last executing test programs:

10.113298226s ago: executing program 3 (id=1176):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f"], 0x60}}, 0x20004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)

9.734902876s ago: executing program 2 (id=1178):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8061)
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x2aa41)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="704e262a09000000ba0000"])
timer_create(0x2, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_create1(0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x505003, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0x7}, 0x0)
add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fe", 0x35, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100000001}}, 0x30)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "00001000", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})
socket$inet_udp(0x2, 0x2, 0x0)

9.554107942s ago: executing program 3 (id=1181):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
socket(0x1e, 0x4, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x43f4, 0xed53, 0x64, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00')
r12 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r12, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000200)=ANY=[@ANYRES16=r11, @ANYRESOCT=r9, @ANYRES64=r11], 0x0, 0x0})
syz_usb_control_io$hid(r12, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r12, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r12, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.681214296s ago: executing program 2 (id=1191):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f72"], 0x60}}, 0x20004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)

5.376427597s ago: executing program 2 (id=1194):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r0)

5.181337319s ago: executing program 2 (id=1196):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
mremap(&(0x7f0000392000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) (rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00222200000096010907000000000000000000b3"], 0x0}, 0x0)

5.03889305s ago: executing program 3 (id=1199):
r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9003, 0x1, 0x286, [0x4000000002c0, 0x4000000002f0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/646]}, 0x2fe)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x0, 0xc, 0x2, &(0x7f0000000080)={0x11, "497d59b206a5b8c57da372261092c071d7c1486b634a572c55cf75ef98e6068fd3"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, 0x0, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(0xffffffffffffffff, &(0x7f0000000200)='7', 0x1)
write$char_usb(r4, &(0x7f0000000080)='V', 0x1)
syz_usb_disconnect(r3)
r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x20001, 0x8)
r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0100001000130428bd700000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x804)
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, <r8=>0x0}, {<r9=>0x80000000}}]})
pread64(r5, 0x0, 0x0, 0xe)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000400)={r9, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000, <r10=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x1, 0x8]}, {0x80000000, r8, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]})
r11 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{0x80000000, <r12=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000400)={{0x80000000, r10, 0x6, [0x0, 0x80000000]}, {0x80000000, r12, 0x2, [0x4, 0xe4c]}, 0x4, [0xffffffe]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), 0x0})
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000240)=[{}, {0x80000000, <r13=>0x0}], &(0x7f0000000940)})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r12, 0x4, [0x6c2, 0x2]}, {0x80000000, r13, 0x3, [0x1, 0x7]}, 0x1, [0xd, 0x7e16]})

4.585295448s ago: executing program 4 (id=1200):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff07", 0x2}, {0x0}, {&(0x7f0000000040)}], 0x3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x9}, 'port1\x00', 0x80, 0x800, 0x0, 0x1, 0x9, 0x5, 0x9e6b, 0x0, 0x4, 0x8})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) (async)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff07", 0x2}, {0x0}, {&(0x7f0000000040)}], 0x3) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x9}, 'port1\x00', 0x80, 0x800, 0x0, 0x1, 0x9, 0x5, 0x9e6b, 0x0, 0x4, 0x8}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async)

4.296182606s ago: executing program 4 (id=1201):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x6b8d, 0x40100)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000300)={0x8, 0x10, [0x9, 0x7fffffff, 0x7, 0x1]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x1)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x23, 0x19, {0x19, 0xe, "a124a096411fc41f443448b151c72672adfca31291d5b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, &(0x7f0000000280)={0x34, &(0x7f00000000c0)={0x0, 0x17, 0x64, "bb382a86fb20272aecb4c639001a6e953cc87583a6aecc73820b989ac05584814058553060b2f830d8ebb17579369cc003b6b38f560d5e170500d58794d30109966dd6b562be793a8287a768334e1ea523d428218c653e84a1fb20bf03eddd32e2be9dc4"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x9d}, &(0x7f00000001c0)={0xc0, 0xa1, 0x4, 0xf2}, &(0x7f0000000200)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000240)={0xc0, 0xa2, 0x2f, "2ba722a233892d11b6897960b745ae544998f5f937cef55828029c9662b2daaa6e3171a99b1ef11e943663192a972b"}})

4.105158374s ago: executing program 0 (id=1203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e6400000008000700000000"], 0x4c}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x400, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0x1f00}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3.676733739s ago: executing program 1 (id=1204):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f72"], 0x60}}, 0x20004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)

3.481834086s ago: executing program 1 (id=1205):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0", 0x97}], 0x1}}], 0x2, 0x2000c044)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000480)="7a76663f4889d470b45705a0288f1ebe8b509127b8b587b2fce7daff32f61d0a58688a27989f9510f283840ddef411b1e61a2988b93e0c93ff9937b0819569976c09e9b1", 0x44}, {&(0x7f0000000080)="b36451453419d8fb697fa8f800497bd7a1e3510d13670076a261420e9a30da094ed964a2a7ea37244499041d", 0x2c}, {&(0x7f0000000440)="7399aec3e67ca47a", 0x8}, {&(0x7f0000000700)="3533abcadaa3f1cfbea1aad6d82ac66dc15aa510d66d388a3b6a8943ea8153c0dd61a95ef79ec44fb8439c0b2abd84bd384ce481aa2c7174781d59e9aebb42e2f21b2c6c743dcd42c170e5c5243e43f466f99323aa5a938c3b01a303ccee7dc188975353403432c37f685d572a94bf89875f6ef90cda115c3908add60b98c7b91abd344adac1c5b75b0bf910ed05d6718e7f7b9e6ef87570587269", 0x9b}, {&(0x7f00000017c0)="9ea39d26dbe94ed35776c773ff3895ce093f55ea3d35400fde3c6add70c0209f853cb3da776900d5e4c070fcdac4c0d7e07e2d7b087b2f62369e8a60906a130488df9dfd7bdc3dc3e1afbfc087a637c50a01d29e3d71376c5a6964d6cc53c4cbb38db5c4a97c6cbffcd55b1bf6c95e77d76fa086decab24b46b5e8bfe64b4d11072b6f8b94b1113ca9c9f643f42c5c61e04666d4e56b3706dd76158d1c32047d323255ab3e6885acbbf2f1f3e9c44718706908ec28824961035134ce95af4981a85bcca1794fdbccfe12050a57245de97331fb1b1972b23ce0194e3f03fe13ac5411a24d37e4d591d9880cebdf10fb00ffd39265d1e3647ad203bfd15d9f62e5b4efb6caaaefd01f59dde6722ef6b147f7d173bc9954fc1db0f2909f5b0626819951026dac6c7570097c738b6abeff04317ca63b6b39115287ac47e1e81f083a4d46bd7504ddece3ba3c3eb2efaf289e54190755b2038f39abbbaef2b7a5b1902d95286b3dd3812aefde7643cadd04abe5dd156f02b60f6b593386ddb16061cb80c120e8500a7e179d8be90298e2b4cdb9002cb8076b52f58eb6dd5e446acfbda4efe097aeefba116b801dffc541779e82504ef2b3b102346fa16e966d169be34ea314d2c6cb741920a5fc0aa7c076b6430301dd77e7876607689c49f5d8771dc7d5da5912b83702f523b55a69c082d0e4a1f624f764564a0af7e1f5999a52ddf21b00fed90eb1a63c42e884f59be2574cae82d97405825d5a5a80e93e1d7372d08e25c7fdcd86bf9c194fe8caefc6b008f9c0fb7a867ed1aa112a4a970385b91fefb0f0152dffc9ad92a558ceedf579c9cdc25ce4fd525d3c2ca6e49862c0c642f240e33f01d6e6af722fae2a4c73bacf837f65a07ee35f675abbe603eb7d8ae798b78dd9038bf32cc93061a171374149ad3c28647f6cb4b528eb7a6dabe73cad56fda895442e34a44d7765047b2fdabf778d1d09e65b147acf56ea53890c2a2c3814f76f2071fe0acbbd655fcb8d7252ef2af29d7916bace0964e355f4d17ee2b28f958e89243130feac9076513a58632ea9c0c54abf15790ab0d28d6e3eb5033a4c348d7d10113cfceacabae1b3c246fb0728812370b4f870107e343e1d8bb3194ffc2950d1816f5f64d70d9b06e7a4cba93e39b00a66d9eb5952e7de9b1ac1ab46f7e050185859b7fc095a9203858db15481d479a8d2cc6c6302f731d3aa687f976c4bb41cab3a229fd5db49a9b898b6afd9373b1e87d940128bb551cd0d0bd2f12cd216efecdcdae626a503f0ae068dd423c7ea55129f73aa1880a9ac858807224106516327f1f4dadb2995493c56b4acb0ab247edaf052402e0ab50c5d6fe7e2caf18a104af2f11321c75734f20842a716ae7e8cca3290a86ec6c0970d3373d77afd1b90b446b80bfcc50ac28a7e0e6b9601e17eb2e70d5cf0fa450fde4743c658af7f5b2b95960a7513040dc005512d00e68fb1", 0x417}], 0x5)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8)

3.381280905s ago: executing program 1 (id=1206):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r3, &(0x7f0000003f80)={&(0x7f0000002a00)={0xa, 0x4e24, 0x6, @empty, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000022c0)=[@hopopts={{0x70, 0x29, 0x36, {0x88, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x7, [0xe, 0x1, 0x8000, 0x3, 0x8, 0xffffffffffffffff, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x88}, 0x850)
dup(r1)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x1, 0x401, 0x8, 0x447c, 0xc})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002280)={&(0x7f0000000280)="da116684ad70879774a5f55a2463362c8989bc28118987952be50bfba9b1476fa0006138f488e6b162ddc49909b829e9cf0d53000e8dbbbb674901bceb4a714482ab11f0cdfdfbfbec40e4af45e6e8ab4c94ed76620c5e9d2a3b03149fab9dacf16de1b548d592d11464b708f4bf5262b9ed375030dddca37a32f89b425fe06579908b10cb7009c8dd67bf84b62e4be64c1745c9194fc395074c0a2bd402704f9d450a19f1b7da9c083d8359e97d9b6a77dda9b3191ac3a894b220b79806494e9163ecaf6aeab09d6e9fccbf63637e62cc61fc1c268fc06f4e60560973123faf0e6693b44404c68e7e8b07a3a7cae615730ad30a8e1bd0bcde5eea1503f71872abe096b1a4a13863098771a970e65c9f2675c40580ef06988d856c84502eb87005858d28256fa56e990ec287dc6efd0b2d8e79c7255e65e7a31ae7bb4d6195bcfb1b005917ff29ab677c1a34190c04b23d1174d4ddf0dc6ec3e894dccbc1fabe763aa1e78d580822b83a3088b3fd70457d4a2f791dc0f5c0f62f20befc308ed57a6057b44a7abeba962c56525470ec5b192e2aa3d714fc64f059affd8a8cdc338e4914b52aaab804e7b9102c2e8141c370622b3f0a5c8761beb6a03b7b8e7c221cd17bc24bb109c7f23812c774c649a2cb26d13810a95bb0728e4656d75427450a338df48e949c0c0622211740c41e0edcd22c0b2b1bd6bc901270ae8844b60837b79bd78a87a2dba659ea9a7c2fb8f830f64fbf8c0023ff8049f1546aa85a689dca05f72e87df05783203f5608667eb2bd226a7797fe431aa96c6045a49f07c662dd26632b6bde68fff8cdfc71a5f4a976bbfa0a46958649b91f24f7b0884dec4a395214564875113b843b93f02ee83473362b37114ed3308c336da3afa6c1145de8324020471589ebac92a7725195de3ce6166410536260398e9419dc5b56e062a1ef7a1d20fe8a5d509f5e3733828c77cc077c18947e23feaceafd8cc2e3330511873149d2e9bc675be94fbcef0350f5421ab9f275483f9ead35427542bc23256379da91a7138173112fd84233a735d50fda644512aa358104ef619b013bb54e7ec1dc306b8dff9136c5a2b23ae2ee5e16ab5f14e2f378dc71082a0c57e495b1da6baaa3c9e919e4c0954b7e90b27c999e72b86eef72d65ce3c7708a0367552bf876aac3f0d63bdb1396dcf405e64863938618203729b457a148fd7df8c0b2a2d1c6342dccc62ec0c3a6236d8a8ab5489a915104bfd15d6803d93e7f872f309d45b872217828742cb4b124837069a9fbfa6a98267eb15728576168b0de11579e42779666bb09da21dcc024da178f27f7bfffbe87e40d3d13ab1d4b6de31af6268634dd0c9abff1c707381ac4911ac7e60cb35340a5e24cbe734bbc489a36b9667086b255ee2ebaf503d28c513af45f05dfa0eb2a57f6191c72f9d8a6056c9bd71052850fc56125d693d7c785b74831e7f26f7794a677795994fe8e9a845cbff60a4b666fa15216fa08e8449ea6849702d55b76305ed1120e5a2e1a9df2f155b578e75c023fafd5086e67c3b26ae12487ecbb28683fc9e762e5fc2b28649961b2111c3e825df19f5301491bf90d8bd0279eda86465db4dacdd61a50b914145755980d79df0507548da759e194fe49dc62f7cd50607482d1d08cfa55b39b46cc77225d9603f4e7a14ff653d30ea5779803884cbe3bfd04c2e956d480bd2803d96159d446070cf548b14f4f1d6a56178e2c51bd561bdfdb4c2534aad7c185a578a0184cd39a662fcde9511ace0dee7873af7ce49715c85e5839992dbed7a82b6700e549be0c28e25369abc1310c2891d457de8c7b197df95fd2c181548a78ea4d536f33a95a7e52eec542e4ab6d9dd5520200c43deba7e0f0c43f4b5d974ac9ba0a7cbffd2d43e054233e32604e4528c6558fed3c7eac6530e9e7d002d4ee202fa349c8eb83f62f6b2e3888be660b42f7885d70211175d6de105b3b5573dda34daa93498e503f77a99b532198f16b80adf5d8507c6951eb64484517e3e50c4365d4d9a2814146b06de57759fe6ba9d3aa600d4a8dcd2db93f5298f3d1dbdf582a69c9cc7a8af21bc5969f8a320b37dd4c6402aae8f5d86a5d4c9a7dcea49986b4c3e4d3eece4453f7f0d6593e582b2fa1630ab073424bbd48255ab9cbac2f3616b627135b522f927034f9bdf7d666d01326f0a3d1920955f60e86f73f14171ec86a9cab8905d97fb0570aec55e5a530d05a06b2744f3ccb116210ff3d45a4573bd288c31a2c0a52e604a6bb9c989b99df89bb57da45136cfcc72d06d875aad10fd6b804fd01dfc24bd4b1af55ba1d20082202b16d820b6f89001cc71332b2cb38f1c3c3dfc2639cd0d6f8afc9fbf874a613060979ed31417603c96dcf8be2b14626ed2452ac1936e3d2a018da4ec630cb5280021ab11b3e2343e1a27252f51b85cb7c3bccdbbecd0c309bb4ecef57af7fc9445002c83fcce9aba0f033461f9f32d4618c89ee0d2cf804a67c12bcee65e9ac9135446351163484fb3c1cd99ee7a6d3c0a0b47839fcfd3e792dc87123c7499f02d54f5856e28bd7097a6b2fda30416cfb36aade974217354da451853b954b2a27e2c768e11594f501e2addb9b1dd0e8a6da5cda6f0aa4627cef0d2bce1806b8c72fe8d27a528c7f22659344b4029ab4d37953f32766d698885e0301177f38de63232e7afb2fa50d561639cea46a836755ac1bebe4fa24cbe4c824b11814cd49b601af87b364610012564704b5b27f12d2f326cdcd8574a43639bc04a4a916c60419930f115a10cba2a2edb86ef5d4152b6b9600d0765c5bdca0088d95ec93e33b9d4d42b28cdd676be128ca82a55a1302c2a0324fe9683cdd39e19ed6cd850b34edf5dbc961653d2c8a511ef0544ac35f12869b23bf0babeef9a7c6ad3947a41e4e6de221694f96325b09a7c94e21035b7d6041642c792b514b85a30d26a44417d43c7338f49ea1b30c48eb0be0692ffe16a10bcce9167b4e303ac90b4c70eb991a2ca897b7200f2c488b3c61d4de2ddc12820874fa97863d2a3bfa14c7299b68a51b6d491d656d8fb7621a2fdfe9c589fc38f7eabb86afe9abfbdeff74b48a19d9fb58a6f65c45cb220dd91853f7561cd03da9ea996917cbbeeee2ae954c3a7aad484a2aba4c91ab0eaf56e5b48fcedaf11b62d15d3ed27af86cfae86717d6d698eda16069766912efd2cb58deee67a70b6fb0ef8363d61725ed213f38c8501c7cafd183b5ed21aa9cb5d4502ce4723f878a0f02bd441545f6c9274fcba6cac579c391c94702fd5e514cacd232f4b3dfeb2a2caf3da9eb4b1f3a6147490775536e45a00e5dc82a1b84919532300b15c0a1b2499020f9351dc5b93750f59cfa55427a0221f16e01b76b09d9b0b210318c4d92569594f5a93cf4b9aef3ab73d1031b6ad8fb00c19100a84a063a563414d20383a2bf6052b301e13c9dbf6b0a01a841651a1d7fa09882978796fcd06d6b6476b46a535b58d924d84ddbf11f1cbe85f5b2a80c77088b7d5ef3a2e5495a1fa3dea06fa10152c4efbe0fc6d61e82f2e1f96c1692766a94e8a4c711557bce6d82e274c29b95356b2147a0ead02618a469568313155083863c6e3aa2d3be4b9b53433a7d66f86a236b56a16a8d66e2f89bd2969b692378e6c833af381d23d0d2366b7aa40815a2df9d56eee289662630512d3ddcb98c9505dc73d9bd06a15c1a4803a08589768aa5540d237862c74b3ff3b68d8bbb056e15cf7ee4b98babb8ec0cebddadb13dad4cfb5f21b71308663e8ffa3fb3cfe52b27f4369c82ed24bedf5e636cdef5643c22ec864b473cde9a5bf91e76bc974e0205bf5adc387e189af818595d220323fafec8cd5092d36dbc0685911f4c11835a8511a014bfa0cf3ce8d107fe37a293fd35b5a949187a1ed4b2c4bf4bf98d167ed27c51c82f96bfd41cef1ae146c229164430e483b69619f5e8477e3b2bc8f7daf08d3f20b94ec78c258496f06dac8e684f352b40e9382fe8c6489b8d6527a38a15220aad871f0d35bdf9b74567e897f5e3ef252e979f24fab76b140ceb0d8e7ec5cf601247b177ddcd3bb0de2d501d52bc3bb99518e5cf017886f7e5244b7698354219d1739547398ac77dc59038ff1ab40c9896247522668e65d07d96e4c42afbae47fbf3fa17cc4629aa26dee169c076473e97e3dbf4aa023d94036b2ccd9e47a78e2b7d8737e46b0dbb5816ed80832fcb68823d2e0b12f03a925b8f136135a259d2971154f3af485417e7a4d1173c8779db4f185b14a030044bd0e9487434fdddffbf736eae33b6c64861fb59efc970c3b8ef779a90c18c5e54350ec672b1a8ebc87b7096f3856a5efbd89e7711d0ffd8cb0b21d85b86021b474f0cd4b519d59e38ce3622823f9ca4e8fb3e767a7879c331d18395a20027b755cde7de432cee98a64684036d927d99dfe6a87032e9a01d705af26dda2c4713bed3e37de3939f1a765c78c7316a54cbc1654c2ca599f38be3845eea884fc55d5e193eb3b1d5e2e7bbc0a35855f49ce9d08485ac97a3b8429d3a856a10481d636786d06b867facea10ebae85380ee215ee299ce1b762f254cb068e44d267d8218b37132c5ba6429ea0220dd8e6f71fdc18301cccb0be31017b99aa19bb323f4283dba78a0c3f30ce165e3c4d09e3fea3612ad65d749721842946ec42090a2cc54d04f9496be588db9ff16d902598d9e5bb763822c1618a764c6b5eee530a0afb6e37fa11d1a6f2affd8aabf11544571a197ef190d1eacf7ee75138550734f44be0e28854e55cf4cb9b61684379beff42a8ac9000f4976dc31c6cdcae0945d9fbd50bafa05b3366df3e3999b9e9ffa0de142c8071d632d8ba6b5f9498b007a2e059369cefb6cacc0e397a936c1046397c92b5f1d6b995b51816536fd8430d6fb0e6cb92042b5d732864d4fc0d37ed73de3184e6fdbe42bb568f39d17d86a095d9fb12650379ecb51c264e9bd58e5d3f55e71b7002471fa2eb34d497304f655cf049af24d0e7ac6c88fd7f83b1d6016be96962cd115a72866f65fa3a30e71c2182a6dc5793fbbc4eafaf96de14367417d82d53e289dc8bb0e15ddd1f68a315d37c414a89a96873bb6d1d5db0429d9b5e12e31319014e6910cdff05d5c091454892eb02b765d5dfc8cf2e6abfe688bdfb3cadec3c682e6620adbb12fc0905061d4377a77302c2ad83363e9cf3d02373a4d5c46372c1715b1c31ea6001f53ffc1ae82d2101358babd11178917216d84cac9beb87ad0768209dfddfbd00356c47fd9f4a7a944503982e6b5e9a66cd6ac0a73fa79f4bd4fdcb6ae3835742c6298f0132a224f2ca814d5d21b307f112d7eb7c674f373f1aad7d6898908529241553ba8d6f25df21e829f76eabd82cfd34ec4f3d84cf5bbc84afff09b372e993f9e364c36039ce4380f76ca75b048f624fd9221fac33be0f06ee1119b62debb08c0e95931f30804e202f2a61036ba6066fc2f1ebbc5e074a67997536f6b7677b84ccede1ee9aad15407f27272c2b42efb48fe8b9bdc1602bfcf753e2161abcc8e0a5833841a725984da731c09f18b321a1eeebc8b9bfca34744d13cfa18d8b46da3e7f031dbe75546863fb09bc86511739970634671eb1d3105b2ab862a0e6895bdc888d7e73ec82645cfc396f47f089f45b8a963bda8b88ec615b4ac82b48601344cc7c3b473f970854aaa92d2d112cc5da5d155f22a6c8fd69f7b88157a0a11a8acbc59ddc26e5d5698ba20323e1496a4ed04d4360fc88c7ad321db20ba0700a949d360916d37719f7c853debf7021717", &(0x7f0000001280)=""/4096, &(0x7f0000000000)="c864c5dfbd13c720612d5b31d22114737fbbbfa375851f36a0dbb548cbe8f32d75dd30a5f45aa9be56bccb33b9ad13efee6d41262b68a793d7ce0a64744abbbf787c6ee8d21566c39fbe6129f9605655be83ba6f388e42ee33cf88da09c342102240e989f9dbe815647855b2d13436922a82fba211d61d", &(0x7f00000001c0)="851522626cfc3cd8931fa1f9256e26c8229f1472e7497a2e91a591322877f375719366", 0x4, r2, 0x4}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000240)={0x2, {0x8, 0x2375, 0xf, 0x5}, {0xf9c, 0xa, 0x9, 0x5}, {0x8, 0x9}})
ioctl$TCFLSH(r0, 0x540b, 0x4)
r7 = socket$netlink(0x10, 0x3, 0xa)
r8 = dup(r7)
r9 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r9, 0x200004)
ioctl$BLKRAGET(r9, 0x1263, &(0x7f0000000180))
write$apparmor_exec(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="d35cdd00a21e39d7ec9bfc1a5f3ee9187b6e99108cacd609094f8b4cfe33c5240ac65ae16afe7bb0fafd802fe81597e0957e90c951e591689dd46c95c17894f29bad6a23cb61f3e224e34f27f28c9124e34acd7ca1726046aa2d1caed2e507d51e75838e4b7f8d42f57b389839861611d1f0515510d8d69ad2fc06c9ba10e4d8d55bea45641cd14ee8d9ecbc67d7550150fcc62c5e39e87fc8ea3917ee0f3b42cff3727b"], 0x8)
sendfile(r8, r9, 0x0, 0x80001d00c0d1)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r4)

