last executing test programs:

11.37183465s ago: executing program 0 (id=953):
socket$inet(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x5}, {0x200, 0x6, 0x8000, 0x7}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x300, 0x4}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$dsp(0xffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d14, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x61, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x7ffffff, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

10.922629518s ago: executing program 0 (id=955):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @mcast1, 0x5}, 0x1c)

10.755761316s ago: executing program 0 (id=956):
capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) (fail_nth: 3)

10.603458602s ago: executing program 2 (id=957):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000340)=[{&(0x7f0000005bc0)=""/4100, 0x1004}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000003bc0)=""/4096, 0x1000}, 0x10ea}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000001a00)=""/146, 0x92}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000001780)=""/88, 0x58}, {&(0x7f00000018c0)=""/190, 0xbe}], 0x5, &(0x7f0000000480)=""/49, 0x31}, 0xfffffff7}], 0x3, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r6 = accept4(r3, 0x0, 0x0, 0x80000)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, 0x0, 0x0)
fsopen(&(0x7f0000000100)='afs\x00', 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4}, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

10.026915563s ago: executing program 0 (id=958):
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101402)
socket$inet_tcp(0x2, 0x1, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x61, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r4, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newtaction={0xf0, 0x1e, 0x109, 0xfe, 0x25dfdbff, {}, [{0xdc, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xa4, 0xb, 0x0, 0x0, {{0x44}, {0x24}, {0x57, 0x6, "b52115781bece1b816244552c8dba7ba97a86750aefdd25e9b9def2385f83915f81632a49b9cf6cfe41404a49676f120260e16c59b55def5d5911f98342769fa77fb98419d58641d17182d4194e2f7588499f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf0}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010)

9.286904004s ago: executing program 1 (id=959):
r0 = socket$kcm(0x2, 0x5, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"])
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x5, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x8d], 0x10000, 0x2071c0})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90)
syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c021000050001072501"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})

7.364750429s ago: executing program 4 (id=964):
socket(0x10, 0x803, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000005c0)="dbae7395d8c6299a23c2883fb09bda9e8a13625c7b4af50ac905a38813136ce3908576be8a6ab87e01efe417c8edb97085d12d9b272f1065eb75abc6ff882c1e10deedf36f6ca8d2231ae532a72d900a2d", 0x51, 0xfffffffffffffff9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000010201080200028006000340000300022c00018014000300ff01000000000000000000000000000114000400fc0100000000000000000000000000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4f27f69b0618d9b2}, 0x10)
fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf})

7.078758795s ago: executing program 2 (id=965):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256)\x00'}, 0x58)
r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="7672e60612011001000000106d0426c600000000000109022400010000900009040000020300030009210010060122070009058103ff030d0100"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
timer_create(0x2, 0x0, &(0x7f00000000c0)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe9, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x3, 0x94, {0x9, 0x21, 0x8000, 0x5, 0x1, {0x22, 0x3ea}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x7e, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x0, 0x9, 0x60, 0x40, 0x5}, 0x6e, &(0x7f0000000500)={0x5, 0xf, 0x6e, 0x3, [@generic={0x4c, 0x10, 0xb, "9b761960091086fcc5bad3a1a798e4fee2116246069ee44ff52b303d0fd04bac7a81d98ffe70d4ef53d83ca6e62126613fd9b6b5937fd286a9548625deaab5a1f61db263ac64ee54f7"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "84e7812b64f2f8fe12f0837e2484e247"}, @generic={0x9, 0x10, 0x2, "8bc27c747b9e"}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1407}}, {0x66, &(0x7f0000000580)=@string={0x66, 0x3, "a1fb0ae220740fe96d3801e46e31ef51584ef1673eb8b57a515ecc234f3a084186b3a1ebbb1c639d201caa05345e6394bf19f5f454b72baaa887e73d9ff218d4014f0eb97a7a8aa16f0be42eec87c376df7e7582f3dd9492fe919ef30eb7fe2ef8acfd0c"}}, {0x95, &(0x7f0000000600)=@string={0x95, 0x3, "8bb7ec33da91bfb005b5be1bd3688e0973665ebe508de39e9eb5b6d2173455a01fea8cf1556695ca2c3c23feaa48b0f40a1c98b247ddd2b78f8a2f83feeba4227c2732371e783a0ad65c24cdd0111c033552d9b85a0406f13c039853fe103d52c7e9814f72d884fe37f9a0f0732e07b1614588a3a6b1ea14f5533ec6dd370a0efae804e30ea55bece8236aa870909c673d0149"}}]})
timer_settime(r2, 0x1, &(0x7f0000000000)={{r3, r4+60000000}}, 0x0)
timer_delete(r2)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "4ed049c7"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0)
r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap$xdp(&(0x7f00008e9000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, r5, 0x100000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x114, r8, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_TID_CONFIG={0x9c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x11, 0xbb, 0x7, 0x14, 0x3, 0x9, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x60, 0x60, 0x2b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb9, 0xfff, 0x1, 0xfffb, 0x7, 0xb83, 0x1]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20044010}, 0x10)

6.927792287s ago: executing program 1 (id=966):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
write$tcp_congestion(r0, &(0x7f0000000180)='westwood\x00', 0x9)

6.707520616s ago: executing program 1 (id=967):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000280)={0x40, 0x30, 0x2, "a9ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000580)={0x20, 0x12, 0x2, "e347"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000280)={0x40, 0x30, 0x2, "a9ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000580)={0x20, 0x12, 0x2, "e347"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)

6.415220015s ago: executing program 3 (id=968):
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) (fail_nth: 4)

5.919519438s ago: executing program 2 (id=969):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40001)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000010001, 0x4, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000dfb000/0x1000)=nil, 0x1000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x10252000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x16)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c0003"], 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
fsopen(&(0x7f00000001c0)='anon_inodefs\x00', 0x1)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000100)={0xa, 0x100, 0x3, {0x6, 0x1000, 0x6, 0x86c}})

5.919075787s ago: executing program 3 (id=970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{0x21, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x40084)

5.845348974s ago: executing program 3 (id=971):
io_setup(0x20, &(0x7f0000001140))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340))
r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x400008, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0)
mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078ac1e0001ac1414aa0400907800000000450800040064000000010002ac1414bb640101008913c3e0000002e00000020a010101e0000001440832200008000983032d8609af52b69717571c070f8dac14140d640101016401010007078f0a0101000000006423978112f3bed19833cc82d7714bc938"], 0x0)
recvmmsg(r4, &(0x7f0000003340)=[{{&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000024c0)=""/73, 0x49}, {&(0x7f0000002540)=""/215, 0xd7}, {&(0x7f0000002640)=""/12, 0xc}, {&(0x7f0000002680)=""/124, 0x7c}, {&(0x7f0000002700)=""/63, 0x3f}, {&(0x7f0000002740)=""/150, 0x96}, {&(0x7f0000002800)=""/174, 0xae}, {&(0x7f00000028c0)=""/253, 0xfd}, {&(0x7f00000029c0)=""/204, 0xcc}], 0x9, &(0x7f0000002b40)=""/208, 0xd0}, 0x8}, {{&(0x7f0000002c40)=@qipcrtr, 0x80, &(0x7f0000003040)=[{&(0x7f0000002cc0)=""/45, 0x2d}, {&(0x7f0000002d00)=""/217, 0xd9}, {&(0x7f0000002e00)=""/81, 0x51}, {&(0x7f0000002e80)=""/22, 0x16}, {&(0x7f0000002ec0)=""/142, 0x8e}, {&(0x7f0000002f80)=""/35, 0x23}, {&(0x7f0000002fc0)=""/69, 0x45}], 0x7, &(0x7f0000003080)=""/115, 0x73}, 0x7}, {{&(0x7f0000003100)=@nl=@unspec, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003180)=""/45, 0x2d}, {&(0x7f00000031c0)=""/9, 0x9}, {&(0x7f0000003200)=""/129, 0x81}], 0x3, &(0x7f0000003300)=""/19, 0x13}, 0xdb}], 0x3, 0x2, &(0x7f00000033c0)={0x0, 0x3938700})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
pipe2(&(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
read$FUSE(r9, &(0x7f0000000480)={0x2020, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r10, &(0x7f0000000400)={0x50, 0xfffffffffffffffe, r11, {0x7, 0x28, 0x10001, 0x1028600, 0x0, 0x4, 0x9, 0x1}}, 0x50)
vmsplice(r10, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x1000000000000000)
fcntl$setpipe(r10, 0x407, 0x100000)
r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r12, 0xc1007c00, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x1eb0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0xb4f24490c5e6ac64)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x8003, 0x59555956, 0x1, @stepwise={0x9, 0x9, 0x4, 0x10000007, 0x200, 0x2}})

5.601569066s ago: executing program 4 (id=972):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x9, {0x807fd, 0x3b, 0x744, 0x1}, {0x4, 0x1, 0x18000, 0x5}, {0xec, 0x3ff}}) (fail_nth: 3)

5.423343604s ago: executing program 4 (id=973):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
syz_clone3(&(0x7f0000000200)={0xa01400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320})
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x101040)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20040600)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, &(0x7f0000000000))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000000)={0x4bc6, 0x1d3d, 0x7fffffff}, 0xc)
r8 = dup(r6)
write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

4.743444478s ago: executing program 3 (id=974):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="ac434abef80d9ba9d67e1de18d697024dd1d6766f5b1d18545385f79f6a79848c9b6bb812e249a931e9d1840744d0d21ffe47e43fb78c4fdb289f8867686a2204e08ad77c97df6f64dba7a6666ddeaa3cdc3b4697daf3a9a0a977dd490336f524b5e41d5c07300478f4e394383e75cea0387094391218f267af638672d54079cf4d51882c92d92e15a1f8a475abad96d2fa331f3b80b238c753dceb575d9a9db55b77c82c1f7cf1781c3c348e73454", @ANYRESDEC=0x0, @ANYRES32], 0x0)

4.685472432s ago: executing program 4 (id=975):
socket$inet(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x5}, {0x200, 0x6, 0x8000, 0x7}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x300, 0x4}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x61, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x7ffffff, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

4.58982942s ago: executing program 0 (id=976):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1800, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x80, 0x1a})
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = syz_clone3(&(0x7f0000000700)={0x2200000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x2b}, &(0x7f0000000480)=""/242, 0xf2, &(0x7f0000000640)=""/188, &(0x7f0000000580)=[r1], 0x1}, 0x58)
syz_open_procfs(r3, &(0x7f0000000780)='net/dev\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/253, 0xfd}], 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = eventfd(0x5)
read$eventfd(r4, &(0x7f00000005c0), 0x8)
r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x9, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a007b"], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x81, 0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x30})

4.557187949s ago: executing program 2 (id=977):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a800000001a0a010400000000000000000a00000109000100"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

4.412792328s ago: executing program 2 (id=978):
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101402)
socket$inet_tcp(0x2, 0x1, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x61, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r4, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newtaction={0xf0, 0x1e, 0x109, 0xfe, 0x25dfdbff, {}, [{0xdc, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xa4, 0xb, 0x0, 0x0, {{0x44}, {0x24}, {0x57, 0x6, "b52115781bece1b816244552c8dba7ba97a86750aefdd25e9b9def2385f83915f81632a49b9cf6cfe41404a49676f120260e16c59b55def5d5911f98342769fa77fb98419d58641d17182d4194e2f7588499f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf0}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010)
socket$inet_udp(0x2, 0x2, 0x0)

4.360510158s ago: executing program 4 (id=979):
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101402)
socket$inet_tcp(0x2, 0x1, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x61, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r4, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newtaction={0xf0, 0x1e, 0x109, 0xfe, 0x25dfdbff, {}, [{0xdc, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xa4, 0xb, 0x0, 0x0, {{0x44}, {0x24}, {0x57, 0x6, "b52115781bece1b816244552c8dba7ba97a86750aefdd25e9b9def2385f83915f81632a49b9cf6cfe41404a49676f120260e16c59b55def5d5911f98342769fa77fb98419d58641d17182d4194e2f7588499f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf0}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010)
socket$inet_udp(0x2, 0x2, 0x0)

2.72750642s ago: executing program 1 (id=980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b00400001000d4000000"], 0x4b0}}, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=<r2=>0x0)
ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000000c0)={&(0x7f0000001080)=""/4096, 0x1000}) (async)
sched_setattr(r2, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x0, 0x200, 0x0, 0x7, 0xe96, 0xaba, 0x7}, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040)=0x9, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x40, 0x200, 0x0, 'queue0\x00', 0xf}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x802})
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000300)={0x55, 0x8, 0xe, 0x1ff, 0x3ff, 0x3ff}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) (async)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b000905810300000000004836496700b45fd774e76a1c46040910f406aa259dde475c73efc4840fa38721877ac72200421edee91ed5c2ab659378ee9e85956c911d2ad1f8b86fb0dadd769f95981682c8c3db2367c13178a38ce14b27"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0) (async)
syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220b0000009309a72734009bdc370ea4242f5105f7ba14"], 0x0}, 0x0)
socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)

1.583220483s ago: executing program 3 (id=981):
unshare(0x2040400)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa)
creat(0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4e0d5)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7})
writev(0xffffffffffffffff, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000002300)="08b5b2c0ca", 0x5}], 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
add_key(0x0, 0x0, &(0x7f0000000000)="0000000000000040ff7343b8000000080000a101b28a9c60e44168e577250028", 0x20, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000000000f200000000", 0x20)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f00000001c0)=""/58, 0x3a}], 0x3)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r8=>0x0})
syz_emit_ethernet(0xdf, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, 0x0)
execve(0x0, 0x0, 0x0)

1.276966221s ago: executing program 0 (id=982):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "1035e0d4"}]}}, 0x0}, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x4)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000200)={0x38, 0x0, 0x10000002, 0x8, 0x9, 0x3, 0x9, 0x6, 0xffffff7f, 0x1}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0)
sendfile(r3, r3, 0x0, 0x40008)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
syz_fuse_handle_req(r4, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = gettid()
r6 = openat$null(0xffffff9c, &(0x7f0000010b80), 0xb00, 0x0)
preadv(r6, &(0x7f0000011bc0)=[{&(0x7f0000010bc0)=""/4096, 0x1000}], 0x1, 0xff, 0x2)
read$snddsp(r6, &(0x7f0000000480)=""/229, 0xe5)
capset(&(0x7f0000000040)={0x0, r5}, &(0x7f0000000080)={0x10, 0x7ff, 0x40, 0x3, 0x875, 0x7})
syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x51, 0x2, 0x7, 0x1, 0x2, 0x2d, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x8, 0x7d}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x601, 0x4, 0x9, 0x2, 0xff, 0xee}, 0x27, &(0x7f0000000280)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "47a1152d24de9a8c55306a5fa56abaf1"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0xd1b}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0x9736}]}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006)

