last executing test programs:

7.511188125s ago: executing program 1 (id=1021):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socket$qrtr(0x2a, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0xa], [0x0, 0x9, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r5, 0x8000, 0x8000, 0x9, 0x2, [], [0x3, 0x3, 0x4, 0x5], [0x40, 0x7, 0x8, 0x5], [0x4, 0xb, 0x1, 0x7]}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r5, 0x8000, 0x8000, 0x9, 0x2, [], [0x3, 0x3, 0x4, 0x5], [0x40, 0x7, 0x8, 0x5], [0x4, 0xb, 0x1, 0x7]})
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000440)={0x0, 0xffffffff, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"})
r7 = syz_open_pts(r6, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) (async)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xd2)
ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xc, "7fff7a2004dc17a8"})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0xa)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
ptrace$setregs(0x1a, r9, 0x800000be, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0)
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) (async)
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xed) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xed)

7.476659115s ago: executing program 1 (id=1022):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
r1 = memfd_secret(0x80000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000f14000228bd7000fcdbdf2508003e000100000008003e000500000008000100010000000800010002000000080001000000000008003e000100000008003e00040000000800010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000fd4500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
openat$cgroup_ro(r1, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)

4.343919057s ago: executing program 1 (id=1039):
restart_syscall()
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = inotify_init()
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
poll(&(0x7f0000000140)=[{r2, 0x12}], 0x1, 0x79)
close_range(r1, 0xffffffffffffffff, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x7ff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}}, 0x0)
syz_usb_connect(0x4, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r2, @ANYRES64=r3, @ANYRESHEX, @ANYRES8=r0], 0x0)

4.163828292s ago: executing program 3 (id=1041):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)={0x0, 0x0, 0x16, "3ea5c15ba4b71d96026c4e934022b15391646e33cc6b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.555790882s ago: executing program 1 (id=1044):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0xb4864f7c52cc58b2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
fchdir(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r4, &(0x7f0000000100)='=', 0x1, 0x4fed3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

3.519482514s ago: executing program 1 (id=1045):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0xc3, 0x72, 0x10, 0xc12, 0x2ca5, 0x3be1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x20, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x0, 0xff, 0x5d, 0x1}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x8010)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0xa015933609843a5f, 0x3, "6829ba"}, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000900)={'8255\x00', [0x6, 0x4, 0x5, 0x8, 0x9, 0x1, 0x9, 0x6, 0x3, 0x1, 0x7c44, 0x0, 0x7ff, 0x5, 0x2, 0x0, 0xffffff2c, 0xfffffffa, 0x4, 0xaa, 0x6, 0x9, 0x1, 0x0, 0x7ff, 0x10000, 0x4, 0x80000000, 0xa, 0x22, 0x5, 0x200]}) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x28c, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x4d, 0xad, 0x4d, 0xff, 0x2c42, 0x16f8, 0xe55a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27a, 0x1, 0x2, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x1, 0x0, 0x8, 0x81, 0xad, 0x88, 0xa, [@generic={0xdc, 0x21, "ec8a1b3a562079b08cc8c14bb66b6b32a511dbc8c50c463cb3cfa9ac7f51ad2df4c0a2e640a698656acc7e045fd7d5ffc090d3b03445392acca1ab418e317208193e534d1d45cf6b37b1c7239c0519ae739fbdaf4b68bfbc96063dac87598727d1f7587e63582e0f6034719e5acd9336ccf3e19f77e9281df982c4675f0d90d754552f363584e11c7ae78e88d6ca4038865e752d44e921223d0702132ca557310a57259c18762109f0683da57e0a74e8b810db4d2110f54e2e91a861609d275a0112d6df73766bf30873f4b57adef0372d203851de12ebc24657"}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x7, 0x4, [@generic={0x38, 0x30, "c4373f1942f7df1f041d483f8ce791846d35d7d7dd6ae317853190074c623750543635b5a67bc45147ce06259bd2eb54f021165cc8c7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x6, 0x0, [@generic={0xa8, 0x4, "1e72951254f4e2c6fea16d0ce635cd3861722fd7b0b31d9226bea8005e1f71f86ec208d8c7f80229a5d2f20eb281ea44db1ca3a812fc73b6da064ee07b3694713de380bc5bd14a86f0eea9cb65cf5571a5efcf7cfb8294c5ebf1f43cb0e746dc044d63c05a1b26c074b2c4721dfc25dc34f17056a7f3895a4674a3b32dbe44cf3d28f68b5c1f25224ddde5c3ed7772c90a5b659613e681a8f069eca3511e747331c71c67f3ce"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x7, 0x0, 0x58}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x9, 0x18, 0x4, [@generic={0x48, 0x22, "6e7912d2092673ff2baea9e93ce724601a98bca824a46f99c9a559ee5cab167793a7837ca0a0b71235cc95e734e1c9c060156b107c35d2f27c0aeb301cdb5601604b87e6608e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x40, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xa8, 0x8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x6, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1e, 0x8001}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9d, 0x4a, 0x1}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x89, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xfe4}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x228, 0x9b, 0x0, 0x80, 0x8, 0xb}, 0x1f, &(0x7f0000000140)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x43, 0x0, 0x4, 0xff00, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x97, 0x0, 0x1, 0x34ab, 0xff}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x405}}, {0xaf, &(0x7f00000001c0)=@string={0xaf, 0x3, "a8843f7002a444cbc65a5fdd0bbfb7e3e83d9fc5a32380c398e5e6301b6ea2b7f87680add31c0c8eb93f288e5403cc5804ec9e286ef76ea7f3569893aa4bb39a415bebde79deb2fec8c86c2c6d59d8243aa9e4a304a885973529de4b6585d6cde7f1c07ff64addbda74d7dd3808cec41dd7775840d1500705e319a042820c330613a53e08e05ae9a22c110c4362404546b092127a06674fcb08d01226c5d7d1b148d3a1bddb81e50fc369d755f"}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "325e8ce45e0ba620ccbff94f93fa179d6e84"}}, {0xd0, &(0x7f0000000340)=@string={0xd0, 0x3, "13d9de906d6f17dbcd24ad49e965bf59514a25c8203a89d523b93fa0e95d7c265d970b44a53a78c19879df167dcdcdee6f3a733ca3a8dff8ab8f86716f50e9b05393af0613150bf01b24488658e17d8ac876878c684d20774b28a6eae5f93779709b9ab47c1d3e5ad25f334c3366314538a04feeb2ac78ab17f475c102fe81046c1852d15dfefb29cb17b41ff7424b038aad6b6f9d7da3a603272befd6d014d672bbf2a8a7d99920d6800d4e5d0e9189157c5f52fbab15f38e73a3e858a3c0f50c593cc759757bc9223ebe61c4b1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xfc, &(0x7f0000000740)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x419}}]})

3.115310827s ago: executing program 0 (id=1046):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0xd, 0x1, 0x1, {0xa, @pix_mp={0x7, 0xd, 0x59555956, 0x4, 0x0, [{0x6, 0xff}, {0x6, 0x1ff}, {0x0, 0x4}, {0x1b72, 0xfffffff8}, {0x0, 0xfffffffe}, {0x146, 0x4}, {0xbdd}, {0x8, 0x1000}], 0x4, 0x80, 0x2, 0x0, 0x6}}, 0x4319})
read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
ptrace(0x11, r1)

3.028235494s ago: executing program 0 (id=1047):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f0000000040)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r4], 0x0)

3.022074462s ago: executing program 0 (id=1048):
getsockname$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@remote, @default, @rose, @netrom, @remote, @remote, @rose, @null]}, &(0x7f0000000080)=0x48)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x401, 0x40000)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x9, 0x2}) (async)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x96, 0x4, 0x0, "c62ff90f8568c3bd96ca4bc61f4787ec19f1b184aacb70704012b5d6f292c29a9eb194041215a867349d7b0ecce124275c3813421baafa6c35cee43d4556d6ae02a40599f4c35e000ea9cdc77f20c5b3d612dfc9322eb12a1b910634173ccd8f37e18d137a00d87e00f48edd4688b19bab63fb3f4b19c66e242179d5daf0cb345ced44e37c499d71c57158430c9b78e7c9e8c1a75aa7"}) (async)
r1 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8)
getsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x4c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0xc31}]}, &(0x7f0000000380)=0x10) (async)
r3 = eventfd(0x6)
io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x7fff, r2, &(0x7f00000003c0)="1efd861b64afd20a0a4ba0cc9857198d3b9b76623cf071d876c22c3f93a3f35d7d03eb7537855a610f44e9", 0x2b, 0x100000000, 0x0, 0x3, r3}, &(0x7f0000000440))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000480)=0x3) (async)
keyctl$join(0x1, &(0x7f00000004c0)={'syz', 0x0}) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000500)={0x7, 0x4}) (async)
r4 = openat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x10, 0x3}, 0x18)
ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000005c0)=""/105) (async)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000640)) (async)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000680)) (async)
ioctl$FIOCLEX(r2, 0x5451) (async)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000006c0)) (async)
fchdir(r2) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000700))
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000740)={0x53, 0x7, 0xf8fa, {0x8, 0x8}, {0x100, 0x3}, @ramp={0x8, 0x9, {0x8, 0xfffc, 0x2, 0x400}}}) (async)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000780)={0x1, 0x3, 0x1})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x22, 0x0)
ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000800))
mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, r5, 0x4) (async)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000840)=""/255, &(0x7f0000000940)=0xff) (async)
socket$inet_sctp(0x2, 0x5, 0x84)

2.933042084s ago: executing program 0 (id=1049):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x95)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0) (async)
r4 = signalfd4(r2, &(0x7f0000000040)={[0x80]}, 0x8, 0x80000)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x1b, 0xc, 0x19a, &(0x7f00000002c0)}) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt(r5, 0x3a0fd261, 0xa8, 0x0, 0x0) (async)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}, {&(0x7f0000000080)="583d4a1d85f130284b2ea7796e1d9e95e99d5bb313751ee2f1205fb1c4b6826d48193823813fe89ccac50e87fdb1a24e6e8bdee4ef7cb98c97d3bfb3769b0275175edb0f56f268e9d887c3f9b9d0ea6d2bfbd1c2f049840eca", 0x59}, {&(0x7f0000000240)="9a5ef39141e929a9816569e677a5059c03d42d0a3461ce753c1b374d5b83a9a302141a779be262697b5015dc8842edfc74eaf1582e6f871740f28f7fce764604698c39925936f52421bdfcef", 0x4c}], 0x3}, 0x4040044)

2.795931177s ago: executing program 0 (id=1050):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4)
r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
ioctl$LOOP_CLR_FD(r5, 0x4c01)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
move_pages(r7, 0x1, &(0x7f0000000000)=[&(0x7f000000b000/0x3000)=nil], 0x0, 0x0, 0x2)
r8 = socket$isdn(0x22, 0x3, 0x2)
setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000180)=0x3, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x1000000, r4}, 0x10)
listen(r0, 0x3)
mremap(&(0x7f0000588000/0x4000)=nil, 0x4000, 0x3000, 0xb, &(0x7f000078a000/0x3000)=nil)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

2.086101546s ago: executing program 3 (id=1055):
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000140)=0x4)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da20000b"])
write(r0, &(0x7f0000000040)="67caa8b719a89c3d67d42d6530c2d2bd5f423f461db846d9ab5d3e1bad55baa0fd7a6769219930b58a5987e77cf54563afb54dcd93db67f8e5f1c469431928cd5e76bdb6e8cde3c0ef8ecb937d0477404c1c09c6c49186dc7619f587f05a5863b9c572d49d446c9f2f3fff7919fcb2b2b1b75ed8addc734b6a56bdcd92f62f3eef31a82d2a70f47eefc19ebb7da8e3475f067fcdbd6f20ee290804a3c1f4d88d4ba4d9777d202e036e46a0c9b8d95c6c8c05253181", 0xb5)
r1 = socket(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000240)={0x1}) (async, rerun: 64)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (rerun: 64)

1.959880192s ago: executing program 2 (id=1056):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4$alg(r0, 0x0, 0x0, 0x800)
r3 = dup(r2)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3)
waitid$P_PIDFD(0x3, r3, &(0x7f0000000140), 0x20000000, &(0x7f0000001280))
recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0xffffff07, 0x400}, 0x10)
sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0x400c804, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvfrom$inet(r6, &(0x7f0000000040)=""/53, 0x35, 0x10002, 0x0, 0x0)

1.899426618s ago: executing program 0 (id=1057):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00')
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000000000000084000000020000000031c3"], 0x20, 0x4048800}, 0xc0) (async)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000000000000084000000020000000031c3"], 0x20, 0x4048800}, 0xc0)
chmod(&(0x7f0000000100)='./file0\x00', 0x38c) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x38c)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000007c623ec82a16f28bc92f8342000040c41090ea000000000001090224000100000000090400000103000000090000000001"], 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000007c623ec82a16f28bc92f8342000040c41090ea000000000001090224000100000000090400000103000000090000000001"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) (async)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa6, 0x7e, 0x6e, 0x10, 0x1660, 0x932, 0x996d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x70, 0xe, [{{0x9, 0x4, 0xd5, 0xd8, 0x0, 0x27, 0x25, 0xa0, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20010e000000ec7f789ab1495d39eb2096a9facba2927b853ccd2f0fb9c201d94e684d6945b555857648b856631acc137903694cbf7b6a085319c287550e40a3e5df7d083c68fa4a5c4bcfcbfbeb7e544fcf48fc88518ddcd4d5f56d9a0217a6b074d818b6f9738e1390700daaf81bbb2de734b53685e5e1dacaad0634d362257a8d77a4e4a14994e16b63edae9cf67095c4636b4e478b0ac83093b464452b335d2f9c018818a7aa17f3e907bc7a67aeb4ad5f8280e69d44b3e6d7039217e033c6e7ba179d3c60b85891197a9d23d3717ef9f94a1e3ec61458712a20bed1c7fb0b39d766dda3d47df9600a"], 0x0})
landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x3) (async)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x3)
landlock_restrict_self(0xffffffffffffffff, 0x1)
landlock_restrict_self(r4, 0x7)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0)
ftruncate(r5, 0x1)
renameat2(r5, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000002900)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x40c00)
r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000001c0)=0xd0)
syz_open_dev$cec(&(0x7f0000000380), 0x0, 0xbbec82) (async)
r8 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0xbbec82)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000080)=0xd0)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000000c0))
syz_usb_connect(0x7, 0x4f, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x15, 0xc9, 0x6, 0x40, 0xbfd, 0x5, 0x933a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0xff, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x0, 0x3, 0xe6, 0x28, 0x80, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x9, 0x4, "4299d83e091515"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x200, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x8}) (async)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x8})

1.794086635s ago: executing program 3 (id=1058):
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (async)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) (async)
chdir(&(0x7f0000002300)='./file0\x00') (async, rerun: 64)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) (rerun: 64)
mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000018, 0x0)
fgetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '/dev/input/event#\x00'}, &(0x7f00000001c0)=""/77, 0x4d) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) (async)
ioctl$EVIOCSFF(r0, 0x40304580, 0x0) (async, rerun: 32)
syz_usb_connect(0x0, 0x454, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x75, 0x90, 0x5a, 0xff, 0x421, 0x223, 0x9c6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x442, 0x1, 0x7, 0x7, 0x80, 0xb1, [{{0x9, 0x4, 0xf7, 0x1, 0xf, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x4, 0x6, 0x4}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x6, 0xf, "a8"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x3, 0x0, "ca6eddc1ee22"}]}], [{{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xe0, 0x7, 0x8, [@generic={0x50, 0x4, "541e52986e625f58a81423f1cb84aa5b4cfb2f452d17192621485639c7573f3029e6573400a571a97c2be7f9f32d4865d579ebeef1ae8ba0e910f5b1ba3bd3f0e7a5e703888c199a1eb2aca73c4b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x5}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x41, 0xf}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xfc, 0x4, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x9, 0x10, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x80}, @generic={0xbc, 0x21, "a8a5d63e4a86e6d4afdd1ad9f09e2a73d48ecbfb345dfe281a16e8a92393d01bd6a84b31efe9bb4894ff4aa86aa78c3b5890a31adb67bd674746c195ce72057084a2a03bf9802499b1132bd4f31b531cc94cc9791d5307959f53d26a59f3b82046da3e40c2a8d10a3839289d5e193b134f1a3d59475f7e6246e74df9ff683b8b8ba2742a5fe10e5e1b7e79a86e90161d9aac2b595c9e3e2e2ca9d4a992ed37e969051896b24af2ba5bc9b8e5a1433f73cd5d8d21ae5307125876"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xde, 0x7f, 0x7, [@generic={0x3c, 0x24, "3b2c8f9a33870528b64cc4784f878ab48c0ec6b87bbf4b169e035ed973f4426519d1b7c651cfd406c59dfd0026a880538971a0689fe2254faea6"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x3, 0x5c, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xf}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x1, 0x20}}, {{0x9, 0x5, 0xd, 0x2, 0x0, 0x84, 0x7, 0x9, [@generic={0xdd, 0xf, "41a0c2fea8586d5dcbd612b0909ee39fd526ff908be06532ceda9282a13ca146fcb3c9db53fd7b46bd443308b1db932cf2942ba6bbe42b83aa4360b2f8b6859ee63b6e81e6010e955fef50ce1cd6dde820f585a27b690529172f027d41d9e007ee0d7c901faad83144bd54a0bb41e543ae6566e7da15f28f198effc4f68adff4c6398da88e75285cf6945a9af665a79d6fe3877e4cc5cb9053f40e44a96351ebd7978490b3e54b50e4c946e7a6c0ce135dded2cd57d73425071c0bdca7f14050651a00695f34977ccc899c33c81cfa70924cf2eca7c85764e1ed5c"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x4, 0x0, 0x2, [@generic={0xcb, 0xd, "6947142783355ed52361b862d622e8f07d3ebf39a31694dd51c521ba2644f465b8263e37723f7ff348ac273f700f9d3a54ab74da6e9911e216664c9584178c928714227b79ec9493e2466fcdf7d5a342c157d204188eaafe98049cbbc1b84bee0c4b0287bcc98872da65d20a41aee24c6ffb35a9c0d4afbfcf927736bf666ba7a8cd995bbba8790ec7bd251eaf80c8e7929806e82c7ef0b1e71458fd98a17989626536ad58e6dcd4ebdc3706bde28e42ccae8c07389c0fd4183d99d75fab82c2a7f2d76d17bcb846c1"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x2, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xb2}]}}, {{0x9, 0x5, 0x3, 0x16, 0x5ce, 0xb, 0xf, 0xd, [@generic={0x68, 0x3, "68d6c20bdc0986c7a27c55bc672e4850e7cf13a4db8d525706616791d369db8df0ebd8adbc5913533f97a1e5d33083881041315c89af02bc4bd8357af26f1c833cf98bf0e64f34f2f241d0611033c19e1837ec239a00d7b3f5a9b8ece86f96603f4d56a3dd89"}]}}, {{0x9, 0x5, 0x3818453e49adfdcf, 0x1, 0x40, 0x5, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8, 0x8098}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x2, 0x8, 0x57}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x9e, 0x5, 0x9}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xca9f}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x9, 0x81, 0xc0, 0x20, 0xff}, 0x1e, &(0x7f0000000740)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x65, 0x0, 0x1, 0xf00, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xf, 0x1, 0x6}]}, 0x1, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2009}}]}) (rerun: 32)