3.352918644s ago: executing program 0 (id=1207):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"})
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2efffe0011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

3.206164258s ago: executing program 0 (id=1208):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000001400)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x38}, 0x40000)

3.113369s ago: executing program 0 (id=1209):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$video(0x0, 0x1d24, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r5 = accept(r4, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
recvmsg$can_raw(r0, &(0x7f0000000a00)={&(0x7f0000000380)=@pppol2tpin6, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/25, 0x19}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/204, 0xcc}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/203, 0xcb}], 0x9, &(0x7f00000009c0)=""/35, 0x23}, 0x40000040)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r1, {0xffffff7f}}, './file0\x00'})
ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000240)={0x5, 0xbf, &(0x7f00000002c0)="64aa53f1731ea0aefff2ae2928794f6ab8bf5d9f05467fd410e0a113cd387d1860c0e4c785b580d9caf4061ea646a8e332eb3044b36317d0f821140ce4dedb94902ef6958480fbae5b93a60d85acd1965c45f4d4b1a1d8b7023cde6a485e7fe5d4b991882839283301ee6c5b7729a30fcf5ec1f63ecc1640348ed7268e18327db220399fc53967da5b7633efbfcd9d00b9abb8312ed4d7627faab3439a24cfd60d090616ad45bc9fb8d8532d00e548d5d3f3cb973e4b76d02b8d814123624e"})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x0)

2.718639038s ago: executing program 3 (id=1210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x324}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)

2.557143516s ago: executing program 3 (id=1211):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@private=0xa010100, 0xfffd, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@local, 0x0, 0x3c}, @in=@rand_addr=0x64010100, {0x0, 0x10000000000000b5, 0x2}, {0x0, 0x200000, 0x3, 0xfffffffffffffffd}, {0x40000, 0x0, 0x2c12}, 0x8, 0x0, 0xa, 0x2, 0x0, 0x68}, [@tfcpad={0x8, 0x16, 0x800}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000040)=""/172, 0xac})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x15883d8a7a54aef8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b", 0x15, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x1, 0x80000000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a15})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x10, 0xe, 0x5, 0x0, 0xc, 0x6, 0x8, 0x2, 0x8, 0x13, 0x10, 0x7d, 0x0, 0x400, 0x0, 0xe, 0x40, 0x3, 0x1, '\x00', 0x86, 0x10009})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.526332841s ago: executing program 1 (id=1212):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400200001600830425b97000fbdbdf2500000000000000000000000000000001200100000000100000f90000000000004e2100044e2200030a00200200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000004d632000000ac1414aa00000000000000000000000009000000000000006ceb000000000000050000000000000004000000000000000d0000000000000085000000000000009d000000000000000a00000000000000ce000000000000008affffffffffffff0100000000000000850200000000000009000000c0ffffff0400000028bd7080000000000a0000af10000000000000000400000011"], 0x240}}, 0x4000880)

2.241363824s ago: executing program 3 (id=1213):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/163, 0xa3}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/219, 0xdb}], 0x5, 0x2000, 0x10001)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
fcntl$setstatus(r1, 0x4, 0x7c00)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000692000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000400, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0, @ANYBLOB="ced9f9d6d79bff2cd67f1983c070f5b08971bfe88fe357222478492f08c333f1e425c47e28249d476dd7adedddbd7179f91b46868f4a00394038ae01a579338b46256f120235b5effcc97820bc81b4ea9b571fbcf24c5043dbd5fde3d58842a51c84eb11ac165171c301d490000f6aac53950420fee2f7633bbaa91bbc07ff3604619d48ad18542a9cc51146172db2475e7818bd856f378c73b331cb840efd004f31e7a8c88ca5dfa1b2b535675222e97d445ba699abb16a70d76810f78d828b", @ANYRES32=r0], 0x50)
socket$nl_crypto(0x10, 0x3, 0x15)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
io_setup(0x8, &(0x7f0000004200))
syz_emit_ethernet(0x46, &(0x7f00000011c0)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb08004700003800000000000190780a010101ffffffff9404000000000000030490781200183fa500000000680080000100007f000001ac14140e91a4aa0749c038cfb06af3ccc014f56f1fccd59452030d3c2177ef729cd3efe0074e4bbda8cb0a8193f9f7d608d80aaefc70c8"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r5, 0x25, &(0x7f0000002380))
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000010c0), &(0x7f0000001100), 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x20000804)
socket$netlink(0x10, 0x3, 0x0)

2.025189665s ago: executing program 4 (id=1214):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x802}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]})
close(0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400017a, 0x10002, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x1)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7)
sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x200001c4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000000, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
cachestat(0xffffffffffffffff, &(0x7f0000000180)={0xe6af}, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)

1.963587935s ago: executing program 2 (id=1215):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f72"], 0x60}}, 0x20004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)

1.821906822s ago: executing program 1 (id=1216):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
timer_create(0x3, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
userfaultfd(0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x3c, 0x65, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xa, 0x3}, {0xfff1}, {0x4, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x0)
ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f00000001c0)=0x15f0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.48747687s ago: executing program 2 (id=1217):
r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="200d1500000015286bc7d97953d60ac3313ee1725f15baa33c6a5cd95b4748ffa719dd3a9fb23f81d6f28b661eb278f6444220715901767c4d77c917fff91c702da666"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x6, "b97466c9ce47"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000280)={0xc0, 0x5, 0x3, "fba749"}, &(0x7f00000002c0)={0x40, 0x5, 0x1, "94"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xc, 0x2, &(0x7f0000000080)={0x11, "497d59b206a5b8c57da372261092c071d7c1486b634a572c55cf75ef98e6068fd3"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x40, 0xa}, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="7f647e1ceb6164a5768ea5367e6fe9222893f5a77c78ce9d8cf9a5c7b4876fb6747b116aa64000c1f22d516c444e4a46db8f5d46af3ed1d60cd7b508316059a0c996b9b28704148f31876e68f92b8e394fd3463230816bffe0c7e731", 0x5c, r1}, 0x68)
r2 = openat$incfs(0xffffffffffffffff, 0x0, 0x20001, 0x8)
r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x805)
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x1, 0x8]}, {0x80000000, 0x0, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]})
ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, 0x0)
flistxattr(r3, &(0x7f0000000440)=""/87, 0x57)

1.176170379s ago: executing program 0 (id=1218):
fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0x403, 0x4, 0x300a, 0x8, 0x5, 0x7, 0x0, 0x5}})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000980)={{0x5, 0x2000004}, {0x7}, 0x5, 0x6})
r2 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioperm(0x0, 0x3, 0x79ae)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')