420.584939ms ago: executing program 1 (id=983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a800000001a0a010400000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

419.988167ms ago: executing program 3 (id=984):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x25, 0xa, 0x0, "b75c89e7a20c8e0200000000000000038d2cd97c050062f31638b5394c00"})
read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000300)='fdinfo\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/133, 0x85}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/245, 0xf5}], 0x4, 0x7, 0xf2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0201, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={r8, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0)

346.618079ms ago: executing program 1 (id=985):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgid(0xffffffffffffffff)
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
epoll_create(0xe)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044882)
mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x40, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='et PCI:f:1:2.1b\x00'], 0x14)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendfile(r6, r4, 0x0, 0x5)
landlock_restrict_self(r6, 0xa)
r7 = openat$loop_ctrl(0xffffff9c, 0x0, 0x8380, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x800, 0x80, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0xfffffffc}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa})

34.704786ms ago: executing program 2 (id=986):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa)
getsockname$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async, rerun: 64)
socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) (async, rerun: 32)
r4 = openat$uinput(0xffffff9c, &(0x7f00000001c0), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000000000e4"], 0x10) (async)
r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0xffff8c2a, 0x8003, 0xa642, 0x34324152, [0x8152, 0x8], [0x6, 0x10003], 0x108}})

0s ago: executing program 4 (id=987):
r0 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080))
r1 = gettid()
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