1.711933616s ago: executing program 3 (id=1059):
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x208402, 0x0) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4004}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) (async)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09002bbd7000feffffff0a00000008000300", @ANYRES32=r2, @ANYBLOB="140050800500090002000000050005"], 0x3c}}, 0x0) (async)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r4, 0x400, 0x1) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRESDEC=0x0], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040) (async)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x404c892}, 0x800) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async)
ioctl(r6, 0x8b22, &(0x7f0000000040))
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00') (async)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getpeername(r7, &(0x7f00000000c0)=@nl=@unspec, &(0x7f0000000140)=0x80)

1.117653333s ago: executing program 2 (id=1060):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, <r3=>0x0})
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$P9_RLINK(r4, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x81, 0xfffffffb, 0x3})
ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={r3})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000540)={r3, 0x1, 0x3, 0x3, &(0x7f0000000500)=[{0x81, 0x7, 0x1}, {0xfff, 0x7, 0x1, 0xfff7}, {0x623a, 0x3, 0x65e0, 0x6}]})
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r6, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000000)

1.064648653s ago: executing program 2 (id=1061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200a0049dde90fe6c1b040303231310000000000000000004ec41bc7f6b21c9b130aa35d60184416524996687e4560e3f5425f3cb55f4e93798001cefba3a572693c9df8260b16f9b27688eabc4dd0376ef8048a836270742e31998c0485f655520927d2155b44acf939024e0000000000"], 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001640)={<r2=>0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xd6, 0x7}, &(0x7f0000000100)=0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000300)=[{0x74, 0xfe, 0x0, 0x4}, {0x6, 0x10, 0x0, 0xfff}]})
r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262<k\xa8\x88\x01\x00fhD\xe7\xb6\x17\x80\x95\xa8\x1e\t\xb01KB\xcb\x00\x1e\x7fE\x7f\x02\x00\x00\x00y<nGR\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"u\xf4>\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3)
fcntl$addseals(r3, 0x409, 0x12)
mmap(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r3, 0xdbb39000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001540)={r2, 0x6}, &(0x7f0000001700)=0x8)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a00)=""/4102, 0x1006}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003a40)=""/4104, 0x1008}, {&(0x7f00000015c0)=""/76, 0x4c}], 0x4}, 0x1801}], 0x1, 0x120, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780), &(0x7f00000017c0)={'L+', 0xffffffffffffffff}, 0x16, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000001c0)="768b8458d927857506084418aecce51615a46e5b34d491a15a77b1df3d996796d269d885e0d92b63c1498309c99ecdac538349e99ed1a8291b60bb39dc6a741984a859b94a66df76a3bef49dd01c80a509570fdde57904bff1b665e83b1b06eaff0144db07d242a8ae75fcfd16", 0x6d}, {&(0x7f0000000100)}, {&(0x7f0000000240)="5248232e73a5d3157f60ca20ece4ddf5f597b86aba8a8bb468f46c4232a4fdbeaf95014ca6746b585d120462ef8b9af08e39689c175b5195ef5cc24f55f80c8ebd0c4cab5817ea9097b096f546fc50146c2c88502fafdcff6af56c14ba53d69110d6544cbe17d091260b64ca6ef3516840a30c0c32f38c6db4073516c1fbdf5619c57d63d0eb1cd7b9b1be16ef8b91df2ff325673e3152509f58984a412154ab896c0cf41cb9668dc99cb60797747b67ad878d5b55dccebdddb9d75c74d1bdf8438c30812ee123cc39ce99c5b80bb45c", 0xd0}, {&(0x7f0000001440)="972a9a6af8e89761d68cdc96300c4cc8a54487aa0e8a84fab0484948880c48e37c6db3e4233ce0c61165d7ab2152c11e45e2c92b66d1580bcbce3b71928de7a0f51a7c9d612e1e561af65795c086180d0f187802d164abb1f5eca72463d63f710423571de6de92803bf552b51f1b1ff16435fbb133c739b0950af8983adce6fccab91caca014e030f071e443d29a24b5f6feaca3c75eaa41d0d84c0887ef8da2b2b29cb8fc794e5f298db5a2e143645723799078d3e3583d95173a0194d903465e1f120ef11fee954874a6bf6811ccf2deb213bf3dd5d5f9541a5c4fd8ca9c8ee101fe69e52ceb5a652ef966ba9ef9d48715e0b7", 0xf4}, {&(0x7f0000000340)="c2f3bd85c38ae7578e", 0x9}], 0x6)

447.931064ms ago: executing program 3 (id=1062):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000000)=ANY=[], 0x6)

446.468981ms ago: executing program 1 (id=1063):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0xc, 0x0, {0x6, 0x100000000000, 0x1, 0x0, 0x3, 0xfffffffffffffffe, 0xffffffff, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xfffff441, 0x4)