476.891281ms ago: executing program 0 (id=1219):
syz_usb_connect$uac1(0x0, 0xf2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0xd, 0xf0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x8}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x2, "251089cb1873"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x0, 0xe, "6408fc8465b5c5"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0xff, 0xc, 0x1001}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0xfffe, 0x8, "011ffbde0415603a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x3, 0x6, 0xff, "34e571"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x77, 0x2, 0xc, {0x7, 0x25, 0x1, 0x0, 0x81, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x1, 0x20, 0xf5, 'od', "f53d"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0xfed4, 0x9, "b015b77a070485"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x7, 0x0, "c9d3"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x4, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x6, 0xff, {0x7, 0x25, 0x1, 0x83, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x2, 0x9, 0x20, 0xb}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x9, 0x0, 0xb4ee}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3801}}]})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x1, 0xaa, {0x9, 0x21, 0x77cc, 0x5, 0x1, {0x22, 0xf08}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x5, 0x0, 0xff, 0x5}, 0xc, &(0x7f0000000300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x4, 0x673}]}, 0x1, [{0xe7, &(0x7f0000000340)=@string={0xe7, 0x3, "6a392b29979f528c9f2a175a080662e77da986b0cfbb5c5e2fee013302bfd0e0268dca1bb6d18cfdc6aeee535b4d6103563f89a618e65e694042871cb68545a6e6f5367daa69256b42b450ec94fab4951c95a2b7bbf2a4bf612dc0c223dfabfc0e4b2d9221508743cbe2e83c80c74c46c0a8532e3e26e03ff295e58414a0f26eab43089a7250d37669c088d189983a0f8bdd16f35f2ac56b6e9cb49a40e2d80671ab1e7f8c8dd79d651e672e23d2a2949bca90ccc2a658047a932240e7049d453a676acb82e372d7c553560e5d734ed0a30a0689b843dce619a651d26ff51de93b9f666e6a"}}]})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0xd89}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xca, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x5f, 0x8}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x3, 0x80, 0x5, 0xff, 0x10}, 0x94, &(0x7f0000000500)={0x5, 0xf, 0x94, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x441, 0x0, 0x4b, [0x0, 0x3fc0, 0xff0030, 0xffc060, 0xff3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0xf00, 0x3, [0x3fcf, 0xff3f1e, 0xff0000, 0xc000, 0xff000f]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x6, 0xf, 0x8, [0x4abdcad30cff9772, 0xff00]}, @ssp_cap={0x24, 0x10, 0xa, 0xb7, 0x6, 0x80, 0x5d1618fb457d2857, 0xfff9, [0x3fc0, 0xf, 0xc00f, 0xffc0c0, 0x0, 0xffff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "495cd1919df7075de405ce5f0587cde8"}]}, 0x5, [{0xa2, &(0x7f00000005c0)=@string={0xa2, 0x3, "283eca1c0a6a8cd26088e9048449edc46958f8525aae2c9f09d3c3e2533570fa51dfc9187b4e2e5557d21899bf941283b3e7e47912e2c5099288c404b74133696f815f1e5fda54880a9f6399a7e70a13be371f38cd287227dca5338d9b7421852b229a37014cd6a4106d4abb900e74f61cfc1b0f365f19a911d7804cd51d0d4beb4d342aabaaa99274df664b91fa6bb7eabe2c883cf43b8850eec0e598ee22f4"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x480a}}, {0xdc, &(0x7f00000006c0)=@string={0xdc, 0x3, "ef6eea0742db07d19efc4a29125e098281c6b44191c91f49661771903de36894f4993b39e2dbb2e8429f05ea3ae1d394a1a823c56f92f2506bac2e2c0d47caeafad4d1edca5792fd9c19a03b5bccb9a085ef65ab30f4d8cf73c7ef10b549301b02c6b6a32d3ad347a1543e2efd806052c6b7fcd5898186358d37678266afdb6d042027e9f8f8f16cad0b869ce6a74f54e08fbb5f05a8bb2287e0e1a48215e245c44b0ebc1a0307c5deb97669af41ebaf512f3d224e09356cd6b5740e8bf0d2425b0072f729fe4343512253e38af14ec831a69dd31635bc6835e8"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x200a}}, {0xc9, &(0x7f0000000900)=@string={0xc9, 0x3, "846f7508200ea4ba27d41355bc3291cb0756d99416f460d027500678289e3f5ccbcf90d1415149b724b8c4e0a2fbe1c24914202d9482047f24f04d003992b22f1ff2aa1ae0e1766abb7f5c4448ad94f0a60959384d2631356ff45c879fc6bc2e3c0084db2452a1f0def504a98934a0299c806231da781c5a299f939f0b2a3a9bdfc704194223e5111c1cafb6cdf1d7c8e1d55910ba231e486ece577617861e9eeb78efba7aaef82976c4f411f0e66900f30ea2429f32689269fc351aa6e672ae32da827adb8fc1"}}]})
r0 = syz_usb_connect$cdc_ecm(0x4, 0xa7, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x1, 0x1, 0x2, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x9e, {{0x9, 0x24, 0x6, 0x0, 0x0, "4ebe0b4d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x4, 0x1, 0x5}, [@acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x1b, 0x24, 0x13, 0x7, "9400350ab324d16a2e7785438bf1e513faece4299cee63"}, @ncm={0x6, 0x24, 0x1a, 0x2a6, 0x4}, @dmm={0x7, 0x24, 0x14, 0x800, 0x3}, @mdlm_detail={0x21, 0x24, 0x13, 0x7, "dc028141ce0071b6ea33ef73afc25536014ab339e717944cfc153457a1"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x7f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x21, 0xff}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x7f, 0x9, 0xb2, 0x8, 0x2}, 0x59, &(0x7f0000000b80)={0x5, 0xf, 0x59, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x4, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x2, 0xff0f, 0x2, [0xff00, 0x50, 0xf, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f85a9c2143af6e4ba57d8334b7d457f9"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x3, 0x4, 0xc6c, 0x1}, @wireless={0xb, 0x10, 0x1, 0xe, 0x4, 0x5, 0xa, 0x1, 0x8}]}, 0x2, [{0x87, &(0x7f0000000c00)=@string={0x87, 0x3, "b877fc247b5d221956f9fc18483f4bfc0f9c5755b594533153569756a4fc21b25366d4cf1282b0c9ea9d3bf99ff082225f324020e09305ee5f27fd7f2043f2ab84b33007767bc353d1af6d0e6171ece7c623608aa632c7eeba4bc9bce560c9e07ae71b9a9fb4116f929992765acd1efd8dfb3b1758b670eb35541dbf57499a6488d0e25612"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x42a}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x0, 0x2, 0x6b, {0x6b, 0x7, "bd5eae4d8b5a72944fe452b89ef3061264668ad88fe6aa137ce4b4649610c8f5bb83ac4c18891f53b4ebb889895dfe49ecb2dca5c890bf806eacbf0ad80df8363483d681ce82421d2704b6788b74d8a3326ac0b4888a0a1d1333cde95b8d4093eb74a1263b5add589c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x1c, &(0x7f0000000e40)={0x20, 0xa, 0x86, "58f70d2953a5c8a55d7e3a6a5e9c70c81a5a7fcc195893bf526918a651a4bb47d7be7983ff769acabeb8775bab72900e853af7ab632bd7c0e8ab228453218a91a2b1a01642a1f2ce3795696f9758b1d701ce35427e54a85e5de1629989ced74a6b70e524d31bcaafd3a33686a9c48f3c9a6f30ff56fe6ec3538e0b14701212e46ab8be55c081"}, &(0x7f0000000f00)={0x0, 0xa, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x4}})
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000fc0)=@hopopts={0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff9}, @enc_lim={0x4, 0x1, 0x4}]}, 0x18)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001000), 0x80, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000001040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000010c0)={0x2, &(0x7f0000001080)=[{0x100, 0x2, 0xfd, 0x5}, {0x5, 0x0, 0x5, 0x1000}]})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000001140)={0x0, 0x0, {0x8001, 0x80000000, 0x8, 0xb}})
r4 = syz_open_dev$vim2m(&(0x7f0000001180), 0x3, 0x2)
syz_usb_connect$cdc_ecm(0x5, 0x65, &(0x7f00000011c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xbfc5829de3366574, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0xdd, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "eee3"}, {0x5, 0x24, 0x0, 0x59}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3ed, 0x0, 0x40}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x6, 0xecf0}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x338297bc101bdcf2, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x201, 0x6b, 0x8, 0x2, 0xff, 0x3}, 0x0, 0x0, 0x6, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x2401}}, {0x66, &(0x7f0000001340)=@string={0x66, 0x3, "6de559f72763b38af3d29159d0322ecfcfc25ac908753285a584e5ddaf1256d8d65e5fe369f72822944bd89ce5cedf2ffa94a0cde9530dbe025b0551d9614c67009ea224d619185cbafd07def2b31531fbc22a8b23573b0cb7cd0ebcd4bc47702d446204"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x422}}, {0xf3, &(0x7f0000001440)=@string={0xf3, 0x3, "d0a895d7cb97d5975a2f91746859e99af66b1df5c2a6a1d1e93efcf66a56a32d22671b4d92c245faa11ce88c595b6fa329ecdc84e873d8ff34216f3d21940e5bc8d94baf618895a81c68723df9d1e212239964821f3b72611a4341b898f5b8181874853af0e17a06fb34dabd0eb06cd9437310c69c727d0e9f34137dad55d5a4e1274081589ef5d2c2e5a0b56afa5124569dcc07be41fa4789f84a1303ba46f52bbcb59fe1c234012d1f4f7ede33b18d573a58de8b60eb8ccc41caf735db5cd14d8da9d82d6f1bb641b35b4121048f22222383b1908166ab508db36b4f68a8f6fd74611f3c83ce9cdc5e0470fb1bcc1973"}}]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0)
r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x4)
ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000001600)=""/255)
r7 = syz_open_dev$media(&(0x7f0000001700), 0x100000001, 0x60c901)
ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000001c80)={0x0, 0x5, 0x0, &(0x7f0000001740)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000001940)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000001b00)=[{}, {}], 0x7, 0x0, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}, {}]})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d40), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x71}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc050)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40))
syz_usb_connect$cdc_ncm(0x1, 0x96, &(0x7f0000001e80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x2, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "c980"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x2, 0x40}, {0x6, 0x24, 0x1a, 0x4, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x0, 0x9, 0xb}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xc, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0x7a}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0x4, 0xd}}}}}}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x201, 0x8, 0xbf, 0x5, 0xcf, 0x3}, 0x44, &(0x7f0000001f80)={0x5, 0xf, 0x44, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xfc, 0x2, 0x0, 0xf00f, 0x9, [0x3fff, 0xc0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x7, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a58712d2b8903bcbfbe4da800e9c764d"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x7f, 0x5, 0x50a5}]}, 0x9, [{0x81, &(0x7f0000002000)=@string={0x81, 0x3, "bfa0ef3454e00c92d5e9f5d3ad7cc07c0a9579843d3403df7f6f6339641a652c08e89e79c0d8a0575571afe5e6698db0532fabcbe9c98437a15a7753b70d64139dc5f5ea07bcf1940b43d1e5d6cf10bac39e1ba3e229a2909a02856880d3ef94ff84b189cd9469445d9ad5ce81a84774e59ef5678d0ca3cec4f633ed64901f"}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x102, &(0x7f0000002100)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x440a}}, {0x12, &(0x7f0000002280)=@string={0x12, 0x3, "3f81eea78825d8c740fbb28766924809"}}, {0x60, &(0x7f00000022c0)=@string={0x60, 0x3, "15a67fb82628cf1f711111b0b41e87bfcbff00ef0d632679f55809bac2f63d35b78e24ecbc460a719cf88b8b623c137620958e7d3f2b3d8f3356f76c136e7a20b33b8b18e8874cd356dc1ebea45c9e612d88f96bcec224633ee7f9c8177c"}}, {0x4, &(0x7f0000002340)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x3009}}]})
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000002500)=@arm64_core={0x6030000000100046, &(0x7f00000024c0)=0x7})
syz_usb_connect(0x2, 0x24, &(0x7f0000002540)={{0x12, 0x1, 0x110, 0x6b, 0xcd, 0x15, 0x8, 0x1199, 0x907b, 0x3f4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x3, 0x50, 0x1, [{{0x9, 0x4, 0xa, 0x0, 0x0, 0xbb, 0x6, 0x28, 0xa1}}]}}]}}, &(0x7f0000002780)={0xa, &(0x7f0000002580)={0xa, 0x6, 0x200, 0x5, 0x4, 0xe, 0xff, 0x40}, 0x56, &(0x7f00000025c0)={0x5, 0xf, 0x56, 0x4, [@generic={0x2c, 0x10, 0x1, "6d4b04aeeceb11131d35a59a0fff8b15bccfa4229adf451e62e459a1cd819755d70c17ebc097c766c5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x1, 0xcd9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x3, 0xfffa}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "582162adaaa9663519eedb345cc3d126"}]}, 0x3, [{0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x427}}, {0x94, &(0x7f0000002680)=@string={0x94, 0x3, "c33b0f0743c61b62409c5cd4ff08067999e9b55b4cc15ef6ffc398d309165cde6f58079e9600dc8e3391268694e2121da6d10724f6965a56300862637bbebc5da18031debc4992ac32052a5ba4362eec19118ae9c892a8f9e8d0e9c53d4c0976ce3b22d435c9c635dd95bf70433a822411aab3131399db67adbd0d3d629647b2033808dbac2acd4b6c64ffd13b66ecefed75"}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_connect$cdc_ncm(0x3, 0x79, &(0x7f00000027c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x5, 0x30, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '{'}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xf, 0x0, 0x9a}, {0x6, 0x24, 0x1a, 0x7, 0x22}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xa, 0x6, 0x8}}}}}}}]}}, &(0x7f0000002a80)={0xa, &(0x7f0000002840)={0xa, 0x6, 0x300, 0xb2, 0xc5, 0x17, 0x10}, 0x31, &(0x7f0000002880)={0x5, 0xf, 0x31, 0x2, [@generic={0x29, 0x10, 0xa, "7ef67ee9855866a486a2e098e1095ddbb23f70c35752dabdd6756a2e1a002da66d97946b111b"}, @ptm_cap={0x3}]}, 0x4, [{0xe0, &(0x7f00000028c0)=@string={0xe0, 0x3, "9b8ef284c710bd3da22f825ae9c0b6f9320616a1fdab377a5ef4b584b0f9ee57fc5aa42ea42babd490c66abe083c9d7e14f8239c456b78f765a7b3f04c6bf0aaef6a415e0119c50bfdfd98561bbfd3c1da4a1dec0b4b70e48486b786932130e48e26f9e3f7f7fdd0b52d5d0ddc8cd8787ad5469fd871032e6978670a26392839fe4f668eea67ba2a976ffcbcf3ee10fa0bc2023d2d174246ad3f711a19b435604d7626ac52c2a6ad64b2efa973b202e9a57a1f27e38d9f3077d11f6c875c8857255f2d17e64d133d702f2a294aff493f6300178bcc260c62ffa5018d624d"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x300a}}, {0x17, &(0x7f0000002a40)=@string={0x17, 0x3, "2a8e3c63060de3a7f2436cec47bf3dfdd614e9fe8f"}}]})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000002b00)={0x1, @vbi={0x400, 0x4a1, 0xf8, 0x33363248, [0x1, 0x1000], [0x7ff, 0x4dfb], 0x1}})
r9 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002c00)={'wlan1\x00'})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x37)

313.10495ms ago: executing program 1 (id=1220):
r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9003, 0x1, 0x286, [0x4000000002c0, 0x4000000002f0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/646]}, 0x2fe)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x0, 0xc, 0x2, &(0x7f0000000080)={0x11, "497d59b206a5b8c57da372261092c071d7c1486b634a572c55cf75ef98e6068fd3"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, 0x0, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(0xffffffffffffffff, &(0x7f0000000200)='7', 0x1)
write$char_usb(r4, &(0x7f0000000080)='V', 0x1)
syz_usb_disconnect(r3)
r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x20001, 0x8)
r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0100001000130428bd700000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x804)
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, <r8=>0x0}, {<r9=>0x80000000}}]})
pread64(r5, 0x0, 0x0, 0xe)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000400)={r9, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000, <r10=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x1, 0x8]}, {0x80000000, r8, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]})
r11 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{0x80000000, <r12=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000400)={{0x80000000, r10, 0x6, [0x0, 0x80000000]}, {0x80000000, r12, 0x2, [0x4, 0xe4c]}, 0x4, [0xffffffe]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), 0x0})
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000240)=[{}, {0x80000000, <r13=>0x0}], &(0x7f0000000940)})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r12, 0x4, [0x6c2, 0x2]}, {0x80000000, r13, 0x3, [0x1, 0x7]}, 0x1, [0xd, 0x7e16]})

265.814086ms ago: executing program 4 (id=1221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = gettid()
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2580fe7400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="14000300766574e8305f766972745f776966"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

109.218455ms ago: executing program 4 (id=1222):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd)
r2 = dup(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=ANY=[@ANYBLOB="18450000fbffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000f5ff84"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=ANY=[@ANYBLOB="18450000fbffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000f5ff84"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) (async)
recvmmsg(r3, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 4 (id=1223):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x2b000000, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})

kernel console output (not intermixed with test programs):