    T9] gspca_vc032x: Unknown sensor...
[  249.690604][    T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  249.897118][  T927] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  250.077181][  T927] usb 3-1: unable to get BOS descriptor or descriptor too short
[  250.109642][  T927] usb 3-1: config index 0 descriptor too short (expected 1819, got 27)
[  250.122467][  T927] usb 3-1: config 0 has an invalid interface number: 200 but max is -1
[  250.143075][  T927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  250.162286][  T927] usb 3-1: config 0 has no interface number 0
[  250.181702][ T8368] usb usb8: usbfs: process 8368 (syz.3.667) did not claim interface 0 before use
[  250.192089][ T8368] netlink: 'syz.3.667': attribute type 2 has an invalid length.
[  250.200584][ T8368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.667'.
[  250.211195][  T927] usb 3-1: config 0 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 41, changing to 9
[  250.231070][  T927] usb 3-1: config 0 interface 200 altsetting 8 endpoint 0x1 has invalid maxpacket 26074, setting to 1024
[  250.256758][  T927] usb 3-1: config 0 interface 200 has no altsetting 0
[  250.276360][  T927] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  250.287099][  T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.301500][ T8371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'.
[  250.312786][  T927] usb 3-1: Product: syz
[  250.318256][  T927] usb 3-1: Manufacturer: syz
[  250.330934][  T927] usb 3-1: SerialNumber: syz
[  250.343085][  T927] usb 3-1: config 0 descriptor??
[  250.352146][ T8354] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  250.753496][  T927] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  251.003967][  T927] dvb-usb: bulk message failed: -71 (3/0)
[  251.057096][ T5954] usb 1-1: USB disconnect, device number 35
[  251.068419][  T927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  251.177967][  T927] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  251.203702][ T8383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[  251.227085][  T927] usb 3-1: media controller created
[  251.330191][  T927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  251.476943][  T927] dvb-usb: bulk message failed: -71 (6/0)
[  251.492561][  T927] dvb-usb: bulk message failed: -71 (6/0)
[  251.631239][  T927] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  251.777400][  T927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21
[  251.927537][  T927] dvb-usb: schedule remote query interval to 150 msecs.
[  251.943678][  T927] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  252.115765][   T10] dvb-usb: bulk message failed: -71 (1/0)
[  252.121773][   T10] dvb-usb: error while querying for an remote control event.
[  252.140499][  T927] usb 3-1: USB disconnect, device number 34
[  252.364385][   T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  252.473287][  T927] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  252.536638][ T8402] trusted_key: encrypted_key: insufficient parameters specified
[  252.558840][   T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  252.592842][   T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  252.678445][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  252.703009][ T8406] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  252.718291][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  252.797435][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  252.800062][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.854613][   T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  252.907531][   T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  252.936473][   T24] usb 1-1: Product: syz
[  252.958847][   T24] usb 1-1: Manufacturer: syz
[  253.033442][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  253.042458][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  253.062106][   T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  253.069718][   T24] cdc_wdm 1-1:1.0: Unknown control protocol
[  253.134669][ T5954] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  253.341892][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  253.383553][ T5954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  253.395983][ T5954] usb 2-1: config 0 has no interface number 0
[  253.427320][ T5954] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  253.437786][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.485052][ T5954] usb 2-1: Product: syz
[  253.544037][ T5954] usb 2-1: Manufacturer: syz
[  253.572736][ T5954] usb 2-1: SerialNumber: syz
[  253.730372][ T8406] team0 (unregistering): Failed to send options change via netlink (err -105)
[  253.783990][ T8406] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  253.799409][ T5954] usb 2-1: config 0 descriptor??
[  253.821175][ T5954] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  253.833572][ T5954] usb 2-1: selecting invalid altsetting 1
[  253.840118][ T5954] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  253.847970][ T8406] team0 (unregistering): Port device team_slave_0 removed
[  253.860955][ T5954] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  253.875568][ T5954] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  253.885869][ T5954] usb 2-1: media controller created
[  253.907058][ T8406] team0 (unregistering): Failed to send options change via netlink (err -105)
[  253.922285][ T8406] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  253.945900][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  253.959944][ T8406] team0 (unregistering): Port device team_slave_1 removed
[  254.061728][ T8409] binder: BINDER_SET_CONTEXT_MGR already set
[  254.069068][ T8409] binder: 8405:8409 ioctl 4018620d 80000040 returned -16
[  254.087008][ T8409] binder: 8405:8409 ioctl c0306201 80000180 returned -11
[  254.151338][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'.
[  254.259012][ T5954] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  254.308943][ T5954] zl10353_read_register: readreg error (reg=127, ret==-71)
[  254.373442][   T10] usb 1-1: USB disconnect, device number 36
[  254.409569][ T5954] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  254.430038][ T8422] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.683'.
[  254.481034][ T8415] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.517278][ T5954] usb 2-1: USB disconnect, device number 32
[  254.551357][ T8417] bond1: (slave batadv1): Opening slave failed
[  254.561730][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'.
[  254.922997][ T8435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.097804][ T8442] vlan4: entered promiscuous mode
[  255.477255][ T8450] sctp: [Deprecated]: syz.4.692 (pid 8450) Use of int in maxseg socket option.
[  255.477255][ T8450] Use struct sctp_assoc_value instead
[  255.750879][ T8457] warning: `syz.1.694' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  255.930714][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.938012][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  256.011403][ T8461] netdevsim netdevsim0: Direct firmware load for .
[  256.011403][ T8461]  failed with error -2
[  256.200984][ T8461] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  256.200984][ T8461] 
[  256.403832][ T8468] fuse: Unknown parameter 'fåBϸËÕÉK’Õd'
[  256.453913][  T927] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  256.559002][   T30] kauditd_printk_skb: 132 callbacks suppressed
[  256.559015][   T30] audit: type=1326 audit(1755090778.227:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  256.615494][  T927] usb 2-1: Using ep0 maxpacket: 8
[  256.629265][  T927] usb 2-1: config 0 has an invalid interface number: 234 but max is 2
[  256.641542][  T927] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  256.771925][  T927] usb 2-1: config 0 has no interface number 1
[  256.796338][  T927] usb 2-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[  256.812391][  T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.842493][   T30] audit: type=1326 audit(1755090778.227:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94539 code=0x7fc00000
[  256.842543][  T927] usb 2-1: Product: syz
[  256.938574][   T30] audit: type=1326 audit(1755090778.227:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.020141][   T30] audit: type=1326 audit(1755090778.227:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.087608][   T30] audit: type=1326 audit(1755090778.227:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.155633][   T30] audit: type=1326 audit(1755090778.227:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.224597][  T927] usb 2-1: Manufacturer: syz
[  257.239815][  T927] usb 2-1: SerialNumber: syz
[  257.270251][   T30] audit: type=1326 audit(1755090778.227:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.287008][  T927] usb 2-1: config 0 descriptor??
[  257.387883][   T30] audit: type=1326 audit(1755090778.227:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.410597][  T927] usb 2-1: unknown number of interfaces: 2
[  257.547030][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.697'.
[  257.633800][   T30] audit: type=1326 audit(1755090778.227:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.684186][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.708315][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.722048][  T927] usb 2-1: USB disconnect, device number 33
[  257.831872][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.4.699'.
[  257.952943][   T30] audit: type=1326 audit(1755090778.227:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7fc00000
[  257.998880][ T8478] program syz.0.700 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  258.148444][ T8482] loop2: detected capacity change from 0 to 7
[  258.162929][ T8482] Dev loop2: unable to read RDB block 7
[  258.179659][ T8482]  loop2: unable to read partition table
[  258.206811][ T8482] loop2: partition table beyond EOD, truncated
[  258.213784][ T8482] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  258.648674][ T8508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.712'.
[  258.951420][ T8516] netlink: 6 bytes leftover after parsing attributes in process `syz.0.713'.
[  259.034152][ T8516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.158884][ T8499] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.709'.
[  259.504532][   T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  259.730698][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  259.798978][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  259.844914][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.879505][   T10] usb 4-1: Product: syz
[  259.889131][   T10] usb 4-1: Manufacturer: syz
[  259.893766][   T10] usb 4-1: SerialNumber: syz
[  259.912045][ T8537] bond0: option mode: unable to set because the bond device has slaves
[  259.924024][   T10] usb 4-1: config 0 descriptor??
[  259.994917][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  260.065460][  T927] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  260.185244][    T9] usb 2-1: Using ep0 maxpacket: 8
[  260.203606][   T10] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  260.215639][   T10] em28xx 4-1:0.0: Device initialization failed.
[  260.222314][   T10] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  260.232770][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.245412][  T927] usb 3-1: Using ep0 maxpacket: 32
[  260.253026][  T927] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  260.273289][   T10] usb 4-1: USB disconnect, device number 56
[  260.279459][    T9] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08
[  260.289414][  T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.304875][ T5952] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  260.315233][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.330074][    T9] usb 2-1: Product: syz
[  260.335696][    T9] usb 2-1: Manufacturer: syz
[  260.342122][  T927] usb 3-1: config 0 descriptor??
[  260.348578][    T9] usb 2-1: SerialNumber: syz
[  260.362919][    T9] usb 2-1: config 0 descriptor??
[  260.411920][    T9] comedi comedi5: Wrong number of endpoints
[  260.419935][    T9] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device.
[  260.477748][ T5952] usb 1-1: unable to get BOS descriptor or descriptor too short
[  260.490304][ T5952] usb 1-1: not running at top speed; connect to a high speed hub
[  260.501964][ T5952] usb 1-1: config 8 has an invalid interface number: 24 but max is 0
[  260.511165][ T5952] usb 1-1: config 8 has no interface number 0
[  260.518446][ T5952] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  260.530762][ T5952] usb 1-1: config 8 interface 24 has no altsetting 0
[  260.540997][ T5952] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  260.550804][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.559549][ T5952] usb 1-1: Product: syz
[  260.563988][  T927] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  260.571346][ T5952] usb 1-1: Manufacturer: syz
[  260.578673][ T5952] usb 1-1: SerialNumber: syz
[  260.585716][  T927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  260.607148][ T8537] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  260.611500][  T927] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  260.622783][  T927] usb 3-1: media controller created
[  260.646508][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.671288][  T927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  260.680774][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.712191][ T5954] usb 2-1: USB disconnect, device number 34
[  260.728872][   T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  260.854067][ T5952] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  260.876469][ T5952] usb 1-1: USB disconnect, device number 37
[  260.886384][   T24] usb 5-1: too many configurations: 13, using maximum allowed: 8
[  260.909681][   T24] usb 5-1: config 0 has no interfaces?
[  260.926797][   T24] usb 5-1: config 0 has no interfaces?
[  260.934114][   T24] usb 5-1: config 0 has no interfaces?
[  260.953505][   T24] usb 5-1: config 0 has no interfaces?
[  260.963342][   T24] usb 5-1: config 0 has no interfaces?
[  260.978865][   T24] usb 5-1: config 0 has no interfaces?
[  260.988312][   T24] usb 5-1: config 0 has no interfaces?
[  260.999597][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.009120][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.023520][   T24] usb 5-1: config 0 has no interfaces?
[  261.063166][ T8557] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  261.086648][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.099897][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.109185][   T24] usb 5-1: Product: syz
[  261.117270][   T24] usb 5-1: Manufacturer: syz
[  261.123072][   T24] usb 5-1: SerialNumber: syz
[  261.142133][   T24] usb 5-1: config 0 descriptor??
[  261.364707][   T24] usb 5-1: USB disconnect, device number 34
[  261.551257][ T8565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.730'.
[  261.879279][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'.
[  261.973052][ T8580] PKCS7: Unknown OID: [5] (bad)
[  261.978045][ T8580] PKCS7: Only support pkcs7_signedData type
[  262.024672][   T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  262.057218][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'.
[  262.067697][ T8581] openvswitch: netlink: Flow actions attr not present in new flow.
[  262.204438][   T24] usb 5-1: Using ep0 maxpacket: 32
[  262.211727][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  262.225218][   T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  262.236325][   T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  262.301884][   T24] usb 5-1: Product: syz
[  262.311816][   T24] usb 5-1: Manufacturer: syz
[  262.421699][   T24] usb 5-1: SerialNumber: syz
[  262.476662][   T24] usb 5-1: config 0 descriptor??
[  262.488494][ T8546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.847682][  T927] az6027: usb out operation failed. (-110)
[  262.865075][  T927] az6027: usb out operation failed. (-32)
[  262.897920][  T927] stb0899_attach: Driver disabled by Kconfig
[  262.919490][ T8588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.737'.
[  262.959835][  T927] az6027: no front-end attached
[  262.959835][  T927] 
[  262.982645][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'.
[  262.993211][  T927] az6027: usb out operation failed. (-32)
[  263.001189][  T927] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  263.036747][  T927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  263.260160][  T927] dvb-usb: schedule remote query interval to 400 msecs.
[  263.278461][  T927] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  263.309957][  T927] usb 3-1: USB disconnect, device number 35
[  263.546415][  T927] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  263.865527][ T8601] fuse: Unknown parameter 'cd'
[  263.891040][ T8603] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  263.982500][ T8603] netlink: 'syz.0.742': attribute type 27 has an invalid length.
[  263.993476][ T8603] tunl0: left promiscuous mode
[  264.170659][   T24] usb 5-1: USB disconnect, device number 35
[  264.234384][ T5954] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  264.244811][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.252667][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.325558][ T5952] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  264.460347][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.516563][ T5954] usb 2-1: config 0 has no interfaces?
[  264.577941][ T5954] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  264.587687][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  264.589257][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.634970][ T5954] usb 2-1: SerialNumber: syz
[  264.644035][ T5954] usb 2-1: config 0 descriptor??
[  264.736610][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  264.807188][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  264.897247][ T8603] team_slave_0: left promiscuous mode
[  264.902646][ T8603] team_slave_0: left allmulticast mode
[  265.097830][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.129383][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  265.225913][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'.
[  265.254690][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.257922][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  265.283538][ T5952] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  265.293815][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  265.307473][ T5952] usb 1-1: Product: syz
[  265.311905][ T5952] usb 1-1: Manufacturer: syz
[  265.319139][ T5952] usb 1-1: SerialNumber: syz
[  265.340243][ T5952] usb 1-1: config 0 descriptor??
[  265.416748][ T8626] netlink: 196 bytes leftover after parsing attributes in process `syz.4.748'.
[  265.461226][ T8603] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  265.473625][ T8627] netlink: 'syz.4.748': attribute type 8 has an invalid length.
[  265.494222][ T8603] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  265.577317][ T8603] ip6erspan0: left promiscuous mode
[  265.591486][ T8603] bridge1: left promiscuous mode
[  265.603373][ T5952] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  265.616609][ T8603] bond1: left promiscuous mode
[  265.621750][ T8603] bond1: left allmulticast mode
[  265.627927][ T5952] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  265.656676][ T8603] macsec1: left promiscuous mode
[  265.670685][ T8603] macsec1: left allmulticast mode