403.14217ms ago: executing program 3 (id=1064):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x5, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="571ec9a225fc4b5bee864466171599e5ee952253977b3bab5919e4598af24017324423fc63f84e67fb64a8301c6b7fe3eb0428688da45bf61780fb74236ea7ff96576351c121d5c4f579bdf9b5190e4d10887109d690a6a54a8b1d0118cbb677c15dc86d34f868ebe7c18e176bf75013fc1d1386787c93b857a9347ecbde63c4a407d282f59ed2ed4b7b92e32696564e48ec6e7dc65b48ea803b6fff6fc9bc5a462f4c7f3e295f6f5ee223b2099d45c2269357286b5218f10519dedc3bcf08f799e3b13632a94759bef41431d44166ecec39bfbf3adeaf928e1c846ad45dff19ee4c4049ca8d260fcdb58da0e422883198dc770361cee063f9946f1c544a3b64f7afe4abb4ab862046e1541e565ede1f33adf565c4a86b9101bf1744f69627d52a37865bcc1e52703807e92c7b7455f5bfec943010a2b412ad1fb9d3a112c79135768144e7447f0b954adef186988734497d474f11121c44135cacc431c9382656ff123d84e2361b22dd66557d9818df9c10f22c521dacf03a4213ff1d323193f99d1d47d696ce917856a0cf279351f13ea94b8eb5e1b754283b3a3b2ae5e5356cf3161cf28ea0620514d8fc37b50396a476338a8e4f435e04cf4fd88e4355f54457b64e14432ded38daa5d206b80decccb5783bfc6a2295dba9a51ec49c927cb46a96bf7afdda24de023339d65239c3e9a375e17ae1bc0765e28f354227eb69b5c489e5ade848c4b04e10b51248812557e7c849328c25da9a24c6213610b5ddd07231b2ed8d14125ec7e65581f70f70f9d81c60a76643d20b69bf49a6001f0315c5e6eddcadf8804847921955a912c402d88d3fdf9c28d16915fd8d3dd07cdf52121f6d4c5c6e0bca58c2c4dacaaf27bc7953aab9bf8d90340736f148beb04b23c00d5624a185a855e2722f6b9d161c972106aaeb328de51174cbc33dce93e748a2fa0cb08aa5adcee634ef543932f6beddfdecad9933ebed2316f1c8ed2dc4f36de36882f63a2b1f93e7bad0de56521358dd2ecba7fc84976d5971b06a7cb1f39f386dd9ce586d116e8ccbb41aeadb6923e75d1ac2e85a5f4e02a30392ad80f33622b30bda511bea889498d288e912fc0cecf538c6da4ede8e2b4b841a401a08081dfbf379e5e4ceaf559b639cfda1168f326b909c1fa32ee331bab28010febc3a22e7edcd7610879809a46b2f31b8e08cc847bcbc10f115b863e764900e0973e68442ea65bd6eb2bd3453ec1befaf8d4877e316b7ee6fcae19cb85b019fd95e42d41fc80b30c5981e33b1669db36f37b8f11df8d9b332c70eb51441332e4b921965edee6a3d222ff065525bc502dc6490f20b1fcccfb9097bab65b98c6088f6d01b81cfe3b455c854789389e0cdc9d5e69936862fe6756d339305ed027150ef30a0b3c5993874db373d8005015bbb5a3f2eed4e902381a84ba9b7b09a4f57ce7f3fdaebbb25ee6f384a3958062952f626c0b1024f3856eb396122dc277d2d69b25b013865b312288360320492060cd081431a65150fc08d73cd1937f519b20cad4fac696ac1fea5621c070deb44faa1311b9cc9aad5dbf317ce4bcb5798e67c6972762f0581c040256d752fe5b665f03b30b6ce103f579379de6a64a1f8bf22befa65702bc94d37b0361db06a7298b27ba37b860cdd3b2e5867d9b286a1c9341da5cdcaf15afc7a5a280bbd54f731232058448a163ca7382d7ea322d8a455ee84fd3e688dd79911cc3f853068b41c01497ad4415c74e95dfe45c0523a2bf08ae23dbed70bd73c58df62fea3031e0971f6db8ce5527e4ae8a7fa7b4e98e9a35d554bde78f43ef267dd3bfef0e3910e35cc6cec731ea612118529132786cb1cbfda8f43a73d7a58e9d3f43201327a908647e126a834ea4a8081f5119c8043faab08ee1de9be82202e193e823422d082d5f40a6a6f52c5214ca7051f9aba6b3731c4e527761ac6bf6487b0a0d3b46995f3695faa3c0a535f4f6c71f2906f00bf6e0e36232fb3f40e07e814420761430f4f542a8b0190cef830686be99ec1682ed2d4629149fc1d65d437fcd308e33e8155fd65628adbe270b5dd418d9ccc5d6a17a76243aa4785ee646c806abf1187329d666713f557fda27bae859a87cf42125fd66843e071210c0790b0ac5e06aa63a97b0036978b3e9e4b0ef3a432d14eb123d7e4caf62374ae3a4ef9564051754e344f606bab47ad486d1243f48b506b87de504d3bd028746e678a19b3f3f44fa003591015728eb2e88b7dd8e13472826ac126faa6c0e1a9c681bd01fa13f73c9e39d9f63dae0d3f2a6cd8d0ef1d84799e0215cef5259440345997e15e26c30c625ef276e777ae71b1f9c6aa8cc850e2d3484e6a9710ef1c7ce3b09e7584967cd140b2299c383f748181d5024c37201450bd9e0093f5c38e745a4d7078d4e2bb0a60ee702c3b1fd8107ca282c72aa1cabbebc87395670c9c23952253717253314ea6485e3053e99f186743d7e50bb7d1aaf098cbd83ebfa43453b2cb3504f968f48d0252ee50beac50646f6a6232ffcfdf804f49cb27f287b8f97319b1f8290272d17c1c6ee133caaddbb8f11b2ee5a663d2328ec9f982e1bf14ac98735d3f6c6dd059248f984511d16dad4b6bed1fe5da834018e8214aca0ac7ee7b7be4537cf4609db2dff83f2b926d7c385093fc9b9af385b86f32ecffa608a7d6c1d2ae92ae6b6f024214cba751b982aa09e5f1e0cc3cee351d24f2075b84edf8abbf42e1691a297513ccfa3a9dfdd9c13af6c89127da2fcf125bbb5fa39ac057366e07a3e944c7086fe5bbe4db1c606d0a32401aecce4516e64702de3d982d42567c9436bd254a72b09fbb6ceb8f0715e3e173129f5cdd6c8ee447f7a6017c85de474fc720fe1a23cd690db8d59dbe9b6af66c283bc8f0939beb6e23818761427346718025dce6b1d4a60a623d963a00b67d56941a1a34bfc6b567212f195c23b12db61743ca3a458320f6255c6d9a4720439f52cb43399d0500b95219621e59a97197828e568477af7460e91518bb93ad4d33049fcb4467a9036ded66e066d379a1084ad0e954f063b7df356db94b9c61113e3571ffb8abd36a893a0edcd3359efd3592e3264d03a8abd6da93d85dce2d1e41ada38f15cf35f476c1bc5bffd3d4323266ca01d06d7d209be6cc7b6baf74bae8a6a5ff13bd2e0326ef3d73fdbf93cd3fa279de442d8d95b8b3d70343b90ba75f687e0c8fe282a0bc374f9b2d7d997a5d445352867aa4cd59c8797b03c9bcfe5b9f84bffeae1990f88213220d366f4cb276892a391ccebac47ea0230a286d14112d6bed507b19e0422df75fe9ac7309afa43b62786512b054808972f0422e68fe6007db96138443c52b780e39cf4b1aab93dfcd9628edc3ad09b788cd808ba9417603dd9f4f9ea1fb18e289326d8bd74fa6d61be8b349dccd1ac91ed282025e486c1d02771de9e6989f491a51befaa07eab06cb234743187c5ba7bb273e23bde30f16243e3625f276e1a28154d9b3809b360d4042f5c8741f082e38944f67d0cecc5a4fba409f6a2042ee73512c82224d9611150155d1faaa78a9c01e06a485ad0cdf671462527f9d1337c5fcee784e88c883a882a2af7dda5935285d6873620b851f832198d5602dfc6339d23a37c4a145e34cc86e94d474d39e73901869b0679e45cf402063d1990117cd6660a5024bce52b660001ad54c2ebdff75cd8de61c4f0118ce074a5aa7fa8206f7ce897e301f5e22ff637c92fb9ac836a9a3c6b842e75cd06031145ce62e9118cb40c7fd2a6753e98f73f5a90338ae1c89e8ebe16b6ac10adaae68b0fefc34264183b0b9768b365748fb3ee00bf50ce461710299f24aef3f682848fd6a95bdc514d1b0bb3f71659a9beeaa85db8cf95d150226e7843a0252a8ecf8356285e9950c0df16f1b9eb6af401df77f9f8dfb3910b33ec058be95c9c0d4c05a34b8547cf6bc04d91791322d6abc0e295a30eb9594290dbafb2c589877b797253e96b534fc319aa6c8d687eff19fb97046f978cfe947f5206a4744f609f671bbc4b2479c3324e5a952e07d8afdceb51b8471055a877207046bcadbe298e2a0d60c9cc9eb7c0f47ea2b70a1879373d4a323217685cfb4cde41db5df5dd118f474140ebdd66d19f0792ecc1195ed2fecd8da87529b413954d82a9555a364a85438d7fb9898c9fcf29a86a6cd3a6fed5fbd31886f256870ecaf197e67cc6acc3f030b830445b4ad8bae2dd218856856ecf507211d8a46a07af231424f05e93a8fa69dbe152bcba0d9768e5b56ea05f1c8c6502ba4bc180e6c39dc38a02ecc2a03901ee9a74cf80a53bd6b5e89b91103ed3db5dc747cbb197ae7e92eb5706490af840afcb23f6e47a9a8f0096c9a8d3f2cb62e6dcf49846302697323264130900ad9b2346dcafc6b6942b77b5c464cdaf11c336d7265a3d8a993b5324791ec4f4e532fbc36014800c090ccee725e8547607b3042c42653ef7153704af4c32069d301a0875b48c007786f290001a7cb66ec6848b3824eeed6c95717749b51b5500086daf155b8fce63c9fa77c4cb5a37f7ea16694fb0e6656e30ee988bf9b41b94807b8b38e67f3f1ee1dce78a16630e65f3a9ed3baade97a65ce958aa279b77cb2d2249839e9ca0e9da459842cde79dfe493df4cda9e14b68245e04f6531996ea2c7c38452e640c8c7e3c51390e82a0b0a0e852ace09befba446075b9ef1e2590157d273a2884d6cd4ba594ec8515e0e158b10045ac741942f2ee2f35b158686758f3c1802db5775d31e072ad2665e2710aa66ae6e7d7d3a2bc2004d451c1a0d3525d588ea6822a8b2c124e760b24efb78a8831a51ca2b56babcbc2487e9161c6d9e11e576c158ee963a29f73ae562d9da19fa18564490b527e3b66ef70b9e3d21b01b8f50b672d37f1c3895fe98206b6c85f7df4bdc2a03eaa769835fe49844568a3d307f771dae410f7f8b10520f155d6b282e395d1cc1d60bd2add6737f245b73495caa27c7d9f4949aa62090a9a4548d5a76347a221fe7c73aae279087cd18bb8f78e5a39b065009ecad89d51ef82cd44f32a9bb572d77e1612de0fab5690e1592897082b64aa9d2181fe10648ce4f0879f0fee929c75e06fca854b28ceeb4b349262f25681b0bbd8939dd61074f4cc5bbe0d41beac3afaf57a7599f9062b72e940efb6788d0f897208a065720074aeb024904a5829c909befd957c443fd7f83a4365ac012d5feabc529bf152942d39b0be12ffa245b57095d4f396b756db28d4e68e253b0faf7de5e13b444e68f5a551e8df4f38e1b67344e8026ebe86ebe9b412ee194dceb94b696dce1e42cf8bf87cd0257d2678e01b15a734e30bce316fdf38377f9649430000cd455a2d96b8da327ccaa98fd91310b0836f8d6e0a92a2e7faf2f30615ebf8f448664cb10056e7e508a864bfa7f143a91ab49ca8f67ffe488dd9a9dad454a4659029310e114a4ade94c3759fd1c183e5cbb989883fba174a0b3d9c9f7c76cb78b2887cd917082940024c543dbea60eb0cef6a77d0aa16104a0dc615e3b1a674c2e78f83aa9a713d596217b9622c17fff3bf7ce9b1215f1d5ea5d251115656e9eab72bb6d258899087fefd9c544104e19e213e469b9ed10fb30ebc8670f8795e3430b697928617193bbde55f8edcbcf82ca42fcf521bb530dd08f5179c41dd8b1caf3374e6601642b693f90ceb97a750db1dc6f7019a96d06c43c3afc1fdc82aa99558b10a96fc111649c707af8c77e76e04dff3e0fb1ca83277821d6c7dad69a107ce18414d2f220ecb8c5a334b062912a46bfc0f6690acafcf02a4f93b8f93c5a1fe58dfedd32813c13bb65f83511df4307512353c88ee099373ff33f1b0b3e57c4b413dd788fbebd42dfce8df8fa666b2b90e9aaa2c120ce5c8604a2cf44c9995c58970fc7e6643f3c81d425b9308a1a2e245edb9b003c6cae4ce040bfe2f1ed4c5c4b8002ad80d5d8efc19705d53923e6ab7a5870bd2b6b72465b75ffe8d1a7c824596e8648cef8829a64a1fa7d0068dcf46fa4ab4ac2736246e308674dc8232fb50d79d06b87ae1ae77b32cddcc657473767266e4bb7811530ce2e9426c799b33ef3ad436a2b29b3ee80b1807267ae200ce1ebd234b79f89c7801a66bd6fa2349c5823a503a36276b1138d3b2fceac7f3b68700e97151ef5f6945c8029c05f48898f5ceee5dae06a26932fbedea0713d2ba3bf6eac6ab8abb9f4b8f845ef249d24f7ec3e0afbab42c719064fcb8e9de522ceb680607ab1a048f5ba86ed32dcb7eca1409287c9c9331c2e05e6685f8e36054f070e00643dd9175638da1ed0a35b3c45992669950fe24e1ea1c4a5bebb76d49bf5974ca8be72686c38627e87c190bfc28271b0bf77bfbff50184b0b7d84f452f0adf8ae9ab69e0d58f1936ab895117ae16b880e0e3ff0869a4785679cfe1cac7236ba655d4c33bfce0a15c784902a45cefcf76bb976ada84de6cbe18db8e1ce8e0ce3eab16e22aee184763b57307a935436d65e085f582a54be9e977a2af29be1386a2d422c3e0752155ecfab1d3cda179d439f044bfc4a00ec18debacbeb8a328c9f5ba172b66367fb26967f5fc5dd513808001073926a2cc277f363d23cb24a9a6b12273cd199ef3dce9ec0b8f794791a8a15d2377438da62d1807798c78d31a4b6d84b9f372bfe70f22c27f63c4041c398f3c87e93f0f9b5ab951d8048e801e280702dc3fd57d29ad030d736f8aa2047555f9fb9e40e66522c8e9b3528a6a6553a28f1bfdc452c4465e5a0420d644e6e133ba263d4e068ebf9340c9bdbfe33926e4fd9f30df4919977a43c61c2d4ad9c0fc8c2ec494c2f2b5da806ee48d0cddacfad22dedc65084c74e65e10fe77b7f399d372db156ccd88557cc9267774de09e2fe952ccd88b0c89a20ca767bc938e8f0e40ff0a4f2332fe2c3431e93af40fb58bcb15857de3443599279eebb265e682e51f7df5bc17b6e22a079802ee39a748482f9aceb941197997216ac97bfed9ad4a13a924d0a6ca139b865b36f7e95638cdc0432a0ba00ddffd6740031bc5c1f0265dfee086926eb5af940fab178372c8a447e841ede807d149edeefcfc6abe1923b255a358dbbcf53ba0e2963e412274f017aa4483fb6d4265a5919ff3cb0cfd1d7bb2282bda393ca5ec80197fed42f75561933d8386e09d80369c05f34919a2bbe4dfdd4f811dcf4625baaaa822e22679aafe9720cd25713dac112ea71f8e8e6c6291ddd2c7e5357f16a5263ee24b0a2338a10e86e5d61f30d12daa159df6618f13e86b368d03630361fe623ed00f34e4d3142b072fd49f767546e6462ab376712325e00a4c4ff24e74b5bbd4a324252e0c0198e3c46f2aa79d1f313821a71d38de151d74052af2f149c094878f758c817ce799aa020cb70e5d5a28d871bd8039027017da1a619bbb9a2608b6348fb7aa3d795516f654c82da5905d702b03f2d9ab810ee4aa1f77077701ba2196117f4b978f7f324cb896d147205bedcff9d3c2139efdd23a188559ef321a630e167a71d76f24d812d96bff1550441d9c26d223ed5ad24d1ed1a9ff684b2a86016110b59824b54a793e20ccc995454cbca8482065494f8d85effe6ae10eab990c63210d78606620a71e439f83478b6b25d38ec44965ff1515a569600a8edd9d5eb4eb5f1e54c7b440247da6c98e1bbd08a0fbb11397b8fe09e5bf1fd559c3e313d7ae58af00ec408f139e682f849d2743dcc16c5bbd6855cc59b6f74a04867f18cfd7069baafda8809edd0f98a17d28161e83cd707726bcdcf038fb4036951ce837494b4e87edfb1e400ac35a85d87e9cb774d71833357cdde88ecfb5a87e9727735c22646a4a4ffe23a69862307db8fb435b92e4cc60160c60442d3c7e28353408b7a4154daa9de01a05fca9f24de0350e3cc860b7e5c746d889000eb067c78054cb1a1c2f48ca44f02b87ee553785441a94d30b4b7d81077e79c1af6fc3867f31986fcab9dd4afad855a40c810276a5f9809ccfa08c3069e3b4201facb778be1d28f05786f98605b325a00c007226a6f170d03eeb9448c20f7a935174364eaf2f1aa6bfaac876238b235b30f400d361a23410fa8ce3a425c492a50d55b37f724dfffa1d6a444e2bdb8a8824e41a24757a4efaeef6d18aabe3924efe0ad05d374af366e1ab8e56917c66ae32267ccfd06ea87c713e923a4b108e7f79065a7ba2c1e580e8a11709ebf8901beef6d0a03e34ac2a4781ee4f7af114e068f6c80d2e77d4d87a8e666222c37e9187555699f2c431ba142d17b4ff7bd5a012a2a8727ffca87a41c5deec1c0ef62ea05c3092db832e669b1b03f2d9cbf792899886cd96b3562c528a7dca39ae5fb0e1fb4d93705303bbfeb88c0763702234d626f4108d107b57fbe488af19d5d2d97063ba439f8041164b29c41867bfa28deb26868397c7a71904e4361d76f2dc343896b0f2e6f75f8fefff285e6611f61459dc9d1d4682bfbc7150bd9ab2696415ec98b0e952f10249600c7f59f3953b8516f27168d960d95d4fa6ab21af298a6bcd19c7e8fe32fc070e9a99983c408c4bf8061990978ec7577d5d7f214dd978be04063d9e58642e314e40f6d35392ffea207575f960054b37c5352a6ede47f0bd91e62ede2bb245454f913b33625bbebed81c723ec13c1f7041f22835f50a3f2025fb214539f4c3b0ad7742acd49adebbc71ee3580637a592d0d56b0226806469d307417210f2464ae8b2907a2a8dcb8c2f0a30819c27f718f999466c21696ccc271407291ec9d8dc1fe1abcf7792e5e189e83b3aa85aaa5d3593f41908833780e322abca9e2c9ab25472653d9be0b47b93fc2d30348f571a39bd3a1336bbc5f2955c433306c72f7f5d0d91277e769973b2a4017ef67be169c06982850d294547859929186a4a310848d3ff7d3129ccebd00358671808d9bba1d710bd135f9bcd4ff8e98b32db9fb1d46101a4f5d08e8603b785afec486e4b9b829f22aede2b14ce4a99eb73bef03a3e96cfd6527086feb8623366191f1936f0ddf7dcafd8f9f0e554ec42ad79b880aee43c73568389b8268066c4071f75ac61c4712ea574b6cda2a7cf219cb251ed14bf24d6033b70dd609b147fe9e5cac0c94f24c33da92f52e185a42345cde21b46114e45e7f7197f7ecf968715b7441aa1eecdc7de6dc1863dca7b06cdd6b145784986cde50015c12969e0428df458ed4cc24caeebeb919676e18f9d93384b45d2c5c49d8358f09c19896cd043822f1b53e5acbafd514009e77cf7a10f47923c939471ea34bfb7306e1c1cb0d0115335ec7ef166600d6df58291064f6e6798c9aada2586df0973e5a9dd16200de288011281fbc41e59f67b2ec4a0d8a0fe91ce481aec82c7ea6332174fb3635c4d0c3fe0e9b87effecdc5408705b2199152617d18a66241d3c14f1f6fee583c164c125ee2e057a5cdf418dbe641ecf283540b3fd6897c4b1955ee73318912f26d7fa27224f2e031df3f902b39f7930223f3b1a620482871efc57f76f53c4656f654e341d7e47434027174f6a9004c07be977e191e49ba262bd2988a52112813e6369922ad34bad5e5979e8c86aebf134d43f41afdd4c773cb767c0a0b7632bc59a4134df1921e606f02527b020b27baa1c5e3efd0fa5145dd332d9f212b79ffba9a4c7c087bd8a6d7c409a5319e6baed7ad3a7b851bc8d571478f1e1afd13adeb571c286e4fd6c42950c0931fd001cf72d61e51eb3a96a4aa7ddb91f3033a75492685227da9ff9bc1d21f8cb30581dbd8d455513d056f998ccc8bc6760e7633a62c0c7eee2478983a8f954eae07a185f61269596ffc2fb5adb55454544140b178670ec469c9b46a2dcba2d21cd0404de271228cde2158073a4f2a174e705924f4b662be859d1325008ed4d4c5ba661ef17e5ed1849e19dc6c9df4dcfd1541beff195d9b603034127297acc306442af3390408e514fb94ee8cf26ea83dcead5e70f950890c4a08a105c0a594654eab8f9b7a597462d6f19ed207f93e746a7c832ee36f02dcad783821f6970946d297566bcff1d015755a28a833d6a04435c64af36581079f500a878f8baffe3714d64731a0b54884b7280b533212592aecd43af1648c5cabb7ea6cb8ab1b53606d132eee6defbf6a9c4d4a9634d9004e7f1383f00b331c41546c6f6f6b25b4d6db055cac33c7ba214791692f79ea321f110880ae762492792c3d14551568419e62cb4f9a954c8f7232f5331160ec16cd5205051ea66f3028651156d5ff90b21c0189eb7655337a65e8dee7e64fae43c31df77c6a04dd40b2dc43e6d08579da1eea08c4130b593424dd7b4e67600ade4d19379872dc772cd7f52d742d1c1da79fd0d1d051219f70d134bbf86785379ad1aca4a1e37ebb3059d60bf30f47fda33fc1723a1aadfc8e4b97d3a30aba80e91a6fe67d8d04f19f05cf4a3fc047bf5d4e0449138ee7807fdc67c3d5fe0c96ba7469d02feb45eea6dba318970da5ae156451a77600d4535c57fdfcc89fe54a3d7eda6ccec93be9f83a4243240e9fd90a9eb92eea302b87b8380a2addb6ff893fb1ea88f0b4c95b3509f70bbbbaf00d090221e07b56cdc70fcd10d0e79131a65b44d8d715751fb7ca3972cdb60530eda01c4f2ddeda73f8ac3697ff9d2360c507c19334301783d4229fde8019777c9e5d4b64a3ed8fd45e4d3de292f19c25d9ce1c5f9b802c21cfc2fdd948a919093226af8d671a099568554e30fc67c458336c18f8f5c587b3e0250ee55abc873b59fc5537ca9620425040ce72b377910423fbb88180715478485cbe80a9463bb77d872e45621f8295e9069b9abed6322eeffd2bfb62b90ddf718cc9e408c896a3a1fb0820f86caa45b9507dcc41ea9e07e4237fe0d5d5596fd6300ad0361dbf36ee910f1530d89dbb0bff6d946beb57e5401e3f65042250b13327084291b96966fdc1538831b9916912e0ed31035eeecc4937f5d75cd1dfe22a73c6b87c8893ad8407c85807c68265df226686bc63ebde313b1f2fd21eea0d903901a2066e0948159ce2c6f0e163df3df5693047b09261afbe6e53e55164b367d7797af6e70604677730e7ae351579b142f4f30c5a0a06200079b59386c079c590bb5f86d167540a506da1e46c1aba2e450deccd400c357e1c194cb4359bfd83031c125984fc0adf42e5c046937cadad6c3a3ace11a64596caa166ded5fbf9c1c1fbc80febf350d68fcefdccb3daac4f42c184dc6f4dcd3e72a7adc1dcea6575132788c051329caa24e4f21bef8255fd22c7de7441d840200900f593bddc8f5b11cfb7d42c3217428f228978920ad0310f8ecc188fc5ff20722b24b81dfe7f10ee8406c811049ce2ad899c4d5ca6333f8271c3801b6eddea02e23527d0016c5d1964aaabcb03c5e9cff44d1a024a71c6c9442b80bd6d9388c7876ab7a4abbf1547ed75eb01a1a06ab2e04ecf3c1f2bc335e74a628818ad5fac4f08fd2455cd43ebb4c2a9128af7a63c4fa6936df9b926fb28bafdaa322d5bcce3a2d2fbefeeddcd248e0644bdaa93ca81bd3a430afa4bc0e5ae03f5aad6d8fba1814173b54b6faa4683e3e71bd96c45580880e86a644f0ff1f830d34427bcee88c4c2", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0xb0, 0x0, 0x0, [{{0x1, 0x1, 0x0, 0x0, 0x2938, 0x2, {0x6, 0xfffffffffffffff9, 0x617, 0xc, 0x0, 0x80000001, 0x9, 0x9, 0x5, 0x3000, 0xb3b4, 0x0, 0x0, 0xf, 0x5}}, {0x2, 0x9, 0x1, 0x1, '#'}}]}, 0x0, 0x0, 0x0})
lsetxattr$security_capability(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000580)=@v3={0x3000000, [{0x0, 0x6}, {0x8001, 0x1}]}, 0x18, 0x1)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fdf7000000000000000000000888ede8b12803d883ba9a9f9da9f3bce52362db13a54e8c7365b45a00b64670800000000000000678ae86418413b292133e2857c81ab691d48438afed16cb0dc2b0377d0ad3e2d1418de4996d50c55ff2f2c83fd3f4a3ba042f2c2fa55f6bf78f77d81d5dfa55fbd8e8d19ca31b1b08b681b29cc12a47907242908e67875c201953716ece5b58460eafb62009d1ca0078a1a61ff996906e1ec56e2ea79ed0ba3d873116f6b833432b507bfe9438bc3b06e308c516c92a592488deedbdef2ecfd3dba8da0bccf7750ab6cf8d4aa53d3184ed0767d7419191c7b32a0a049ea8eae9546692d252a6e"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bind$rxrpc(r3, &(0x7f0000000480)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x69, @loopback, 0x3}}, 0x24)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0)
setreuid(0x0, 0xee00)
ioctl$COMEDI_BUFCONFIG(r8, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10, 0x2})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083200fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r9, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000040)={0x20, 0x5, 0x10, {0x10, 0xe, "c61e905e45c2797d271722e5beb6"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000440)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x0, 0x94, {0x92, "11efc6c79e42c776dd998bbc2df102b88f5d7fb6e5ccbf6acb5f7a8cc3188c503d442324bd56e674602f3a6ebabb362c6d6abbc82387bc702234d16f157e082a9274f589d6cd05330d80b44f41bf7106dcbbb89f3a08d6707d42ffda20edd9278eaa585bd49a7f9bfd617b18bd3ff1967af747341ef3ec7eccba339bb6ad4467ffb5457a503543b47264c12c5ae8c35cb74b"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x40}})

198.05582ms ago: executing program 2 (id=1065):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 64)
socket$nl_audit(0x10, 0x3, 0x9)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=<r5=>0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=<r6=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"0284d6b32c843b447487b8e9631e0978", r5, r6, {0x80000000, 0x3d}, {0x6, 0x8}, 0x0, [0x5, 0x4, 0xfffffffffffffff7, 0x2, 0x6, 0x1, 0x3, 0x8, 0xf4, 0x7fffffffffffffff, 0x4, 0x8, 0x0, 0x7, 0x3, 0x3]})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000740)=ANY=[@ANYBLOB="563f00001800599c6d0e0000ded650492d"], 0xfe33) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r11=>0x0}) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)={0xffffffffffffffde, r13, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x0, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="b2c340a81f8bf9be427b799a08e273ddfd8d7c4d377ee6d10264ce2aedb12687a21115f9499095c52f3b6c26dac54940d8fb605867bbb65f99e4e0e5c5b70feaffe3d3791f2890024f69b204c52f0c86c7432532fc579e05b776daec367b44650e52911a739caaba13e1d40b0be2d9ad0ebab8add8ea7bf419d7abf41b2727c068dc8cd6fc00f8dfd5cdfc2f3e135a028819d802", @ANYRES16=r8, @ANYBLOB="100028bd7000fbdbdf256c00000008000300", @ANYRES32=r11, @ANYBLOB="0c00990006000000130000000800a0000600000008009f00000000000800270003000000080022013c0300000800a000a90e0000"], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8051) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'xfrm0\x00', 0x2}, 0x18) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9e0000000300000008000000afa99844fe6084d8a0c81f4d520ce8625869b995efe343b4652473903d1ccab209e72870a5c80a5c406fcd433db04ddb071dabe2b2b3397f742044a0a2538831a998f4d76b98a1695b8d538f0b18a72baf507bff700215f42441f6d79df5aa64a8f345d986cb7671cfdf67b25c659257d6adbe030f8c7df0df41c8f73cfbf17e034a824e4b454337104bf7ccae3fd1ae0217f833b2f96b58ad0000000000"])
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