.444949][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.454191][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'.
[  275.485251][   T10] airspy 5-1:0.0: usb_control_msg() failed -71 request 10
[  275.494184][   T10] airspy 5-1:0.0: Registered as swradio24
[  275.499987][   T10] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  275.512311][   T10] usb 5-1: USB disconnect, device number 26
[  275.699902][ T8420] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  276.197144][ T8434] tc_dump_action: action bad kind
[  276.222882][ T8434] binder: 8433:8434 ioctl c0306201 200000000080 returned -14
[  276.898716][ T5819] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  276.993027][ T8445] FAULT_INJECTION: forcing a failure.
[  276.993027][ T8445] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.006668][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.2.742 Not tainted syzkaller #0 PREEMPT(full) 
[  277.006699][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  277.006712][ T8445] Call Trace:
[  277.006721][ T8445]  <TASK>
[  277.006731][ T8445]  dump_stack_lvl+0x189/0x250
[  277.006767][ T8445]  ? __pfx____ratelimit+0x10/0x10
[  277.006799][ T8445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.006829][ T8445]  ? __pfx__printk+0x10/0x10
[  277.006852][ T8445]  ? __might_fault+0xb0/0x130
[  277.006895][ T8445]  should_fail_ex+0x414/0x560
[  277.006933][ T8445]  _copy_from_user+0x2d/0xb0
[  277.006963][ T8445]  ___sys_recvmsg+0x12e/0x510
[  277.006995][ T8445]  ? __pfx____sys_recvmsg+0x10/0x10
[  277.007048][ T8445]  ? __fget_files+0x3a0/0x420
[  277.007082][ T8445]  do_recvmmsg+0x307/0x770
[  277.007116][ T8445]  ? __pfx_do_recvmmsg+0x10/0x10
[  277.007156][ T8445]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  277.007210][ T8445]  __x64_sys_recvmmsg+0x190/0x240
[  277.007239][ T8445]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  277.007270][ T8445]  ? do_syscall_64+0xbe/0xfa0
[  277.007306][ T8445]  do_syscall_64+0xfa/0xfa0
[  277.007336][ T8445]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.007367][ T8445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.007389][ T8445]  ? clear_bhb_loop+0x60/0xb0
[  277.007416][ T8445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.007437][ T8445] RIP: 0033:0x7fed0498f749
[  277.007456][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.007474][ T8445] RSP: 002b:00007fed02bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  277.007498][ T8445] RAX: ffffffffffffffda RBX: 00007fed04be6180 RCX: 00007fed0498f749
[  277.007514][ T8445] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000005
[  277.007534][ T8445] RBP: 00007fed02bf6090 R08: 0000000000000000 R09: 0000000000000000
[  277.007547][ T8445] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  277.007561][ T8445] R13: 00007fed04be6218 R14: 00007fed04be6180 R15: 00007fed04d0fa28
[  277.007596][ T8445]  </TASK>
[  277.214905][    C0] vkms_vblank_simulate: vblank timer overrun
[  277.372668][ T5819] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  277.381863][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.389974][ T5819] usb 5-1: Product: syz
[  277.394176][ T5819] usb 5-1: Manufacturer: syz
[  277.398852][ T5819] usb 5-1: SerialNumber: syz
[  277.577188][ T8448] FAULT_INJECTION: forcing a failure.
[  277.577188][ T8448] name failslab, interval 1, probability 0, space 0, times 0
[  277.645465][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: syz.1.747 Not tainted syzkaller #0 PREEMPT(full) 
[  277.645502][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  277.645517][ T8448] Call Trace:
[  277.645525][ T8448]  <TASK>
[  277.645534][ T8448]  dump_stack_lvl+0x189/0x250
[  277.645574][ T8448]  ? __pfx____ratelimit+0x10/0x10
[  277.645604][ T8448]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.645635][ T8448]  ? __pfx__printk+0x10/0x10
[  277.645674][ T8448]  ? __pfx___might_resched+0x10/0x10
[  277.645698][ T8448]  ? fs_reclaim_acquire+0x7d/0x100
[  277.645735][ T8448]  should_fail_ex+0x414/0x560
[  277.645774][ T8448]  should_failslab+0xa8/0x100
[  277.645798][ T8448]  kmem_cache_alloc_noprof+0x74/0x6e0
[  277.645828][ T8448]  ? getname_flags+0xb8/0x540
[  277.645849][ T8448]  ? ksys_write+0x1cb/0x250
[  277.645883][ T8448]  getname_flags+0xb8/0x540
[  277.645902][ T8448]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  277.645940][ T8448]  __se_sys_statx+0xb5/0x240
[  277.645970][ T8448]  ? __pfx___se_sys_statx+0x10/0x10
[  277.645995][ T8448]  ? __fget_files+0x3a0/0x420
[  277.646023][ T8448]  ? fput+0xa0/0xd0
[  277.646047][ T8448]  ? ksys_write+0x22a/0x250
[  277.646080][ T8448]  ? __pfx_ksys_write+0x10/0x10
[  277.646114][ T8448]  ? do_syscall_64+0xbe/0xfa0
[  277.646143][ T8448]  ? __x64_sys_statx+0x20/0xc0
[  277.646171][ T8448]  do_syscall_64+0xfa/0xfa0
[  277.646201][ T8448]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.646231][ T8448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.646252][ T8448]  ? clear_bhb_loop+0x60/0xb0
[  277.646278][ T8448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.646299][ T8448] RIP: 0033:0x7fef8638f749
[  277.646317][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.646336][ T8448] RSP: 002b:00007fef87274038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  277.646359][ T8448] RAX: ffffffffffffffda RBX: 00007fef865e5fa0 RCX: 00007fef8638f749
[  277.646375][ T8448] RDX: 0000000000004800 RSI: 0000200000002040 RDI: ffffffffffffff9c
[  277.646390][ T8448] RBP: 00007fef87274090 R08: 0000000000000000 R09: 0000000000000000
[  277.646403][ T8448] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  277.646416][ T8448] R13: 00007fef865e6038 R14: 00007fef865e5fa0 R15: 00007fef8670fa28
[  277.646451][ T8448]  </TASK>
[  277.877937][    C0] vkms_vblank_simulate: vblank timer overrun
[  278.158890][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  278.181375][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  278.456381][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  278.518722][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  278.687455][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  278.968925][ T5819] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[  279.013297][ T5819] usb 5-1: USB disconnect, device number 27
[  279.068781][   T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  279.299660][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  279.331361][ T8475] netlink: 'syz.4.755': attribute type 10 has an invalid length.
[  279.337857][   T10] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  279.385907][   T10] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f
[  279.405359][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  279.415654][ T8475] team0: Device bond0 is up. Set it down before adding it as a team port
[  279.483856][   T10] usb 4-1: Product: syz
[  279.488148][   T10] usb 4-1: Manufacturer: syz
[  279.520150][   T10] usb 4-1: SerialNumber: syz
[  279.569693][   T10] usb 4-1: config 0 descriptor??
[  280.260142][ T5923] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  280.307119][   T10] usb 4-1: USB disconnect, device number 33
[  280.393526][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.453320][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.471002][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.510674][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  280.534867][ T5923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  280.547545][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.592646][ T5923] usb 1-1: config 0 descriptor??
[  281.142564][ T8495] netlink: 'syz.1.760': attribute type 1 has an invalid length.
[  281.335797][ T5923] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  281.374240][ T8495] 8021q: adding VLAN 0 to HW filter on device bond1
[  281.450808][ T8497] bond1: (slave veth0_to_bond): making interface the new active one
[  281.541802][ T8497] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  281.657322][ T8498] bond1: entered allmulticast mode
[  281.662681][ T8498] veth0_to_bond: entered allmulticast mode
[  281.974795][ T8502] netlink: 34 bytes leftover after parsing attributes in process `syz.1.762'.
[  282.758766][ T5886] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  282.910948][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  282.920842][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.935756][ T5886] usb 2-1: config 0 descriptor??
[  282.947675][ T5886] cp210x 2-1:0.0: cp210x converter detected
[  283.241585][   T44] usb 1-1: USB disconnect, device number 41
[  283.365397][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.384860][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.452054][ T5886] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  283.510302][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0
[  284.261437][ T5886] usb 2-1: USB disconnect, device number 30
[  284.308359][   T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  284.327641][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  284.448484][ T5923] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  284.488739][   T10] usb 3-1: Using ep0 maxpacket: 8
[  284.494453][ T5886] cp210x 2-1:0.0: device disconnected
[  284.498869][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  284.534672][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.568716][   T10] usb 3-1: Product: syz
[  284.572969][   T10] usb 3-1: Manufacturer: syz
[  284.608731][   T10] usb 3-1: SerialNumber: syz
[  284.638766][ T5923] usb 1-1: Using ep0 maxpacket: 16
[  284.659700][   T10] usb 3-1: config 0 descriptor??
[  284.688469][ T5923] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  284.702562][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.727072][ T5923] usb 1-1: Product: syz
[  284.747447][ T5923] usb 1-1: Manufacturer: syz
[  284.754729][ T5923] usb 1-1: SerialNumber: syz
[  284.812048][ T5923] usb 1-1: config 0 descriptor??
[  284.898764][ T5886] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  284.964769][   T10] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  285.038797][ T5886] usb 2-1: device descriptor read/64, error -71
[  285.225625][ T5923] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  285.248138][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  285.260778][ T5923] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  285.266808][ T8553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.777'.
[  285.269572][ T5923] usb 1-1: media controller created
[  285.298967][ T5886] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  285.316920][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  285.370097][   T10] usb write operation failed. (-71)
[  285.384378][   T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  285.402079][   T10] dvbdev: DVB: registering new adapter (Terratec H7)
[  285.409601][   T10] usb 3-1: media controller created
[  285.415383][   T10] usb read operation failed. (-71)
[  285.422869][   T10] usb write operation failed. (-71)
[  285.436388][   T10] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  285.449623][ T5886] usb 2-1: device descriptor read/64, error -71
[  285.460179][   T10] usb 3-1: USB disconnect, device number 42
[  285.483072][ T5923] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  285.518799][   T44] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  285.529179][ T5923] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  285.559011][ T5886] usb usb2-port1: attempt power cycle
[  285.699002][   T44] usb 5-1: Using ep0 maxpacket: 16
[  285.711933][   T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.724530][   T44] usb 5-1: config 0 interface 0 has no altsetting 0
[  285.734856][   T44] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  285.745317][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.759163][   T44] usb 5-1: config 0 descriptor??
[  285.919288][ T5886] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  285.969487][ T5886] usb 2-1: device descriptor read/8, error -71
[  286.168313][ T8553] netlink: 'syz.4.777': attribute type 3 has an invalid length.
[  286.250195][ T5886] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  286.269103][   T44] hid (null): global environment stack underflow
[  286.277535][   T44] hid (null): global environment stack underflow
[  286.286402][ T5886] usb 2-1: device descriptor read/8, error -71
[  286.306373][   T44] hid (null): unknown global tag 0x7f
[  286.339716][   T44] cougar 0003:060B:500A.0009: usage count exceeds max: fixing up report descriptor
[  286.373042][   T44] cougar 0003:060B:500A.0009: unexpected long global item
[  286.388222][   T44] cougar 0003:060B:500A.0009: parse failed
[  286.406805][   T44] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22
[  286.420223][ T5886] usb usb2-port1: unable to enumerate USB device
[  286.595919][   T44] usb 1-1: USB disconnect, device number 42
[  286.610222][   T10] usb 5-1: USB disconnect, device number 28
[  286.720517][   T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  287.253124][ T8576] =======================================================
[  287.253124][ T8576] WARNING: The mand mount option has been deprecated and
[  287.253124][ T8576]          and is ignored by this kernel. Remove the mand
[  287.253124][ T8576]          option from the mount to silence this warning.
[  287.253124][ T8576] =======================================================
[  287.288137][    C1] vkms_vblank_simulate: vblank timer overrun
[  288.484255][ T5923] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  288.559682][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'.
[  288.631906][ T5923] usb 3-1: device descriptor read/64, error -71
[  288.868735][ T5923] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  289.038741][ T5923] usb 3-1: device descriptor read/64, error -71
[  289.149256][ T5923] usb usb3-port1: attempt power cycle
[  289.285539][ T8619] fuse: Unknown parameter 'gro'
[  289.292771][ T8619] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  289.337973][ T8619] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  289.598772][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  289.668771][ T5923] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  289.745735][ T8627] FAULT_INJECTION: forcing a failure.
[  289.745735][ T8627] name failslab, interval 1, probability 0, space 0, times 0
[  289.779726][ T8627] CPU: 1 UID: 0 PID: 8627 Comm: syz.4.799 Not tainted syzkaller #0 PREEMPT(full) 
[  289.779757][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.779770][ T8627] Call Trace:
[  289.779779][ T8627]  <TASK>
[  289.779789][ T8627]  dump_stack_lvl+0x189/0x250
[  289.779823][ T8627]  ? __pfx____ratelimit+0x10/0x10
[  289.779854][ T8627]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.779884][ T8627]  ? __pfx__printk+0x10/0x10
[  289.779921][ T8627]  should_fail_ex+0x414/0x560
[  289.779961][ T8627]  should_failslab+0xa8/0x100
[  289.779986][ T8627]  kmem_cache_alloc_node_noprof+0x77/0x710
[  289.780017][ T8627]  ? __alloc_skb+0x112/0x2d0
[  289.780035][ T8627]  ? rtnl_prop_list_size+0x1ba/0x1e0
[  289.780073][ T8627]  __alloc_skb+0x112/0x2d0
[  289.780098][ T8627]  rtmsg_ifinfo_build_skb+0x84/0x260
[  289.780126][ T8627]  ? netpoll_poll_enable+0xce/0xe0
[  289.780154][ T8627]  rtmsg_ifinfo+0x8c/0x1a0
[  289.780192][ T8627]  __dev_notify_flags+0xf4/0x2e0
[  289.780218][ T8627]  ? __pfx___dev_notify_flags+0x10/0x10
[  289.780239][ T8627]  ? __dev_change_flags+0x4cc/0x6d0
[  289.780269][ T8627]  ? __pfx___dev_change_flags+0x10/0x10
[  289.780313][ T8627]  netif_change_flags+0xe8/0x1a0
[  289.780343][ T8627]  do_setlink+0xc55/0x41c0
[  289.780383][ T8627]  ? __pfx_do_setlink+0x10/0x10
[  289.780407][ T8627]  ? is_bpf_text_address+0x26/0x2b0
[  289.780444][ T8627]  ? __lock_acquire+0xab9/0xd20
[  289.780475][ T8627]  ? __mutex_trylock_common+0x153/0x260
[  289.780505][ T8627]  ? __pfx___mutex_trylock_common+0x10/0x10
[  289.780538][ T8627]  ? rcu_is_watching+0x15/0xb0
[  289.780564][ T8627]  ? trace_contention_end+0x39/0x120
[  289.780591][ T8627]  ? __mutex_lock+0x335/0x1350
[  289.780615][ T8627]  ? stack_trace_save+0x9c/0xe0
[  289.780651][ T8627]  ? rtnl_setlink+0x4f2/0x910
[  289.780675][ T8627]  ? __pfx___mutex_lock+0x10/0x10
[  289.780715][ T8627]  ? full_name_hash+0x92/0xe0
[  289.780744][ T8627]  ? netdev_name_node_lookup+0xdf/0x120
[  289.780776][ T8627]  rtnl_setlink+0x60c/0x910
[  289.780804][ T8627]  ? __pfx_rtnl_setlink+0x10/0x10
[  289.780932][ T8627]  ? __pfx_rtnl_setlink+0x10/0x10
[  289.780953][ T8627]  rtnetlink_rcv_msg+0x7cf/0xb70
[  289.780991][ T8627]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  289.781022][ T8627]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.781053][ T8627]  ? ref_tracker_free+0x63a/0x7d0
[  289.781074][ T8627]  ? __asan_memcpy+0x40/0x70
[  289.781103][ T8627]  ? __pfx_ref_tracker_free+0x10/0x10
[  289.781121][ T8627]  ? __skb_clone+0x63/0x7a0
[  289.781156][ T8627]  netlink_rcv_skb+0x208/0x470
[  289.781180][ T8627]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.781221][ T8627]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.781256][ T8627]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.781287][ T8627]  netlink_unicast+0x82f/0x9e0
[  289.781336][ T8627]  ? __pfx_netlink_unicast+0x10/0x10
[  289.781370][ T8627]  ? netlink_sendmsg+0x642/0xb30
[  289.781391][ T8627]  ? skb_put+0x11b/0x210
[  289.781416][ T8627]  netlink_sendmsg+0x805/0xb30
[  289.781450][ T8627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.781476][ T8627]  ? aa_sock_msg_perm+0xf1/0x1d0
[  289.781511][ T8627]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.781532][ T8627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.781556][ T8627]  __sock_sendmsg+0x21c/0x270
[  289.781590][ T8627]  ____sys_sendmsg+0x505/0x830
[  289.781623][ T8627]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.781658][ T8627]  ? import_iovec+0x74/0xa0
[  289.781690][ T8627]  ___sys_sendmsg+0x21f/0x2a0
[  289.781717][ T8627]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.781783][ T8627]  ? __fget_files+0x2a/0x420
[  289.781803][ T8627]  ? __fget_files+0x3a0/0x420
[  289.781836][ T8627]  __x64_sys_sendmsg+0x19b/0x260
[  289.781864][ T8627]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.781900][ T8627]  ? __pfx_ksys_write+0x10/0x10
[  289.781936][ T8627]  ? do_syscall_64+0xbe/0xfa0
[  289.781971][ T8627]  do_syscall_64+0xfa/0xfa0
[  289.782001][ T8627]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.782031][ T8627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.782053][ T8627]  ? clear_bhb_loop+0x60/0xb0
[  289.782080][ T8627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.782100][ T8627] RIP: 0033:0x7f456c78f749
[  289.782121][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.782139][ T8627] RSP: 002b:00007f456d6fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.782163][ T8627] RAX: ffffffffffffffda RBX: 00007f456c9e5fa0 RCX: 00007f456c78f749
[  289.782180][ T8627] RDX: 0000000020040850 RSI: 0000200000000480 RDI: 0000000000000003
[  289.782194][ T8627] RBP: 00007f456d6fd090 R08: 0000000000000000 R09: 0000000000000000
[  289.782207][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.782220][ T8627] R13: 00007f456c9e6038 R14: 00007f456c9e5fa0 R15: 00007f456cb0fa28
[  289.782256][ T8627]  </TASK>
[  290.250070][    C1] vkms_vblank_simulate: vblank timer overrun
[  290.269900][ T5923] usb 3-1: device descriptor read/8, error -71
[  290.382915][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  290.392133][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.434703][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  290.512250][ T5923] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  290.792998][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  290.815906][ T5923] usb 3-1: device descriptor read/8, error -71
[  290.873259][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  290.916530][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  290.956384][ T5923] usb usb3-port1: unable to enumerate USB device
[  291.031598][   T10] usb 4-1: Product: syz
[  291.035918][   T10] usb 4-1: Manufacturer: syz
[  291.051685][   T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  291.159682][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[  291.190267][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[  291.288165][   T10] usb 4-1: USB disconnect, device number 34
[  291.430567][ T8637] bridge0: entered promiscuous mode
[  291.452860][ T8637] ip6gretap0: entered promiscuous mode
[  291.911905][ T8646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.805'.
[  292.290995][ T8650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.806'.
[  292.538981][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'.
[  292.599121][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'.
[  292.853864][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'.
[  292.878735][   T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  292.910874][ T8662] ªªªªªªytes: renamed from vlan0 (while UP)
[  293.142114][   T10] usb 1-1: Using ep0 maxpacket: 16
[  293.217076][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.246627][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.559511][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  293.568286][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  293.616453][   T10] usb 1-1: can't read configurations, error -71
[  293.703772][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'.
[  294.269047][ T8680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  294.276370][ T8680] IPv6: NLM_F_CREATE should be set when creating new route
[  294.520491][ T8693] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.559019][ T5912] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  294.629024][ T5923] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  294.714065][ T8700] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  294.723631][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  294.778257][ T5912] usb 3-1: config 1 has an invalid interface number: 6 but max is 2
[  294.797142][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.858746][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  294.913360][ T5912] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  294.947809][ T5912] usb 3-1: config 1 has no interface number 1
[  294.954629][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.966709][ T5912] usb 3-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  294.991469][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.043460][ T5923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  295.059359][ T5912] usb 3-1: config 1 interface 6 has no altsetting 0
[  295.068782][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.087196][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  295.108908][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.151987][ T5912] usb 3-1: Product: ã �
[  295.160786][ T5912] usb 3-1: Manufacturer: �
[  295.165444][ T5923] usb 5-1: config 0 descriptor??
[  295.176456][ T5912] usb 3-1: SerialNumber: syz
[  295.537206][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.708727][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.743137][ T5923] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0
[  295.913546][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.923014][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.981232][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.039315][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.099866][ T5923] usb 5-1: USB disconnect, device number 29
[  296.136678][ T5912] usb 3-1: 0:2 : does not exist
[  296.224019][ T5912] usb 3-1: USB disconnect, device number 47
[  296.263749][ T8708] fido_id[8708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  296.839470][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.557236][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.830'.
[  298.581377][ T8736] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  299.270190][ T5886] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  299.409659][ T5912] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  299.448879][ T5886] usb 1-1: Using ep0 maxpacket: 8