[  265.698905][ T8603] geneve2: left promiscuous mode
[  265.727781][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.743250][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.758881][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.990702][ T5952] radio-si470x 1-1:0.0: software version 0, hardware version 0
[  265.998580][ T5952] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  266.014018][ T5952] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  266.072410][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'.
[  266.193000][ T8637] bond0: entered promiscuous mode
[  266.203244][ T8637] bond_slave_0: entered promiscuous mode
[  266.209972][ T8637] bond_slave_1: entered promiscuous mode
[  266.219688][ T8637] bridge0: entered promiscuous mode
[  266.228406][ T8637] bond0: left promiscuous mode
[  266.234034][ T8637] bond_slave_0: left promiscuous mode
[  266.278072][ T8637] bond_slave_1: left promiscuous mode
[  266.301850][ T8637] bridge0: left promiscuous mode
[  266.345175][ T5952] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[  266.367861][ T5952] radio-si470x 1-1:0.0: submitting int urb failed (-90)
[  266.369502][ T8640] syz_tun: entered promiscuous mode
[  266.388889][ T5952] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[  266.409294][ T5952] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22
[  266.441018][ T5952] usb 1-1: USB disconnect, device number 38
[  266.561208][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  266.648734][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'.
[  267.071668][  T927] usb 2-1: USB disconnect, device number 35
[  267.172930][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'.
[  267.247401][ T8640] syz_tun: left promiscuous mode
[  267.586636][  T927] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  267.674498][ T5945] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  267.745439][  T927] usb 4-1: device descriptor read/64, error -71
[  267.824906][ T5952] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  267.859638][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  267.871193][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  267.889483][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  267.901402][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  267.923116][ T5945] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  267.935377][ T8667] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.760'.
[  267.936305][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.956951][ T5945] usb 1-1: Product: syz
[  267.961251][ T5945] usb 1-1: Manufacturer: syz
[  267.976913][ T5945] usb 1-1: SerialNumber: syz
[  267.984947][  T927] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  267.992829][ T5952] usb 3-1: Using ep0 maxpacket: 16
[  268.009805][ T5945] usb 1-1: config 0 descriptor??
[  268.031898][ T8660] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  268.125193][  T927] usb 4-1: device descriptor read/64, error -71
[  268.168086][ T5952] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  268.178234][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.196070][ T5945] rc_core: IR keymap rc-imon-rsc not found
[  268.202699][ T5952] usb 3-1: Product: syz
[  268.203615][ T5945] Registered IR keymap rc-empty
[  268.223075][ T5945] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  268.232748][ T5952] usb 3-1: Manufacturer: syz
[  268.232771][ T5952] usb 3-1: SerialNumber: syz
[  268.246199][  T927] usb usb4-port1: attempt power cycle
[  268.247984][ T8672] tmpfs: Unknown parameter '¬2µÉð�>ŒÎ¶Ÿ±ê§¯ÅGëñn08äžÈhõ	ùS .k¼ ÞìEÍÆtó¼.º’Ç®œÈQäîöìc÷@'
[  268.252686][ T5952] usb 3-1: config 0 descriptor??
[  268.295281][ T5945] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23
[  268.316502][ T8660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  268.323117][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  268.394470][ T8660] vhci_hcd vhci_hcd.0: Device attached
[  268.404436][ T3095] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  268.482333][ T8676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.516459][ T8679] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14)
[  268.523350][ T8679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  268.575267][    T9] vhci_hcd: vhci_device speed not set
[  268.584892][ T3095] usb 5-1: Using ep0 maxpacket: 16
[  268.595726][ T3095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.609575][ T3095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.625418][ T8679] vhci_hcd vhci_hcd.0: Device attached
[  268.631335][  T927] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  268.644950][    T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  268.652950][ T3095] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  268.685698][  T927] usb 4-1: device descriptor read/8, error -71
[  268.693901][ T3095] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  268.719951][ T3095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.734413][ T5945] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  268.759006][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.773541][ T3095] usb 5-1: config 0 descriptor??
[  268.790400][ T5952] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  268.803403][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  268.806092][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.830314][ T5952] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  268.846354][ T8660] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  268.854433][ T5952] usb 3-1: media controller created
[  268.878887][ T8680] vhci_hcd: connection closed
[  268.883358][   T12] vhci_hcd: stop threads
[  268.884712][ T5945] usb 2-1: device descriptor read/64, error -71
[  268.891176][ T8673] vhci_hcd: connection reset by peer
[  268.906950][   T12] vhci_hcd: release socket
[  268.913344][   T24] usb 1-1: USB disconnect, device number 39
[  268.940459][   T12] vhci_hcd: disconnect device
[  268.947809][   T12] vhci_hcd: stop threads
[  268.952132][   T12] vhci_hcd: release socket
[  268.989352][   T12] vhci_hcd: disconnect device
[  269.128982][  T927] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  269.207232][ T3095] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  269.210404][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  269.227574][ T3095] microsoft 0003:045E:07DA.0013: unbalanced collection at end of report description
[  269.242094][ T3095] microsoft 0003:045E:07DA.0013: parse failed
[  269.249704][ T3095] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22
[  269.255893][  T927] usb 4-1: device descriptor read/8, error -71
[  269.277601][ T5945] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  269.405107][  T927] usb usb4-port1: unable to enumerate USB device
[  269.414388][ T5945] usb 2-1: device descriptor read/64, error -71
[  269.417737][  T927] usb 5-1: USB disconnect, device number 36
[  269.525105][ T5945] usb usb2-port1: attempt power cycle
[  269.579366][ T8685] FAULT_INJECTION: forcing a failure.
[  269.579366][ T8685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  269.594010][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.0.764 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  269.594041][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  269.594062][ T8685] Call Trace:
[  269.594070][ T8685]  <TASK>
[  269.594077][ T8685]  dump_stack_lvl+0x189/0x250
[  269.594103][ T8685]  ? __pfx____ratelimit+0x10/0x10
[  269.594127][ T8685]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.594147][ T8685]  ? __pfx__printk+0x10/0x10
[  269.594172][ T8685]  ? __might_fault+0xb0/0x130
[  269.594206][ T8685]  should_fail_ex+0x414/0x560
[  269.594234][ T8685]  _copy_from_user+0x2d/0xb0
[  269.594254][ T8685]  snd_seq_write+0x300/0x810
[  269.594287][ T8685]  ? __pfx_snd_seq_write+0x10/0x10
[  269.594310][ T8685]  ? bpf_lsm_file_permission+0x9/0x20
[  269.594331][ T8685]  ? security_file_permission+0x75/0x290
[  269.594355][ T8685]  ? rw_verify_area+0x255/0x4d0
[  269.594375][ T8685]  ? __lock_acquire+0xab9/0xd20
[  269.594397][ T8685]  ? __pfx_snd_seq_write+0x10/0x10
[  269.594419][ T8685]  vfs_write+0x27b/0xb30
[  269.594450][ T8685]  ? __pfx_vfs_write+0x10/0x10
[  269.594475][ T8685]  ? __fget_files+0x2a/0x420
[  269.594494][ T8685]  ? __fget_files+0x2a/0x420
[  269.594508][ T8685]  ? __fget_files+0x3a0/0x420
[  269.594523][ T8685]  ? __fget_files+0x2a/0x420
[  269.594547][ T8685]  ksys_write+0x145/0x250
[  269.594572][ T8685]  ? __pfx_ksys_write+0x10/0x10
[  269.594599][ T8685]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.594626][ T8685]  __do_fast_syscall_32+0xb6/0x2b0
[  269.594652][ T8685]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.594679][ T8685]  do_fast_syscall_32+0x34/0x80
[  269.594702][ T8685]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  269.594723][ T8685] RIP: 0023:0xf7f94539
[  269.594739][ T8685] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  269.594756][ T8685] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  269.594775][ T8685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  269.594787][ T8685] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000
[  269.594798][ T8685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  269.594808][ T8685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  269.594819][ T8685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  269.594846][ T8685]  </TASK>
[  269.851030][ T5952] zl10353_read_register: readreg error (reg=127, ret==0)
[  269.859021][ T5952] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  269.865822][ T5945] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  269.867943][ T5952] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  269.935627][ T5945] usb 2-1: device descriptor read/8, error -71
[  269.981343][ T8687] netlink: 1 bytes leftover after parsing attributes in process `syz.0.765'.
[  270.060375][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'.
[  270.116118][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'.
[  270.194533][ T5945] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  270.217340][ T5945] usb 2-1: device descriptor read/8, error -71
[  270.335028][ T5945] usb usb2-port1: unable to enumerate USB device
[  270.478908][ T5945] usb 3-1: USB disconnect, device number 36
[  270.521354][ T5945] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  270.645008][  T927] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  270.674448][ T5863] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  270.749817][ T8708] FAULT_INJECTION: forcing a failure.
[  270.749817][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.791925][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.2.774 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  270.791954][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  270.791962][ T8708] Call Trace:
[  270.791970][ T8708]  <TASK>
[  270.791976][ T8708]  dump_stack_lvl+0x189/0x250
[  270.792000][ T8708]  ? __pfx____ratelimit+0x10/0x10
[  270.792022][ T8708]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.792042][ T8708]  ? __pfx__printk+0x10/0x10
[  270.792064][ T8708]  ? __might_fault+0xb0/0x130
[  270.792096][ T8708]  should_fail_ex+0x414/0x560
[  270.792121][ T8708]  _copy_from_user+0x2d/0xb0
[  270.792142][ T8708]  v4l2_compat_get_user+0xbe9/0x1380
[  270.792169][ T8708]  ? __pfx_v4l2_compat_get_user+0x10/0x10
[  270.792206][ T8708]  ? rcu_is_watching+0x15/0xb0
[  270.792224][ T8708]  ? trace_kmalloc+0x1f/0xd0
[  270.792248][ T8708]  video_usercopy+0x414/0x14f0
[  270.792281][ T8708]  ? __pfx___video_do_ioctl+0x10/0x10
[  270.792297][ T8708]  ? __pfx_video_usercopy+0x10/0x10
[  270.792328][ T8708]  ? __fget_files+0x2a/0x420
[  270.792347][ T8708]  v4l2_ioctl+0x18a/0x1e0
[  270.792376][ T8708]  v4l2_compat_ioctl32+0x1d7/0x260
[  270.792402][ T8708]  __ia32_compat_sys_ioctl+0x543/0x840
[  270.792426][ T8708]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  270.792447][ T8708]  ? __fget_files+0x3a0/0x420
[  270.792466][ T8708]  ? fput+0xa0/0xd0
[  270.792483][ T8708]  ? ksys_write+0x22a/0x250
[  270.792521][ T8708]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.792546][ T8708]  __do_fast_syscall_32+0xb6/0x2b0
[  270.792570][ T8708]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.792596][ T8708]  do_fast_syscall_32+0x34/0x80
[  270.792620][ T8708]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  270.792641][ T8708] RIP: 0023:0xf7fb6539
[  270.792656][ T8708] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  270.792671][ T8708] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  270.792690][ T8708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c
[  270.792701][ T8708] RDX: 0000000080001080 RSI: 0000000000000000 RDI: 0000000000000000
[  270.792711][ T8708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  270.792721][ T8708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  270.792731][ T8708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  270.792758][ T8708]  </TASK>
[  271.133387][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'.
[  271.316567][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  271.435214][ T5863] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  271.456663][ T5863] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  271.476979][ T8714] netlink: 92 bytes leftover after parsing attributes in process `syz.2.775'.
[  271.479922][ T5863] usb 4-1: config 135 has no interface number 0
[  271.494051][ T5863] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  271.513277][ T5863] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  271.535728][ T5863] usb 4-1: config 135 interface 230 has no altsetting 0
[  272.093871][ T5863] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  272.128368][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.155828][ T5863] usb 4-1: Product: syz
[  272.163652][ T5863] usb 4-1: Manufacturer: syz
[  272.174120][ T5863] usb 4-1: SerialNumber: syz
[  272.191704][ T8722] ipvlan0: entered promiscuous mode
[  272.214609][ T5863] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  272.230544][ T5863] usb 4-1: No valid video chain found.
[  272.400522][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'.
[  272.431128][ T8729] netlink: 104 bytes leftover after parsing attributes in process `syz.1.781'.
[  272.462687][ T8729] netlink: 104 bytes leftover after parsing attributes in process `syz.1.781'.
[  272.500156][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.516486][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.654185][ T5863] usb 4-1: USB disconnect, device number 61
[  272.733189][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'.
[  273.384884][  T927] usb 1-1: unable to get BOS descriptor or descriptor too short
[  273.404967][  T927] usb 1-1: unable to read config index 0 descriptor/start: -71
[  273.412670][  T927] usb 1-1: can't read configurations, error -71
[  273.747997][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'.
[  273.812425][    T9] vhci_hcd: vhci_device speed not set
[  273.812902][ T8765] sctp: [Deprecated]: syz.2.789 (pid 8765) Use of int in maxseg socket option.
[  273.812902][ T8765] Use struct sctp_assoc_value instead
[  275.068890][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'.
[  275.178438][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'.
[  275.277718][   T10] usb usb34-port3: attempt power cycle
[  275.886395][   T10] usb usb34-port3: unable to enumerate USB device
[  276.055006][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  276.212458][ T8794] program syz.0.803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  276.223146][    T9] usb 4-1: Using ep0 maxpacket: 8
[  276.230626][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  276.251499][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  276.265039][    T9] usb 4-1: can't read configurations, error -61
[  276.304475][ T5954] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  276.406127][    T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  276.485558][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.498416][ T5954] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  276.512911][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.545752][ T5954] usb 3-1: config 0 descriptor??
[  276.563143][ T5954] pwc: Askey VC010 type 2 USB webcam detected.
[  276.565022][    T9] usb 4-1: Using ep0 maxpacket: 8
[  276.586688][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  276.596448][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  276.611102][    T9] usb 4-1: can't read configurations, error -61
[  276.623951][    T9] usb usb4-port1: attempt power cycle
[  276.634460][ T5945] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  276.671596][ T8727] Set syz1 is full, maxelem 65536 reached
[  276.721003][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'.
[  276.760377][ T5954] pwc: send_video_command error -71
[  276.779299][ T5954] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  276.791181][ T5954] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  276.801447][ T5945] usb 1-1: Using ep0 maxpacket: 32
[  276.817965][ T5954] usb 3-1: USB disconnect, device number 37
[  276.843380][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0
[  276.874798][ T5945] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  276.891289][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.901250][ T5945] usb 1-1: Product: syz
[  276.908401][ T5945] usb 1-1: Manufacturer: syz
[  276.913208][ T5945] usb 1-1: SerialNumber: syz
[  276.927388][ T5945] usb 1-1: config 0 descriptor??
[  276.976715][    T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  277.009678][    T9] usb 4-1: Using ep0 maxpacket: 8
[  277.017899][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  277.032486][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  277.041612][    T9] usb 4-1: can't read configurations, error -61
[  277.062018][ T8810] bridge2: the hash_elasticity option has been deprecated and is always 16
[  277.071493][ T8810] bridge2: entered allmulticast mode
[  277.199990][ T5954] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  277.245687][    T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  277.343648][ T5945] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  277.350899][ T5945] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[  277.368554][    T9] usb 4-1: Using ep0 maxpacket: 8
[  277.379629][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  277.438433][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  277.439927][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.447227][    T9] usb 4-1: can't read configurations, error -61
[  277.477541][    T9] usb usb4-port1: unable to enumerate USB device
[  277.480568][ T5954] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  277.503081][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.540630][ T5954] usb 3-1: config 0 descriptor??
[  277.547184][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.559583][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.585396][ T5954] pwc: Askey VC010 type 2 USB webcam detected.
[  277.640799][ T8798] create_pit_timer: 45 callbacks suppressed
[  277.640811][ T8798] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  277.707523][ T8798] FAULT_INJECTION: forcing a failure.
[  277.707523][ T8798] name failslab, interval 1, probability 0, space 0, times 0
[  277.757055][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.0.805 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  277.757083][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  277.757097][ T8798] Call Trace:
[  277.757104][ T8798]  <TASK>
[  277.757119][ T8798]  dump_stack_lvl+0x189/0x250