71.761083ms ago: executing program 2 (id=1066):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)

0s ago: executing program 2 (id=1067):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x8000000) (async)
unshare(0x8000000)
mq_open(&(0x7f00000000c0)='${$\x00', 0x40, 0x0, 0x0) (async)
r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x40, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x80, 0x5, 0x1}]})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xa) (async)
socket$netlink(0x10, 0x3, 0xa)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="40540100000024"], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x90) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000008180)='./file0\x00', &(0x7f0000000100), 0x20009c, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x410040, 0x90, 0x2}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x80003, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4})
open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

: -61
[  212.293096][ T6543] asix 3-1:0.188: probe with driver asix failed with error -61
[  212.334609][   T24] usb 2-1: USB disconnect, device number 70
[  212.352815][ T5923] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  212.511928][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  212.519163][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.531464][ T5923] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  212.541550][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.550195][ T5923] usb 4-1: Product: syz
[  212.554478][ T5923] usb 4-1: Manufacturer: syz
[  212.559083][ T5923] usb 4-1: SerialNumber: syz
[  212.565415][ T5923] usb 4-1: config 0 descriptor??
[  212.780299][ T5923] usb 4-1: probing VID:PID(0424:012C)   
[  212.795776][ T5923] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  212.803922][ T5923] vub300 4-1:0.0: probe with driver vub300 failed with error -22
[  212.816294][ T5923] usb 4-1: USB disconnect, device number 76
[  212.893860][ T8055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  213.142085][ T5894] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  213.301965][ T5894] usb 2-1: Using ep0 maxpacket: 16
[  213.309519][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short
[  213.318951][ T5894] usb 2-1: config 2 has an invalid interface number: 206 but max is 2
[  213.327308][ T5894] usb 2-1: config 2 has an invalid interface number: 230 but max is 2
[  213.335969][ T5894] usb 2-1: config 2 has no interface number 0
[  213.342281][ T5894] usb 2-1: config 2 has no interface number 1
[  213.348610][ T5894] usb 2-1: config 2 interface 206 has no altsetting 0
[  213.355653][ T5894] usb 2-1: config 2 interface 2 has no altsetting 0
[  213.362666][ T5894] usb 2-1: config 2 interface 230 has no altsetting 0
[  213.372877][ T5894] usb 2-1: New USB device found, idVendor=413c, idProduct=8171, bcdDevice=c9.9c
[  213.382205][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.390274][ T5894] usb 2-1: Product: syz
[  213.394550][ T5894] usb 2-1: Manufacturer: syz
[  213.400807][ T5894] usb 2-1: SerialNumber: syz
[  213.466106][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'.
[  213.633300][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.645518][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.670957][ T5894] usb 2-1: selecting invalid altsetting 0
[  213.677821][ T5894] usb 2-1: Could not set interface, error -22
[  213.695414][ T5894] usb 2-1: USB disconnect, device number 71
[  214.271991][ T5894] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  214.427861][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.445128][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.457358][ T5894] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  214.461284][ T8084] tmpfs: Bad value for 'mpol'
[  214.487238][ T5894] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  214.501867][ T5894] usb 4-1: Manufacturer: syz
[  214.532535][ T5894] usb 4-1: config 0 descriptor??
[  214.761912][ T8092] can0: slcan on ptm1.
[  214.785617][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.809179][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.819478][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.833682][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.849578][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.867453][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.882450][ T5894] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  214.906673][ T5894] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  214.907057][ T8100] netlink: 324 bytes leftover after parsing attributes in process `syz.0.687'.
[  214.979052][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'.
[  215.038404][ T6543] usb 3-1: USB disconnect, device number 60
[  215.348629][ T8078] can0 (unregistered): slcan off ptm1.
[  215.374763][ T5894] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device
[  215.392936][ T5894] pyra 0003:1E7D:2CF6.0010: couldn't install mouse
[  215.414510][ T5894] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -71
[  215.431995][    T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  215.452149][ T5894] usb 4-1: USB disconnect, device number 77
[  215.537866][ T8122] fido_id[8122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  215.593466][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  215.607522][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.619821][    T9] usb 2-1: config 0 descriptor??
[  215.630072][    T9] pwc: Creative Labs Webcam Pro Ex detected.
[  216.075885][ T1319] Bluetooth: (null): Too short H5 packet
[  216.094399][ T1319] Bluetooth: (null): Invalid header checksum
[  216.194639][   T13] Bluetooth: (null): Invalid header checksum
[  216.312952][   T13] Bluetooth: (null): Too short H5 packet
[  216.318712][   T13] Bluetooth: (null): Invalid header checksum
[  216.336845][    T9] pwc: recv_control_msg error -71 req 02 val 2b00
[  216.344185][    T9] pwc: recv_control_msg error -71 req 02 val 2700
[  216.351269][    T9] pwc: recv_control_msg error -71 req 04 val 1600
[  216.358735][    T9] pwc: recv_control_msg error -71 req 02 val 2c00
[  216.365316][ T6543] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  216.373315][    T9] pwc: recv_control_msg error -71 req 04 val 1000
[  216.380119][    T9] pwc: recv_control_msg error -71 req 04 val 1300
[  216.387405][    T9] pwc: recv_control_msg error -71 req 04 val 1400
[  216.394548][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  216.401912][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  216.408849][    T9] pwc: recv_control_msg error -71 req 06 val 0600
[  216.415971][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  216.422932][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  216.429720][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  216.433825][ T1319] Bluetooth: (null): Invalid header checksum
[  216.436961][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  216.449035][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  216.456205][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  216.463344][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  216.470230][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  216.477997][    T9] pwc: Registered as video103.
[  216.486576][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16
[  216.512503][    T9] usb 2-1: USB disconnect, device number 72
[  216.532995][ T6543] usb 3-1: Using ep0 maxpacket: 16
[  216.533671][ T3460] Bluetooth: (null): Invalid header checksum
[  216.556219][ T6543] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  216.582788][ T6543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.595702][ T6543] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.608151][ T6543] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.617841][ T6543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.627083][ T6543] usb 3-1: Product: syz
[  216.631248][ T6543] usb 3-1: Manufacturer: syz
[  216.635914][ T6543] usb 3-1: SerialNumber: syz
[  216.642349][ T1319] Bluetooth: (null): Invalid header checksum
[  216.752396][ T3460] Bluetooth: (null): Invalid header checksum
[  217.067973][ T6543] usb 3-1: 0:2 : does not exist
[  217.172119][    T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  217.341895][    T9] usb 4-1: Using ep0 maxpacket: 8
[  217.348616][    T9] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00
[  217.358054][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.369172][    T9] usb 4-1: config 0 descriptor??
[  217.378495][    T9] usblcd 4-1:0.0: Could not find both bulk-in and bulk-out endpoints
[  217.477589][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.489535][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.585843][    T9] usb 4-1: USB disconnect, device number 78
[  217.903656][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.912998][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.031998][ T5894] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  218.195906][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short
[  218.205420][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -71
[  218.213451][ T5894] usb 2-1: can't read configurations, error -71
[  218.401960][    T9] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  218.512834][ T8186] cgroup: Invalid name
[  218.573963][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.584339][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  218.597416][    T9] usb 4-1: New USB device found, idVendor=146b, idProduct=0920, bcdDevice= 0.00
[  218.606796][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.617412][    T9] usb 4-1: config 0 descriptor??
[  218.627466][    T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  218.878711][ T8192] netlink: 'syz.1.710': attribute type 27 has an invalid length.
[  218.886992][ T8192] netlink: 164 bytes leftover after parsing attributes in process `syz.1.710'.
[  219.244618][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.272267][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.284052][ T6543] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  219.346558][ T6543] usb 3-1: USB disconnect, device number 61
[  219.389800][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.772928][ T6543] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  219.831934][ T5919] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  219.924778][ T6543] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  219.933906][ T6543] usb 2-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0
[  219.942432][ T6543] usb 2-1: Product: syz
[  219.948648][ T6543] usb 2-1: config 0 descriptor??
[  219.955807][ T6543] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  219.964487][ T6543] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  219.987615][ T5919] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  219.997065][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.005167][ T5919] usb 3-1: Product: syz
[  220.009579][ T5919] usb 3-1: Manufacturer: syz
[  220.014487][ T5919] usb 3-1: SerialNumber: syz
[  220.021210][ T5919] usb 3-1: config 0 descriptor??
[  220.031101][ T5919] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  220.157909][ T5935] usb 2-1: USB disconnect, device number 75
[  220.165608][ T5935] ftdi_sio 2-1:0.0: device disconnected
[  220.702021][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'.
[  221.061996][ T7945] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  221.158921][ T5935] usb 4-1: USB disconnect, device number 79
[  221.213670][ T7945] usb 2-1: not running at top speed; connect to a high speed hub
[  221.223421][ T7945] usb 2-1: config 129 has an invalid descriptor of length 227, skipping remainder of the config
[  221.240105][ T7945] usb 2-1: config 129 has 1 interface, different from the descriptor's value: 2
[  221.249328][ T7945] usb 2-1: config 129 interface 0 has no altsetting 0
[  221.258407][ T7945] usb 2-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af
[  221.267762][ T7945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.277250][ T7945] usb 2-1: Product: syz
[  221.281473][ T7945] usb 2-1: Manufacturer: syz
[  221.286296][ T7945] usb 2-1: SerialNumber: syz
[  221.507456][ T7945] gspca_main: sunplus-2.14.0 probing 08ca:2022
[  221.515035][ T7945] gspca_sunplus: reg_r err -71
[  221.519971][ T7945] sunplus 2-1:129.0: probe with driver sunplus failed with error -71
[  221.533970][ T7945] usb 2-1: USB disconnect, device number 76
[  221.572383][ T5935] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  221.721887][ T5935] usb 4-1: Using ep0 maxpacket: 32
[  221.728774][ T5935] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  221.738240][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.749034][ T5935] usb 4-1: config 0 descriptor??
[  221.759335][ T5935] gspca_main: sunplus-2.14.0 probing 041e:400b
[  222.209087][ T5935] gspca_sunplus: reg_r err -71
[  222.215941][ T5935] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  222.263000][ T5935] usb 4-1: USB disconnect, device number 80
[  222.771987][ T5894] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  222.922689][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  222.929391][ T5894] usb 4-1: config 0 has an invalid interface number: 53 but max is 0
[  222.938566][ T5894] usb 4-1: config 0 has no interface number 0
[  222.945070][ T5894] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  222.954445][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.966787][ T5894] usb 4-1: config 0 descriptor??
[  223.177747][ T5935] usb 4-1: USB disconnect, device number 81
[  223.381881][ T7945] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  223.534029][ T7945] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  223.545272][ T7945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  223.558537][ T7945] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  223.567649][ T7945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.579295][ T7945] usb 2-1: config 0 descriptor??
[  223.647481][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'.
[  223.661326][ T5919] gspca_stk1135: reg_w 0x19 err -71
[  223.670915][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.679582][ T5919] gspca_stk1135: Sensor write failed
[  223.685982][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.692445][ T5919] gspca_stk1135: Sensor write failed
[  223.697901][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.706739][ T5919] gspca_stk1135: Sensor read failed
[  223.712277][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.729260][ T5919] gspca_stk1135: Sensor read failed
[  223.734596][ T5919] gspca_stk1135: Detected sensor type unknown (0x0)
[  223.741359][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.748335][ T5919] gspca_stk1135: Sensor read failed
[  223.754006][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.762674][ T5919] gspca_stk1135: Sensor read failed
[  223.769414][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.775888][ T5919] gspca_stk1135: Sensor write failed
[  223.781378][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  223.791055][ T5919] gspca_stk1135: Sensor write failed
[  223.798174][ T5919] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  223.814726][ T5919] usb 3-1: USB disconnect, device number 62
[  224.017451][ T7945] razer 0003:1532:010D.0011: item fetching failed at offset 5/7
[  224.032547][ T7945] razer 0003:1532:010D.0011: probe with driver razer failed with error -22
[  224.145546][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'.
[  224.217286][ T7945] usb 2-1: USB disconnect, device number 77
[  224.461865][ T5935] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  224.621982][ T5935] usb 4-1: Using ep0 maxpacket: 16
[  224.629686][ T5935] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[  224.638135][ T5935] usb 4-1: config 252 has no interface number 0
[  224.644534][ T5935] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  224.657994][ T5935] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  224.667184][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.676149][ T5935] usb 4-1: Product: syz
[  224.680492][ T5935] usb 4-1: Manufacturer: syz
[  224.685619][ T5935] usb 4-1: SerialNumber: syz
[  224.724791][ T5935] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  224.905931][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.917715][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.927746][ T5919] usb 4-1: USB disconnect, device number 82
[  224.936003][ T1164] usb 4-1: Failed to submit usb control message: -71
[  224.946834][ T1164] usb 4-1: unable to send the bmi data to the device: -71
[  224.956982][ T1164] usb 4-1: unable to get target info from device
[  224.964153][ T1164] usb 4-1: could not get target info (-71)
[  224.970304][ T1164] usb 4-1: could not probe fw (-71)
[  225.191832][ T5935] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  225.342185][ T5935] usb 2-1: Using ep0 maxpacket: 32
[  225.350526][ T5935] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02
[  225.361202][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.369352][ T5935] usb 2-1: Product: syz
[  225.373787][ T5935] usb 2-1: Manufacturer: syz
[  225.378552][ T5935] usb 2-1: SerialNumber: syz
[  225.389839][ T5935] usb 2-1: config 0 descriptor??
[  225.613090][   T49] usb 2-1: USB disconnect, device number 78
[  225.706717][ T8315] netlink: 96 bytes leftover after parsing attributes in process `syz.3.751'.
[  225.720079][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'.
[  225.914960][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.925779][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.941264][ T8321] netlink: 'syz.0.752': attribute type 10 has an invalid length.
[  225.973845][ T8321] veth1_vlan: entered allmulticast mode
[  225.993162][ T8321] team0: Device veth1_vlan failed to register rx_handler
[  226.392043][   T49] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  226.544144][   T49] usb 3-1: config 0 interface 0 has no altsetting 0
[  226.550839][   T49] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  226.561886][ T5894] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  226.582516][   T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.597698][   T49] usb 3-1: config 0 descriptor??
[  226.712159][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  226.723831][ T5894] usb 4-1: config 0 has an invalid interface number: 77 but max is 0
[  226.733991][ T5894] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config
[  226.745983][ T5894] usb 4-1: config 0 has no interface number 0
[  226.753452][ T5894] usb 4-1: config 0 interface 77 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.756701][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'.
[  226.766824][ T5894] usb 4-1: config 0 interface 77 has no altsetting 0
[  226.786077][ T5894] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.48
[  226.795457][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.795484][ T5894] usb 4-1: Product: syz
[  226.795498][ T5894] usb 4-1: Manufacturer: syz
[  226.795512][ T5894] usb 4-1: SerialNumber: syz
[  226.798601][ T5894] usb 4-1: config 0 descriptor??
[  226.830924][ T5894] redrat3 4-1:0.77: Couldn't find all endpoints
[  227.032444][   T49] zeroplus 0003:0C12:0005.0012: item fetching failed at offset 0/3
[  227.041265][   T49] zeroplus 0003:0C12:0005.0012: parse failed
[  227.042661][ T5894] usb 4-1: USB disconnect, device number 83
[  227.048070][   T49] zeroplus 0003:0C12:0005.0012: probe with driver zeroplus failed with error -22
[  227.231355][ T5923] usb 3-1: USB disconnect, device number 63
[  227.341978][   T49] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  227.493473][   T49] usb 2-1: config 7 has an invalid interface number: 101 but max is 0
[  227.502187][   T49] usb 2-1: config 7 has no interface number 0
[  227.509895][   T49] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  227.519241][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.527360][   T49] usb 2-1: Product: syz
[  227.531907][   T49] usb 2-1: Manufacturer: syz
[  227.536532][   T49] usb 2-1: SerialNumber: syz
[  227.613133][ T8366] tipc: Started in network mode
[  227.618181][ T8366] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  227.633906][ T8366] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  227.643463][ T8366] tipc: Enabled bearer <udp:syz0>, priority 10
[  227.866767][ T8375] befs: (nbd2): No write support. Marking filesystem read-only
[  227.875686][ T8375] befs: (nbd2): unable to read superblock
[  228.258699][ T8389] openvswitch: netlink: Multiple metadata blocks provided
[  228.308723][ T8391] netlink: 108 bytes leftover after parsing attributes in process `syz.2.776'.
[  228.763953][ T5894] tipc: Node number set to 1
