  __device_attach_driver+0x2d6/0x530
[  137.744376][   T80]  bus_for_each_drv+0x24e/0x2e0
[  137.749212][   T80]  ? __pfx___device_attach_driver+0x10/0x10
[  137.755096][   T80]  ? __pfx_bus_for_each_drv+0x10/0x10
[  137.760457][   T80]  __device_attach+0x333/0x520
[  137.765213][   T80]  ? __pfx___device_attach+0x10/0x10
[  137.770489][   T80]  bus_probe_device+0x189/0x260
[  137.775335][   T80]  device_add+0x856/0xbf0
[  137.779657][   T80]  usb_new_device+0x104a/0x19a0
[  137.784502][   T80]  ? __pfx_usb_new_device+0x10/0x10
[  137.789690][   T80]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.794885][   T80]  ? lockdep_hardirqs_on+0x99/0x150
[  137.800073][   T80]  hub_event+0x2d6d/0x5150
[  137.804498][   T80]  ? __pfx_hub_event+0x10/0x10
[  137.809260][   T80]  ? __pfx_lock_acquire+0x10/0x10
[  137.814275][   T80]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  137.820248][   T80]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  137.826567][   T80]  ? process_scheduled_works+0x976/0x1840
[  137.832278][   T80]  process_scheduled_works+0xa66/0x1840
[  137.837831][   T80]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.843807][   T80]  ? assign_work+0x364/0x3d0
[  137.848389][   T80]  worker_thread+0x870/0xd30
[  137.852967][   T80]  ? __kthread_parkme+0x169/0x1d0
[  137.857980][   T80]  ? __pfx_worker_thread+0x10/0x10
[  137.863077][   T80]  kthread+0x7a9/0x920
[  137.867135][   T80]  ? __pfx_kthread+0x10/0x10
[  137.871715][   T80]  ? __pfx_worker_thread+0x10/0x10
[  137.876814][   T80]  ? __pfx_kthread+0x10/0x10
[  137.881390][   T80]  ? __pfx_kthread+0x10/0x10
[  137.885969][   T80]  ? __pfx_kthread+0x10/0x10
[  137.890545][   T80]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.895733][   T80]  ? lockdep_hardirqs_on+0x99/0x150
[  137.900922][   T80]  ? __pfx_kthread+0x10/0x10
[  137.905503][   T80]  ret_from_fork+0x4b/0x80
[  137.909909][   T80]  ? __pfx_kthread+0x10/0x10
[  137.914494][   T80]  ret_from_fork_asm+0x1a/0x30
[  137.919257][   T80]  </TASK>
[  137.922564][   T80] Kernel Offset: disabled
[  137.926876][   T80] Rebooting in 86400 seconds..