[  277.757145][ T8798]  ? __pfx____ratelimit+0x10/0x10
[  277.757168][ T8798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.757187][ T8798]  ? __pfx__printk+0x10/0x10
[  277.757216][ T8798]  ? __pfx___might_resched+0x10/0x10
[  277.757232][ T8798]  ? fs_reclaim_acquire+0x7d/0x100
[  277.757261][ T8798]  should_fail_ex+0x414/0x560
[  277.757289][ T8798]  should_failslab+0xa8/0x100
[  277.757315][ T8798]  __kmalloc_noprof+0xcb/0x4f0
[  277.757335][ T8798]  ? kfree+0x4d/0x440
[  277.757352][ T8798]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  277.757375][ T8798]  tomoyo_realpath_from_path+0xe3/0x5d0
[  277.757396][ T8798]  ? tomoyo_domain+0xd9/0x130
[  277.757419][ T8798]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  277.757443][ T8798]  tomoyo_path_number_perm+0x1e8/0x5a0
[  277.757469][ T8798]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  277.757510][ T8798]  ? __lock_acquire+0xab9/0xd20
[  277.757555][ T8798]  ? __fget_files+0x2a/0x420
[  277.757576][ T8798]  ? __fget_files+0x3a0/0x420
[  277.757591][ T8798]  ? __fget_files+0x2a/0x420
[  277.757611][ T8798]  security_file_ioctl_compat+0xcb/0x2d0
[  277.757637][ T8798]  __ia32_compat_sys_ioctl+0x128/0x840
[  277.757662][ T8798]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  277.757683][ T8798]  ? __fget_files+0x3a0/0x420
[  277.757705][ T8798]  ? fput+0xa0/0xd0
[  277.757723][ T8798]  ? ksys_write+0x22a/0x250
[  277.757753][ T8798]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.757780][ T8798]  __do_fast_syscall_32+0xb6/0x2b0
[  277.757804][ T8798]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.757830][ T8798]  do_fast_syscall_32+0x34/0x80
[  277.757853][ T8798]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  277.757873][ T8798] RIP: 0023:0xf7f94539
[  277.757889][ T8798] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  277.757904][ T8798] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  277.757922][ T8798] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80
[  277.757934][ T8798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  277.757944][ T8798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  277.757955][ T8798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  277.757965][ T8798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  277.757992][ T8798]  </TASK>
[  278.034428][ T8798] ERROR: Out of memory at tomoyo_realpath_from_path.
[  278.034675][    C0] hrtimer: interrupt took 270438111 ns
[  278.064625][ T8798] kvm: requested 38552 ns i8254 timer period limited to 200000 ns
[  278.073056][ T8798] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  278.088542][ T5954] pwc: recv_control_msg error -71 req 02 val 2b00
[  278.114386][ T5954] pwc: recv_control_msg error -71 req 02 val 2700
[  278.121968][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'.
[  278.136514][ T8798] kvm: requested 90514 ns i8254 timer period limited to 200000 ns
[  278.166875][ T5954] pwc: recv_control_msg error -71 req 02 val 2c00
[  278.202196][ T5954] pwc: recv_control_msg error -71 req 04 val 1000
[  278.218695][ T8798] kvm: requested 41066 ns i8254 timer period limited to 200000 ns
[  278.227278][ T8798] kvm: requested 38552 ns i8254 timer period limited to 200000 ns
[  278.235883][ T8798] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  278.244198][ T8798] kvm: requested 90514 ns i8254 timer period limited to 200000 ns
[  278.255056][ T8798] kvm: requested 41066 ns i8254 timer period limited to 200000 ns
[  278.263092][ T8798] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  278.535018][ T5954] pwc: recv_control_msg error -71 req 04 val 1300
[  278.594706][ T5954] pwc: recv_control_msg error -71 req 04 val 1400
[  278.679626][ T5954] pwc: recv_control_msg error -71 req 02 val 2000
[  278.700201][ T5954] pwc: recv_control_msg error -71 req 02 val 2100
[  278.729129][ T5954] pwc: recv_control_msg error -71 req 04 val 1500
[  278.747684][ T5954] pwc: recv_control_msg error -71 req 02 val 2500
[  278.763492][ T5954] pwc: recv_control_msg error -71 req 02 val 2400
[  278.790388][ T5954] pwc: recv_control_msg error -71 req 02 val 2600
[  278.824636][ T5954] pwc: recv_control_msg error -71 req 02 val 2900
[  278.831945][ T5954] pwc: recv_control_msg error -71 req 02 val 2800
[  278.864635][ T5954] pwc: recv_control_msg error -71 req 04 val 1100
[  278.883105][ T5954] pwc: recv_control_msg error -71 req 04 val 1200
[  278.921075][ T5952] usb 1-1: USB disconnect, device number 42
[  278.921735][ T5954] pwc: Registered as video103.
[  278.976129][ T5954] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24
[  279.032573][ T5945] IPVS: starting estimator thread 0...
[  279.044952][ T5954] usb 3-1: USB disconnect, device number 38
[  279.052514][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  279.053468][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  279.165798][ T8835] IPVS: using max 38 ests per chain, 91200 per kthread
[  279.302512][ T8842] netlink: 'syz.2.817': attribute type 303 has an invalid length.
[  279.827961][ T5952] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  280.032398][ T5952] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  280.094330][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.155544][ T5952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  280.179510][ T5952] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  280.207946][ T5952] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  280.221246][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  280.230892][ T5952] usb 4-1: Product: syz
[  280.251765][ T5952] usb 4-1: Manufacturer: syz
[  280.274509][    T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  280.427905][    T9] usb 3-1: Using ep0 maxpacket: 8
[  280.436806][    T9] usb 3-1: config 64 has an invalid interface number: 19 but max is 0
[  280.460884][    T9] usb 3-1: config 64 has no interface number 0
[  280.491422][    T9] usb 3-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  280.515759][    T9] usb 3-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  280.540766][    T9] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  280.563465][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.642157][    T9] usb 3-1: probing VID:PID(2201:012C)   
[  280.646441][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'.
[  280.689432][    T9] usb 3-1: vub300 testing BULK OUT EndPoint(0) 02
[  280.714224][    T9] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  280.752012][    T9] vub300 3-1:64.19: probe with driver vub300 failed with error -22
[  281.060955][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'.
[  282.276527][ T3095] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  282.334562][ T5954] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  282.437081][ T5952] cdc_wdm 4-1:1.0: skipping garbage
[  282.442969][ T5952] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  282.456915][ T3095] usb 1-1: unable to get BOS descriptor or descriptor too short
[  282.470389][ T3095] usb 1-1: not running at top speed; connect to a high speed hub
[  282.482454][ T5952] usb 4-1: USB disconnect, device number 66
[  282.495627][ T3095] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  282.512752][ T3095] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.522478][ T5954] usb 5-1: Using ep0 maxpacket: 8
[  282.541611][ T5954] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  282.563853][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.578703][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'.
[  282.583388][ T3095] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  282.614056][ T5954] usb 5-1: Product: syz
[  282.628580][ T5954] usb 5-1: Manufacturer: syz
[  282.637569][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.648042][ T5954] usb 5-1: SerialNumber: syz
[  282.661226][ T5954] usb 5-1: config 0 descriptor??
[  282.669232][ T3095] usb 1-1: Product: syz
[  282.674893][ T3095] usb 1-1: Manufacturer: syz
[  282.680124][ T3095] usb 1-1: SerialNumber: syz
[  282.687188][ T5954] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  282.925513][ T5952] usb 3-1: USB disconnect, device number 39
[  283.138975][ T8881] pim6reg0: tun_chr_ioctl cmd 1074812118
[  283.160322][ T5954] gspca_sonixj: reg_r err -71
[  283.198383][ T5954] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  283.247377][ T5954] usb 5-1: USB disconnect, device number 37
[  283.315447][ T3095] usb 1-1: 0:2 : does not exist
[  283.454103][ T8901] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  283.534470][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'.
[  283.550671][    T9] usb 1-1: USB disconnect, device number 43
[  283.856262][ T6228] udevd[6228]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.944662][ T5952] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  284.952445][    T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  285.085250][    T9] usb 1-1: device descriptor read/64, error -71
[  285.109163][ T5952] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11
[  285.121748][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0
[  285.235951][ T5952] usb 5-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00
[  285.264015][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.334741][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  285.585881][    T9] usb 1-1: device descriptor read/64, error -71
[  285.617591][ T5952] usb 5-1: config 0 descriptor??
[  285.696660][    T9] usb usb1-port1: attempt power cycle
[  285.764148][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'.
[  286.084951][    T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  286.154914][  T927] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  286.185735][    T9] usb 1-1: device descriptor read/8, error -71
[  286.192448][ T5952] usbhid 5-1:0.0: can't add hid device: -71
[  286.215260][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  286.247416][ T5952] usb 5-1: USB disconnect, device number 38
[  286.315886][  T927] usb 3-1: Using ep0 maxpacket: 32
[  286.327670][  T927] usb 3-1: config 2 has an invalid interface number: 15 but max is 0
[  286.349134][  T927] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  286.359015][  T927] usb 3-1: config 2 has no interface number 1
[  286.366598][  T927] usb 3-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  286.381632][  T927] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  286.396475][  T927] usb 3-1: config 2 interface 0 has no altsetting 0
[  286.414040][  T927] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69
[  286.435668][  T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.444032][  T927] usb 3-1: Product: syz
[  286.454884][    T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  286.463559][  T927] usb 3-1: Manufacturer: syz
[  286.464948][ T8942] netlink: 240 bytes leftover after parsing attributes in process `syz.1.841'.
[  286.474182][  T927] usb 3-1: SerialNumber: syz
[  286.489489][ T8942] netlink: 304 bytes leftover after parsing attributes in process `syz.1.841'.
[  286.500382][    T9] usb 1-1: device descriptor read/8, error -71
[  286.521969][  T927] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected.
[  286.601074][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'.
[  286.615284][    T9] usb usb1-port1: unable to enumerate USB device
[  286.729540][  T927] pwc: Failed to set LED on/off time (-71)
[  286.747641][  T927] pwc: send_video_command error -71
[  286.757573][  T927] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  286.766216][  T927] Philips webcam 3-1:2.0: probe with driver Philips webcam failed with error -71
[  286.781980][  T927] usb 3-1: USB disconnect, device number 40
[  287.073551][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  287.084389][ T3095] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  287.315465][ T3095] usb 5-1: config 0 has an invalid interface number: 182 but max is 1
[  287.335214][ T3095] usb 5-1: config 0 has an invalid interface number: 9 but max is 1
[  287.341627][    T9] usb 1-1: device descriptor read/64, error -71
[  287.350502][ T3095] usb 5-1: config 0 has no interface number 0
[  287.393401][ T3095] usb 5-1: config 0 has no interface number 1
[  287.400050][ T3095] usb 5-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[  287.418068][ T3095] usb 5-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  287.436745][ T3095] usb 5-1: config 0 interface 9 has no altsetting 0
[  287.465402][ T3095] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  287.482833][ T3095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.504927][ T3095] usb 5-1: config 0 descriptor??
[  287.518404][ T3095] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  287.538481][ T3095] snd-usb-audio 5-1:0.182: probe with driver snd-usb-audio failed with error -2
[  287.586158][ T3095] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  287.606015][    T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  287.624715][ T5954] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  287.767712][ T3095] snd-usb-audio 5-1:0.9: probe with driver snd-usb-audio failed with error -2
[  287.794190][ T3095] usb 5-1: USB disconnect, device number 39
[  287.820562][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.853435][ T5954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  287.875817][ T5954] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  287.917042][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.002508][ T5954] usb 4-1: config 0 descriptor??
[  288.031304][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  288.053752][ T5954] dvb-usb: bulk message failed: -22 (3/0)
[  288.081463][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  288.100343][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  288.120988][ T5954] usb 4-1: media controller created
[  288.160353][   T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  288.234312][ T8957] netlink: 'syz.3.848': attribute type 7 has an invalid length.
[  288.244523][ T8957] netlink: 'syz.3.848': attribute type 8 has an invalid length.
[  288.303724][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  288.324626][ T3095] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  288.355344][   T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  288.367033][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.388582][ T5954] dvb-usb: bulk message failed: -22 (6/0)
[  288.425374][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  288.443647][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  288.454485][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  288.478593][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25
[  288.512099][ T3095] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  288.576222][   T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  288.596759][ T3095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.617382][ T5954] dvb-usb: schedule remote query interval to 150 msecs.
[  288.631039][   T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  288.644069][ T3095] usb 5-1: Product: syz
[  288.734978][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  288.769150][ T3095] usb 5-1: Manufacturer: syz
[  288.785283][   T24] usb 2-1: Product: syz
[  288.809202][ T3095] usb 5-1: SerialNumber: syz
[  288.814555][   T24] usb 2-1: Manufacturer: syz
[  288.994322][ T5954] dvb-usb: bulk message failed: -22 (1/0)
[  289.438590][ T5954] dvb-usb: error while querying for an remote control event.
[  289.492813][ T3095] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  289.536088][ T5954] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  289.635721][ T5945] dvb-usb: bulk message failed: -22 (1/0)
[  289.644466][ T5945] dvb-usb: error while querying for an remote control event.
[  289.747824][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'.
[  289.757788][ T8992] netlink: 'syz.4.854': attribute type 30 has an invalid length.
[  289.826082][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.835376][ T5945] dvb-usb: bulk message failed: -22 (1/0)
[  289.835462][ T5945] dvb-usb: error while querying for an remote control event.
[  289.888590][ T5945] usb 5-1: USB disconnect, device number 40
[  289.890275][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.914006][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.928771][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.994431][ T3095] dvb-usb: bulk message failed: -22 (1/0)
[  290.001276][ T3095] dvb-usb: error while querying for an remote control event.
[  290.175599][ T3095] dvb-usb: bulk message failed: -22 (1/0)
[  290.278924][ T3095] dvb-usb: error while querying for an remote control event.
[  290.311017][ T8998] syzkaller1: tun_chr_ioctl cmd 2147767511
[  290.560155][ T3095] dvb-usb: bulk message failed: -22 (1/0)
[  290.586100][ T3095] dvb-usb: error while querying for an remote control event.
[  290.611959][ T3095] usb 4-1: USB disconnect, device number 67
[  290.776894][ T3095] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  290.808044][ T5954] usb 5-1: Service connection timeout for: 256
[  290.832202][ T5954] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  290.878728][ T5954] ath9k_htc: Failed to initialize the device
[  290.916156][ T5945] usb 5-1: ath9k_htc: USB layer deinitialized
[  291.021770][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'.
[  291.079024][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  291.092825][   T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  291.107086][   T24] usb 2-1: USB disconnect, device number 40
[  291.165137][ T5952] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  291.175172][ T3095] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  291.336294][ T5952] usb 1-1: Using ep0 maxpacket: 16
[  291.339377][ T3095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.343663][ T5952] usb 1-1: config 0 has an invalid interface number: 162 but max is 0
[  291.355198][ T3095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.374996][ T3095] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.391806][ T3095] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.402858][ T3095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.403948][ T5952] usb 1-1: config 0 has no interface number 0
[  291.418140][ T3095] usb 4-1: config 0 descriptor??
[  291.429820][ T5952] usb 1-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=91.e7
[  291.447115][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.461991][ T5952] usb 1-1: Product: syz
[  291.462224][ T9030] mmap: syz.4.871 (9030): VmData 45748224 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  291.470873][ T5952] usb 1-1: Manufacturer: syz
[  291.488034][ T5952] usb 1-1: SerialNumber: syz
[  291.514152][ T5952] usb 1-1: config 0 descriptor??
[  291.747115][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  291.755802][ T5952] pegasus 1-1:0.162: probe with driver pegasus failed with error -71
[  291.818787][ T5952] usb 1-1: USB disconnect, device number 50
[  291.834056][ T3095] hid_parser_main: 218 callbacks suppressed
[  291.834118][ T3095] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  291.880369][ T3095] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  291.905419][    T9] usb 5-1: device descriptor read/64, error -71
[  292.048360][ T5952] usb 4-1: USB disconnect, device number 68
[  292.178991][    T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  292.384900][    T9] usb 5-1: device descriptor read/64, error -71
[  292.508678][    T9] usb usb5-port1: attempt power cycle
[  292.815016][ T5952] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  292.864881][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  292.898300][    T9] usb 5-1: device descriptor read/8, error -71