[  228.832180][ T5923] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  228.994218][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10
[  229.005621][ T5923] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[  229.014803][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.026041][ T5923] usb 3-1: config 0 descriptor??
[  229.138915][ T8411] SQUASHFS error: Failed to read block 0x0: -5
[  229.147278][ T8411] unable to read squashfs_super_block
[  229.438511][ T5923] usb 3-1: string descriptor 0 read error: -71
[  229.451296][ T5923] usbhid 3-1:0.0: can't add hid device: -71
[  229.457556][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  229.468875][ T5923] usb 3-1: USB disconnect, device number 64
[  229.592001][ T5894] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  229.742101][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  229.749218][ T5894] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  229.757953][ T5894] usb 4-1: config 0 has no interface number 0
[  229.764177][ T5894] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  229.776823][ T5894] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  229.786039][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.794102][ T5894] usb 4-1: Product: syz
[  229.798305][ T5894] usb 4-1: Manufacturer: syz
[  229.803085][ T5894] usb 4-1: SerialNumber: syz
[  229.811159][ T5894] usb 4-1: config 0 descriptor??
[  229.820232][ T5894] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  229.830145][ T5894] em28xx 4-1:0.132: Video interface 132 found:
[  230.072841][ T5894] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  230.132676][   T49] as10x_usb: device has been detected
[  230.150411][   T49] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  230.167005][   T49] usb 2-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  230.184532][   T49] as10x_usb: error during firmware upload part1
[  230.191365][   T49] Registered device Elgato EyeTV DTT Deluxe
[  230.195696][   T49] usb 2-1: USB disconnect, device number 79
[  230.231458][   T49] Unregistered device Elgato EyeTV DTT Deluxe
[  230.231904][ T5919] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  230.247596][   T49] as10x_usb: device has been disconnected
[  230.401990][ T5919] usb 3-1: Using ep0 maxpacket: 16
[  230.409253][ T5919] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  230.417835][ T5919] usb 3-1: config 0 has no interface number 0
[  230.424142][ T5919] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  230.434199][ T5919] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  230.444306][ T5919] usb 3-1: config 0 interface 41 has no altsetting 0
[  230.453218][ T5919] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  230.462397][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.470501][ T5919] usb 3-1: Product: syz
[  230.474759][ T5919] usb 3-1: Manufacturer: syz
[  230.479389][ T5919] usb 3-1: SerialNumber: syz
[  230.484246][ T5894] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  230.498243][ T5894] em28xx 4-1:0.132: board has no eeprom
[  230.505118][ T5919] usb 3-1: config 0 descriptor??
[  230.510907][ T8417] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  230.519120][ T8417] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  230.552158][   T49] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  230.591896][ T5894] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  230.599901][ T5894] em28xx 4-1:0.132: analog set to bulk mode.
[  230.606599][ T6543] em28xx 4-1:0.132: Registering V4L2 extension
[  230.701854][   T49] usb 2-1: Using ep0 maxpacket: 8
[  230.709943][   T49] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  230.713084][ T5894] usb 4-1: USB disconnect, device number 84
[  230.724741][   T49] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  230.727645][ T6543] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  230.744308][ T8417] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  230.754611][ T5894] em28xx 4-1:0.132: Disconnecting em28xx
[  230.775915][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  230.783170][ T8417] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  230.790499][   T49] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  230.800190][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.812368][   T49] usb 2-1: config 0 descriptor??
[  230.867159][ T6543] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  230.875025][ T6543] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  230.882858][ T6543] em28xx 4-1:0.132: No AC97 audio processor
[  230.900317][ T6543] usb 4-1: Decoder not found
[  230.905106][ T6543] em28xx 4-1:0.132: failed to create media graph
[  230.912998][ T6543] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  230.937120][ T6543] em28xx 4-1:0.132: Remote control support is not available for this card.
[  230.946339][ T5894] em28xx 4-1:0.132: Closing input extension
[  230.978425][ T5894] em28xx 4-1:0.132: Freeing device
[  231.234238][   T49] gt683r_led 0003:1770:FF00.0013: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0
[  231.262731][ T5919] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  231.439503][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.452495][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.466845][ T8420] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  231.482360][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.786'.
[  231.493848][ T8420] batman_adv: batadv0: Adding interface: virt_wifi0
[  231.502382][ T8420] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  231.518645][ T5894] usb 2-1: USB disconnect, device number 80
[  231.540954][ T6543] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19
[  231.551097][ T6543] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19
[  231.676520][ T5919] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID
[  231.931885][ T5894] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  232.085096][ T5894] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  232.094553][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.102933][ T5894] usb 4-1: Product: syz
[  232.107156][ T5894] usb 4-1: Manufacturer: syz
[  232.112013][ T5894] usb 4-1: SerialNumber: syz
[  232.124223][ T5894] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  232.158183][ T6543] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  232.301872][   T49] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  232.451877][   T49] usb 2-1: Using ep0 maxpacket: 32
[  232.459636][   T49] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  232.475758][   T49] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65
[  232.485426][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.493838][   T49] usb 2-1: Product: syz
[  232.498064][   T49] usb 2-1: Manufacturer: syz
[  232.502848][   T49] usb 2-1: SerialNumber: syz
[  232.509936][   T49] usb 2-1: config 0 descriptor??
[  232.518709][   T49] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  232.815444][ T5894] usb 4-1: USB disconnect, device number 85
[  233.014095][ T5919] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71
[  233.032718][ T5919] usb 3-1: USB disconnect, device number 65
[  233.221981][ T6543] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  233.223553][ T6543] ath9k_htc: Failed to initialize the device
[  233.224165][ T5894] usb 4-1: ath9k_htc: USB layer deinitialized
[  233.371892][ T5919] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  233.433145][   T49] gspca_vc032x: reg_r err -110
[  233.438157][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.444444][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.449754][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.455307][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.460765][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.466147][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.471437][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.477095][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.482475][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.487964][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.493323][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.498716][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.504106][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.509438][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.514959][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.520289][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.525697][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.531176][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.536569][   T49] gspca_vc032x: I2c Bus Busy Wait 00
[  233.542017][   T49] gspca_vc032x: Unknown sensor...
[  233.547224][   T49] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  233.551934][ T5919] usb 3-1: Using ep0 maxpacket: 32
[  233.567268][ T5919] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[  233.575919][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.586281][ T5919] usb 3-1: config 0 has no interface number 0
[  233.592644][ T5919] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255
[  233.603209][ T5919] usb 3-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.617905][ T5919] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  233.627489][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.636010][ T5919] usb 3-1: Product: syz
[  233.640248][ T5919] usb 3-1: Manufacturer: syz
[  233.645638][ T5919] usb 3-1: SerialNumber: syz
[  233.653398][ T5919] usb 3-1: config 0 descriptor??
[  233.659356][ T8454] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  233.670281][ T5919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  233.677998][ T5919] usb 3-1: invalid MIDI in EP 0
[  233.691872][ T5894] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  233.716599][ T5919] snd-usb-audio 3-1:0.16: probe with driver snd-usb-audio failed with error -22
[  233.755147][ T6470] udevd[6470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  233.853448][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.865165][ T5894] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  233.874759][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.886451][ T5894] usb 4-1: config 0 descriptor??
[  233.889380][ T5923] usb 3-1: USB disconnect, device number 66
[  234.317612][ T5894] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor
[  234.329187][ T5894] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input17
[  234.448009][ T5894] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  234.750155][ T6543] usb 4-1: USB disconnect, device number 86
[  234.971943][ T5923] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  235.075907][ T5894] usb 2-1: USB disconnect, device number 81
[  235.152116][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  235.159897][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short
[  235.169441][ T5923] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  235.178116][ T5923] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  235.188571][ T5923] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  235.198528][ T5923] usb 3-1: config 128 has no interface number 0
[  235.204981][ T5923] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  235.221838][ T5923] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  235.242038][ T5923] usb 3-1: config 128 interface 127 has no altsetting 0
[  235.254597][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  235.274105][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.295193][ T5923] usb 3-1: Product: syz
[  235.299446][ T5923] usb 3-1: Manufacturer: syz
[  235.307399][ T8475] FAULT_INJECTION: forcing a failure.
[  235.307399][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.324333][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.1.801 Not tainted syzkaller #0 PREEMPT(full) 
[  235.324357][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  235.324368][ T8475] Call Trace:
[  235.324375][ T8475]  <TASK>
[  235.324382][ T8475]  dump_stack_lvl+0x189/0x250
[  235.324402][ T8475]  ? __pfx____ratelimit+0x10/0x10
[  235.324424][ T8475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.324441][ T8475]  ? __pfx__printk+0x10/0x10
[  235.324465][ T8475]  ? __might_fault+0xb0/0x130
[  235.324496][ T8475]  should_fail_ex+0x414/0x560
[  235.324520][ T8475]  _copy_from_user+0x2d/0xb0
[  235.324545][ T8475]  ___sys_sendmsg+0x158/0x2a0
[  235.324566][ T8475]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.324618][ T8475]  ? __fget_files+0x2a/0x420
[  235.324636][ T8475]  ? __fget_files+0x3a0/0x420
[  235.324662][ T8475]  __sys_sendmmsg+0x227/0x430
[  235.324685][ T8475]  ? __pfx___sys_sendmmsg+0x10/0x10
[  235.324709][ T8475]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  235.324743][ T8475]  ? ksys_write+0x22a/0x250
[  235.324767][ T8475]  ? __pfx_ksys_write+0x10/0x10
[  235.324793][ T8475]  __x64_sys_sendmmsg+0xa0/0xc0
[  235.324812][ T8475]  do_syscall_64+0xfa/0xf80
[  235.324835][ T8475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.324853][ T8475]  ? clear_bhb_loop+0x60/0xb0
[  235.324873][ T8475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.324890][ T8475] RIP: 0033:0x7f9e5878f749
[  235.324906][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.324921][ T8475] RSP: 002b:00007f9e596e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  235.324940][ T8475] RAX: ffffffffffffffda RBX: 00007f9e589e5fa0 RCX: 00007f9e5878f749
[  235.324961][ T8475] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003
[  235.324972][ T8475] RBP: 00007f9e596e5090 R08: 0000000000000000 R09: 0000000000000000
[  235.324981][ T8475] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001
[  235.324991][ T8475] R13: 00007f9e589e6038 R14: 00007f9e589e5fa0 R15: 00007ffecb0558d8
[  235.325017][ T8475]  </TASK>
[  235.332429][ T5923] usb 3-1: SerialNumber: syz
[  235.622377][ T5894] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  235.795058][ T5923] usb 3-1: USB disconnect, device number 67
[  235.815198][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  235.831401][ T5894] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  235.838924][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.863899][ T5894] usb 4-1: config 0 has no interface number 0
[  235.875112][ T5894] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  235.891862][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.910247][ T5894] usb 4-1: Product: syz
[  235.920366][ T5894] usb 4-1: Manufacturer: syz
[  235.930515][ T5894] usb 4-1: SerialNumber: syz
[  235.968061][ T5894] usb 4-1: config 0 descriptor??
[  235.980898][ T5894] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  236.037240][ T8500] netlink: 'syz.1.808': attribute type 21 has an invalid length.
[  236.045404][ T8500] netlink: 'syz.1.808': attribute type 6 has an invalid length.
[  236.053491][ T8500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.808'.
[  236.149893][ T8505] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  236.163857][ T8505] overlayfs: missing 'lowerdir'
[  236.185800][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.198342][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.213701][   T30] audit: type=1326 audit(1764660809.067:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e5878f749 code=0x0
[  236.237443][ T5894] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  236.254540][ T5894] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  236.630336][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  236.630778][ T5901] usb 4-1: USB disconnect, device number 87
[  236.648897][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  236.664246][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  236.679710][ T5901] quatech2 4-1:0.51: device disconnected
[  236.731862][ T5923] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  236.881821][ T5923] usb 3-1: Using ep0 maxpacket: 8
[  236.888751][ T5923] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  236.897451][ T5923] usb 3-1: config 179 has no interface number 0
[  236.903903][ T5923] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  236.915274][ T5923] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  236.926721][ T5923] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  236.938080][ T5923] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  236.949586][ T5923] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  236.963002][ T5923] usb 3-1: config 179 interface 65 has no altsetting 0
[  236.969929][ T5923] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  236.979065][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.010403][ T5923] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18
[  237.062329][ T5184] input input18: unable to receive magic message: -110
[  237.084706][ T5184] input input18: unable to receive magic message: -32
[  237.116771][ T6472] input input18: unable to receive magic message: -32
[  237.135478][ T5184] input input18: unable to receive magic message: -32
[  237.159087][ T5184] input input18: unable to receive magic message: -32
[  237.160152][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'.
[  237.178991][ T5184] input input18: unable to receive magic message: -32
[  237.202559][ T8514] netlink: 'syz.2.814': attribute type 1 has an invalid length.
[  237.406751][ T8526] nfs: Unknown parameter '8'
[  237.552134][ T5923] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  237.701981][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  237.709823][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.722144][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.732203][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  237.741286][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.752260][ T5923] usb 2-1: config 0 descriptor??
[  237.764781][ T5923] hub 2-1:0.0: USB hub found
[  237.801943][ T5894] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  237.932015][ T5894] usb 4-1: device descriptor read/64, error -71
[  237.965871][ T5923] hub 2-1:0.0: 1 port detected
[  238.172210][ T5894] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  238.301922][ T5894] usb 4-1: device descriptor read/64, error -71
[  238.412319][ T5894] usb usb4-port1: attempt power cycle
[  238.752000][ T5894] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  238.772537][ T5894] usb 4-1: device descriptor read/8, error -71
[  238.974578][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'.
[  239.012390][ T5894] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  239.037904][ T5834] block nbd64: NBD_DISCONNECT
[  239.043652][ T5894] usb 4-1: device descriptor read/8, error -71
[  239.153121][ T5894] usb usb4-port1: unable to enumerate USB device
[  239.191662][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.203196][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.217575][ T6472] udevd[6472]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  239.240438][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.253119][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.360426][ T5923] usb 2-1: USB disconnect, device number 82
[  239.517847][ T5894] usb 3-1: USB disconnect, device number 68
[  239.517993][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  239.903404][ T5894] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  240.041928][ T5894] usb 3-1: device descriptor read/64, error -71
[  240.131913][ T5923] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  240.281865][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  240.282000][ T5894] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  240.290622][ T5923] usb 2-1: config 0 has an invalid interface number: 202 but max is 0
[  240.304178][ T5923] usb 2-1: config 0 has no interface number 0
[  240.310344][ T5923] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  240.323798][ T5923] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  240.333063][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.341059][ T5923] usb 2-1: Product: syz
[  240.345920][ T5923] usb 2-1: Manufacturer: syz
[  240.350531][ T5923] usb 2-1: SerialNumber: syz
[  240.357993][ T5923] usb 2-1: config 0 descriptor??
[  240.370767][ T5923] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  240.421916][ T5894] usb 3-1: device descriptor read/64, error -71
[  240.532370][ T5894] usb usb3-port1: attempt power cycle
[  240.565369][ T1164] usb 2-1: Failed to submit usb control message: -71
[  240.577533][ T5923] usb 2-1: USB disconnect, device number 83
[  240.586638][ T1164] usb 2-1: unable to send the bmi data to the device: -71
[  240.597024][ T1164] usb 2-1: unable to get target info from device
[  240.605217][ T1164] usb 2-1: could not get target info (-71)
[  240.611387][ T1164] usb 2-1: could not probe fw (-71)
[  240.872000][ T5894] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  240.892466][ T5894] usb 3-1: device descriptor read/8, error -71