[  299.464489][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.499086][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  299.519199][ T5886] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  299.540599][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  299.570031][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  299.586403][ T5886] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  299.592920][ T5912] usb 5-1: Using ep0 maxpacket: 16
[  299.597021][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.619516][ T5912] usb 5-1: too many configurations: 91, using maximum allowed: 8
[  299.621940][ T5886] hub 1-1:1.0: bad descriptor, ignoring hub
[  299.634235][ T5886] hub 1-1:1.0: probe with driver hub failed with error -5
[  299.642740][ T5886] cdc_wdm 1-1:1.0: skipping garbage
[  299.648322][ T5886] cdc_wdm 1-1:1.0: skipping garbage
[  299.654371][ T5886] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  299.685274][ T5912] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef
[  299.713006][ T5912] usb 5-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77
[  299.813340][ T5912] usb 5-1: Product: syz
[  299.838579][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'.
[  299.849555][ T5912] usb 5-1: Manufacturer: syz
[  299.863093][ T5912] usb 5-1: SerialNumber: syz
[  299.923962][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'.
[  300.119099][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'.
[  300.171217][ T8745] trusted_key: encrypted_key: insufficient parameters specified
[  300.232885][ T5923] usb 1-1: USB disconnect, device number 45
[  300.248309][ T8762] xt_CT: You must specify a L4 protocol and not use inversions on it
[  300.344044][ T5912] ums-datafab 5-1:68.0: USB Mass Storage device detected
[  300.421069][ T5912] ums-sddr55 5-1:68.0: USB Mass Storage device detected
[  300.514476][ T5912] usb 5-1: USB disconnect, device number 30
[  303.391740][ T5886] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  303.466152][ T8831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.473512][ T8831] IPv6: NLM_F_CREATE should be set when creating new route
[  303.595788][ T5886] usb 5-1: Using ep0 maxpacket: 16
[  303.622353][ T5886] usb 5-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config
[  303.638113][ T5886] usb 5-1: config 222 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  303.659311][ T5886] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  303.675850][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.709028][  T855] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  303.943019][  T855] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[  303.958918][  T855] usb 4-1: config 0 has no interface number 0
[  303.979034][  T855] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  304.002777][  T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.321420][  T855] usb 4-1: config 0 descriptor??
[  304.556830][ T5830] Bluetooth: hci4: Unknown advertising packet type: 0x78
[  304.556919][ T5830] Bluetooth: hci4: Malformed LE Event: 0x0d
[  304.558735][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.656739][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.904124][  T855] usb 4-1: string descriptor 0 read error: -71
[  304.940798][  T855] usb-storage 4-1:0.168: USB Mass Storage device detected
[  304.987539][  T855] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  305.103830][  T855] usb 4-1: USB disconnect, device number 35
[  305.717309][ T8865] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  306.018738][ T5923] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  306.178757][ T5923] usb 3-1: device descriptor read/64, error -71
[  306.262428][ T5907] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  306.429332][ T5923] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  306.498757][ T5907] usb 2-1: Using ep0 maxpacket: 32
[  306.507283][ T5907] usb 2-1: config 1 has an invalid interface number: 6 but max is 2
[  306.534051][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.564909][ T5907] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  306.642522][ T5907] usb 2-1: config 1 has no interface number 1
[  306.668714][ T5923] usb 3-1: device descriptor read/64, error -71
[  306.679007][ T5907] usb 2-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  306.693776][ T5907] usb 2-1: config 1 interface 6 has no altsetting 0
[  306.705715][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.715265][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.723447][ T5907] usb 2-1: Product: ã �
[  306.727895][ T5907] usb 2-1: Manufacturer: �
[  306.790649][ T5923] usb usb3-port1: attempt power cycle
[  306.826318][ T5907] usb 2-1: SerialNumber: syz
[  306.937719][ T5886] usb 5-1: string descriptor 0 read error: -71
[  306.948265][ T5886] usbhid 5-1:222.0: couldn't find an input interrupt endpoint
[  307.007297][ T5886] usb 5-1: USB disconnect, device number 31
[  307.062697][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.089318][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.198697][ T5923] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  307.215638][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.225446][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.241812][ T5923] usb 3-1: device descriptor read/8, error -71
[  307.249996][ T8881] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  307.261676][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.276474][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.385139][ T5907] usb 2-1: 0:2 : does not exist
[  307.549130][ T5923] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  307.571951][ T5907] usb 2-1: USB disconnect, device number 35
[  307.580812][ T5923] usb 3-1: device descriptor read/8, error -71
[  307.705488][ T5923] usb usb3-port1: unable to enumerate USB device
[  307.741574][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.778472][ T8889] geneve1: entered promiscuous mode
[  307.792068][ T8889] bridge0: port 3(macsec1) entered blocking state
[  307.800341][ T8889] bridge0: port 3(macsec1) entered disabled state
[  307.807783][ T8889] macsec1: entered allmulticast mode
[  307.815775][ T8889] geneve1: entered allmulticast mode
[  307.836219][ T8889] macsec1: entered promiscuous mode
[  307.843404][ T8889] bridge0: port 3(macsec1) entered blocking state
[  307.850135][ T8889] bridge0: port 3(macsec1) entered forwarding state
[  308.005776][ T8891] capability: warning: `syz.1.871' uses 32-bit capabilities (legacy support in use)
[  308.511768][ T8904] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  308.518368][ T8904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  308.599907][ T8904] vhci_hcd vhci_hcd.0: Device attached
[  308.622588][ T8906] vhci_hcd: connection closed
[  308.623729][   T36] vhci_hcd: stop threads
[  308.694956][   T36] vhci_hcd: release socket
[  308.703649][   T36] vhci_hcd: disconnect device
[  309.003266][ T8916] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  309.056085][ T8916] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  309.382179][ T8921] netlink: 'syz.4.879': attribute type 1 has an invalid length.
[  309.455883][ T8921] netlink: 'syz.4.879': attribute type 2 has an invalid length.
[  309.579407][ T8927] dns_resolver: Unsupported server list version (0)
[  309.618748][ T5923] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  309.798703][ T5923] usb 4-1: Using ep0 maxpacket: 16
[  309.833518][ T5923] usb 4-1: config 222 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.851393][ T5923] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  309.878869][  T855] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  309.894884][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.043857][  T855] usb 1-1: Using ep0 maxpacket: 8
[  310.061063][  T855] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  310.083681][ T8945] --map-set only usable from mangle table
[  310.093613][  T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.127883][  T855] usb 1-1: config 0 descriptor??
[  310.364262][  T855] usb 1-1: string descriptor 0 read error: -71
[  310.374244][  T855] uvcvideo 1-1:0.0: Found multiple Units with ID 1
[  310.381073][   T10] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  310.382464][  T855] uvcvideo 1-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  310.382620][  T855] uvcvideo 1-1:0.0: No valid video chain found.
[  310.401657][  T855] usb 1-1: USB disconnect, device number 46
[  310.664389][   T10] usb 2-1: config 7 has an invalid interface number: 252 but max is 0
[  310.716539][   T10] usb 2-1: config 7 has no interface number 0
[  310.780486][   T10] usb 2-1: config 7 interface 252 has no altsetting 0
[  310.800556][   T10] usb 2-1: string descriptor 0 read error: -22
[  310.807197][   T10] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  310.830065][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.227239][   T10] usb 2-1: USB disconnect, device number 36
[  312.442839][ T8981] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.894'.
[  312.794954][ T8988] netlink: 'syz.0.896': attribute type 16 has an invalid length.
[  313.643227][ T5923] usb 4-1: string descriptor 0 read error: -71
[  313.687225][ T5923] usbhid 4-1:222.0: can't add hid device: -71
[  313.724014][ T5923] usbhid 4-1:222.0: probe with driver usbhid failed with error -71
[  313.760982][ T5923] usb 4-1: USB disconnect, device number 36
[  313.828741][ T5924] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  313.993896][ T5924] usb 1-1: config 0 has an invalid interface number: 221 but max is 0
[  314.002908][ T5924] usb 1-1: config 0 has no interface number 0
[  314.014879][ T5924] usb 1-1: config 0 interface 221 has no altsetting 0
[  314.136578][ T5924] usb 1-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  314.165897][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.214536][ T5924] usb 1-1: Product: syz
[  314.232995][ T5924] usb 1-1: Manufacturer: syz
[  314.250521][ T5924] usb 1-1: SerialNumber: syz
[  314.273617][ T5924] usb 1-1: config 0 descriptor??
[  314.774993][ T5924] HFC-S_USB 1-1:0.221: probe with driver HFC-S_USB failed with error -5
[  314.810922][ T5924] usb 1-1: USB disconnect, device number 47
[  315.722174][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.748982][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.889044][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'.
[  315.928867][ T5924] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  316.080229][ T9026] veth0: entered promiscuous mode
[  316.094285][ T9025] veth0: left promiscuous mode
[  316.102310][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short
[  316.111990][ T5924] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[  316.120709][ T5924] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[  316.131855][ T5924] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  316.154657][ T5924] usb 1-1: config 129 has no interface number 0
[  316.170035][ T5924] usb 1-1: config 129 has no interface number 1
[  316.190131][ T5924] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  316.219474][ T5924] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  316.259999][ T5924] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  316.302828][ T5924] usb 1-1: config 129 interface 135 has no altsetting 0
[  316.319131][ T5924] usb 1-1: config 129 interface 5 has no altsetting 0
[  316.341175][ T5924] usb 1-1: string descriptor 0 read error: -22
[  316.347856][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  316.367822][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.437059][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  316.454444][ T5924] usb 1-1: MIDIStreaming interface descriptor not found
[  316.618276][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.654361][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.670095][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.681334][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.721939][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.739562][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.768046][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.799397][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.850439][ T5912] usb 1-1: USB disconnect, device number 48
[  317.231509][ T9058] syzkaller0: entered promiscuous mode
[  317.240224][ T9058] syzkaller0: entered allmulticast mode
[  317.308186][   T30] kauditd_printk_skb: 81 callbacks suppressed
[  317.308205][   T30] audit: type=1326 audit(1764112933.039:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.3.905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x0
[  318.093688][ T5886] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  318.250554][ T9080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  318.281801][ T5886] usb 3-1: config 0 has an invalid interface number: 221 but max is 0
[  318.291628][ T5886] usb 3-1: config 0 has no interface number 0
[  318.305144][ T5886] usb 3-1: config 0 interface 221 has no altsetting 0
[  318.499128][ T5886] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  318.522896][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.535026][ T5886] usb 3-1: Product: syz
[  318.552011][ T5886] usb 3-1: Manufacturer: syz
[  318.564751][ T5886] usb 3-1: SerialNumber: syz
[  318.585519][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'.
[  318.657889][ T5886] usb 3-1: config 0 descriptor??
[  318.935307][ T5886] HFC-S_USB 3-1:0.221: probe with driver HFC-S_USB failed with error -5
[  318.999031][ T5886] usb 3-1: USB disconnect, device number 52
[  319.308226][ T9101] tc_dump_action: action bad kind
[  319.361939][ T9101] binder: 9100:9101 ioctl c0306201 200000000080 returned -14
[  319.762584][ T9110] vim2m vim2m.0: vidioc_s_fmt queue busy
[  320.609720][ T9111] capability: warning: `syz.2.920' uses deprecated v2 capabilities in a way that may be insecure
[  321.313580][ T9132] syzkaller0: entered promiscuous mode
[  321.332825][ T9132] syzkaller0: entered allmulticast mode
[  321.730949][ T9141] netlink: 'syz.4.929': attribute type 1 has an invalid length.
[  322.061219][ T5912] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  322.221378][ T5912] usb 3-1: config 0 has an invalid interface number: 221 but max is 0
[  322.230780][ T5912] usb 3-1: config 0 has no interface number 0
[  322.237229][ T5912] usb 3-1: config 0 interface 221 has no altsetting 0
[  322.251213][ T5912] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  322.260773][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.298767][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  322.317303][ T5912] usb 3-1: Product: syz
[  322.326402][ T5912] usb 3-1: Manufacturer: syz
[  322.341703][ T5912] usb 3-1: SerialNumber: syz
[  322.376616][ T5912] usb 3-1: config 0 descriptor??
[  322.468757][   T10] usb 2-1: Using ep0 maxpacket: 32
[  322.486606][   T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  322.495525][   T10] usb 2-1: config 0 has no interface number 0
[  322.511376][   T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  322.538788][   T10] usb 2-1: config 0 interface 85 has no altsetting 0
[  322.550062][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  322.559374][   T10] usb 2-1: New USB device strings: Mfr=1, Product=1, SerialNumber=241
[  322.568780][   T10] usb 2-1: Product: syz
[  322.575213][   T10] usb 2-1: Manufacturer: syz
[  322.585371][   T10] usb 2-1: SerialNumber: syz
[  322.609536][   T10] usb 2-1: config 0 descriptor??
[  322.666992][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.673452][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  322.686515][ T5912] HFC-S_USB 3-1:0.221: probe with driver HFC-S_USB failed with error -5
[  322.722743][ T5912] usb 3-1: USB disconnect, device number 53
[  323.006508][   T10] appletouch 2-1:0.85: Failed to read mode from device.
[  323.016680][   T10] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  323.298016][ T9166] tc_dump_action: action bad kind
[  323.404665][ T9166] binder: 9165:9166 ioctl c0306201 200000000080 returned -14
[  323.487724][   T10] usb 2-1: USB disconnect, device number 37
[  323.918736][  T855] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  323.962044][ T9173] input: syz1 as /devices/virtual/input/input21
[  324.084653][  T855] usb 3-1: Using ep0 maxpacket: 16
[  324.099611][  T855] usb 3-1: too many configurations: 91, using maximum allowed: 8
[  324.151727][  T855] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef
[  324.162091][  T855] usb 3-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77
[  324.192457][  T855] usb 3-1: Product: syz
[  324.207486][  T855] usb 3-1: Manufacturer: syz
[  324.228762][  T855] usb 3-1: SerialNumber: syz
[  324.550650][ T9169] trusted_key: encrypted_key: insufficient parameters specified
[  324.726484][  T855] ums-datafab 3-1:68.0: USB Mass Storage device detected
[  324.899571][  T855] ums-sddr55 3-1:68.0: USB Mass Storage device detected
[  325.162456][ T9200] xt_socket: unknown flags 0xc
[  325.219108][ T5923] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  325.239942][  T855] usb 3-1: USB disconnect, device number 54
[  325.383708][ T5923] usb 2-1: config 0 has an invalid interface number: 221 but max is 0
[  325.392151][ T5923] usb 2-1: config 0 has no interface number 0
[  325.398393][ T5923] usb 2-1: config 0 interface 221 has no altsetting 0
[  325.459072][ T5923] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  325.468397][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.476941][   T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  325.492314][ T5923] usb 2-1: Product: syz
[  325.505034][ T5923] usb 2-1: Manufacturer: syz
[  325.510195][ T5923] usb 2-1: SerialNumber: syz
[  325.530732][ T5923] usb 2-1: config 0 descriptor??
[  325.638769][   T10] usb 1-1: Using ep0 maxpacket: 8
[  325.660719][   T10] usb 1-1: config 0 has an invalid interface number: 88 but max is 3
[  325.669799][   T10] usb 1-1: config 0 has an invalid interface number: 250 but max is 3
[  325.688154][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.729845][   T10] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  325.769402][   T10] usb 1-1: config 0 has no interface number 0
[  325.801978][ T5923] HFC-S_USB 2-1:0.221: probe with driver HFC-S_USB failed with error -5
[  325.829092][   T10] usb 1-1: config 0 has no interface number 1
[  325.836882][   T10] usb 1-1: config 0 interface 88 has no altsetting 0
[  325.854225][ T5923] usb 2-1: USB disconnect, device number 38
[  325.869194][   T10] usb 1-1: config 0 interface 250 has no altsetting 0
[  325.899084][   T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3
[  325.932103][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.949789][   T10] usb 1-1: config 0 descriptor??
[  326.176312][ T9210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'.
[  326.192394][   T10] usb 1-1: string descriptor 0 read error: -71
[  326.256629][   T10] usb 1-1: USB disconnect, device number 49
[  327.450124][  T855] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  327.578765][   T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  327.615029][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.964'.
[  327.791574][   T44] usb 2-1: Using ep0 maxpacket: 32
[  327.797057][  T855] usb 1-1: Using ep0 maxpacket: 16
[  327.805317][  T855] usb 1-1: too many configurations: 91, using maximum allowed: 8
[  327.815941][   T44] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  327.825057][   T44] usb 2-1: config 0 has no interface number 0
[  327.839014][   T44] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  327.850878][   T44] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  327.863523][   T44] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  327.876295][   T44] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  327.889405][   T44] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  327.902689][  T855] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef
[  327.912391][  T855] usb 1-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77
[  327.920805][  T855] usb 1-1: Product: syz
[  327.925222][  T855] usb 1-1: Manufacturer: syz
[  327.932808][  T855] usb 1-1: SerialNumber: syz
[  327.937893][   T44] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  327.962777][   T44] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  327.978182][   T44] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  327.990170][   T44] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  328.000691][   T44] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  328.033387][   T44] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  328.043194][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.057089][   T44] usb 2-1: Product: syz
[  328.072374][   T44] usb 2-1: Manufacturer: syz
[  328.084031][   T44] usb 2-1: SerialNumber: syz
[  328.105524][   T44] usb 2-1: config 0 descriptor??
[  328.121856][ T9244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  328.131873][ T9244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  328.166605][ T9240] trusted_key: encrypted_key: insufficient parameters specified
[  328.182583][   T44] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  328.191664][   T44] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  328.238748][   T44] scsi host1: microtekX6
[  328.244084][  T855] ums-datafab 1-1:68.0: USB Mass Storage device detected
[  328.470046][  T855] ums-sddr55 1-1:68.0: USB Mass Storage device detected
[  328.703520][  T855] usb 1-1: USB disconnect, device number 50
[  328.796375][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'.
[  328.830685][ T5886] usb 2-1: USB disconnect, device number 39
[  329.182423][ T9270] syz_tun: entered allmulticast mode
[  329.190658][ T9269] syz_tun: left allmulticast mode
[  329.488689][  T855] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  329.508712][ T5923] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  329.651088][  T855] usb 1-1: config 0 has an invalid interface number: 221 but max is 0
[  329.658805][ T5924] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  329.659569][  T855] usb 1-1: config 0 has no interface number 0
[  329.666969][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  329.674056][  T855] usb 1-1: config 0 interface 221 has no altsetting 0
[  329.683665][ T5923] usb 5-1: config 222 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  329.691055][  T855] usb 1-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  329.696530][ T5923] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  329.714374][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.716157][  T855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.733386][  T855] usb 1-1: Product: syz
[  329.737617][  T855] usb 1-1: Manufacturer: syz
[  329.749180][  T855] usb 1-1: SerialNumber: syz
[  329.765452][  T855] usb 1-1: config 0 descriptor??
[  329.878422][ T9285] FAULT_INJECTION: forcing a failure.
[  329.878422][ T9285] name failslab, interval 1, probability 0, space 0, times 0
[  329.891782][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.2.975 Not tainted syzkaller #0 PREEMPT(full) 
[  329.891812][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  329.891834][ T9285] Call Trace:
[  329.891846][ T9285]  <TASK>
[  329.891859][ T9285]  dump_stack_lvl+0x189/0x250
[  329.891895][ T9285]  ? __pfx____ratelimit+0x10/0x10
[  329.891926][ T9285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.891955][ T9285]  ? __pfx__printk+0x10/0x10
[  329.891983][ T9285]  ? __pfx___might_resched+0x10/0x10
[  329.892012][ T9285]  should_fail_ex+0x414/0x560
[  329.892051][ T9285]  should_failslab+0xa8/0x100
[  329.892075][ T9285]  __kmalloc_noprof+0xcb/0x7f0
[  329.892105][ T9285]  ? iter_file_splice_write+0x1c6/0x10e0
[  329.892146][ T9285]  iter_file_splice_write+0x1c6/0x10e0
[  329.892208][ T9285]  ? __pfx_iter_file_splice_write+0x10/0x10
[  329.892247][ T9285]  ? rcu_read_lock_any_held+0xb3/0x120
[  329.892274][ T9285]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  329.892314][ T9285]  ? __pfx_iter_file_splice_write+0x10/0x10
[  329.892353][ T9285]  do_splice+0xc79/0x1660
[  329.892388][ T9285]  ? __might_fault+0xb0/0x130
[  329.892427][ T9285]  ? __pfx_do_splice+0x10/0x10
[  329.892459][ T9285]  __se_sys_splice+0x2e1/0x460
[  329.892486][ T9285]  ? __pfx___se_sys_splice+0x10/0x10