[  292.978309][ T5952] usb 1-1: Using ep0 maxpacket: 8
[  293.005078][ T5952] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  293.024725][ T5952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.048753][ T5952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.087132][ T5952] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.120107][ T9062] macsec1: entered promiscuous mode
[  293.126402][ T9062] macsec1: entered allmulticast mode
[  293.144188][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.881'.
[  293.194922][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  293.588952][    T9] usb 5-1: device descriptor read/8, error -71
[  293.608449][ T5952] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  293.643070][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.758408][    T9] usb usb5-port1: unable to enumerate USB device
[  294.148177][ T5952] usb 1-1: GET_CAPABILITIES returned 0
[  294.179967][ T5952] usbtmc 1-1:16.0: can't read capabilities
[  294.374343][ T3095] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  294.534707][ T3095] usb 2-1: Using ep0 maxpacket: 32
[  294.547659][ T3095] usb 2-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2
[  294.559098][ T3095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.569249][ T3095] usb 2-1: Product: syz
[  294.577526][ T3095] usb 2-1: Manufacturer: syz
[  294.631505][ T3095] usb 2-1: SerialNumber: syz
[  294.641917][ T3095] usb 2-1: config 0 descriptor??
[  294.698018][ T3095] xr_serial 2-1:0.0: invalid descriptor buffer length
[  294.708322][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.758059][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.462639][   T24] usb 2-1: USB disconnect, device number 41
[  295.867838][ T5952] usb 1-1: USB disconnect, device number 51
[  295.914427][   T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  296.144764][   T24] usb 5-1: Using ep0 maxpacket: 8
[  296.168710][   T24] usb 5-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config
[  296.182307][   T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  296.201113][   T24] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  296.212976][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.222758][   T24] usb 5-1: Product: syz
[  296.228772][   T24] usb 5-1: Manufacturer: syz
[  296.266539][   T24] usb 5-1: SerialNumber: syz
[  296.280671][   T24] usb 5-1: config 0 descriptor??
[  296.294423][ T5952] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  296.468125][ T5952] usb 1-1: config 0 has an invalid interface number: 72 but max is 0
[  296.486017][ T5952] usb 1-1: config 0 has no interface number 0
[  296.494951][ T5952] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  296.509242][ T5952] usb 1-1: New USB device found, idVendor=7392, idProduct=a611, bcdDevice=e7.11
[  296.557037][    T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  296.569283][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.578207][  T927] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  296.591352][ T5952] usb 1-1: config 0 descriptor??
[  296.715214][  T927] usb 2-1: device descriptor read/64, error -71
[  296.734771][    T9] usb 4-1: Using ep0 maxpacket: 32
[  296.741436][    T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  296.750420][    T9] usb 4-1: config 0 has no interface number 0
[  296.759453][    T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  296.769621][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.778975][    T9] usb 4-1: Product: syz
[  296.783312][    T9] usb 4-1: Manufacturer: syz
[  296.788585][    T9] usb 4-1: SerialNumber: syz
[  296.796250][    T9] usb 4-1: config 0 descriptor??
[  296.803619][    T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  296.851843][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.861376][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.890841][   T24] usb 1-1: USB disconnect, device number 52
[  296.906932][ T5952] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  296.955195][  T927] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  297.007339][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  297.020270][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  297.076545][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.090695][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.102359][  T927] usb 2-1: device descriptor read/64, error -71
[  297.110669][ T5952] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  297.120928][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.132144][ T5952] usb 3-1: config 0 descriptor??
[  297.204810][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.222852][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.223899][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.232117][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.243666][  T927] usb usb2-port1: attempt power cycle
[  297.304379][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  297.455629][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  297.456227][ T5954] usb 4-1: USB disconnect, device number 69
[  297.476572][   T24] usb 1-1: too many configurations: 13, using maximum allowed: 8
[  297.491457][ T5954] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  297.505681][   T24] usb 1-1: config 0 has no interfaces?
[  297.516326][   T24] usb 1-1: config 0 has no interfaces?
[  297.524386][   T24] usb 1-1: config 0 has no interfaces?
[  297.533017][ T5954] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  297.544768][   T24] usb 1-1: config 0 has no interfaces?
[  297.551770][ T5954] quatech2 4-1:0.51: device disconnected
[  297.564023][   T24] usb 1-1: config 0 has no interfaces?
[  297.578771][   T24] usb 1-1: config 0 has no interfaces?
[  297.588716][   T24] usb 1-1: config 0 has no interfaces?
[  297.595798][  T927] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  297.604162][   T24] usb 1-1: config 0 has no interfaces?
[  297.616421][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  297.626252][  T927] usb 2-1: device descriptor read/8, error -71
[  297.629161][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.642367][   T24] usb 1-1: Product: syz
[  297.649417][   T24] usb 1-1: Manufacturer: syz
[  297.654030][   T24] usb 1-1: SerialNumber: syz
[  297.661327][   T24] usb 1-1: config 0 descriptor??
[  297.867613][  T927] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  297.890551][ T5863] usb 5-1: USB disconnect, device number 45
[  297.916247][   T10] usb 1-1: USB disconnect, device number 53
[  297.926597][  T927] usb 2-1: device descriptor read/8, error -71
[  298.051010][  T927] usb usb2-port1: unable to enumerate USB device
[  298.354912][ T5863] usb 5-1: new low-speed USB device number 46 using dummy_hcd
[  298.505096][ T5863] usb 5-1: Invalid ep0 maxpacket: 64
[  298.544392][ T5954] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  298.644958][ T5863] usb 5-1: new low-speed USB device number 47 using dummy_hcd
[  298.726113][ T5954] usb 1-1: Using ep0 maxpacket: 32
[  298.735867][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  298.755757][ T5954] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  298.772139][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  298.783268][ T5954] usb 1-1: Product: syz
[  298.792453][ T5954] usb 1-1: Manufacturer: syz
[  298.798812][ T5863] usb 5-1: Invalid ep0 maxpacket: 64
[  298.806524][ T5863] usb usb5-port1: attempt power cycle
[  298.806855][ T5954] usb 1-1: SerialNumber: syz
[  298.827182][ T5954] usb 1-1: config 0 descriptor??
[  298.844106][ T9121] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  299.145002][ T5863] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[  299.165928][ T5863] usb 5-1: Invalid ep0 maxpacket: 64
[  299.173921][ T9140] netlink: 'syz.3.904': attribute type 1 has an invalid length.
[  299.224689][ T9140] bond2: entered promiscuous mode
[  299.230315][ T9140] 8021q: adding VLAN 0 to HW filter on device bond2
[  299.242577][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'.
[  299.264698][ T9142] vxcan2: entered promiscuous mode
[  299.270157][ T9142] vxcan2: entered allmulticast mode
[  299.295422][ T5863] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[  299.303210][ T9140] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.904'.
[  299.315686][ T5863] usb 5-1: Invalid ep0 maxpacket: 64
[  299.322886][ T5863] usb usb5-port1: unable to enumerate USB device
[  299.323143][ T9140] netlink: zone id is out of range
[  299.349938][ T9140] netlink: zone id is out of range
[  299.366744][ T9140] netlink: get zone limit has 8 unknown bytes
[  299.664434][ T5954] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  299.735596][ T5952] usbhid 3-1:0.0: can't add hid device: -71
[  299.745722][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  299.792052][ T5952] usb 3-1: USB disconnect, device number 41
[  299.846193][ T5954] usb 4-1: device descriptor read/64, error -71
[  300.094354][ T5954] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  300.264606][ T5954] usb 4-1: device descriptor read/64, error -71
[  300.377702][ T5954] usb usb4-port1: attempt power cycle
[  300.521749][ T5952] usb 1-1: USB disconnect, device number 54
[  300.744550][ T5954] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  300.774849][ T5954] usb 4-1: device descriptor read/8, error -71
[  301.015781][ T5954] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  301.067955][ T5954] usb 4-1: device descriptor read/8, error -71
[  301.244925][ T5954] usb usb4-port1: unable to enumerate USB device
[  301.594330][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'.
[  302.229164][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.915'.
[  302.795022][ T5863] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  302.803163][ T5952] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  303.046388][ T5952] usb 4-1: too many configurations: 13, using maximum allowed: 8
[  303.076931][ T5863] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  303.089468][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.107970][ T5952] usb 4-1: config 0 has no interfaces?
[  303.116305][ T5952] usb 4-1: config 0 has no interfaces?
[  303.132807][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  303.150943][ T5952] usb 4-1: config 0 has no interfaces?
[  303.160674][ T5952] usb 4-1: config 0 has no interfaces?
[  303.178832][ T5952] usb 4-1: config 0 has no interfaces?
[  303.213683][ T5863] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  303.239521][ T5952] usb 4-1: config 0 has no interfaces?
[  303.282140][ T5952] usb 4-1: config 0 has no interfaces?
[  303.320747][ T5863] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  303.339215][ T5952] usb 4-1: config 0 has no interfaces?
[  303.357277][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  303.367519][ T5952] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  303.380499][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.391424][ T5863] usb 5-1: Product: syz
[  303.417915][ T5863] usb 5-1: Manufacturer: syz
[  303.426186][ T5952] usb 4-1: Product: syz
[  303.443878][ T5952] usb 4-1: Manufacturer: syz
[  303.467410][ T5952] usb 4-1: SerialNumber: syz
[  303.495257][ T5952] usb 4-1: config 0 descriptor??
[  303.624544][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  303.713234][ T5952] usb 4-1: USB disconnect, device number 74
[  304.684732][   T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  304.765268][ T9206] netlink: 108 bytes leftover after parsing attributes in process `syz.1.921'.
[  304.875636][   T10] usb 4-1: Using ep0 maxpacket: 32
[  304.888327][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  304.937901][   T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  304.971802][   T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  304.995389][  T927] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  305.020945][   T10] usb 4-1: Product: syz
[  305.043698][   T10] usb 4-1: Manufacturer: syz
[  305.073171][   T10] usb 4-1: SerialNumber: syz
[  305.103687][   T10] usb 4-1: config 0 descriptor??
[  305.135678][ T9189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  305.164946][  T927] usb 3-1: Using ep0 maxpacket: 32
[  305.173692][  T927] usb 3-1: config 0 interface 0 has no altsetting 0
[  305.197892][  T927] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  305.233300][  T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.235824][ T9217] loop6: detected capacity change from 0 to 524287999
[  305.305073][  T927] usb 3-1: Product: syz
[  305.321731][  T927] usb 3-1: Manufacturer: syz
[  305.345506][  T927] usb 3-1: SerialNumber: syz
[  305.405620][  T927] usb 3-1: config 0 descriptor??
[  305.724551][ T9226] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  305.801287][ T9228] FAULT_INJECTION: forcing a failure.
[  305.801287][ T9228] name failslab, interval 1, probability 0, space 0, times 0
[  305.815441][  T927] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  305.826488][  T927] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121
[  305.848789][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.1.929 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  305.848816][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  305.848826][ T9228] Call Trace:
[  305.848834][ T9228]  <TASK>
[  305.848841][ T9228]  dump_stack_lvl+0x189/0x250
[  305.848867][ T9228]  ? __pfx____ratelimit+0x10/0x10
[  305.848887][ T9228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.848904][ T9228]  ? __pfx__printk+0x10/0x10
[  305.848929][ T9228]  ? __pfx___might_resched+0x10/0x10
[  305.848943][ T9228]  ? fs_reclaim_acquire+0x7d/0x100
[  305.848970][ T9228]  should_fail_ex+0x414/0x560
[  305.848996][ T9228]  should_failslab+0xa8/0x100
[  305.849021][ T9228]  __kmalloc_cache_noprof+0x70/0x3d0
[  305.849043][ T9228]  ? __alloc_workqueue+0x166/0x1b70
[  305.849068][ T9228]  __alloc_workqueue+0x166/0x1b70
[  305.849104][ T9228]  alloc_workqueue_noprof+0xd4/0x210
[  305.849124][ T9228]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  305.849148][ T9228]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  305.849167][ T9228]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  305.849201][ T9228]  nci_register_device+0x3f3/0x9d0
[  305.849227][ T9228]  ? __pfx_nci_register_device+0x10/0x10
[  305.849249][ T9228]  ? __raw_spin_lock_init+0x45/0x100
[  305.849272][ T9228]  ? __init_waitqueue_head+0xa9/0x150
[  305.849298][ T9228]  virtual_ncidev_open+0x129/0x1a0
[  305.849319][ T9228]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  305.849336][ T9228]  misc_open+0x2b9/0x330
[  305.849370][ T9228]  chrdev_open+0x4cc/0x5e0
[  305.849397][ T9228]  ? __pfx_chrdev_open+0x10/0x10
[  305.849424][ T9228]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  305.849455][ T9228]  ? __pfx_chrdev_open+0x10/0x10
[  305.849476][ T9228]  do_dentry_open+0x953/0x13f0
[  305.849509][ T9228]  vfs_open+0x3b/0x340
[  305.849524][ T9228]  ? path_openat+0x2ecd/0x3830
[  305.849547][ T9228]  path_openat+0x2ee5/0x3830
[  305.849567][ T9228]  ? arch_stack_walk+0xfc/0x150
[  305.849603][ T9228]  ? stack_depot_save_flags+0x40/0x860
[  305.849638][ T9228]  ? __pfx_path_openat+0x10/0x10
[  305.849655][ T9228]  ? do_fast_syscall_32+0x34/0x80
[  305.849677][ T9228]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  305.849719][ T9228]  do_filp_open+0x1fa/0x410
[  305.849737][ T9228]  ? __lock_acquire+0xab9/0xd20
[  305.849762][ T9228]  ? __pfx_do_filp_open+0x10/0x10
[  305.849804][ T9228]  ? _raw_spin_unlock+0x28/0x50
[  305.849822][ T9228]  ? alloc_fd+0x64c/0x6c0
[  305.849858][ T9228]  do_sys_openat2+0x121/0x1c0
[  305.849880][ T9228]  ? __pfx_do_sys_openat2+0x10/0x10
[  305.849903][ T9228]  ? ksys_write+0x22a/0x250
[  305.849930][ T9228]  __ia32_compat_sys_openat+0x131/0x160
[  305.849950][ T9228]  __do_fast_syscall_32+0xb6/0x2b0
[  305.849973][ T9228]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.849999][ T9228]  do_fast_syscall_32+0x34/0x80
[  305.850022][ T9228]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  305.850043][ T9228] RIP: 0023:0xf7f78539
[  305.850060][ T9228] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  305.850074][ T9228] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  305.850094][ T9228] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080
[  305.850106][ T9228] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  305.850116][ T9228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  305.850126][ T9228] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  305.850137][ T9228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  305.850165][ T9228]  </TASK>
[  306.508739][ T5863] cdc_wdm 5-1:1.0: skipping garbage
[  306.514180][ T5863] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  306.526594][ T5863] usb 5-1: USB disconnect, device number 50
[  306.693630][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'.
[  306.849712][   T24] usb 4-1: USB disconnect, device number 75
[  306.995092][ T3095] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  307.176216][ T3095] usb 1-1: Using ep0 maxpacket: 8
[  307.206986][ T3095] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  307.302059][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.338660][ T3095] usb 1-1: Product: syz
[  307.350686][ T3095] usb 1-1: Manufacturer: syz
[  307.357262][ T3095] usb 1-1: SerialNumber: syz
[  307.365346][ T3095] usb 1-1: config 0 descriptor??
[  307.377626][ T3095] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  307.426415][ T9249] netlink: 108 bytes leftover after parsing attributes in process `syz.4.934'.
[  307.902602][ T3095] gspca_sonixj: reg_w1 err -110
[  307.914503][ T3095] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  307.929603][ T5954] usb 3-1: USB disconnect, device number 42
[  308.309303][ T9263] FAULT_INJECTION: forcing a failure.
[  308.309303][ T9263] name failslab, interval 1, probability 0, space 0, times 0
[  308.335086][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz.2.938 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  308.335115][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  308.335125][ T9263] Call Trace:
[  308.335133][ T9263]  <TASK>
[  308.335141][ T9263]  dump_stack_lvl+0x189/0x250
[  308.335166][ T9263]  ? __pfx____ratelimit+0x10/0x10
[  308.335190][ T9263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.335210][ T9263]  ? __pfx__printk+0x10/0x10
[  308.335237][ T9263]  ? __pfx___might_resched+0x10/0x10
[  308.335254][ T9263]  ? fs_reclaim_acquire+0x7d/0x100
[  308.335285][ T9263]  should_fail_ex+0x414/0x560
[  308.335313][ T9263]  should_failslab+0xa8/0x100
[  308.335338][ T9263]  __kmalloc_noprof+0xcb/0x4f0
[  308.335360][ T9263]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  308.335387][ T9263]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  308.335415][ T9263]  genl_family_rcv_msg_doit+0xb8/0x300
[  308.335442][ T9263]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  308.335465][ T9263]  ? __pfx_genl_get_cmd+0x10/0x10
[  308.335482][ T9263]  ? __pfx_ethnl_default_doit+0x10/0x10
[  308.335504][ T9263]  ? __pfx_ethnl_default_start+0x10/0x10
[  308.335527][ T9263]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  308.335550][ T9263]  ? __pfx_ethnl_default_done+0x10/0x10
[  308.335588][ T9263]  genl_rcv_msg+0x60e/0x790
[  308.335615][ T9263]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.335632][ T9263]  ? __pfx_ethnl_default_doit+0x10/0x10
[  308.335659][ T9263]  ? __asan_memcpy+0x40/0x70
[  308.335678][ T9263]  ? __pfx_ref_tracker_free+0x10/0x10
[  308.335709][ T9263]  netlink_rcv_skb+0x208/0x470
[  308.335730][ T9263]  ? __lock_acquire+0xab9/0xd20