[  240.962962][ T6543] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  241.122025][ T6543] usb 4-1: Using ep0 maxpacket: 8
[  241.129145][ T6543] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  241.138752][ T5894] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  241.146764][ T6543] usb 4-1: config 0 has no interface number 0
[  241.156057][ T6543] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  241.165228][ T6543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.173375][ T6543] usb 4-1: Product: syz
[  241.177591][ T6543] usb 4-1: Manufacturer: syz
[  241.182435][ T5894] usb 3-1: device descriptor read/8, error -71
[  241.188818][ T6543] usb 4-1: SerialNumber: syz
[  241.195339][ T6543] usb 4-1: config 0 descriptor??
[  241.292147][ T5894] usb usb3-port1: unable to enumerate USB device
[  241.341847][ T5901] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  241.407348][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.417094][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.504066][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short
[  241.504063][ T6543] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  241.504140][ T6543] uvcvideo 4-1:0.31: No valid video chain found.
[  241.519224][ T5901] usb 2-1: not running at top speed; connect to a high speed hub
[  241.535308][ T5901] usb 2-1: config 129 has an invalid interface number: 41 but max is 0
[  241.549132][ T5901] usb 2-1: config 129 has no interface number 0
[  241.555374][ T6543] usb 4-1: USB disconnect, device number 92
[  241.559623][ T5901] usb 2-1: config 129 interface 41 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  241.573747][ T5901] usb 2-1: config 129 interface 41 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  241.586497][ T5901] usb 2-1: config 129 interface 41 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  241.600329][ T5901] usb 2-1: config 129 interface 41 has no altsetting 0
[  241.610329][ T5901] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=14.50
[  241.620580][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.628684][ T5901] usb 2-1: Product: syz
[  241.633353][ T5901] usb 2-1: Manufacturer: syz
[  241.638021][ T5901] usb 2-1: SerialNumber: syz
[  241.647462][ T8554] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  241.861520][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.874778][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.918519][ T5901] kvaser_usb 2-1:129.41: error -ENODEV: Cannot get usb endpoint(s)
[  241.931286][ T5901] usb 2-1: USB disconnect, device number 84
[  242.492477][ T5919] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  242.634046][ T5919] usb 4-1: device descriptor read/64, error -71
[  242.724076][ T8581] binder: 8580:8581 ioctl c018620c 200000000140 returned -22
[  242.879840][ T8589] netlink: 256 bytes leftover after parsing attributes in process `syz.2.836'.
[  242.882163][ T5919] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  243.013892][ T8596] FAULT_INJECTION: forcing a failure.
[  243.013892][ T8596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.027397][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.2.838 Not tainted syzkaller #0 PREEMPT(full) 
[  243.027414][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.027421][ T8596] Call Trace:
[  243.027425][ T8596]  <TASK>
[  243.027430][ T8596]  dump_stack_lvl+0x189/0x250
[  243.027445][ T8596]  ? __pfx____ratelimit+0x10/0x10
[  243.027459][ T8596]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.027468][ T8596]  ? __pfx__printk+0x10/0x10
[  243.027482][ T8596]  ? __might_fault+0xb0/0x130
[  243.027500][ T8596]  should_fail_ex+0x414/0x560
[  243.027514][ T8596]  _copy_from_user+0x2d/0xb0
[  243.027528][ T8596]  ___sys_sendmsg+0x158/0x2a0
[  243.027539][ T8596]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.027552][ T8596]  ? rcu_read_lock_any_held+0xb3/0x120
[  243.027576][ T8596]  ? __fget_files+0x2a/0x420
[  243.027585][ T8596]  ? __fget_files+0x3a0/0x420
[  243.027600][ T8596]  __x64_sys_sendmsg+0x19b/0x260
[  243.027611][ T8596]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.027625][ T8596]  ? __pfx_ksys_write+0x10/0x10
[  243.027640][ T8596]  ? do_syscall_64+0xbe/0xf80
[  243.027655][ T8596]  do_syscall_64+0xfa/0xf80
[  243.027668][ T8596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.027678][ T8596]  ? clear_bhb_loop+0x60/0xb0
[  243.027689][ T8596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.027699][ T8596] RIP: 0033:0x7ff46b38f749
[  243.027709][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.027718][ T8596] RSP: 002b:00007ff46c16c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.027731][ T8596] RAX: ffffffffffffffda RBX: 00007ff46b5e5fa0 RCX: 00007ff46b38f749
[  243.027738][ T8596] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  243.027744][ T8596] RBP: 00007ff46c16c090 R08: 0000000000000000 R09: 0000000000000000
[  243.027750][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.027756][ T8596] R13: 00007ff46b5e6038 R14: 00007ff46b5e5fa0 R15: 00007fff86e3e348
[  243.027771][ T8596]  </TASK>
[  243.031923][ T5919] usb 4-1: device descriptor read/64, error -71
[  243.363959][ T5919] usb usb4-port1: attempt power cycle
[  243.473299][ T8613] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  243.483421][ T8613] ������: renamed from bond_slave_1 (while UP)
[  243.701876][ T5919] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  243.743104][ T5919] usb 4-1: device descriptor read/8, error -71
[  243.754968][ T8621] FAULT_INJECTION: forcing a failure.
[  243.754968][ T8621] name failslab, interval 1, probability 0, space 0, times 0
[  243.772904][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.2.848 Not tainted syzkaller #0 PREEMPT(full) 
[  243.772932][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.772943][ T8621] Call Trace:
[  243.772950][ T8621]  <TASK>
[  243.772959][ T8621]  dump_stack_lvl+0x189/0x250
[  243.772981][ T8621]  ? __pfx____ratelimit+0x10/0x10
[  243.773005][ T8621]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.773022][ T8621]  ? __pfx__printk+0x10/0x10
[  243.773048][ T8621]  ? __pfx___might_resched+0x10/0x10
[  243.773080][ T8621]  ? fs_reclaim_acquire+0x7d/0x100
[  243.773108][ T8621]  should_fail_ex+0x414/0x560
[  243.773133][ T8621]  should_failslab+0xa8/0x100
[  243.773152][ T8621]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  243.773176][ T8621]  ? __alloc_skb+0x255/0x430
[  243.773196][ T8621]  ? napi_skb_cache_get+0x4a5/0x780
[  243.773217][ T8621]  ? napi_skb_cache_get+0x151/0x780
[  243.773243][ T8621]  __alloc_skb+0x255/0x430
[  243.773269][ T8621]  ? __pfx___alloc_skb+0x10/0x10
[  243.773293][ T8621]  ? netlink_autobind+0xdb/0x300
[  243.773311][ T8621]  ? netlink_autobind+0x2c2/0x300
[  243.773335][ T8621]  netlink_sendmsg+0x5c6/0xb30
[  243.773352][ T8621]  ? aa_sk_perm+0x15f/0x920
[  243.773380][ T8621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.773398][ T8621]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  243.773430][ T8621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.773447][ T8621]  sock_sendmsg_nosec+0x18f/0x1d0
[  243.773471][ T8621]  ____sys_sendmsg+0x577/0x880
[  243.773497][ T8621]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.773523][ T8621]  ? import_iovec+0x74/0xa0
[  243.773550][ T8621]  ___sys_sendmsg+0x21f/0x2a0
[  243.773570][ T8621]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.773593][ T8621]  ? rcu_read_lock_any_held+0xb3/0x120
[  243.773638][ T8621]  ? __fget_files+0x2a/0x420
[  243.773655][ T8621]  ? __fget_files+0x3a0/0x420
[  243.773683][ T8621]  __x64_sys_sendmsg+0x19b/0x260
[  243.773704][ T8621]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.773731][ T8621]  ? __pfx_ksys_write+0x10/0x10
[  243.773758][ T8621]  ? do_syscall_64+0xbe/0xf80
[  243.773785][ T8621]  do_syscall_64+0xfa/0xf80
[  243.773807][ T8621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.773825][ T8621]  ? clear_bhb_loop+0x60/0xb0
[  243.773846][ T8621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.773863][ T8621] RIP: 0033:0x7ff46b38f749
[  243.773879][ T8621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.773893][ T8621] RSP: 002b:00007ff46c16c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.773913][ T8621] RAX: ffffffffffffffda RBX: 00007ff46b5e5fa0 RCX: 00007ff46b38f749
[  243.773927][ T8621] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  243.773939][ T8621] RBP: 00007ff46c16c090 R08: 0000000000000000 R09: 0000000000000000
[  243.773949][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.773960][ T8621] R13: 00007ff46b5e6038 R14: 00007ff46b5e5fa0 R15: 00007fff86e3e348
[  243.773990][ T8621]  </TASK>
[  244.118490][ T8626] netlink: 'syz.0.849': attribute type 9 has an invalid length.
[  244.133711][ T8626] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.849'.
[  244.211943][ T5919] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  244.233197][ T5919] usb 4-1: device descriptor read/8, error -71
[  244.316031][ T8643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.854'.
[  244.331178][ T8643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.854'.
[  244.342491][ T5919] usb usb4-port1: unable to enumerate USB device
[  244.371385][ T8643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.854'.
[  244.490730][ T8649] fuse: Bad value for 'group_id'
[  244.500147][ T8649] fuse: Bad value for 'group_id'
[  244.652122][ T8656] dvmrp0: entered allmulticast mode
[  244.836971][ T8667] dump_vmcs: 22 callbacks suppressed
[  244.836988][ T8667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  244.979358][ T8670] FAULT_INJECTION: forcing a failure.
[  244.979358][ T8670] name failslab, interval 1, probability 0, space 0, times 0
[  244.992626][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.0.864 Not tainted syzkaller #0 PREEMPT(full) 
[  244.992652][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  244.992662][ T8670] Call Trace:
[  244.992669][ T8670]  <TASK>
[  244.992675][ T8670]  dump_stack_lvl+0x189/0x250
[  244.992697][ T8670]  ? __pfx____ratelimit+0x10/0x10
[  244.992718][ T8670]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.992732][ T8670]  ? __pfx__printk+0x10/0x10
[  244.992755][ T8670]  ? __local_bh_enable_ip+0x12d/0x1c0
[  244.992787][ T8670]  ? lockdep_hardirqs_on+0x98/0x140
[  244.992811][ T8670]  ? __local_bh_enable_ip+0x12d/0x1c0
[  244.992825][ T8670]  should_fail_ex+0x414/0x560
[  244.992841][ T8670]  should_failslab+0xa8/0x100
[  244.992852][ T8670]  __kmalloc_noprof+0xdf/0x800
[  244.992873][ T8670]  ? ___neigh_create+0x6d5/0x2240
[  244.992891][ T8670]  ___neigh_create+0x6d5/0x2240
[  244.993000][ T8670]  ip_neigh_gw4+0x289/0x3b0
[  244.993024][ T8670]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  244.993039][ T8670]  ip_finish_output2+0x57a/0x1160
[  244.993054][ T8670]  ? ip_finish_output2+0x452/0x1160
[  244.993063][ T8670]  ? ip_skb_dst_mtu+0x18d/0xb70
[  244.993077][ T8670]  ? __pfx_ip_finish_output2+0x10/0x10
[  244.993086][ T8670]  ? ip_skb_dst_mtu+0x18d/0xb70
[  244.993098][ T8670]  ? ip_skb_dst_mtu+0x917/0xb70
[  244.993113][ T8670]  ? ip_finish_output+0x33a/0x3f0
[  244.993127][ T8670]  ip_output+0x29f/0x450
[  244.993141][ T8670]  ? ip_output+0x5b/0x450
[  244.993155][ T8670]  ip_send_skb+0x74/0x100
[  244.993169][ T8670]  udp_send_skb+0xaf1/0x14c0
[  244.993190][ T8670]  udp_sendmsg+0x195a/0x2170
[  244.993199][ T8670]  ? ip4_addr_string+0x181/0x200
[  244.993220][ T8670]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  244.993235][ T8670]  ? __pfx_udp_sendmsg+0x10/0x10
[  244.993246][ T8670]  ? tomoyo_write_log2+0x250/0x910
[  244.993260][ T8670]  ? tomoyo_domain_quota_is_ok+0x97/0x570
[  244.993270][ T8670]  ? look_up_lock_class+0x74/0x150
[  244.993283][ T8670]  ? look_up_lock_class+0x74/0x150
[  244.993306][ T8670]  ? lockdep_hardirqs_on+0x98/0x140
[  244.993318][ T8670]  ? get_random_u32+0x155/0x930
[  244.993338][ T8670]  ? __pfx_get_random_u32+0x10/0x10
[  244.993349][ T8670]  ? snprintf+0xda/0x120
[  244.993363][ T8670]  udpv6_sendmsg+0xc1c/0x2510
[  244.993381][ T8670]  ? udp_lib_get_port+0x164b/0x1b10
[  244.993391][ T8670]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  244.993416][ T8670]  ? __local_bh_enable_ip+0x12d/0x1c0
[  244.993431][ T8670]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  244.993446][ T8670]  ? inet_send_prepare+0x1b9/0x270
[  244.993458][ T8670]  ? inet_send_prepare+0x1b9/0x270
[  244.993470][ T8670]  ? inet6_sendmsg+0xe4/0x120
[  244.993484][ T8670]  sock_sendmsg_nosec+0x8e/0x1d0
[  244.993498][ T8670]  ____sys_sendmsg+0x577/0x880
[  244.993512][ T8670]  ? __pfx_____sys_sendmsg+0x10/0x10
[  244.993527][ T8670]  ? import_iovec+0x74/0xa0
[  244.993543][ T8670]  ___sys_sendmsg+0x21f/0x2a0
[  244.993554][ T8670]  ? __pfx____sys_sendmsg+0x10/0x10
[  244.993582][ T8670]  ? __fget_files+0x2a/0x420
[  244.993592][ T8670]  ? __fget_files+0x3a0/0x420
[  244.993608][ T8670]  __sys_sendmmsg+0x227/0x430
[  244.993620][ T8670]  ? __pfx___sys_sendmmsg+0x10/0x10
[  244.993635][ T8670]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  244.993658][ T8670]  ? ksys_write+0x22a/0x250
[  244.993673][ T8670]  ? __pfx_ksys_write+0x10/0x10
[  244.993687][ T8670]  __x64_sys_sendmmsg+0xa0/0xc0
[  244.993698][ T8670]  do_syscall_64+0xfa/0xf80
[  244.993712][ T8670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.993722][ T8670]  ? clear_bhb_loop+0x60/0xb0
[  244.993734][ T8670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.993743][ T8670] RIP: 0033:0x7f380cb8f749
[  244.993755][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.993764][ T8670] RSP: 002b:00007f380da53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  244.993776][ T8670] RAX: ffffffffffffffda RBX: 00007f380cde5fa0 RCX: 00007f380cb8f749
[  244.993784][ T8670] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003
[  244.993790][ T8670] RBP: 00007f380da53090 R08: 0000000000000000 R09: 0000000000000000
[  244.993811][ T8670] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001
[  244.993820][ T8670] R13: 00007f380cde6038 R14: 00007f380cde5fa0 R15: 00007fff3ba18de8
[  244.993845][ T8670]  </TASK>
[  245.750393][ T8696] macvlan0: mtu less than device minimum
[  245.938099][ T8708] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  246.175217][ T5919] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  246.207672][ T8723] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  246.295570][ T8726] syzkaller1: entered promiscuous mode
[  246.301464][ T8726] syzkaller1: entered allmulticast mode
[  246.346551][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  246.354255][ T5919] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  246.372748][ T5919] usb 2-1: config 0 has no interface number 0
[  246.382123][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  246.391293][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.402421][ T5919] usb 2-1: Product: syz
[  246.410806][ T5919] usb 2-1: Manufacturer: syz
[  246.415796][ T5919] usb 2-1: SerialNumber: syz
[  246.427049][ T5919] usb 2-1: config 0 descriptor??
[  246.641384][ T5919] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  246.662287][ T5919] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[  246.671435][ T5919] uvcvideo 2-1:0.31: Failed to create links for entity 5
[  246.695792][ T5919] uvcvideo 2-1:0.31: Failed to register entities (-22).
[  246.801857][ T5914] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  246.846885][ T5901] usb 2-1: USB disconnect, device number 85
[  246.921239][ T8753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'.
[  246.963830][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.975468][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.993926][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.005040][ T5914] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  247.014413][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.026298][ T5914] usb 4-1: config 0 descriptor??
[  247.038887][ T5914] rndis_host 4-1:0.0: skipping garbage
[  247.045335][ T5914] usb 4-1: bad CDC descriptors
[  247.121948][   T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  247.271908][   T24] usb 3-1: device descriptor read/64, error -71
[  247.286237][ T8737] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.883'.
[  247.299536][ T8736] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.883'.
[  247.306749][ T8766] FAT-fs (nullb0): bogus number of reserved sectors
[  247.316202][ T8766] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  247.334153][ T5901] usb 4-1: USB disconnect, device number 97
[  247.532004][   T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  247.597753][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'.
[  247.671978][ T5901] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  247.679787][   T24] usb 3-1: device descriptor read/64, error -71
[  247.813181][   T24] usb usb3-port1: attempt power cycle
[  247.841907][ T7945] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  247.849606][ T5901] usb 2-1: Using ep0 maxpacket: 8
[  247.858935][ T5901] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  247.868088][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.876192][ T5901] usb 2-1: Product: syz
[  247.880369][ T5901] usb 2-1: Manufacturer: syz
[  247.885244][ T5901] usb 2-1: SerialNumber: syz
[  247.893085][ T5901] usb 2-1: config 0 descriptor??
[  248.003906][ T7945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  248.014995][ T7945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.024877][ T7945] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  248.034169][ T7945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.046041][ T7945] usb 4-1: config 0 descriptor??
[  248.104872][ T5901] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  248.151955][   T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  248.172743][   T24] usb 3-1: device descriptor read/8, error -71
[  248.421950][   T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  248.442596][   T24] usb 3-1: device descriptor read/8, error -71
[  248.458723][ T7945] chicony 0003:04F2:1421.0015: reserved main item tag 0xd
[  248.466266][ T7945] chicony 0003:04F2:1421.0015: item fetching failed at offset 4/5
[  248.474953][ T7945] chicony 0003:04F2:1421.0015: Chicony hid parse failed: -22
[  248.482614][ T7945] chicony 0003:04F2:1421.0015: probe with driver chicony failed with error -22
[  248.562901][   T24] usb usb3-port1: unable to enumerate USB device
[  248.860572][ T8783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.897'.
[  248.877821][ T5914] usb 4-1: USB disconnect, device number 98
[  248.911475][ T5901] gspca_sunplus: reg_w_riv err -71
[  248.919059][ T5901] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  248.932414][ T5901] usb 2-1: USB disconnect, device number 86
[  249.473164][ T8795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.901'.
[  249.619733][ T8806] Invalid ELF header len 16
[  249.903103][ T5901] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  250.061849][ T5901] usb 2-1: Using ep0 maxpacket: 32
[  250.069128][ T5901] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  250.077566][ T5901] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  250.086487][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.096915][ T5901] usb 2-1: config 0 has no interface number 0
[  250.103153][ T5901] usb 2-1: config 0 interface 196 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  250.118545][ T5901] usb 2-1: New USB device found, idVendor=5050, idProduct=0c00, bcdDevice=c1.de
[  250.127762][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.135850][ T5901] usb 2-1: Product: syz
[  250.140137][ T5901] usb 2-1: Manufacturer: syz
[  250.145631][ T5901] usb 2-1: SerialNumber: syz
[  250.152742][ T5901] usb 2-1: config 0 descriptor??
[  250.272033][ T5923] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  250.360794][ T5901] ftdi_sio 2-1:0.196: FTDI USB Serial Device converter detected
[  250.369989][ T5901] ftdi_sio ttyUSB0: unknown device type: 0xc1de
[  250.392789][   T30] audit: type=1326 audit(1764660823.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7fc00000
[  250.441852][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  250.449239][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  250.463419][ T5923] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  250.485385][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.502174][ T5923] usb 3-1: Product: syz
[  250.506763][ T5923] usb 3-1: Manufacturer: syz
[  250.511664][ T5923] usb 3-1: SerialNumber: syz
[  250.524948][ T5923] usb 3-1: config 0 descriptor??
[  250.536219][ T5923] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  250.546355][ T5923] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  250.574184][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.585520][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.138176][ T5923] em28xx 3-1:0.0: chip ID is em2765