[  329.892512][ T9285]  ? __x64_sys_splice+0x21/0xf0
[  329.892537][ T9285]  do_syscall_64+0xfa/0xfa0
[  329.892567][ T9285]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.892599][ T9285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.892620][ T9285]  ? clear_bhb_loop+0x60/0xb0
[  329.892646][ T9285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.892673][ T9285] RIP: 0033:0x7fed0498f749
[  329.892692][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.892711][ T9285] RSP: 002b:00007fed05770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  329.892735][ T9285] RAX: ffffffffffffffda RBX: 00007fed04be5fa0 RCX: 00007fed0498f749
[  329.892751][ T9285] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004
[  329.892763][ T9285] RBP: 00007fed05770090 R08: 0000000000000009 R09: 0000000000000007
[  329.892777][ T9285] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  329.892790][ T9285] R13: 00007fed04be6038 R14: 00007fed04be5fa0 R15: 00007fed04d0fa28
[  329.892826][ T9285]  </TASK>
[  329.905752][ T5924] usb 4-1: Using ep0 maxpacket: 16
[  330.078978][    C0] vkms_vblank_simulate: vblank timer overrun
[  330.154940][  T855] HFC-S_USB 1-1:0.221: probe with driver HFC-S_USB failed with error -5
[  330.155199][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  330.189682][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  330.241079][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  330.250776][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.262971][ T5924] usb 4-1: Product: syz
[  330.267193][ T5924] usb 4-1: Manufacturer: syz
[  330.343745][ T5924] usb 4-1: SerialNumber: syz
[  330.400214][  T855] usb 1-1: USB disconnect, device number 51
[  330.531620][ T5924] usb 4-1: config 0 descriptor??
[  330.554002][ T5924] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  330.598735][ T5912] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  330.710103][ T5924] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  330.808784][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  330.814966][ T5912] usb 3-1: too many configurations: 91, using maximum allowed: 8
[  330.845391][ T5912] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef
[  330.854638][ T5912] usb 3-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77
[  330.863050][ T5912] usb 3-1: Product: syz
[  330.867275][ T5912] usb 3-1: Manufacturer: syz
[  330.877414][ T5912] usb 3-1: SerialNumber: syz
[  331.115914][ T9291] trusted_key: encrypted_key: insufficient parameters specified
[  331.194879][ T5912] ums-datafab 3-1:68.0: USB Mass Storage device detected
[  331.234955][ T5924] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  331.258776][ T5924] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  331.281830][ T5924] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  331.297741][ T5924] em28xx 4-1:0.0: No AC97 audio processor
[  331.319626][ T5912] ums-sddr55 3-1:68.0: USB Mass Storage device detected
[  331.354356][ T5924] usb 4-1: USB disconnect, device number 37
[  331.411084][ T5924] em28xx 4-1:0.0: Disconnecting em28xx
[  331.422007][ T5912] usb 3-1: USB disconnect, device number 55
[  331.429060][   T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  331.447979][ T5924] em28xx 4-1:0.0: Freeing device
[  331.528920][ T5819] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  331.593580][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.607286][   T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  331.626616][   T44] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  331.635947][   T44] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  331.645012][   T44] usb 2-1: Product: syz
[  331.649742][   T44] usb 2-1: Manufacturer: syz
[  331.654428][   T44] usb 2-1: SerialNumber: syz
[  331.667738][   T44] usb 2-1: config 0 descriptor??
[  331.678881][ T5819] usb 1-1: Using ep0 maxpacket: 16
[  331.700937][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.738952][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.752854][ T5819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  331.766652][ T5819] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  331.810313][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.822656][ T9303] netlink: 260 bytes leftover after parsing attributes in process `syz.2.979'.
[  331.841242][ T5819] usb 1-1: config 0 descriptor??
[  332.128982][   T10] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  332.264570][ T5819] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  332.274763][ T5819] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  332.299236][ T5819] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  332.309369][   T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  332.318362][   T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  332.330747][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.346996][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  332.356655][   T10] usb 3-1: config 1 has no interface number 0
[  332.382943][   T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  332.403981][ T5819] appleir 0003:05AC:8241.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[  332.428964][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.461648][ T5819] usb 1-1: USB disconnect, device number 52
[  332.508742][   T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  332.625896][ T9314] fido_id[9314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  332.654705][   T10] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[  332.689084][   T10] snd_usb_pod 3-1:1.1: invalid control EP
[  332.714465][   T10] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  332.755577][   T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  332.787556][   T10] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[  332.867687][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.899881][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.096192][ T5923] usb 5-1: string descriptor 0 read error: -71
[  333.122995][ T5923] usbhid 5-1:222.0: couldn't find an input interrupt endpoint
[  333.179828][ T5923] usb 5-1: USB disconnect, device number 32
[  333.200420][   T10] usb 3-1: USB disconnect, device number 56
[  333.385748][ T9329] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  333.490174][ T9330] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  334.148708][ T5923] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  334.182067][   T30] audit: type=1326 audit(1764112949.889:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8638f749 code=0x7fc00000
[  334.390524][ T5923] usb 5-1: config 0 has an invalid interface number: 221 but max is 0
[  334.391839][   T44] usb 2-1: USB disconnect, device number 40
[  334.398887][ T5923] usb 5-1: config 0 has no interface number 0
[  334.428084][ T5923] usb 5-1: config 0 interface 221 has no altsetting 0
[  334.428750][ T5886] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  334.470606][ T5923] usb 5-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  334.491986][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.500604][ T5923] usb 5-1: Product: syz
[  334.507861][ T5923] usb 5-1: Manufacturer: syz
[  334.520974][ T5923] usb 5-1: SerialNumber: syz
[  334.549610][ T5923] usb 5-1: config 0 descriptor??
[  334.658937][ T5886] usb 3-1: Using ep0 maxpacket: 16
[  334.671116][ T5886] usb 3-1: too many configurations: 91, using maximum allowed: 8
[  334.696935][ T5886] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef
[  334.706680][ T5886] usb 3-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77
[  334.759753][ T5886] usb 3-1: Product: syz
[  334.794819][ T5886] usb 3-1: Manufacturer: syz
[  334.803111][ T5886] usb 3-1: SerialNumber: syz
[  334.807785][ T5923] HFC-S_USB 5-1:0.221: probe with driver HFC-S_USB failed with error -5
[  334.858565][ T5923] usb 5-1: USB disconnect, device number 33
[  334.903527][   T44] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  335.071233][   T44] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  335.095666][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.108679][ T9338] trusted_key: encrypted_key: insufficient parameters specified
[  335.165222][ T5886] ums-datafab 3-1:68.0: USB Mass Storage device detected
[  335.184659][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.221482][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  335.253118][ T5886] ums-sddr55 3-1:68.0: USB Mass Storage device detected
[  335.279595][   T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  335.325578][ T5886] usb 3-1: USB disconnect, device number 57
[  335.332184][   T44] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  335.405128][   T44] usb 2-1: Manufacturer: syz
[  335.447502][   T44] usb 2-1: config 0 descriptor??
[  335.872663][   T44] appleir 0003:05AC:8243.000C: unknown main item tag 0x0
[  335.929544][   T44] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  336.378816][ T5923] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  336.448848][ T5907] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  336.560029][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  336.567800][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.591597][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.601959][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  336.602417][ T5907] usb 3-1: Using ep0 maxpacket: 16
[  336.615207][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  336.631773][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.641870][ T5907] usb 3-1: config 222 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  336.665935][ T5907] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  336.677896][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.679260][ T5923] usb 5-1: config 0 descriptor??
[  337.180311][ T5923] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.000D/input/input22
[  337.385718][ T5923] appleir 0003:05AC:8241.000D: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  337.419356][ T5923] usb 5-1: USB disconnect, device number 34
[  337.460402][ T9361] delete_channel: no stack
[  337.543370][   T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  337.706307][ T9370] fido_id[9370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  337.838897][   T10] usb 4-1: Using ep0 maxpacket: 8
[  337.854399][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.865069][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  337.893885][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.999'.
[  338.002627][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  338.083094][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  338.095278][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  338.116709][   T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  338.116790][ T5886] usb 2-1: USB disconnect, device number 41
[  338.133255][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  338.144837][   T10] usb 4-1: Product: syz
[  338.168823][   T10] usb 4-1: Manufacturer: syz
[  338.222288][   T10] usb 4-1: SerialNumber: syz
[  338.246394][   T10] usb 4-1: config 0 descriptor??
[  338.579297][   T10] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  338.596533][   T10] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  338.859064][   T10] radio-si470x 4-1:0.0: software version 0, hardware version 0
[  338.866789][   T10] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  338.882935][   T10] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  339.155010][   T10] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  339.996184][ T5886] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  340.032222][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'.
[  340.088415][ T5886] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  340.094794][ T9399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.159292][ T9399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.268922][   T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110
[  340.277914][   T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[  340.601510][ T5907] usb 3-1: string descriptor 0 read error: -71
[  340.652478][ T5907] usbhid 3-1:222.0: couldn't find an input interrupt endpoint
[  340.673054][ T5907] usb 3-1: USB disconnect, device number 58
[  340.852836][ T9369] team0 (unregistering): Port device team_slave_0 removed
[  340.884896][ T9369] team0 (unregistering): Port device team_slave_1 removed
[  340.898719][ T5886] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  341.070190][ T5886] usb 1-1: Using ep0 maxpacket: 16
[  341.076337][ T5886] usb 1-1: too many configurations: 230, using maximum allowed: 8
[  341.093535][ T5912] usb 4-1: USB disconnect, device number 38
[  341.099058][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -61
[  341.128444][ T5886] usb 1-1: can't read configurations, error -61
[  341.270468][ T5886] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  341.289860][ T5907] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  341.428681][ T5886] usb 1-1: Using ep0 maxpacket: 16
[  341.436022][ T5886] usb 1-1: too many configurations: 230, using maximum allowed: 8
[  341.450079][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  341.473859][   T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  341.474421][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  341.494232][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -61
[  341.502714][ T5886] usb 1-1: can't read configurations, error -61
[  341.510317][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  341.526768][ T5886] usb usb1-port1: attempt power cycle
[  341.555419][ T5907] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  341.564691][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.572803][ T5907] usb 5-1: Product: syz
[  341.577247][ T5907] usb 5-1: Manufacturer: syz
[  341.581958][ T5907] usb 5-1: SerialNumber: syz
[  341.589865][ T5907] usb 5-1: config 0 descriptor??
[  341.595614][ T9413] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  341.619886][ T9413] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  341.641505][ T5907] usb 5-1: ucan: probing device on interface #0
[  341.647636][   T10] usb 2-1: Using ep0 maxpacket: 16
[  341.693680][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.706773][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.716992][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  341.733571][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  341.750237][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.801037][   T10] usb 2-1: config 0 descriptor??
[  341.898762][ T5886] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  341.931680][ T5886] usb 1-1: Using ep0 maxpacket: 16
[  341.938235][ T5886] usb 1-1: too many configurations: 230, using maximum allowed: 8
[  341.980668][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -61
[  341.991455][ T5886] usb 1-1: can't read configurations, error -61
[  342.128800][ T5886] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  342.189556][ T5886] usb 1-1: Using ep0 maxpacket: 16
[  342.201871][ T5886] usb 1-1: too many configurations: 230, using maximum allowed: 8
[  342.217924][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -61
[  342.239592][ T5886] usb 1-1: can't read configurations, error -61
[  342.295994][ T9424] binder: 9421:9424 ioctl c0306201 200000000080 returned -14
[  342.320374][ T5886] usb usb1-port1: unable to enumerate USB device
[  342.364263][ T9422] tc_dump_action: action bad kind
[  342.367981][   T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000F/input/input23
[  342.664668][   T10] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[  342.812835][   T10] usb 2-1: USB disconnect, device number 42
[  342.890931][ T5907] usb 5-1: ucan: failed to retrieve device info
[  342.977152][ T5907] usb 5-1: ucan: probe failed; try to update the device firmware
[  343.326185][ T9432] fido_id[9432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  343.472763][ T9442] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  344.185908][ T5912] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  344.428696][ T5912] usb 1-1: Using ep0 maxpacket: 16
[  344.449680][ T5912] usb 1-1: config 222 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  344.521767][ T5912] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  344.565404][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.358756][ T5917] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  345.461362][   T10] usb 5-1: USB disconnect, device number 35
[  345.511833][ T5917] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  345.520230][ T5917] usb 4-1: config 0 has no interface number 0
[  345.530399][ T5917] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  345.549409][ T5917] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  345.727355][ T5917] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  345.987349][ T5917] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  345.997271][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  346.057795][ T5917] usb 4-1: Product: syz
[  346.204095][ T5917] usb 4-1: SerialNumber: syz
[  346.294623][ T5917] usb 4-1: config 0 descriptor??
[  346.593369][ T5917] cm109 4-1:0.8: invalid payload size 0, expected 4
[  346.602592][ T5917] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input24
[  346.653419][ T5924] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  346.727246][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.738819][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.746194][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.753469][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.760661][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.767985][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.778723][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.786071][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.793430][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.800703][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  346.815173][ T5917] usb 4-1: USB disconnect, device number 39
[  346.821225][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  346.838689][ T5924] usb 2-1: Using ep0 maxpacket: 16
[  346.858023][ T5917] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  346.876614][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.950924][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.975739][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  347.040804][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  347.078670][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.128173][ T5924] usb 2-1: config 0 descriptor??
[  347.237383][ T9471] tc_dump_action: action bad kind
[  347.269180][ T9471] binder: 9470:9471 ioctl c0306201 200000000080 returned -14
[  347.574105][ T5924] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0010/input/input25
[  347.699057][ T5923] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  347.743198][ T5924] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[  347.854649][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  347.865351][ T5924] usb 2-1: USB disconnect, device number 43
[  347.912699][ T9482] fido_id[9482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  348.078550][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.087499][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.279768][ T5912] usb 1-1: string descriptor 0 read error: -71
[  348.289959][ T5912] usbhid 1-1:222.0: couldn't find an input interrupt endpoint
[  348.331629][ T5912] usb 1-1: USB disconnect, device number 57
[  348.792861][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.904971][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.942085][ T9479] 0·: left allmulticast mode
[  349.296307][ T9479] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  349.321179][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short
[  349.333431][ T5923] usb 4-1: no configurations
[  349.339279][ T4174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.348449][ T5923] usb 4-1: can't read configurations, error -22
[  349.373249][ T4174] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.384100][ T4174] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.393294][ T4174] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.610399][ T9497] fuse: Bad value for 'fd'
[  349.936144][ T9505] fuse: Bad value for 'group_id'
[  349.942914][ T9505] fuse: Bad value for 'group_id'
[  350.040591][ T9509] loop2: detected capacity change from 0 to 7
[  350.052290][ T5886] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  350.071525][ T9509]  loop2:
[  350.074566][ T9509] loop2: partition table partially beyond EOD, truncated
[  350.143301][ T9510] nfs: Unknown parameter ''
[  350.427130][ T9513] tc_dump_action: action bad kind
[  350.486785][ T9513] binder: 9511:9513 ioctl c0306201 200000000080 returned -14
[  350.516372][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.532075][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  350.574475][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  350.586785][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  350.651866][ T5886] usb 1-1: Product: syz
[  350.663918][ T5886] usb 1-1: Manufacturer: syz
[  350.681896][ T5886] usb 1-1: SerialNumber: syz
[  350.699935][ T5886] usb 1-1: config 0 descriptor??
[  350.908714][ T5917] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  351.068888][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  351.080860][ T5917] usb 3-1: config 222 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.095919][ T5917] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  351.122235][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.458813][ T5886] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  351.573408][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'.
[  351.631941][ T5917] usb 3-1: string descriptor 0 read error: -71
[  351.639477][ T5886] usb 5-1: config 0 has an invalid interface number: 221 but max is 0
[  351.667671][ T5917] usbhid 3-1:222.0: couldn't find an input interrupt endpoint
[  351.695772][ T5886] usb 5-1: config 0 has no interface number 0
[  351.746916][ T5886] usb 5-1: config 0 interface 221 has no altsetting 0
[  351.864315][ T5917] usb 3-1: USB disconnect, device number 59
[  351.876859][ T5886] usb 5-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57
[  351.889436][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.906371][ T5886] usb 5-1: Product: syz
[  351.910833][ T5886] usb 5-1: Manufacturer: syz
[  351.915486][ T5886] usb 5-1: SerialNumber: syz
[  351.929330][ T5886] usb 5-1: config 0 descriptor??
[  352.495093][ T5886] HFC-S_USB 5-1:0.221: probe with driver HFC-S_USB failed with error -5
[  352.520647][ T5886] usb 5-1: USB disconnect, device number 36
[  352.638730][ T5819] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  352.759481][   T30] audit: type=1326 audit(1764112968.499:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642638f749 code=0x7fc00000
[  352.848095][ T5907] usb 1-1: USB disconnect, device number 58
[  352.880557][ T5819] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  352.906580][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.961184][ T5819] usb 3-1: config 0 descriptor??
[  353.007220][ T5819] cp210x 3-1:0.0: cp210x converter detected
[  353.398992][ T5819] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  353.403321][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.405073][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.449189][ T5819] usb 3-1: cp210x converter now attached to ttyUSB0
[  353.733989][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.734434][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.828732][ T5923] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  353.849040][ T5886] usb 3-1: USB disconnect, device number 60
[  353.880329][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  353.897526][ T5886] cp210x 3-1:0.0: device disconnected
[  354.000380][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  354.006188][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.006242][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.006273][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  354.006298][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  354.007494][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  354.007524][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  354.007547][ T5923] usb 2-1: SerialNumber: syz