[  308.335755][ T9263]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.335775][ T9263]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.335819][ T9263]  ? down_read+0x1ad/0x2e0
[  308.335846][ T9263]  genl_rcv+0x28/0x40
[  308.335863][ T9263]  netlink_unicast+0x82c/0x9e0
[  308.335894][ T9263]  ? __pfx_netlink_unicast+0x10/0x10
[  308.335918][ T9263]  ? netlink_sendmsg+0x642/0xb30
[  308.335939][ T9263]  ? skb_put+0x11b/0x210
[  308.335960][ T9263]  netlink_sendmsg+0x805/0xb30
[  308.335994][ T9263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.336021][ T9263]  ? __import_iovec+0x5d4/0x7f0
[  308.336047][ T9263]  ? aa_sock_msg_perm+0xf1/0x1d0
[  308.336074][ T9263]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  308.336093][ T9263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.336118][ T9263]  __sock_sendmsg+0x21c/0x270
[  308.336144][ T9263]  ____sys_sendmsg+0x505/0x830
[  308.336168][ T9263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.336203][ T9263]  ___sys_sendmsg+0x21f/0x2a0
[  308.336224][ T9263]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.336280][ T9263]  ? __fget_files+0x2a/0x420
[  308.336295][ T9263]  ? __fget_files+0x3a0/0x420
[  308.336321][ T9263]  __sys_sendmsg+0x164/0x220
[  308.336342][ T9263]  ? __pfx___sys_sendmsg+0x10/0x10
[  308.336377][ T9263]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.336404][ T9263]  __do_fast_syscall_32+0xb6/0x2b0
[  308.336429][ T9263]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.336456][ T9263]  do_fast_syscall_32+0x34/0x80
[  308.336479][ T9263]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  308.336501][ T9263] RIP: 0023:0xf7fb6539
[  308.336517][ T9263] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  308.336532][ T9263] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  308.336551][ T9263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  308.336563][ T9263] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  308.336574][ T9263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.336584][ T9263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  308.336595][ T9263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.336623][ T9263]  </TASK>
[  308.737969][ T5954] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  308.966305][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.978711][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.988703][ T5954] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  308.994373][ T9274] netlink: 'syz.2.940': attribute type 7 has an invalid length.
[  308.997984][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.018459][ T5954] usb 5-1: config 0 descriptor??
[  309.040571][ T9274] netlink: 'syz.2.940': attribute type 8 has an invalid length.
[  309.234651][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'.
[  309.242949][ T9279] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  309.270041][ T9279] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  309.281558][ T9253] netlink: 5 bytes leftover after parsing attributes in process `syz.4.935'.
[  309.300242][ T5954] usbhid 5-1:0.0: can't add hid device: -71
[  309.308804][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  309.328855][ T5954] usb 5-1: USB disconnect, device number 51
[  309.488020][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'.
[  309.557272][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.568309][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.629373][ T9290] netlink: 108 bytes leftover after parsing attributes in process `syz.3.945'.
[  309.725724][ T9292] FAULT_INJECTION: forcing a failure.
[  309.725724][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.774753][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.3.946 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  309.774781][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  309.774792][ T9292] Call Trace:
[  309.774800][ T9292]  <TASK>
[  309.774807][ T9292]  dump_stack_lvl+0x189/0x250
[  309.774833][ T9292]  ? __pfx____ratelimit+0x10/0x10
[  309.774856][ T9292]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.774876][ T9292]  ? __pfx__printk+0x10/0x10
[  309.774900][ T9292]  ? __might_fault+0xb0/0x130
[  309.774932][ T9292]  should_fail_ex+0x414/0x560
[  309.774968][ T9292]  _copy_from_iter+0x1db/0x16f0
[  309.774991][ T9292]  ? rcu_is_watching+0x15/0xb0
[  309.775011][ T9292]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  309.775037][ T9292]  ? __pfx__copy_from_iter+0x10/0x10
[  309.775056][ T9292]  ? __build_skb_around+0x257/0x3e0
[  309.775088][ T9292]  ? netlink_sendmsg+0x642/0xb30
[  309.775109][ T9292]  ? skb_put+0x11b/0x210
[  309.775128][ T9292]  netlink_sendmsg+0x6b2/0xb30
[  309.775160][ T9292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.775186][ T9292]  ? __import_iovec+0x5d4/0x7f0
[  309.775203][ T9292]  ? aa_sock_msg_perm+0xf1/0x1d0
[  309.775230][ T9292]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.775249][ T9292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.775273][ T9292]  __sock_sendmsg+0x21c/0x270
[  309.775298][ T9292]  ____sys_sendmsg+0x505/0x830
[  309.775322][ T9292]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.775355][ T9292]  ___sys_sendmsg+0x21f/0x2a0
[  309.775376][ T9292]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.775427][ T9292]  ? __fget_files+0x2a/0x420
[  309.775442][ T9292]  ? __fget_files+0x3a0/0x420
[  309.775467][ T9292]  __sys_sendmsg+0x164/0x220
[  309.775488][ T9292]  ? __pfx___sys_sendmsg+0x10/0x10
[  309.775522][ T9292]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.775549][ T9292]  __do_fast_syscall_32+0xb6/0x2b0
[  309.775573][ T9292]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.775600][ T9292]  do_fast_syscall_32+0x34/0x80
[  309.775624][ T9292]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  309.775644][ T9292] RIP: 0023:0xf7f32539
[  309.775660][ T9292] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  309.775675][ T9292] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  309.775694][ T9292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480
[  309.775704][ T9292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.775711][ T9292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.775718][ T9292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  309.775726][ T9292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  309.775746][ T9292]  </TASK>
[  310.250286][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.261961][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.627226][ T9311] macsec1: entered allmulticast mode
[  310.638494][ T9311] veth1_macvtap: entered allmulticast mode
[  310.654725][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'.
[  310.691926][ T9311] veth1_macvtap: left allmulticast mode
[  310.754418][ T3095] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  310.791666][ T9313] sctp: [Deprecated]: syz.4.951 (pid 9313) Use of int in max_burst socket option.
[  310.791666][ T9313] Use struct sctp_assoc_value instead
[  310.927447][ T3095] usb 2-1: config 0 has no interfaces?
[  310.934803][ T3095] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  310.968468][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.974385][  T927] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  311.002351][ T3095] usb 2-1: config 0 descriptor??
[  311.134690][  T927] usb 3-1: Using ep0 maxpacket: 16
[  311.143543][  T927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.160208][  T927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  311.191958][  T927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  311.216108][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.228663][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.240601][ T3095] usb 2-1: USB disconnect, device number 46
[  311.269761][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'.
[  311.343090][  T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.355278][  T927] usb 3-1: Product: syz
[  311.360725][  T927] usb 3-1: Manufacturer: syz
[  311.368076][  T927] usb 3-1: SerialNumber: syz
[  311.613607][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.950'.
[  311.659423][   T10] usb 1-1: USB disconnect, device number 55
[  311.710836][  T927] usb 3-1: 0:2 : does not exist
[  311.732756][  T927] usb 3-1: unit 9 not found!
[  311.751525][  T927] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[  311.784788][ T3095] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  311.821108][  T927] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4)
[  311.868554][  T927] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4)
[  311.882189][  T927] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4)
[  311.907108][  T927] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4)
[  311.966249][ T3095] usb 2-1: Using ep0 maxpacket: 16
[  311.973493][ T3095] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.990379][ T3095] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.023534][ T3095] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  312.041436][ T3095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.042205][  T927] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4)
[  312.072547][ T3095] usb 2-1: Product: syz
[  312.098565][ T3095] usb 2-1: Manufacturer: syz
[  312.135939][  T927] usb 3-1: USB disconnect, device number 43
[  312.149717][ T3095] usb 2-1: SerialNumber: syz
[  312.574828][   T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  312.600872][ T9332] FAULT_INJECTION: forcing a failure.
[  312.600872][ T9332] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  312.616826][ T9332] CPU: 1 UID: 0 PID: 9332 Comm: syz.0.956 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  312.616845][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  312.616852][ T9332] Call Trace:
[  312.616859][ T9332]  <TASK>
[  312.616864][ T9332]  dump_stack_lvl+0x189/0x250
[  312.616881][ T9332]  ? __pfx____ratelimit+0x10/0x10
[  312.616896][ T9332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.616908][ T9332]  ? __pfx__printk+0x10/0x10
[  312.616922][ T9332]  ? fs_reclaim_acquire+0x7d/0x100
[  312.616942][ T9332]  should_fail_ex+0x414/0x560
[  312.616958][ T9332]  prepare_alloc_pages+0x213/0x610
[  312.616971][ T9332]  __alloc_frozen_pages_noprof+0x123/0x370
[  312.616984][ T9332]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  312.616994][ T9332]  ? try_to_migrate+0x3bc/0x670
[  312.617005][ T9332]  ? __pfx___might_resched+0x10/0x10
[  312.617015][ T9332]  ? __pfx_try_to_migrate_one+0x10/0x10
[  312.617024][ T9332]  ? __pfx_folio_not_mapped+0x10/0x10
[  312.617038][ T9332]  __folio_alloc_noprof+0x18/0x120
[  312.617049][ T9332]  migrate_pages_batch+0x81e/0x3620
[  312.617068][ T9332]  ? __pfx_alloc_migration_target+0x10/0x10
[  312.617083][ T9332]  ? __pfx_migrate_pages_batch+0x10/0x10
[  312.617094][ T9332]  ? irqentry_exit+0x74/0x90
[  312.617107][ T9332]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.617125][ T9332]  ? migrate_pages+0x1879/0x2930
[  312.617135][ T9332]  migrate_pages+0x1bcc/0x2930
[  312.617153][ T9332]  ? __pfx_alloc_migration_target+0x10/0x10
[  312.617167][ T9332]  ? __pfx_migrate_pages+0x10/0x10
[  312.617175][ T9332]  ? find_vma+0xe7/0x160
[  312.617189][ T9332]  ? __pfx_find_vma+0x10/0x10
[  312.617202][ T9332]  ? queue_pages_test_walk+0x423/0x790
[  312.617215][ T9332]  ? walk_page_range_mm+0x57e/0x660
[  312.617234][ T9332]  ? __pfx___up_read+0x10/0x10
[  312.617250][ T9332]  do_migrate_pages+0x5ee/0x800
[  312.617271][ T9332]  ? __pfx_do_migrate_pages+0x10/0x10
[  312.617294][ T9332]  ? security_capable+0xbd/0x2e0
[  312.617312][ T9332]  __se_sys_migrate_pages+0x544/0x650
[  312.617326][ T9332]  ? __pfx___se_sys_migrate_pages+0x10/0x10
[  312.617341][ T9332]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.617356][ T9332]  __do_fast_syscall_32+0xb6/0x2b0
[  312.617371][ T9332]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.617385][ T9332]  do_fast_syscall_32+0x34/0x80
[  312.617399][ T9332]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.617411][ T9332] RIP: 0023:0xf7f94539
[  312.617421][ T9332] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  312.617430][ T9332] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000126
[  312.617444][ T9332] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000003
[  312.617463][ T9332] RDX: 0000000080000300 RSI: 0000000080000040 RDI: 0000000000000000
[  312.617472][ T9332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.617480][ T9332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  312.617487][ T9332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.617501][ T9332]  </TASK>
[  312.977781][ T3095] usb 2-1: 0:2 : does not exist
[  313.046791][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  313.084447][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.095629][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  313.108416][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.121757][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  313.135835][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  313.155769][   T10] usb 4-1: Product: syz
[  313.167220][   T10] usb 4-1: Manufacturer: syz
[  313.197308][ T3095] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5)
[  313.200312][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  313.206541][ T3095] usb 2-1: Warning! Unlikely big volume range (=58653), cval->res is probably wrong.
[  313.206569][ T3095] usb 2-1: [5] FU [Delay Control] ch = 1, val = 0/58653/1
[  313.218587][ T3095] usb 2-1: USB disconnect, device number 47
[  313.265660][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.340882][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  313.368007][   T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  313.460006][   T10] usb 4-1: USB disconnect, device number 76
[  313.704930][   T24] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  314.141076][ T9351] binder: 9349:9351 unknown command 0
[  314.152742][ T9351] binder: 9349:9351 ioctl c0306201 80000080 returned -22
[  314.166451][ T9346] kvm: emulating exchange as write
[  314.270620][   T30] kauditd_printk_skb: 78 callbacks suppressed
[  314.270638][   T30] audit: type=1326 audit(1755090835.937:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000
[  314.333672][   T30] audit: type=1326 audit(1755090835.937:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000
[  314.442572][   T10] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  314.491870][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.495617][   T30] audit: type=1326 audit(1755090835.937:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0xf70ce539 code=0x7ffc0000
[  314.586478][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  314.636608][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  314.659374][   T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  314.692387][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  314.702365][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.742370][   T10] usb 2-1: config 1 has an invalid interface number: 138 but max is 0
[  314.759517][   T10] usb 2-1: config 1 has no interface number 0
[  314.769752][   T30] audit: type=1326 audit(1755090836.257:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000
[  314.799153][   T10] usb 2-1: config 1 interface 138 has no altsetting 0
[  314.811032][   T30] audit: type=1326 audit(1755090836.257:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000
[  314.838913][   T10] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  314.859119][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.873098][   T10] usb 2-1: Product: syz
[  314.877655][   T10] usb 2-1: Manufacturer: syz
[  314.883964][   T10] usb 2-1: SerialNumber: syz
[  314.927426][   T24] usb 1-1: config 0 descriptor??
[  314.973259][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  315.001580][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  315.065273][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  315.117367][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  315.132024][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  315.151441][   T24] usb 1-1: media controller created
[  315.177237][ T9343] netlink: 'syz.0.958': attribute type 7 has an invalid length.
[  315.187328][ T9343] netlink: 'syz.0.958': attribute type 8 has an invalid length.
[  315.221614][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  315.362591][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  315.378151][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  315.424535][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26
[  315.520651][   T10] usb 2-1: USB disconnect, device number 48
[  315.637347][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  315.954868][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  315.980390][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'.
[  316.124686][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  316.131263][   T24] dvb-usb: error while querying for an remote control event.
[  316.204805][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  316.334628][ T3095] dvb-usb: bulk message failed: -22 (1/0)
[  316.341755][ T3095] dvb-usb: error while querying for an remote control event.
[  316.505875][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  316.511724][   T24] dvb-usb: error while querying for an remote control event.
[  316.654478][ T9383] FAULT_INJECTION: forcing a failure.
[  316.654478][ T9383] name failslab, interval 1, probability 0, space 0, times 0
[  316.676960][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  316.683052][   T24] dvb-usb: error while querying for an remote control event.
[  316.693566][ T9383] CPU: 1 UID: 0 PID: 9383 Comm: syz.3.968 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  316.693589][ T9383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  316.693599][ T9383] Call Trace:
[  316.693605][ T9383]  <TASK>
[  316.693612][ T9383]  dump_stack_lvl+0x189/0x250
[  316.693637][ T9383]  ? __pfx____ratelimit+0x10/0x10
[  316.693659][ T9383]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.693678][ T9383]  ? __pfx__printk+0x10/0x10
[  316.693704][ T9383]  ? __pfx___might_resched+0x10/0x10
[  316.693721][ T9383]  ? fs_reclaim_acquire+0x7d/0x100
[  316.693751][ T9383]  should_fail_ex+0x414/0x560
[  316.693777][ T9383]  should_failslab+0xa8/0x100
[  316.693802][ T9383]  kmem_cache_alloc_noprof+0x73/0x3c0
[  316.693825][ T9383]  ? security_file_alloc+0x34/0x330
[  316.693851][ T9383]  security_file_alloc+0x34/0x330
[  316.693874][ T9383]  init_file+0x93/0x2f0
[  316.693896][ T9383]  alloc_empty_file+0x6e/0x1d0
[  316.693916][ T9383]  path_openat+0x107/0x3830
[  316.693935][ T9383]  ? arch_stack_walk+0xfc/0x150
[  316.693965][ T9383]  ? stack_trace_save+0x9c/0xe0
[  316.693987][ T9383]  ? stack_depot_save_flags+0x40/0x860
[  316.694028][ T9383]  ? kasan_save_track+0x4f/0x80
[  316.694047][ T9383]  ? kasan_save_track+0x3e/0x80
[  316.694065][ T9383]  ? __kasan_slab_alloc+0x6c/0x80
[  316.694086][ T9383]  ? getname_flags+0xb8/0x540
[  316.694103][ T9383]  ? __pfx_path_openat+0x10/0x10
[  316.694120][ T9383]  ? do_fast_syscall_32+0x34/0x80
[  316.694142][ T9383]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  316.694181][ T9383]  do_filp_open+0x1fa/0x410
[  316.694200][ T9383]  ? __lock_acquire+0xab9/0xd20
[  316.694228][ T9383]  ? __pfx_do_filp_open+0x10/0x10
[  316.694265][ T9383]  ? _raw_spin_unlock+0x28/0x50
[  316.694284][ T9383]  ? alloc_fd+0x64c/0x6c0
[  316.694316][ T9383]  do_sys_openat2+0x121/0x1c0
[  316.694339][ T9383]  ? __pfx_do_sys_openat2+0x10/0x10
[  316.694361][ T9383]  ? ksys_write+0x22a/0x250