[  251.143656][   T49] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[  251.304428][   T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  251.315595][   T49] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  251.324691][   T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.335794][   T49] usb 4-1: config 0 descriptor??
[  251.342042][ T8833] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  251.749810][ T5923] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  251.758448][ T5923] em28xx 3-1:0.0: board has no eeprom
[  251.768169][   T49] ryos 0003:1E7D:3138.0016: unknown main item tag 0x0
[  251.786284][   T49] ryos 0003:1E7D:3138.0016: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0
[  251.965102][ T5914] usb 4-1: USB disconnect, device number 99
[  251.987070][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.997238][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.061867][ T5923] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  252.069835][ T5923] em28xx 3-1:0.0: dvb set to bulk mode.
[  252.075534][   T49] em28xx 3-1:0.0: Binding DVB extension
[  252.087495][ T5923] usb 3-1: USB disconnect, device number 77
[  252.100896][ T5923] em28xx 3-1:0.0: Disconnecting em28xx
[  252.137719][   T49] em28xx 3-1:0.0: Registering input extension
[  252.147408][ T5923] em28xx 3-1:0.0: Closing input extension
[  252.161554][ T5923] em28xx 3-1:0.0: Freeing device
[  252.500227][   T30] audit: type=1326 audit(1764660825.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.523201][   T30] audit: type=1326 audit(1764660825.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.553877][   T30] audit: type=1326 audit(1764660825.347:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.592191][   T30] audit: type=1326 audit(1764660825.347:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.617998][   T30] audit: type=1326 audit(1764660825.347:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.648244][   T30] audit: type=1326 audit(1764660825.347:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.671096][   T30] audit: type=1326 audit(1764660825.347:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.691133][ T5923] usb 2-1: USB disconnect, device number 87
[  252.699566][   T30] audit: type=1326 audit(1764660825.347:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.718352][ T5923] ftdi_sio 2-1:0.196: device disconnected
[  252.770005][   T30] audit: type=1326 audit(1764660825.347:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91f8f749 code=0x7ffc0000
[  252.803868][ T8855] FAULT_INJECTION: forcing a failure.
[  252.803868][ T8855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.817819][ T8855] CPU: 0 UID: 0 PID: 8855 Comm: syz.3.924 Not tainted syzkaller #0 PREEMPT(full) 
[  252.817845][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.817856][ T8855] Call Trace:
[  252.817864][ T8855]  <TASK>
[  252.817871][ T8855]  dump_stack_lvl+0x189/0x250
[  252.817894][ T8855]  ? __pfx____ratelimit+0x10/0x10
[  252.817918][ T8855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.817934][ T8855]  ? __pfx__printk+0x10/0x10
[  252.817957][ T8855]  ? __might_fault+0xb0/0x130
[  252.817989][ T8855]  should_fail_ex+0x414/0x560
[  252.818015][ T8855]  _copy_from_user+0x2d/0xb0
[  252.818039][ T8855]  ___sys_sendmsg+0x158/0x2a0
[  252.818059][ T8855]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.818084][ T8855]  ? rcu_read_lock_any_held+0xb3/0x120
[  252.818129][ T8855]  ? __fget_files+0x2a/0x420
[  252.818147][ T8855]  ? __fget_files+0x3a0/0x420
[  252.818174][ T8855]  __x64_sys_sendmsg+0x19b/0x260
[  252.818195][ T8855]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.818228][ T8855]  ? __pfx_ksys_write+0x10/0x10
[  252.818256][ T8855]  ? do_syscall_64+0xbe/0xf80
[  252.818281][ T8855]  do_syscall_64+0xfa/0xf80
[  252.818304][ T8855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.818321][ T8855]  ? clear_bhb_loop+0x60/0xb0
[  252.818341][ T8855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.818358][ T8855] RIP: 0033:0x7f5f91f8f749
[  252.818374][ T8855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.818389][ T8855] RSP: 002b:00007f5f92e78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.818410][ T8855] RAX: ffffffffffffffda RBX: 00007f5f921e5fa0 RCX: 00007f5f91f8f749
[  252.818423][ T8855] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003
[  252.818435][ T8855] RBP: 00007f5f92e78090 R08: 0000000000000000 R09: 0000000000000000
[  252.818447][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.818457][ T8855] R13: 00007f5f921e6038 R14: 00007f5f921e5fa0 R15: 00007ffc51cf7238
[  252.818486][ T8855]  </TASK>
[  253.025459][ T5935] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  253.180431][ T8867] dummy0: entered promiscuous mode
[  253.182059][ T5935] usb 3-1: Using ep0 maxpacket: 16
[  253.187681][ T8867] dummy0: entered allmulticast mode
[  253.204929][ T5935] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  253.214339][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.222780][ T5935] usb 3-1: Product: syz
[  253.227054][ T5935] usb 3-1: Manufacturer: syz
[  253.231821][ T5935] usb 3-1: SerialNumber: syz
[  253.246174][ T5935] usb 3-1: config 0 descriptor??
[  253.254525][ T5935] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  253.288560][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.299015][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.309784][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.319483][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.322021][ T5919] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  253.330620][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.349099][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.363411][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.375220][ T8870] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.384975][ T8870] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  253.482072][ T5919] usb 4-1: Using ep0 maxpacket: 16
[  253.489014][ T5919] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  253.498037][ T5919] usb 4-1: config 0 has an invalid descriptor of length 21, skipping remainder of the config
[  253.508505][ T5919] usb 4-1: config 0 has no interface number 0
[  253.515342][ T5919] usb 4-1: too many endpoints for config 0 interface 41 altsetting 2: 253, using maximum allowed: 30
[  253.526632][ T5919] usb 4-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  253.540236][ T5919] usb 4-1: config 0 interface 41 has no altsetting 0
[  253.549933][ T5919] usb 4-1: New USB device found, idVendor=0fe6, idProduct=8e00, bcdDevice=d1.9a
[  253.559360][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.567661][ T5919] usb 4-1: Product: syz
[  253.572127][ T5919] usb 4-1: Manufacturer: syz
[  253.576744][ T5919] usb 4-1: SerialNumber: syz
[  253.602535][ T5919] usb 4-1: config 0 descriptor??
[  253.659226][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  253.670206][ T5935] usb 3-1: clie_3_5_startup: get interface number failed: -71
[  253.679379][ T5935] visor 3-1:0.0: probe with driver visor failed with error -71
[  253.696586][ T5935] usb 3-1: USB disconnect, device number 78
[  253.746804][ T8878] dvmrp0: entered allmulticast mode
[  253.856750][ T5919] usb 4-1: USB disconnect, device number 100
[  254.147527][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.936'.
[  254.494726][ T5935] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[  254.671304][ T5935] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2
[  254.685176][ T5935] usb 3-1: config 8 interface 0 has no altsetting 0
[  254.694466][ T5935] usb 3-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93
[  254.704182][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=210
[  254.712663][ T5935] usb 3-1: Product: syz
[  254.716915][ T5935] usb 3-1: Manufacturer: syz
[  254.721519][ T5935] usb 3-1: SerialNumber: syz
[  254.742160][ T5919] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  254.868380][ T8926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.948'.
[  254.913490][ T5919] usb 2-1: Using ep0 maxpacket: 16
[  254.932390][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.953399][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.963827][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  254.978007][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  254.987443][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.010094][ T5919] usb 2-1: config 0 descriptor??
[  255.173946][ T8937] tipc: Started in network mode
[  255.178902][ T8937] tipc: Node identity fa6dc4f5351f, cluster identity 4711
[  255.212996][ T8937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.240463][ T8940] overlay: Unknown parameter 'obj_user'
[  255.261880][ T5881] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  255.411849][ T5881] usb 4-1: device descriptor read/64, error -71
[  255.423725][ T8931] tipc: Disabling bearer <eth:syzkaller0>
[  255.569638][ T5919] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0
[  255.582707][ T5919] microsoft 0003:045E:07DA.0017: item fetching failed at offset 31/34
[  255.592055][ T5919] microsoft 0003:045E:07DA.0017: parse failed
[  255.598267][ T5919] microsoft 0003:045E:07DA.0017: probe with driver microsoft failed with error -22
[  255.658748][ T5935] usb 3-1: USB disconnect, device number 79
[  255.701853][ T5881] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  255.714784][ T8945] netlink: 68 bytes leftover after parsing attributes in process `syz.0.952'.
[  255.862686][ T5881] usb 4-1: device descriptor read/64, error -71
[  255.893041][ T5919] usb 2-1: USB disconnect, device number 88
[  255.923492][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'.
[  255.939883][ T8951] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 0, id = 0
[  255.958471][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.965113][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.972273][ T5881] usb usb4-port1: attempt power cycle
[  256.303127][ T8955] netlink: 'syz.2.956': attribute type 10 has an invalid length.
[  256.311454][ T8955] lo: entered promiscuous mode
[  256.321927][ T5881] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  256.331142][ T8955] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  256.342555][ T5881] usb 4-1: device descriptor read/8, error -71
[  256.352493][ T8956] netlink: 'syz.2.956': attribute type 10 has an invalid length.
[  256.360365][ T8956] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  256.417436][ T8961] netlink: 'syz.2.957': attribute type 8 has an invalid length.
[  256.582071][ T5881] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  256.602360][ T5881] usb 4-1: device descriptor read/8, error -71
[  256.711865][ T5914] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  256.712105][ T5881] usb usb4-port1: unable to enumerate USB device
[  256.872035][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  256.879320][ T5914] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  256.890087][ T5914] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  256.902492][ T5914] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  256.913954][ T5914] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  256.929357][ T5914] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  256.938484][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.946601][ T5914] usb 2-1: Product: syz
[  256.950961][ T5914] usb 2-1: Manufacturer: syz
[  256.955932][ T5914] usb 2-1: SerialNumber: syz
[  256.969270][    C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  256.980028][ T5914] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input20
[  257.181873][ T5914] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  257.190264][ T5914]  (id 0x00)
[  257.241994][ T5914] rc_core: IR keymap rc-imon-pad not found
[  257.247840][ T5914] Registered IR keymap rc-empty
[  257.256357][ T5914] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  257.266710][ T5914] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  257.395293][ T5914] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0
[  257.407282][ T5914] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input21
[  257.421123][ T5914] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:89> initialized
[  257.574209][ T5881] usb 2-1: USB disconnect, device number 89
[  257.622062][ T5901] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  257.773345][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.784424][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.794887][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  257.803982][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.813915][ T5901] usb 3-1: config 0 descriptor??
[  258.199590][ T8982] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.963'.
[  258.209111][ T8982] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4
[  258.244020][ T5901] logitech 0003:046D:C29C.0018: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[  258.389615][ T8987] FAULT_INJECTION: forcing a failure.
[  258.389615][ T8987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.405538][ T8987] CPU: 1 UID: 0 PID: 8987 Comm: syz.1.965 Not tainted syzkaller #0 PREEMPT(full) 
[  258.405559][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  258.405566][ T8987] Call Trace:
[  258.405571][ T8987]  <TASK>
[  258.405576][ T8987]  dump_stack_lvl+0x189/0x250
[  258.405592][ T8987]  ? __pfx____ratelimit+0x10/0x10
[  258.405605][ T8987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.405615][ T8987]  ? __pfx__printk+0x10/0x10
[  258.405628][ T8987]  ? __might_fault+0xb0/0x130
[  258.405648][ T8987]  should_fail_ex+0x414/0x560
[  258.405663][ T8987]  _copy_from_iter+0x1cd/0x1630
[  258.405678][ T8987]  ? __build_skb_around+0x22d/0x3c0
[  258.405695][ T8987]  ? __pfx__copy_from_iter+0x10/0x10
[  258.405705][ T8987]  ? __alloc_skb+0x2f1/0x430
[  258.405719][ T8987]  ? __pfx___alloc_skb+0x10/0x10
[  258.405733][ T8987]  ? netlink_sendmsg+0x642/0xb30
[  258.405743][ T8987]  ? skb_put+0x11b/0x210
[  258.405758][ T8987]  netlink_sendmsg+0x6b2/0xb30
[  258.405767][ T8987]  ? aa_sk_perm+0x15f/0x920
[  258.405783][ T8987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.405794][ T8987]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  258.405811][ T8987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.405820][ T8987]  sock_sendmsg_nosec+0x18f/0x1d0
[  258.405834][ T8987]  ____sys_sendmsg+0x577/0x880
[  258.405848][ T8987]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.405861][ T8987]  ? import_iovec+0x74/0xa0
[  258.405876][ T8987]  ___sys_sendmsg+0x21f/0x2a0
[  258.405887][ T8987]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.405899][ T8987]  ? rcu_read_lock_any_held+0xb3/0x120
[  258.405923][ T8987]  ? __fget_files+0x2a/0x420
[  258.405933][ T8987]  ? __fget_files+0x3a0/0x420
[  258.405948][ T8987]  __x64_sys_sendmsg+0x19b/0x260
[  258.405959][ T8987]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  258.405972][ T8987]  ? __pfx_ksys_write+0x10/0x10
[  258.405987][ T8987]  ? do_syscall_64+0xbe/0xf80
[  258.406002][ T8987]  do_syscall_64+0xfa/0xf80
[  258.406016][ T8987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.406026][ T8987]  ? clear_bhb_loop+0x60/0xb0
[  258.406037][ T8987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.406047][ T8987] RIP: 0033:0x7f9e5878f749
[  258.406058][ T8987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.406066][ T8987] RSP: 002b:00007f9e596e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.406078][ T8987] RAX: ffffffffffffffda RBX: 00007f9e589e5fa0 RCX: 00007f9e5878f749
[  258.406085][ T8987] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003
[  258.406092][ T8987] RBP: 00007f9e596e5090 R08: 0000000000000000 R09: 0000000000000000
[  258.406098][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.406103][ T8987] R13: 00007f9e589e6038 R14: 00007f9e589e5fa0 R15: 00007ffecb0558d8
[  258.406119][ T8987]  </TASK>
[  258.461919][ T6543] usb 4-1: new low-speed USB device number 105 using dummy_hcd
[  258.468211][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.637407][ T6543] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  258.637438][ T6543] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  258.637455][ T6543] usb 4-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config
[  258.637472][ T6543] usb 4-1: config 0 has no interface number 0
[  258.637498][ T6543] usb 4-1: too many endpoints for config 0 interface 21 altsetting 130: 193, using maximum allowed: 30
[  258.664619][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.760834][ T6543] usb 4-1: config 0 interface 21 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 193
[  258.774282][ T6543] usb 4-1: config 0 interface 21 has no altsetting 0
[  258.781098][ T6543] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  258.782116][ T5901] logitech 0003:046D:C29C.0018: no inputs found
[  258.790311][ T6543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.807977][ T6543] usb 4-1: config 0 descriptor??
[  258.830854][ T5901] usb 3-1: USB disconnect, device number 80
[  258.994090][ T5935] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  259.016050][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.025224][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.034920][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.045234][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.151923][ T5935] usb 2-1: Using ep0 maxpacket: 16
[  259.158999][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.170095][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.179990][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  259.194050][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  259.203306][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.214521][ T5935] usb 2-1: config 0 descriptor??
[  259.575139][ T6543] usb 4-1: string descriptor 0 read error: -71
[  259.591887][ T5919] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  259.605119][ T6543] usb 4-1: USB disconnect, device number 105
[  259.639449][ T5935] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max
[  259.655212][ T5935] microsoft 0003:045E:07DA.0019: item fetching failed at offset 31/34
[  259.669051][ T5935] microsoft 0003:045E:07DA.0019: parse failed
[  259.675407][ T5935] microsoft 0003:045E:07DA.0019: probe with driver microsoft failed with error -22
[  259.763467][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  259.777273][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  259.789387][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  259.799852][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  259.813480][ T5919] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  259.822806][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.845534][ T6543] usb 2-1: USB disconnect, device number 90
[  259.921177][ T5919] usb 3-1: config 0 descriptor??
[  260.182267][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.191072][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.203518][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'.
[  260.364738][ T9011] FAULT_INJECTION: forcing a failure.
[  260.364738][ T9011] name failslab, interval 1, probability 0, space 0, times 0
[  260.378522][ T9011] CPU: 1 UID: 0 PID: 9011 Comm: syz.3.974 Not tainted syzkaller #0 PREEMPT(full) 
[  260.378548][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  260.378558][ T9011] Call Trace:
[  260.378567][ T9011]  <TASK>
[  260.378575][ T9011]  dump_stack_lvl+0x189/0x250
[  260.378595][ T9011]  ? __pfx____ratelimit+0x10/0x10
[  260.378618][ T9011]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.378634][ T9011]  ? __pfx__printk+0x10/0x10
[  260.378655][ T9011]  ? save_netdev_trace_buffer+0x4b5/0x5a0
[  260.378692][ T9011]  should_fail_ex+0x414/0x560
[  260.378718][ T9011]  should_failslab+0xa8/0x100
[  260.378738][ T9011]  kmem_cache_alloc_noprof+0x88/0x710
[  260.378760][ T9011]  ? __netlink_lookup+0xbd/0x8a0
[  260.378779][ T9011]  ? skb_clone+0x212/0x3a0
[  260.378801][ T9011]  skb_clone+0x212/0x3a0
[  260.378823][ T9011]  __netlink_deliver_tap+0x424/0x8b0
[  260.378855][ T9011]  ? netlink_deliver_tap+0x2e/0x1b0
[  260.378875][ T9011]  netlink_deliver_tap+0x19c/0x1b0
[  260.378895][ T9011]  netlink_unicast+0x7fa/0x9e0
[  260.378928][ T9011]  ? __pfx_netlink_unicast+0x10/0x10
[  260.378955][ T9011]  ? netlink_sendmsg+0x642/0xb30
[  260.378971][ T9011]  ? skb_put+0x11b/0x210
[  260.378999][ T9011]  netlink_sendmsg+0x805/0xb30
[  260.379016][ T9011]  ? aa_sk_perm+0x15f/0x920
[  260.379044][ T9011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.379062][ T9011]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  260.379090][ T9011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.379107][ T9011]  sock_sendmsg_nosec+0x18f/0x1d0