[  354.025206][ T5923] hub 2-1:1.0: bad descriptor, ignoring hub
[  354.025239][ T5923] hub 2-1:1.0: probe with driver hub failed with error -5
[  354.039704][ T5923] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  354.241549][ T5912] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  354.368786][ T5912] usb 1-1: device descriptor read/64, error -71
[  354.442399][   T30] audit: type=1326 audit(1764112970.179:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  354.465386][ T9552] raw-gadget.2 gadget.1: fail, usb_ep_set_wedge returned -11
[  354.510289][   T30] audit: type=1326 audit(1764112970.179:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  354.563867][   T30] audit: type=1326 audit(1764112970.179:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  354.622648][ T9577] FAULT_INJECTION: forcing a failure.
[  354.622648][ T9577] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  354.629226][ T5912] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  354.637979][   T30] audit: type=1326 audit(1764112970.179:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  354.677949][ T9577] CPU: 1 UID: 0 PID: 9577 Comm: syz.2.1057 Not tainted syzkaller #0 PREEMPT(full) 
[  354.677980][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  354.677994][ T9577] Call Trace:
[  354.678003][ T9577]  <TASK>
[  354.678012][ T9577]  dump_stack_lvl+0x189/0x250
[  354.678047][ T9577]  ? __pfx____ratelimit+0x10/0x10
[  354.678078][ T9577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.678107][ T9577]  ? __pfx__printk+0x10/0x10
[  354.678131][ T9577]  ? fs_reclaim_acquire+0x7d/0x100
[  354.678175][ T9577]  should_fail_ex+0x414/0x560
[  354.678214][ T9577]  prepare_alloc_pages+0x213/0x610
[  354.678244][ T9577]  __alloc_frozen_pages_noprof+0x123/0x370
[  354.678271][ T9577]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  354.678291][ T9577]  ? __bfs+0x154/0x2a0
[  354.678321][ T9577]  ? policy_nodemask+0x27c/0x720
[  354.678348][ T9577]  alloc_pages_mpol+0x232/0x4a0
[  354.678376][ T9577]  folio_alloc_mpol_noprof+0x39/0x70
[  354.678400][ T9577]  shmem_alloc_and_add_folio+0x423/0xf40
[  354.678441][ T9577]  ? filemap_get_entry+0xad/0x2f0
[  354.678459][ T9577]  ? filemap_get_entry+0xad/0x2f0
[  354.678480][ T9577]  ? filemap_get_entry+0x28f/0x2f0
[  354.678503][ T9577]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  354.678539][ T9577]  ? shmem_allowable_huge_orders+0x1d7/0x4f0
[  354.678575][ T9577]  shmem_get_folio_gfp+0x59d/0x1660
[  354.678615][ T9577]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  354.678651][ T9577]  shmem_write_begin+0xf7/0x2b0
[  354.678703][ T9577]  generic_perform_write+0x2c5/0x900
[  354.678744][ T9577]  ? __pfx_generic_perform_write+0x10/0x10
[  354.678767][ T9577]  ? down_write+0x162/0x1f0
[  354.678797][ T9577]  ? file_update_time+0x2da/0x490
[  354.678829][ T9577]  shmem_file_write_iter+0xf8/0x120
[  354.678864][ T9577]  iter_file_splice_write+0x975/0x10e0
[  354.678924][ T9577]  ? __pfx_iter_file_splice_write+0x10/0x10
[  354.678961][ T9577]  ? rcu_read_lock_any_held+0xb3/0x120
[  354.679003][ T9577]  ? __pfx_iter_file_splice_write+0x10/0x10
[  354.679036][ T9577]  do_splice+0xc79/0x1660
[  354.679069][ T9577]  ? __might_fault+0xb0/0x130
[  354.679107][ T9577]  ? __pfx_do_splice+0x10/0x10
[  354.679137][ T9577]  __se_sys_splice+0x2e1/0x460
[  354.679163][ T9577]  ? __pfx___se_sys_splice+0x10/0x10
[  354.679188][ T9577]  ? __x64_sys_splice+0x21/0xf0
[  354.679211][ T9577]  do_syscall_64+0xfa/0xfa0
[  354.679239][ T9577]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.679270][ T9577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.679291][ T9577]  ? clear_bhb_loop+0x60/0xb0
[  354.679315][ T9577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.679336][ T9577] RIP: 0033:0x7fed0498f749
[  354.679352][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.679371][ T9577] RSP: 002b:00007fed05770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  354.679394][ T9577] RAX: ffffffffffffffda RBX: 00007fed04be5fa0 RCX: 00007fed0498f749
[  354.679410][ T9577] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004
[  354.679422][ T9577] RBP: 00007fed05770090 R08: 0000000000000009 R09: 0000000000000007
[  354.679435][ T9577] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  354.679448][ T9577] R13: 00007fed04be6038 R14: 00007fed04be5fa0 R15: 00007fed04d0fa28
[  354.679480][ T9577]  </TASK>
[  354.890084][ T5912] usb 1-1: device descriptor read/64, error -71
[  354.894754][   T30] audit: type=1326 audit(1764112970.179:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  355.029925][   T30] audit: type=1326 audit(1764112970.189:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  355.052894][   T30] audit: type=1326 audit(1764112970.189:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  355.075454][   T30] audit: type=1326 audit(1764112970.189:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  355.097946][   T30] audit: type=1326 audit(1764112970.189:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f599a78f749 code=0x7ffc0000
[  355.098005][ T5912] usb usb1-port1: attempt power cycle
[  355.120332][    C0] vkms_vblank_simulate: vblank timer overrun
[  355.178706][ T5886] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  355.410663][ T5886] usb 4-1: config 0 has no interfaces?
[  355.421745][ T5886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  355.435851][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.454964][ T5886] usb 4-1: Product: syz
[  355.471251][ T5886] usb 4-1: Manufacturer: syz
[  355.475919][ T5886] usb 4-1: SerialNumber: syz
[  355.490655][ T5886] usb 4-1: config 0 descriptor??
[  355.594132][ T5819] usb 2-1: USB disconnect, device number 44
[  355.601382][ T5912] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  355.649507][ T5912] usb 1-1: device descriptor read/8, error -71
[  355.657567][ T9588] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  355.963673][ T5912] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  356.000981][ T5912] usb 1-1: device descriptor read/8, error -71
[  356.086494][ T5923] usb 4-1: USB disconnect, device number 42
[  356.110886][ T5912] usb usb1-port1: unable to enumerate USB device
[  356.264152][ T9596] tap0: tun_chr_ioctl cmd 1074025677
[  356.271444][ T9596] tap0: linktype set to 778
[  356.439618][ T9602] netlink: 'syz.1.1064': attribute type 10 has an invalid length.
[  356.469140][ T9602] team0: Device bond0 is up. Set it down before adding it as a team port
[  357.038727][ T5917] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  357.250483][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  357.259276][ T5917] usb 2-1: too many configurations: 91, using maximum allowed: 8
[  357.322750][ T5917] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef
[  357.349812][ T5917] usb 2-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77
[  357.358346][ T5917] usb 2-1: Product: syz
[  357.358797][ T5923] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  357.371574][ T5917] usb 2-1: Manufacturer: syz
[  357.380755][ T5917] usb 2-1: SerialNumber: syz
[  357.610282][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.626406][ T5923] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  357.661260][ T9606] trusted_key: encrypted_key: insufficient parameters specified
[  357.765264][ T5917] ums-datafab 2-1:68.0: USB Mass Storage device detected
[  357.809458][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.939971][ T5917] ums-sddr55 2-1:68.0: USB Mass Storage device detected
[  358.007465][ T5923] usb 1-1: config 0 descriptor??
[  358.034141][ T5917] usb 2-1: USB disconnect, device number 45
[  358.546768][ T5923] usb 1-1: USB disconnect, device number 63
[  359.868642][ T9665] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  359.875211][ T9665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  359.894441][ T9665] vhci_hcd vhci_hcd.0: Device attached
[  359.938728][ T5923] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  360.104659][ T9666] vhci_hcd: connection closed
[  360.104810][ T4174] vhci_hcd: stop threads
[  360.122051][ T4174] vhci_hcd: release socket
[  360.122654][ T5923] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  360.130911][ T4174] vhci_hcd: disconnect device
[  360.153569][ T5923] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  360.170580][   T44] usb 36-1: enqueue for inactive port 0
[  360.173869][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.199715][ T5923] gspca_main: stv0680-2.14.0 probing 041e:4007
[  360.698775][   T44] usb usb36-port1: attempt power cycle
[  360.762730][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.773351][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.299741][   T44] usb usb36-port1: unable to enumerate USB device
[  361.375584][ T5923] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  361.386928][ T5923] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  361.398951][ T5923] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  361.407330][ T5923] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  361.427855][ T9695] macvlan1: entered promiscuous mode
[  361.433545][ T9695] macvlan1: entered allmulticast mode
[  361.439090][ T9695] veth1_vlan: entered allmulticast mode
[  361.447750][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1091'.
[  361.459564][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1091'.
[  361.486624][ T9696] random: crng reseeded on system resumption
[  361.509186][ T5923] usb 4-1: USB disconnect, device number 43
[  362.568829][ T9708] netlink: 'syz.3.1092': attribute type 41 has an invalid length.
[  362.608702][ T5923] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  362.794498][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  362.807385][ T5923] usb 5-1: config 1 has an invalid interface number: 6 but max is 2
[  362.832885][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.890025][ T5923] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  362.923058][ T5923] usb 5-1: config 1 has no interface number 1
[  362.929972][ T5923] usb 5-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  362.951012][ T5923] usb 5-1: config 1 interface 6 has no altsetting 0
[  362.973930][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  362.999642][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.007742][ T5923] usb 5-1: Product: ã �
[  363.012247][ T5912] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  363.035117][ T5923] usb 5-1: Manufacturer: �
[  363.053516][ T5923] usb 5-1: SerialNumber: syz
[  363.168707][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  363.190725][ T5912] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  363.199149][ T5912] usb 3-1: config 0 has no interface number 0
[  363.205380][ T5912] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  363.216241][ T5912] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  363.230142][ T5912] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  363.348828][   T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  363.362374][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.379345][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.397415][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.413137][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.422149][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.435658][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.444554][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.549009][   T44] usb 2-1: Using ep0 maxpacket: 16
[  363.566365][   T44] usb 2-1: config 0 has no interfaces?
[  363.573968][   T44] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  363.586046][ T5912] usb 3-1: Product: syz
[  363.617082][ T5923] usb 5-1: 0:2 : does not exist
[  363.620890][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.628720][ T5912] usb 3-1: Manufacturer: syz
[  363.946077][   T44] usb 2-1: config 0 descriptor??
[  363.964150][ T5912] usb 3-1: SerialNumber: syz
[  364.077714][ T5912] usb 3-1: config 0 descriptor??
[  364.088553][ T5923] usb 5-1: USB disconnect, device number 37
[  364.110060][ T9719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  364.165555][ T9719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  364.190479][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.205432][ T9732] dns_resolver: Unsupported server list version (0)
[  364.219057][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.240815][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  364.392573][ T9719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  364.425316][ T9719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  364.858687][ T5917] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[  365.008828][ T5917] usb 4-1: Invalid ep0 maxpacket: 16
[  365.149002][ T5917] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[  365.310078][ T5917] usb 4-1: Invalid ep0 maxpacket: 16
[  365.391024][ T5917] usb usb4-port1: attempt power cycle
[  365.628697][ T5886] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  365.778721][ T5917] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  366.032938][ T5886] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  366.084159][ T5886] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  366.117427][ T5819] usb 2-1: USB disconnect, device number 46
[  366.119650][ T5917] usb 4-1: Invalid ep0 maxpacket: 16
[  366.146013][ T5886] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  366.207611][ T5912] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  366.231446][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.288690][ T5912] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  366.288751][ T5917] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  366.311274][ T9746] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  366.368956][ T5912] asix 3-1:0.251: probe with driver asix failed with error -5
[  366.383319][ T5886] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  366.396274][ T5917] usb 4-1: Invalid ep0 maxpacket: 16
[  366.418761][ T5917] usb usb4-port1: unable to enumerate USB device
[  366.424837][ T5912] usb 3-1: USB disconnect, device number 61
[  368.414758][ T5917] usb 1-1: USB disconnect, device number 64
[  368.577364][ T9778] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1116'.
[  368.898851][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1119'.
[  368.966475][ T9786] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1119'.
[  368.985981][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'.
[  369.160507][ T9763] Can't find ip_set type list:et
[  370.559710][ T9822] vetè0_virt_wif: renamed from lo (while UP)
[  371.065632][ T9834] binder: BINDER_SET_CONTEXT_MGR already set
[  371.071788][ T9834] binder: 9831:9834 ioctl 4018620d 200000000040 returned -16
[  371.245782][ T5917] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  371.498905][ T5917] usb 3-1: Using ep0 maxpacket: 32
[  371.519283][ T5917] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  371.532780][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.563005][ T5917] usb 3-1: config 0 descriptor??
[  371.622607][ T5917] as10x_usb: device has been detected
[  371.705749][ T5917] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  371.740690][ T5917] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  371.817308][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'.
[  371.898828][ T5917] as10x_usb: error during firmware upload part1
[  371.934248][ T5917] Registered device nBox DVB-T Dongle
[  374.036688][ T5886] usb 3-1: USB disconnect, device number 62
[  374.338716][ T5923] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  374.376317][ T5886] Unregistered device nBox DVB-T Dongle
[  374.401378][ T5886] as10x_usb: device has been disconnected
[  374.522048][ T5923] usb 1-1: Using ep0 maxpacket: 32
[  374.545420][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short
[  374.558084][ T5923] usb 1-1: no configurations
[  374.699972][ T9868] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  374.738212][ T5923] usb 1-1: can't read configurations, error -22
[  374.829064][ T5912] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  374.973466][ T9873] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  375.001593][ T5912] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  375.011684][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.134348][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  375.155355][ T5912] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  375.197403][ T5912] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  375.206769][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  375.215118][ T5912] usb 5-1: Product: syz
[  375.260413][ T5912] usb 5-1: Manufacturer: syz
[  375.294886][ T5912] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  375.584514][ T5886] usb 5-1: USB disconnect, device number 38
[  375.608833][ T5923] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  376.345099][ T9897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1151'.
[  376.798678][   T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  376.998701][   T10] usb 2-1: Using ep0 maxpacket: 8
[  377.006367][   T10] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[  377.015704][   T10] usb 2-1: config 0 has no interface number 0
[  377.042680][   T10] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  377.168077][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  377.181377][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.245247][   T10] usb 2-1: Product: syz
[  377.330063][   T10] usb 2-1: Manufacturer: syz
[  377.352758][   T10] usb 2-1: SerialNumber: syz
[  377.385022][   T10] usb 2-1: config 0 descriptor??
[  377.425181][   T10] iowarrior 2-1:0.186: no interrupt-in endpoint found
[  379.268674][   T44] usb 2-1: USB disconnect, device number 47
[  379.288897][ T5886] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  379.438669][ T5886] usb 3-1: Using ep0 maxpacket: 16
[  379.526223][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.538323][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.570111][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  379.588713][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  379.758645][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.788956][ T5886] usb 3-1: config 0 descriptor??
[  379.858706][   T44] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  380.058805][   T44] usb 2-1: Using ep0 maxpacket: 16
[  380.136712][   T44] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  380.218927][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.227024][   T44] usb 2-1: Product: syz
[  380.253735][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a470c00: rx timeout, send abort
[  380.280063][   T44] usb 2-1: Manufacturer: syz
[  380.290977][   T44] usb 2-1: SerialNumber: syz
[  380.356523][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'.
[  380.372039][   T44] usb 2-1: config 0 descriptor??
[  380.755066][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880565e2800: rx timeout, send abort
[  380.763471][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a470c00: abort rx timeout. Force session deactivation
[  380.919329][   T44] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  380.952093][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  380.967496][   T44] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  380.979132][   T44] usb 2-1: media controller created
[  381.075502][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  381.183712][ T5886] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  381.220059][ T5886] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  381.263399][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880565e2800: abort rx timeout. Force session deactivation
[  381.274913][ T5886] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  381.379015][ T5886] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input26
[  381.392547][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.401532][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.568791][ T5923] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  381.712012][ T9933] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1164'.
[  381.730811][ T5923] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  381.742338][   T44] zl10353_read_register: readreg error (reg=127, ret==0)
[  381.760619][   T44] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  381.814726][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.823968][   T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  381.944252][ T5923] usb 5-1: config 0 descriptor??
[  382.083338][ T5923] hub 5-1:0.0: bad descriptor, ignoring hub
[  382.162749][   T44] usb 2-1: USB disconnect, device number 48
[  382.184835][ T5923] hub 5-1:0.0: probe with driver hub failed with error -5
[  382.256314][   T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  382.278405][ T5923] gspca_main: sunplus-2.14.0 probing 041e:400b
[  382.346036][ T5886] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  382.939022][ T5923] gspca_sunplus: reg_w_riv err -110
[  382.958924][ T5923] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  383.603257][ T5923] usb 3-1: USB disconnect, device number 63
[  383.675449][ T9994] program syz.2.1178 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  384.108377][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  384.116769][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  384.338682][ T5886] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  384.490079][ T5886] usb 2-1: Using ep0 maxpacket: 16
[  384.500071][ T5886] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  384.509854][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.598832][ T5886] usb 2-1: Product: syz
[  384.603247][ T5886] usb 2-1: Manufacturer: syz
[  384.608247][ T5886] usb 2-1: SerialNumber: syz
[  384.608310][   T10] usb 5-1: USB disconnect, device number 39
[  385.102246][ T5886] usb 2-1: config 0 descriptor??
[  385.218676][   T24] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  385.228982][ T5923] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  385.407278][   T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  385.416705][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.428131][   T24] usb 4-1: Product: syz
[  385.437420][   T24] usb 4-1: Manufacturer: syz
[  385.445305][ T5923] usb 3-1: device descriptor read/64, error -71
[  385.454763][   T24] usb 4-1: SerialNumber: syz
[  385.508643][   T24] usb 4-1: config 0 descriptor??
[  385.566289][ T5886] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  385.578403][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  385.590512][ T5886] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  385.626188][ T5886] usb 2-1: media controller created
[  385.729512][ T5923] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  385.859278][T10016] tipc: Started in network mode
[  385.864475][T10016] tipc: Node identity 080211000001, cluster identity 4711
[  385.872816][T10016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.888849][ T5923] usb 3-1: device descriptor read/64, error -71
[  385.917504][T10017] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  385.936860][T10017] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  386.022277][ T5923] usb usb3-port1: attempt power cycle
[  386.029700][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.040046][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.083139][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  386.265490][T10003] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1180'.
[  386.298808][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'.
[  386.351228][T10016] tipc: Resetting bearer <eth:syzkaller0>
[  386.401121][ T5923] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  386.429528][ T5923] usb 3-1: device descriptor read/8, error -71
[  386.499560][ T5886] zl10353_read_register: readreg error (reg=127, ret==0)
[  386.537692][   T24] airspy 4-1:0.0: Board ID: 00