[  316.694391][ T9383]  __ia32_compat_sys_openat+0x131/0x160
[  316.694416][ T9383]  __do_fast_syscall_32+0xb6/0x2b0
[  316.694440][ T9383]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.694467][ T9383]  do_fast_syscall_32+0x34/0x80
[  316.694490][ T9383]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  316.694510][ T9383] RIP: 0023:0xf7f32539
[  316.694526][ T9383] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  316.694540][ T9383] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  316.694558][ T9383] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0
[  316.694571][ T9383] RDX: 0000000000008882 RSI: 0000000000000000 RDI: 0000000000000000
[  316.694582][ T9383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  316.694592][ T9383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  316.694603][ T9383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  316.694630][ T9383]  </TASK>
[  317.008845][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  317.015150][   T24] dvb-usb: error while querying for an remote control event.
[  317.041442][ T3095] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  317.174335][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  317.180292][   T24] dvb-usb: error while querying for an remote control event.
[  317.217484][ T3095] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  317.227504][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.230431][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'.
[  317.247453][ T3095] usb 2-1: config 0 descriptor??
[  317.344434][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  317.350628][   T24] dvb-usb: error while querying for an remote control event.
[  317.371834][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.379123][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.462923][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.486473][ T9394] FAULT_INJECTION: forcing a failure.
[  317.486473][ T9394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.487248][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.505093][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.4.972 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  317.505121][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  317.505131][ T9394] Call Trace:
[  317.505139][ T9394]  <TASK>
[  317.505146][ T9394]  dump_stack_lvl+0x189/0x250
[  317.505171][ T9394]  ? __pfx____ratelimit+0x10/0x10
[  317.505194][ T9394]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.505213][ T9394]  ? __pfx__printk+0x10/0x10
[  317.505236][ T9394]  ? __might_fault+0xb0/0x130
[  317.505269][ T9394]  should_fail_ex+0x414/0x560
[  317.505297][ T9394]  _copy_from_user+0x2d/0xb0
[  317.505316][ T9394]  video_usercopy+0x354/0x14f0
[  317.505343][ T9394]  ? __pfx___video_do_ioctl+0x10/0x10
[  317.505360][ T9394]  ? __pfx_video_usercopy+0x10/0x10
[  317.505393][ T9394]  ? __fget_files+0x2a/0x420
[  317.505411][ T9394]  v4l2_ioctl+0x18a/0x1e0
[  317.505439][ T9394]  v4l2_compat_ioctl32+0x1d7/0x260
[  317.505464][ T9394]  __ia32_compat_sys_ioctl+0x543/0x840
[  317.505489][ T9394]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  317.505510][ T9394]  ? __fget_files+0x3a0/0x420
[  317.505532][ T9394]  ? fput+0xa0/0xd0
[  317.505550][ T9394]  ? ksys_write+0x22a/0x250
[  317.505580][ T9394]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.505605][ T9394]  __do_fast_syscall_32+0xb6/0x2b0
[  317.505629][ T9394]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.505655][ T9394]  do_fast_syscall_32+0x34/0x80
[  317.505678][ T9394]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  317.505698][ T9394] RIP: 0023:0xf70ce539
[  317.505714][ T9394] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  317.505728][ T9394] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  317.505747][ T9394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02c563a
[  317.505759][ T9394] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  317.505770][ T9394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.505780][ T9394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  317.505790][ T9394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.505816][ T9394]  </TASK>
[  317.748546][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  317.761925][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.971'.
[  317.854916][   T24] dvb-usb: error while querying for an remote control event.
[  317.952409][   T24] usb 1-1: USB disconnect, device number 56
[  318.200340][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  318.548836][ T9411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.977'.
[  318.644939][ T5954] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  318.854520][ T5954] usb 4-1: device descriptor read/64, error -71
[  319.155294][  T927] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  319.178418][ T5954] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  319.336915][   T24] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  319.345261][ T5954] usb 4-1: device descriptor read/64, error -71
[  319.385257][  T927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.398184][  T927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  319.415222][  T927] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  319.446840][  T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.468907][ T5954] usb usb4-port1: attempt power cycle
[  319.472185][  T927] usb 3-1: config 0 descriptor??
[  319.492318][  T927] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  319.500251][  T927] dvb-usb: bulk message failed: -22 (3/0)
[  319.535663][  T927] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  319.557077][  T927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  319.559054][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.575009][  T927] usb 3-1: media controller created
[  319.577337][  T927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  319.580617][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  319.662169][  T927] dvb-usb: bulk message failed: -22 (6/0)
[  319.691540][ T9422] netlink: 'syz.2.978': attribute type 7 has an invalid length.
[  319.703057][ T9422] netlink: 'syz.2.978': attribute type 8 has an invalid length.
[  319.736103][  T927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  319.799110][   T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  319.819848][  T927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27
[  319.847953][  T927] dvb-usb: schedule remote query interval to 150 msecs.
[  319.856323][ T5954] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  319.883340][  T927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  319.902247][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.915779][ T5954] usb 4-1: device descriptor read/8, error -71
[  319.939181][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.003629][   T24] usb 5-1: config 0 descriptor??
[  320.012774][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.034918][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  320.040928][   T10] dvb-usb: error while querying for an remote control event.
[  320.133586][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.160059][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.168366][ T5954] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  320.193275][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  320.204353][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  320.210216][  T927] dvb-usb: error while querying for an remote control event.
[  320.247245][ T5954] usb 4-1: device descriptor read/8, error -71
[  320.267856][ T3095] usb 2-1: Cannot set autoneg
[  320.272826][ T3095] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  320.306985][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  320.348294][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  320.358204][ T3095] usb 2-1: USB disconnect, device number 49
[  320.384972][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  320.384990][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  320.385035][   T24] usb 5-1: media controller created
[  320.395256][  T927] dvb-usb: error while querying for an remote control event.
[  320.420999][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.430458][ T5954] usb usb4-port1: unable to enumerate USB device
[  320.453552][ T9423] netlink: 'syz.4.979': attribute type 7 has an invalid length.
[  320.462735][ T9423] netlink: 'syz.4.979': attribute type 8 has an invalid length.
[  320.784713][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  320.792297][ T9431] netlink: 1180 bytes leftover after parsing attributes in process `syz.1.980'.
[  320.858514][  T927] dvb-usb: error while querying for an remote control event.
[  320.861365][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  321.054802][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  321.060970][  T927] dvb-usb: error while querying for an remote control event.
[  321.071249][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  321.114201][ T9408] gretap1: entered promiscuous mode
[  321.134871][ T3095] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  321.156221][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28
[  321.234922][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  321.259326][  T927] dvb-usb: error while querying for an remote control event.
[  321.298484][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  321.307066][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  321.355104][ T3095] usb 2-1: Using ep0 maxpacket: 16
[  321.365316][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.377837][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.399125][ T3095] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  321.422060][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.435334][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  321.441428][   T10] dvb-usb: error while querying for an remote control event.
[  321.468195][ T3095] usb 2-1: config 0 descriptor??
[  321.475433][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  321.481595][ T5938] dvb-usb: error while querying for an remote control event.
[  321.604985][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  321.612844][  T927] dvb-usb: error while querying for an remote control event.
[  321.654473][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  321.660438][ T5938] dvb-usb: error while querying for an remote control event.
[  321.734498][ T3095] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0
[  321.785215][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  321.791462][   T10] dvb-usb: error while querying for an remote control event.
[  321.807569][ T3095] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf3 found
[  321.824836][ T3095] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf4 found
[  321.834501][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  321.853626][ T5938] dvb-usb: error while querying for an remote control event.
[  321.955140][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  321.955165][  T927] dvb-usb: error while querying for an remote control event.
[  321.986310][ T3095] IPVS: starting estimator thread 0...
[  322.034588][ T3095] dvb-usb: bulk message failed: -22 (1/0)
[  322.034629][ T3095] dvb-usb: error while querying for an remote control event.
[  322.075075][ T3095] usb 2-1: USB disconnect, device number 50
[  322.077425][ T9440] IPVS: using max 51 ests per chain, 122400 per kthread
[  322.114522][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  322.121095][  T927] dvb-usb: error while querying for an remote control event.
[  322.131205][   T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  322.205486][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  322.212400][ T5938] dvb-usb: error while querying for an remote control event.
[  322.284713][   T10] usb 1-1: Using ep0 maxpacket: 16
[  322.293716][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.307788][  T927] dvb-usb: bulk message failed: -22 (1/0)
[  322.318373][  T927] dvb-usb: error while querying for an remote control event.
[  322.328213][   T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  322.341153][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.343562][ T3095] usb 3-1: USB disconnect, device number 44
[  322.355958][   T10] usb 1-1: config 0 descriptor??
[  322.374665][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  322.388219][ T5938] dvb-usb: error while querying for an remote control event.
[  322.424404][ T3095] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  322.554950][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  322.561292][ T5938] dvb-usb: error while querying for an remote control event.
[  322.663769][ T9444] netlink: 108 bytes leftover after parsing attributes in process `syz.1.983'.
[  322.724760][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  322.740414][ T5938] dvb-usb: error while querying for an remote control event.
[  322.793861][   T10] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  322.973227][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  322.982819][ T5938] dvb-usb: error while querying for an remote control event.
[  322.992208][ T3095] usb 5-1: USB disconnect, device number 52
[  323.123190][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.140353][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.181598][ T9453] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI
[  323.181616][ T9453] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f]
[  323.181628][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.2.986 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  323.181644][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  323.181650][ T9453] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0
[  323.181668][ T9453] Code: 80 3c 2f 00 74 08 48 89 df e8 6f 05 fb f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 44 05 fb f6 4d 8b 2c 24 49 83 c5
[  323.181678][ T9453] RSP: 0018:ffffc9000ecb6f40 EFLAGS: 00010a06
[  323.181688][ T9453] RAX: 1bd5a9d5a0000003 RBX: ffff8880293a4738 RCX: ffff8880756b8000
[  323.181696][ T9453] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  323.181703][ T9453] RBP: ffffc9000ecb72b0 R08: ffff8880293a415f R09: 1ffff1100527482b
[  323.181711][ T9453] R10: dffffc0000000000 R11: ffffed100527482c R12: dead4ead00000018
[  323.181718][ T9453] R13: dffffc0000000000 R14: ffff8880293a4100 R15: 1ffff110052748e7
[  323.181726][ T9453] FS:  0000000000000000(0000) GS:ffff888125c1c000(0063) knlGS:00000000f54d6b40
[  323.181737][ T9453] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  323.181748][ T9453] CR2: 000000008000e000 CR3: 000000007449c000 CR4: 00000000003526f0
[  323.181762][ T9453] Call Trace:
[  323.181768][ T9453]  <TASK>
[  323.181783][ T9453]  ? __pfx_smc_diag_dump_proto+0x10/0x10
[  323.181804][ T9453]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  323.181823][ T9453]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  323.181840][ T9453]  ? __phys_addr+0xd3/0x180
[  323.181860][ T9453]  ? __kasan_kmalloc_large+0x85/0xa0
[  323.181874][ T9453]  ? rcu_is_watching+0x15/0xb0
[  323.181884][ T9453]  ? rcu_is_watching+0x15/0xb0
[  323.181893][ T9453]  ? trace_kmalloc+0x1f/0xd0
[  323.181905][ T9453]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  323.181920][ T9453]  ? __build_skb_around+0x257/0x3e0
[  323.181937][ T9453]  smc_diag_dump+0x59/0xa0
[  323.181948][ T9453]  netlink_dump+0x6e1/0xe90
[  323.181963][ T9453]  ? __pfx_netlink_dump+0x10/0x10
[  323.181975][ T9453]  ? __netlink_lookup+0x752/0x810
[  323.181991][ T9453]  ? netlink_lookup+0x30/0x200
[  323.182004][ T9453]  ? netlink_lookup+0x30/0x200
[  323.182015][ T9453]  ? netlink_lookup+0x30/0x200
[  323.182028][ T9453]  __netlink_dump_start+0x5cb/0x7e0
[  323.182042][ T9453]  smc_diag_handler_dump+0x178/0x210
[  323.182054][ T9453]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  323.182065][ T9453]  ? __pfx_smc_diag_dump+0x10/0x10
[  323.182076][ T9453]  ? sock_diag_lock_handler+0x19/0x290
[  323.182089][ T9453]  ? sock_diag_lock_handler+0x19/0x290
[  323.182102][ T9453]  sock_diag_rcv_msg+0x4c9/0x600
[  323.182115][ T9453]  netlink_rcv_skb+0x208/0x470
[  323.182128][ T9453]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  323.182141][ T9453]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.182155][ T9453]  ? netlink_deliver_tap+0x2e/0x1b0
[  323.182184][ T9453]  netlink_unicast+0x82c/0x9e0
[  323.182197][ T9453]  ? __pfx_netlink_unicast+0x10/0x10
[  323.182209][ T9453]  ? netlink_sendmsg+0x642/0xb30
[  323.182222][ T9453]  ? skb_put+0x11b/0x210
[  323.182231][ T9453]  netlink_sendmsg+0x805/0xb30
[  323.182245][ T9453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.182259][ T9453]  ? __import_iovec+0x5d4/0x7f0
[  323.182270][ T9453]  ? aa_sock_msg_perm+0xf1/0x1d0
[  323.182285][ T9453]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  323.182296][ T9453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.182318][ T9453]  __sock_sendmsg+0x21c/0x270
[  323.182331][ T9453]  ____sys_sendmsg+0x505/0x830
[  323.182342][ T9453]  ? __pfx_____sys_sendmsg+0x10/0x10
[  323.182354][ T9453]  ___sys_sendmsg+0x21f/0x2a0
[  323.182364][ T9453]  ? __pfx____sys_sendmsg+0x10/0x10
[  323.182373][ T9453]  ? futex_private_hash_put+0x4b/0x280
[  323.182385][ T9453]  ? futex_private_hash_put+0x245/0x280
[  323.182401][ T9453]  ? __fget_files+0x2a/0x420
[  323.182409][ T9453]  ? __fget_files+0x3a0/0x420
[  323.182419][ T9453]  __sys_sendmsg+0x164/0x220
[  323.182429][ T9453]  ? __pfx___sys_sendmsg+0x10/0x10
[  323.182441][ T9453]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.182455][ T9453]  __do_fast_syscall_32+0xb6/0x2b0
[  323.182469][ T9453]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.182482][ T9453]  do_fast_syscall_32+0x34/0x80
[  323.182495][ T9453]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  323.182508][ T9453] RIP: 0023:0xf7fb6539
[  323.182516][ T9453] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  323.182524][ T9453] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  323.182536][ T9453] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000540
[  323.182543][ T9453] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000
[  323.182549][ T9453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  323.182555][ T9453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  323.182563][ T9453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.182573][ T9453]  </TASK>
[  323.182577][ T9453] Modules linked in:
[  323.182604][ T9453] ---[ end trace 0000000000000000 ]---
[  323.182610][ T9453] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0
[  323.182623][ T9453] Code: 80 3c 2f 00 74 08 48 89 df e8 6f 05 fb f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 44 05 fb f6 4d 8b 2c 24 49 83 c5
[  323.182632][ T9453] RSP: 0018:ffffc9000ecb6f40 EFLAGS: 00010a06
[  323.182641][ T9453] RAX: 1bd5a9d5a0000003 RBX: ffff8880293a4738 RCX: ffff8880756b8000
[  323.182649][ T9453] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  323.182655][ T9453] RBP: ffffc9000ecb72b0 R08: ffff8880293a415f R09: 1ffff1100527482b
[  323.182663][ T9453] R10: dffffc0000000000 R11: ffffed100527482c R12: dead4ead00000018
[  323.182670][ T9453] R13: dffffc0000000000 R14: ffff8880293a4100 R15: 1ffff110052748e7
[  323.182678][ T9453] FS:  0000000000000000(0000) GS:ffff888125c1c000(0063) knlGS:00000000f54d6b40
[  323.182687][ T9453] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  323.182694][ T9453] CR2: 000000008000e000 CR3: 000000007449c000 CR4: 00000000003526f0
[  323.182704][ T9453] Kernel panic - not syncing: Fatal exception
[  323.183175][ T9453] Kernel Offset: disabled