[  386.554351][   T24] airspy 4-1:0.0: Firmware version: 
[  386.562236][ T5886] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  386.575309][ T5886] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  386.603911][ T5886] usb 2-1: USB disconnect, device number 49
[  386.669739][ T5923] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  386.688462][ T5886] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  386.955409][T10019] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1186'.
[  386.960148][ T5886] tipc: Node number set to 134418688
[  386.968799][T10019] unsupported nlmsg_type 40
[  387.018723][   T44] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  387.121670][   T24] airspy 4-1:0.0: usb_control_msg() failed -71 request 12
[  387.133288][   T24] airspy 4-1:0.0: Registered as swradio24
[  387.145258][   T24] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  387.146659][T10027] FAULT_INJECTION: forcing a failure.
[  387.146659][T10027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.191361][T10027] CPU: 1 UID: 0 PID: 10027 Comm: syz.1.1189 Not tainted syzkaller #0 PREEMPT(full) 
[  387.191390][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  387.191403][T10027] Call Trace:
[  387.191412][T10027]  <TASK>
[  387.191421][T10027]  dump_stack_lvl+0x189/0x250
[  387.191458][T10027]  ? __pfx____ratelimit+0x10/0x10
[  387.191490][T10027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.191519][T10027]  ? __pfx__printk+0x10/0x10
[  387.191541][T10027]  ? __might_fault+0xb0/0x130
[  387.191583][T10027]  should_fail_ex+0x414/0x560
[  387.191623][T10027]  _copy_from_user+0x2d/0xb0
[  387.191652][T10027]  do_sock_getsockopt+0x17d/0x450
[  387.191679][T10027]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  387.191710][T10027]  ? do_syscall_64+0xa0/0xfa0
[  387.191742][T10027]  ? __fget_files+0x2a/0x420
[  387.191762][T10027]  ? __fget_files+0x3a0/0x420
[  387.191786][T10027]  ? __fget_files+0x2a/0x420
[  387.191813][T10027]  __x64_sys_getsockopt+0x1a5/0x250
[  387.191835][T10027]  ? do_syscall_64+0xa0/0xfa0
[  387.191867][T10027]  ? do_syscall_64+0xa0/0xfa0
[  387.191904][T10027]  do_syscall_64+0xfa/0xfa0
[  387.191933][T10027]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.191965][T10027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.191986][T10027]  ? clear_bhb_loop+0x60/0xb0
[  387.192011][T10027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.192033][T10027] RIP: 0033:0x7fef8638f749
[  387.192052][T10027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.192072][T10027] RSP: 002b:00007fef87274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  387.192095][T10027] RAX: ffffffffffffffda RBX: 00007fef865e5fa0 RCX: 00007fef8638f749
[  387.192112][T10027] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000004
[  387.192125][T10027] RBP: 00007fef87274090 R08: 00002000000000c0 R09: 0000000000000000
[  387.192139][T10027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.192152][T10027] R13: 00007fef865e6038 R14: 00007fef865e5fa0 R15: 00007fef8670fa28
[  387.192188][T10027]  </TASK>
[  387.193579][   T24] usb 4-1: USB disconnect, device number 48
[  387.588020][ T5923] usb 3-1: device descriptor read/8, error -71
[  387.646833][   T44] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  387.657336][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.678845][   T44] usb 5-1: Product: syz
[  387.683087][   T44] usb 5-1: Manufacturer: syz
[  387.687721][   T44] usb 5-1: SerialNumber: syz
[  387.720191][   T44] usb 5-1: config 0 descriptor??
[  387.721059][ T5923] usb usb3-port1: unable to enumerate USB device
[  387.737483][   T44] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  388.162944][ T5923] usb 5-1: USB disconnect, device number 40
[  388.363248][T10055] loop4: detected capacity change from 0 to 2560
[  388.392647][ T5844] buffer_io_error: 10 callbacks suppressed
[  388.392668][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read
[  388.433220][T10055] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  388.443731][ T5917] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  388.468828][T10055] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  388.487111][T10055] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  388.505465][T10055] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  388.514786][T10055] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  388.526189][T10055] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  388.535779][T10055] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  388.544890][T10055] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  388.553517][T10055] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  388.598781][   T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  388.613643][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  388.623397][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.634773][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.644619][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  388.658211][ T5917] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  388.667399][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.679057][ T5917] usb 3-1: config 0 descriptor??
[  388.758640][   T10] usb 4-1: Using ep0 maxpacket: 16
[  388.773116][   T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  388.784683][T10059] batadv_slave_1: entered promiscuous mode
[  388.791479][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'.
[  388.802490][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.811235][T10059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.819250][   T10] usb 4-1: Product: syz
[  388.823499][   T10] usb 4-1: Manufacturer: syz
[  388.830821][   T10] usb 4-1: SerialNumber: syz
[  388.839381][   T10] usb 4-1: config 0 descriptor??
[  388.869775][T10059] batadv_slave_1 (unregistering): left promiscuous mode
[  388.876981][T10059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.900286][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.907961][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.917086][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.926592][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.934589][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.942101][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.949474][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.956868][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.965108][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.972760][ T5917] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  388.983016][ T5917] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  388.994733][ T5917] microsoft 0003:045E:07DA.0012: no inputs found
[  389.001627][ T5917] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway
[  389.256629][   T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  389.300950][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  389.321772][   T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  389.334191][T10068] netlink: 'syz.1.1202': attribute type 10 has an invalid length.
[  389.334757][   T10] usb 4-1: media controller created
[  389.347703][ T5923] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  389.373422][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.382090][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  389.392844][T10069] netlink: 'syz.1.1202': attribute type 10 has an invalid length.
[  389.407677][T10068] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  389.412335][T10069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1202'.
[  389.429848][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'.
[  389.446501][T10069] batadv0: entered promiscuous mode
[  389.452309][T10069] batadv0: entered allmulticast mode
[  389.459422][T10069] bond0: (slave batadv0): Releasing backup interface
[  389.471288][T10069] bridge0: port 4(batadv0) entered blocking state
[  389.478103][T10069] bridge0: port 4(batadv0) entered disabled state
[  389.498777][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  389.504461][ T4174] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  389.514402][ T4174] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  389.528397][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[  389.535580][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.537394][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.555912][ T5923] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  389.565696][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.574240][   T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  389.582406][ T5923] usb 5-1: Product: syz
[  389.586627][ T5923] usb 5-1: Manufacturer: syz
[  389.591327][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  389.600274][ T5923] usb 5-1: SerialNumber: syz
[  389.612962][ T5923] usb 5-1: config 0 descriptor??
[  389.641701][ T5923] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  389.775523][T10076] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1199'.
[  390.071079][   T24] usb 4-1: USB disconnect, device number 49
[  390.151758][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  390.480129][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'.
[  390.640083][ T5923] gspca_ov534_9: reg_w failed -71
[  390.968707][ T5923] gspca_ov534_9: Unknown sensor 0000
[  390.968810][ T5923] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  390.995238][ T5923] usb 5-1: USB disconnect, device number 41
[  391.334936][ T5917] usb 3-1: USB disconnect, device number 68
[  391.388844][T10105] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1212'.
[  392.083194][T10116] dns_resolver: Unsupported server list version (0)
[  392.288782][ T5923] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  392.383574][T10122] bridge0: port 3(hsr0) entered blocking state
[  392.444098][T10122] bridge0: port 3(hsr0) entered disabled state
[  392.453136][T10122] hsr0: entered allmulticast mode
[  392.459389][T10122] hsr_slave_0: entered allmulticast mode
[  392.465270][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  392.580870][ T5923] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  392.605159][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.667085][ T5923] usb 3-1: Product: syz
[  392.676182][ T5923] usb 3-1: Manufacturer: syz
[  392.681242][ T5923] usb 3-1: SerialNumber: syz
[  392.688850][ T5923] usb 3-1: config 0 descriptor??
[  392.702667][T10122] hsr0: entered promiscuous mode
[  392.710131][T10122] bridge0: port 3(hsr0) entered blocking state
[  392.716782][T10122] bridge0: port 3(hsr0) entered forwarding state
[  393.123708][T10131] vetè0_virt_wif: renamed from lo
[  393.147164][ T5923] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  393.157209][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  393.170720][ T5923] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  393.179711][ T5923] usb 3-1: media controller created
[  393.209079][   T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  393.219708][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  393.328786][ T5819] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  393.349129][ T5923] zl10353_read_register: readreg error (reg=127, ret==0)
[  393.367277][ T5923] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  393.376719][ T5923] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  393.400827][   T10] usb 1-1: Using ep0 maxpacket: 32
[  393.415716][   T10] usb 1-1: config 1 has an invalid interface number: 6 but max is 2
[  393.426122][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.437396][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  393.446949][   T10] usb 1-1: config 1 has no interface number 1
[  393.453714][   T10] usb 1-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  393.478926][   T10] usb 1-1: config 1 interface 6 has no altsetting 0
[  393.492900][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  393.502179][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.510390][ T5819] usb 2-1: Using ep0 maxpacket: 16
[  393.515881][   T10] usb 1-1: Product: ã �
[  393.520261][   T10] usb 1-1: Manufacturer: �
[  393.525060][   T10] usb 1-1: SerialNumber: syz
[  393.532937][ T5819] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  393.542276][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.551754][ T5819] usb 2-1: Product: syz
[  393.557767][ T5819] usb 2-1: Manufacturer: syz
[  393.564121][ T5819] usb 2-1: SerialNumber: syz
[  393.572435][ T5819] usb 2-1: config 0 descriptor??
[  393.769971][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.778803][    C0] 
[  393.781151][    C0] ============================================
[  393.787309][    C0] WARNING: possible recursive locking detected
[  393.793473][    C0] syzkaller #0 Not tainted
[  393.797909][    C0] --------------------------------------------
[  393.804057][    C0] syz.4.1223/10137 is trying to acquire lock:
[  393.810186][    C0] ffff888076e3af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  393.819292][    C0] 
[  393.819292][    C0] but task is already holding lock:
[  393.826681][    C0] ffff88807ab9af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  393.836968][    C0] 
[  393.836968][    C0] other info that might help us debug this:
[  393.845023][    C0]  Possible unsafe locking scenario:
[  393.845023][    C0] 
[  393.852473][    C0]        CPU0
[  393.855748][    C0]        ----
[  393.859033][    C0]   lock(&hsr->seqnr_lock);
[  393.859434][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.863564][    C0]   lock(&hsr->seqnr_lock);
[  393.875800][    C0] 
[  393.875800][    C0]  *** DEADLOCK ***
[  393.875800][    C0] 
[  393.883948][    C0]  May be due to missing lock nesting notation
[  393.883948][    C0] 
[  393.892274][    C0] 8 locks held by syz.4.1223/10137:
[  393.897480][    C0]  #0: ffffc90000007be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0
[  393.907497][    C0]  #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360
[  393.916650][    C0]  #2: ffff88807ab9af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  393.927378][    C0]  #3: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860
[  393.936883][    C0]  #4: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  393.946863][    C0]  #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840
[  393.956124][    C0]  #6: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  393.966097][    C0]  #7: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  393.975253][    C0] 
[  393.975253][    C0] stack backtrace:
[  393.981188][    C0] CPU: 0 UID: 0 PID: 10137 Comm: syz.4.1223 Not tainted syzkaller #0 PREEMPT(full) 
[  393.981208][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  393.981218][    C0] Call Trace:
[  393.981224][    C0]  <IRQ>
[  393.981232][    C0]  dump_stack_lvl+0x189/0x250
[  393.981271][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.981303][    C0]  ? __pfx__printk+0x10/0x10
[  393.981323][    C0]  ? do_raw_spin_lock+0x121/0x290
[  393.981349][    C0]  print_deadlock_bug+0x28b/0x2a0
[  393.981367][    C0]  validate_chain+0x1a3f/0x2140
[  393.981387][    C0]  ? skb_network_protocol+0x4fe/0x760
[  393.981405][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.981428][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  393.981449][    C0]  ? __pfx_skb_network_protocol+0x10/0x10
[  393.981465][    C0]  ? eth_type_trans+0x3a8/0x760
[  393.981484][    C0]  __lock_acquire+0xab9/0xd20
[  393.981500][    C0]  ? hsr_dev_xmit+0x237/0x360
[  393.981516][    C0]  lock_acquire+0x120/0x360
[  393.981530][    C0]  ? hsr_dev_xmit+0x237/0x360
[  393.981550][    C0]  ? hsr_dev_xmit+0x237/0x360
[  393.981566][    C0]  _raw_spin_lock_bh+0x36/0x50
[  393.981585][    C0]  ? hsr_dev_xmit+0x237/0x360
[  393.981600][    C0]  hsr_dev_xmit+0x237/0x360
[  393.981616][    C0]  ? hsr_dev_xmit+0x2d/0x360
[  393.981633][    C0]  dev_hard_start_xmit+0x2d7/0x830
[  393.981656][    C0]  __dev_queue_xmit+0x1b8d/0x3b50
[  393.981678][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  393.981698][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  393.981715][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.981737][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  393.981757][    C0]  ? do_raw_read_unlock+0x3d/0x80
[  393.981786][    C0]  ? ebt_do_table+0x265b/0x2820
[  393.981800][    C0]  ? __lock_acquire+0xab9/0xd20
[  393.981825][    C0]  br_dev_queue_push_xmit+0x6c5/0x890
[  393.981847][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  393.981868][    C0]  ? NF_HOOK+0x9e/0x3c0
[  393.981886][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  393.981905][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  393.981923][    C0]  NF_HOOK+0x320/0x3c0
[  393.981943][    C0]  ? NF_HOOK+0x9e/0x3c0
[  393.981960][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  393.981978][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  393.982001][    C0]  br_forward_finish+0xd3/0x130
[  393.982020][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  393.982040][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  393.982058][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  393.982076][    C0]  NF_HOOK+0x320/0x3c0
[  393.982095][    C0]  ? NF_HOOK+0x9e/0x3c0
[  393.982112][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  393.982131][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  393.982153][    C0]  __br_forward+0x41e/0x600
[  393.982171][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  393.982191][    C0]  ? __pfx___br_forward+0x10/0x10
[  393.982210][    C0]  ? skb_clone+0x246/0x3a0
[  393.982228][    C0]  maybe_deliver+0xb5/0x160
[  393.982248][    C0]  br_flood+0x31a/0x6a0
[  393.982269][    C0]  ? br_dev_xmit+0x185/0x1840
[  393.982291][    C0]  br_dev_xmit+0x11b3/0x1840
[  393.982315][    C0]  ? br_dev_xmit+0x185/0x1840
[  393.982340][    C0]  ? __pfx_br_dev_xmit+0x10/0x10
[  393.982373][    C0]  ? validate_xmit_xfrm+0xbf/0x1160
[  393.982412][    C0]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  393.982447][    C0]  dev_hard_start_xmit+0x2d7/0x830
[  393.982470][    C0]  __dev_queue_xmit+0x1b8d/0x3b50
[  393.982488][    C0]  ? kasan_save_track+0x4f/0x80
[  393.982509][    C0]  ? kasan_save_track+0x3e/0x80
[  393.982533][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  393.982551][    C0]  ? __se_sys_clock_nanosleep+0x339/0x390
[  393.982567][    C0]  ? do_syscall_64+0xfa/0xfa0
[  393.982589][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.982608][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  393.982631][    C0]  ? __copy_skb_header+0xa7/0x550
[  393.982649][    C0]  ? __asan_memcpy+0x40/0x70
[  393.982668][    C0]  ? __skb_clone+0x63/0x7a0
[  393.982686][    C0]  ? __skb_clone+0x483/0x7a0
[  393.982701][    C0]  ? hsr_addr_subst_dest+0x307/0xac0
[  393.982720][    C0]  ? skb_clone+0x246/0x3a0
[  393.982738][    C0]  hsr_forward_skb+0x158b/0x2860
[  393.982762][    C0]  ? hsr_forward_skb+0x9e/0x2860
[  393.982788][    C0]  ? __pfx_hsr_forward_skb+0x10/0x10
[  393.982808][    C0]  ? do_raw_spin_lock+0x121/0x290
[  393.982830][    C0]  ? __asan_memset+0x22/0x50
[  393.982849][    C0]  ? __skb_pad+0x405/0x610
[  393.982869][    C0]  send_hsr_supervision_frame+0x731/0xcb0
[  393.982891][    C0]  ? __pfx_send_hsr_supervision_frame+0x10/0x10
[  393.982911][    C0]  hsr_announce+0x1d5/0x360
[  393.982928][    C0]  ? hsr_announce+0x83/0x360
[  393.982945][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  393.982966][    C0]  call_timer_fn+0x17e/0x5f0
[  393.982980][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  393.982997][    C0]  ? call_timer_fn+0xbe/0x5f0
[  393.983010][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  393.983029][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.983049][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.983070][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  393.983088][    C0]  __run_timer_base+0x61a/0x860
[  393.983115][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  393.983136][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  393.983163][    C0]  run_timer_softirq+0xb7/0x180
[  393.983186][    C0]  handle_softirqs+0x286/0x870
[  393.983202][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  393.983220][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  393.983238][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  393.983261][    C0]  __irq_exit_rcu+0xca/0x1f0
[  393.983276][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  393.983295][    C0]  irq_exit_rcu+0x9/0x30
[  393.983310][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  393.983331][    C0]  </IRQ>
[  393.983336][    C0]  <TASK>
[  393.983342][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  393.983358][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  393.983381][    C0] Code: 74 05 e8 4b 8b 7e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 83 b9 46 f6 65 8b 05 dc 38 25 07 85 c0 74 40 48 c7 04 24 0e 36
[  393.983399][    C0] RSP: 0018:ffffc9000b187c60 EFLAGS: 00000206
[  393.983420][    C0] RAX: c50bed5c060cb200 RBX: 0000000000000a02 RCX: c50bed5c060cb200
[  393.983436][    C0] RDX: 0000000000000000 RSI: ffffffff8d70e869 RDI: 0000000000000001
[  393.983451][    C0] RBP: ffffc9000b187cf0 R08: ffffffff8f7cef77 R09: 1ffffffff1ef9dee
[  393.983468][    C0] R10: dffffc0000000000 R11: fffffbfff1ef9def R12: dffffc0000000000
[  393.983484][    C0] R13: ffffc9000b187d40 R14: ffffffff9999d910 R15: 1ffff92001630f8c
[  393.983509][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  393.983547][    C0]  hrtimer_nanosleep+0xab/0x360
[  393.983565][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  393.983584][    C0]  ? __pfx_get_timespec64+0x10/0x10
[  393.983601][    C0]  __se_sys_clock_nanosleep+0x339/0x390
[  393.983618][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  393.983635][    C0]  ? do_syscall_64+0xbe/0xfa0
[  393.983659][    C0]  do_syscall_64+0xfa/0xfa0
[  393.983681][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.983695][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  393.983709][    C0]  ? clear_bhb_loop+0x60/0xb0
[  393.983726][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.983741][    C0] RIP: 0033:0x7f456c7c2005
[  393.983753][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  393.983766][    C0] RSP: 002b:00007f456cb0fb20 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  393.983787][    C0] RAX: ffffffffffffffda RBX: 00007f456c9e5fa0 RCX: 00007f456c7c2005
[  393.983798][    C0] RDX: 00007f456cb0fb60 RSI: 0000000000000000 RDI: 0000000000000000
[  393.983807][    C0] RBP: 00007f456c9e7da0 R08: 0000000000000000 R09: 3fffffffffffffff
[  393.983818][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000603a4
[  393.983827][    C0] R13: 00007f456c9e6090 R14: ffffffffffffffff R15: 00007f456cb0fca0
[  393.983844][    C0]  </TASK>
[  394.765558][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.783004][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.798473][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.809761][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.918943][ T5923] usb 3-1: USB disconnect, device number 69
[  394.950857][ T5923] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  394.960644][ T5819] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  394.971223][   T10] usb 1-1: 0:2 : does not exist
[  394.976694][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  394.986421][ T5819] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  394.994799][ T5819] usb 2-1: media controller created
[  395.009514][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  395.033371][   T10] usb 1-1: USB disconnect, device number 67
[  395.053631][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  395.212696][ T5819] zl10353_read_register: readreg error (reg=127, ret==0)
[  395.213508][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.219990][ T5819] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  395.236239][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  395.262447][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.483111][T10141] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1220'.
[  395.801710][ T5917] usb 2-1: USB disconnect, device number 50
[  395.819876][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.