[  260.379132][ T9011]  ____sys_sendmsg+0x577/0x880
[  260.379158][ T9011]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.379185][ T9011]  ? import_iovec+0x74/0xa0
[  260.379212][ T9011]  ___sys_sendmsg+0x21f/0x2a0
[  260.379232][ T9011]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.379257][ T9011]  ? rcu_read_lock_any_held+0xb3/0x120
[  260.379313][ T9011]  ? __fget_files+0x2a/0x420
[  260.379331][ T9011]  ? __fget_files+0x3a0/0x420
[  260.379359][ T9011]  __x64_sys_sendmsg+0x19b/0x260
[  260.379379][ T9011]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.379406][ T9011]  ? __pfx_ksys_write+0x10/0x10
[  260.379433][ T9011]  ? do_syscall_64+0xbe/0xf80
[  260.379460][ T9011]  do_syscall_64+0xfa/0xf80
[  260.379483][ T9011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.379500][ T9011]  ? clear_bhb_loop+0x60/0xb0
[  260.379521][ T9011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.379538][ T9011] RIP: 0033:0x7f5f91f8f749
[  260.379554][ T9011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.379568][ T9011] RSP: 002b:00007f5f92e78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.379588][ T9011] RAX: ffffffffffffffda RBX: 00007f5f921e5fa0 RCX: 00007f5f91f8f749
[  260.379601][ T9011] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003
[  260.379612][ T9011] RBP: 00007f5f92e78090 R08: 0000000000000000 R09: 0000000000000000
[  260.379623][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.379634][ T9011] R13: 00007f5f921e6038 R14: 00007f5f921e5fa0 R15: 00007ffc51cf7238
[  260.379664][ T9011]  </TASK>
[  260.712973][ T5919] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  260.962119][ T9034] netlink: 'syz.1.980': attribute type 10 has an invalid length.
[  260.969989][ T9034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.980'.
[  260.981080][ T9034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  260.998610][ T9034] netlink: 272 bytes leftover after parsing attributes in process `syz.1.980'.
[  261.094417][ T5881] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  261.183422][ T9041] netlink: 4416 bytes leftover after parsing attributes in process `syz.1.983'.
[  261.253204][ T5881] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  261.269191][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.279410][ T5881] usb 4-1: config 0 descriptor??
[  261.287464][ T5881] cp210x 4-1:0.0: cp210x converter detected
[  261.471931][ T5919] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  261.510888][ T6543] usb 3-1: USB disconnect, device number 81
[  261.623944][ T5919] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  261.635042][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  261.648476][ T5919] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  261.657789][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.668455][ T5919] usb 2-1: config 0 descriptor??
[  261.687695][ T5881] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  261.908137][ T5881] usb 4-1: cp210x converter now attached to ttyUSB0
[  262.084524][ T5919] razer 0003:1532:010D.001B: item fetching failed at offset 5/7
[  262.098630][ T5919] razer 0003:1532:010D.001B: probe with driver razer failed with error -22
[  262.169900][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'.
[  262.233993][ T5923] usb 4-1: USB disconnect, device number 106
[  262.245686][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  262.264520][ T5923] cp210x 4-1:0.0: device disconnected
[  262.282656][ T5935] usb 2-1: USB disconnect, device number 91
[  262.391931][ T5919] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  262.541960][ T5919] usb 3-1: Using ep0 maxpacket: 16
[  262.549075][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  262.558789][ T5919] usb 3-1: config 0 interface 0 has no altsetting 1
[  262.567618][ T5919] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[  262.577537][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.586050][ T5919] usb 3-1: Product: syz
[  262.590231][ T5919] usb 3-1: Manufacturer: syz
[  262.594997][ T5919] usb 3-1: SerialNumber: syz
[  262.601985][ T5919] usb 3-1: config 0 descriptor??
[  262.816756][ T5935] usb 3-1: USB disconnect, device number 82
[  263.091966][ T5923] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  263.112405][ T5919] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  263.244517][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short
[  263.253495][ T5923] usb 2-1: config 6 has an invalid interface number: 158 but max is 0
[  263.261680][ T5923] usb 2-1: config 6 has no interface number 0
[  263.263884][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.268517][ T5923] usb 2-1: config 6 interface 158 has no altsetting 0
[  263.280368][ T5919] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  263.286924][ T5923] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  263.294474][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.303326][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.311507][ T5919] usb 4-1: Product: syz
[  263.319348][ T5923] usb 2-1: Product: syz
[  263.323941][ T5919] usb 4-1: Manufacturer: syz
[  263.333535][ T5919] usb 4-1: SerialNumber: syz
[  263.343106][ T5923] usb 2-1: Manufacturer: syz
[  263.347751][ T5923] usb 2-1: SerialNumber: syz
[  263.349666][ T5919] usb 4-1: config 0 descriptor??
[  263.373843][ T5919] ims_pcu 4-1:0.0: Missing CDC union descriptor
[  263.381662][ T5919] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[  263.492494][ T9064] xfs: Unknown parameter 'usrquotax'
[  263.562886][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.571651][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.633019][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.642835][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.663014][ T5935] usb 4-1: USB disconnect, device number 107
[  263.698351][ T9069] FAULT_INJECTION: forcing a failure.
[  263.698351][ T9069] name failslab, interval 1, probability 0, space 0, times 0
[  263.712993][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.3.993 Not tainted syzkaller #0 PREEMPT(full) 
[  263.713021][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  263.713032][ T9069] Call Trace:
[  263.713039][ T9069]  <TASK>
[  263.713047][ T9069]  dump_stack_lvl+0x189/0x250
[  263.713069][ T9069]  ? __pfx____ratelimit+0x10/0x10
[  263.713093][ T9069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.713109][ T9069]  ? __pfx__printk+0x10/0x10
[  263.713136][ T9069]  ? __pfx___might_resched+0x10/0x10
[  263.713160][ T9069]  ? fs_reclaim_acquire+0x7d/0x100
[  263.713188][ T9069]  should_fail_ex+0x414/0x560
[  263.713213][ T9069]  should_failslab+0xa8/0x100
[  263.713232][ T9069]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  263.713259][ T9069]  ? __alloc_skb+0x255/0x430
[  263.713280][ T9069]  ? napi_skb_cache_get+0x4a5/0x780
[  263.713301][ T9069]  ? napi_skb_cache_get+0x151/0x780
[  263.713326][ T9069]  __alloc_skb+0x255/0x430
[  263.713351][ T9069]  ? __pfx___alloc_skb+0x10/0x10
[  263.713379][ T9069]  ? netlink_ack_tlv_len+0x6c/0x210
[  263.713400][ T9069]  netlink_ack+0x146/0xa50
[  263.713415][ T9069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.713453][ T9069]  netlink_rcv_skb+0x28c/0x470
[  263.713471][ T9069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.713493][ T9069]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.713527][ T9069]  ? down_read+0x274/0x2e0
[  263.713541][ T9069]  ? genl_rcv+0xd/0x40
[  263.713564][ T9069]  genl_rcv+0x28/0x40
[  263.713584][ T9069]  netlink_unicast+0x82f/0x9e0
[  263.713617][ T9069]  ? __pfx_netlink_unicast+0x10/0x10
[  263.713643][ T9069]  ? netlink_sendmsg+0x642/0xb30
[  263.713659][ T9069]  ? skb_put+0x11b/0x210
[  263.713685][ T9069]  netlink_sendmsg+0x805/0xb30
[  263.713702][ T9069]  ? aa_sk_perm+0x15f/0x920
[  263.713730][ T9069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.713749][ T9069]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  263.713787][ T9069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.713804][ T9069]  sock_sendmsg_nosec+0x18f/0x1d0
[  263.713828][ T9069]  ____sys_sendmsg+0x577/0x880
[  263.713854][ T9069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.713881][ T9069]  ? import_iovec+0x74/0xa0
[  263.713908][ T9069]  ___sys_sendmsg+0x21f/0x2a0
[  263.713928][ T9069]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.713952][ T9069]  ? rcu_read_lock_any_held+0xb3/0x120
[  263.713997][ T9069]  ? __fget_files+0x2a/0x420
[  263.714014][ T9069]  ? __fget_files+0x3a0/0x420
[  263.714042][ T9069]  __x64_sys_sendmsg+0x19b/0x260
[  263.714062][ T9069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.714089][ T9069]  ? __pfx_ksys_write+0x10/0x10
[  263.714116][ T9069]  ? do_syscall_64+0xbe/0xf80
[  263.714142][ T9069]  do_syscall_64+0xfa/0xf80
[  263.714166][ T9069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.714183][ T9069]  ? clear_bhb_loop+0x60/0xb0
[  263.714203][ T9069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.714220][ T9069] RIP: 0033:0x7f5f91f8f749
[  263.714237][ T9069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.714252][ T9069] RSP: 002b:00007f5f92e78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.714272][ T9069] RAX: ffffffffffffffda RBX: 00007f5f921e5fa0 RCX: 00007f5f91f8f749
[  263.714285][ T9069] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003
[  263.714297][ T9069] RBP: 00007f5f92e78090 R08: 0000000000000000 R09: 0000000000000000
[  263.714307][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.714318][ T9069] R13: 00007f5f921e6038 R14: 00007f5f921e5fa0 R15: 00007ffc51cf7238
[  263.714347][ T9069]  </TASK>
[  264.066549][ T5919] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  264.222121][ T5919] usb 3-1: Using ep0 maxpacket: 32
[  264.230300][ T5919] usb 3-1: config 249 has an invalid interface number: 229 but max is 1
[  264.239198][ T5919] usb 3-1: config 249 has an invalid interface number: 136 but max is 1
[  264.247772][ T5919] usb 3-1: config 249 contains an unexpected descriptor of type 0x1, skipping
[  264.256932][ T5919] usb 3-1: config 249 contains an unexpected descriptor of type 0x1, skipping
[  264.272106][ T5919] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config
[  264.282959][ T5919] usb 3-1: config 249 has no interface number 0
[  264.289234][ T5919] usb 3-1: config 249 has no interface number 1
[  264.296337][ T5919] usb 3-1: config 249 interface 229 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  264.307574][ T5919] usb 3-1: config 249 interface 229 altsetting 6 endpoint 0xA has an invalid bInterval 216, changing to 11
[  264.329732][ T5919] usb 3-1: config 249 interface 229 altsetting 6 endpoint 0x8 has invalid maxpacket 991, setting to 64
[  264.347843][ T5919] usb 3-1: config 249 interface 229 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0
[  264.358945][ T5919] usb 3-1: config 249 interface 229 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  264.369899][ T5919] usb 3-1: config 249 interface 136 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  264.383316][ T5919] usb 3-1: config 249 interface 229 has no altsetting 0
[  264.390289][ T5919] usb 3-1: config 249 interface 136 has no altsetting 0
[  264.399847][ T5919] usb 3-1: New USB device found, idVendor=0920, idProduct=7500, bcdDevice=52.00
[  264.409212][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.417308][ T5919] usb 3-1: Product: ⠊
[  264.421512][ T5919] usb 3-1: Manufacturer: 㐊
[  264.426215][ T5919] usb 3-1: SerialNumber: ओ鞝Ϩ
[  264.747575][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.756618][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.015297][ T9078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.996'.
[  265.391909][ T5935] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  265.462098][ T5838] Bluetooth: hci4: command 0x1003 tx timeout
[  265.469709][ T5832] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  265.516416][ T5919] ftdi_sio 3-1:249.229: FTDI USB Serial Device converter detected
[  265.528177][ T5919] ftdi_sio ttyUSB0: unknown device type: 0x5200
[  265.541073][ T5919] ftdi_sio 3-1:249.136: FTDI USB Serial Device converter detected
[  265.550692][ T5919] ftdi_sio ttyUSB1: unknown device type: 0x5200
[  265.555016][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.561292][ T5919] usb 3-1: USB disconnect, device number 83
[  265.573897][ T5935] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  265.579421][ T5919] ftdi_sio 3-1:249.229: device disconnected
[  265.583686][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.597799][ T5919] ftdi_sio 3-1:249.136: device disconnected
[  265.602707][ T5935] usb 4-1: config 0 descriptor??
[  265.843201][ T5923] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -71
[  265.875792][ T5923] usb 2-1: USB disconnect, device number 92
[  265.914278][ T5935] usbhid 4-1:0.0: can't add hid device: -71
[  265.930241][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  265.955729][ T5935] usb 4-1: USB disconnect, device number 109
[  266.321851][ T5923] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  266.361850][ T5914] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  266.491841][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  266.499036][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short
[  266.514520][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  266.524743][ T5923] usb 2-1: config 8 has an invalid interface number: 34 but max is 0
[  266.529303][ T5914] usb 3-1: New USB device found, idVendor=0424, idProduct=c230, bcdDevice=f1.73
[  266.532948][ T5923] usb 2-1: config 8 has no interface number 0
[  266.542926][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.556929][ T5914] usb 3-1: Product: syz
[  266.561228][ T5914] usb 3-1: Manufacturer: syz
[  266.569276][ T5914] usb 3-1: SerialNumber: syz
[  266.572680][ T5923] usb 2-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  266.585106][ T5923] usb 2-1: config 8 interface 34 has no altsetting 0
[  266.586787][ T5914] usb 3-1: config 0 descriptor??
[  266.600873][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c
[  266.631842][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.639977][ T5923] usb 2-1: Product: syz
[  266.644332][ T5923] usb 2-1: Manufacturer: syz
[  266.648939][ T5923] usb 2-1: SerialNumber: syz
[  266.806367][ T9094] batadv_slave_1: entered promiscuous mode
[  266.815642][ T9094] batadv_slave_1: left promiscuous mode
[  266.878062][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'.
[  266.955960][ T9107] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1004'.
[  266.996455][ T5914] usb 3-1: USB disconnect, device number 84
[  267.471844][ T5901] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  267.553581][ T9122] IPVS: length: 165 != 8
[  267.631863][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  267.633731][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.647615][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  267.659351][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  267.670327][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  267.680174][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  267.696425][ T5901] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  267.706127][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  267.714399][ T5901] usb 4-1: Product: syz
[  267.718724][ T5901] usb 4-1: Manufacturer: syz
[  267.723486][ T5901] usb 4-1: SerialNumber: syz
[  267.731048][ T5901] usb 4-1: config 0 descriptor??
[  267.802075][ T5914] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  267.938102][ T5901] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  267.945144][ T5901] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  267.961844][ T5914] usb 3-1: Using ep0 maxpacket: 32
[  267.969181][ T5914] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  267.980038][ T5914] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  267.992175][ T5914] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  268.003635][ T5914] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  268.019224][ T5914] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  268.028615][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.036749][ T5914] usb 3-1: Product: syz
[  268.040957][ T5914] usb 3-1: Manufacturer: syz
[  268.045795][ T5914] usb 3-1: SerialNumber: syz
[  268.056427][    C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  268.069254][ T5914] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input23
[  268.139113][ T5901] radio-si470x 4-1:0.0: software version 0, hardware version 0
[  268.148673][ T5901] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  268.161124][ T5901] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  268.271889][ T5914] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  268.280356][ T5914]  (id 0x00)
[  268.340305][ T5901] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  268.346011][ T5914] rc_core: IR keymap rc-imon-pad not found
[  268.356463][ T5914] Registered IR keymap rc-empty
[  268.364922][ T5914] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  268.375610][ T5914] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  268.473934][ T5914] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  268.486752][ T5914] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input24
[  268.501350][ T5914] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:85> initialized
[  268.950666][ T5901] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71
[  268.966962][ T5901] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[  268.980259][ T5901] usb 4-1: USB disconnect, device number 110
[  269.057471][ T5923] usb 2-1: USB disconnect, device number 93
[  269.147084][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.157144][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.763900][ T9146] befs: (nullb0): invalid magic header
[  270.007184][ T9145] imon:send_packet: packet tx failed (-71)
[  270.017111][ T5881] usb 3-1: USB disconnect, device number 85
[  270.052040][ T9145] imon:vfd_write: send packet #4 failed
[  270.216686][ T9159] sp0: Synchronizing with TNC
[  270.322093][ T9164] netlink: 'syz.1.1022': attribute type 4 has an invalid length.
[  270.333193][ T5923] usb 4-1: new low-speed USB device number 111 using dummy_hcd
[  270.504408][ T5923] usb 4-1: config 2 has an invalid interface number: 35 but max is 0
[  270.512781][ T5923] usb 4-1: config 2 has no interface number 0
[  270.518918][ T5923] usb 4-1: config 2 interface 35 has no altsetting 0
[  270.528531][ T5923] usb 4-1: string descriptor 0 read error: -22
[  270.535175][ T5923] usb 4-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9
[  270.544299][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.581898][ T6543] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  270.751925][ T6543] usb 2-1: Using ep0 maxpacket: 8
[  270.763939][ T6543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  270.791881][ T6543] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  270.796575][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.817596][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.830978][ T6543] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  270.840963][ T6543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.858484][ T6543] usb 2-1: Product: syz
[  270.864082][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.874499][ T6543] usb 2-1: Manufacturer: syz
[  270.879188][ T6543] usb 2-1: SerialNumber: syz
[  270.885388][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.897474][ T6543] usb 2-1: config 0 descriptor??
[  270.904261][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.924292][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.952263][ T5923] usb 4-1: USB disconnect, device number 111
[  271.601179][ T9175] overlay: ./bus is not a directory
[  271.749569][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801beedc00: rx timeout, send abort
[  272.259976][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801beedc00: abort rx timeout. Force session deactivation
[  272.364894][ T9187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1724906173 (13799249384 ns) > initial count (4205319368 ns). Using initial count to start timer.
[  272.383386][ T5881] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  272.548757][ T5881] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  272.584086][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.599765][ T5881] usb 3-1: Product: syz
[  272.604231][ T7945] IPVS: starting estimator thread 0...
[  272.617768][ T5881] usb 3-1: Manufacturer: syz
[  272.627844][ T5881] usb 3-1: SerialNumber: syz
[  272.649995][ T5881] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  272.670415][ T7945] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  272.724367][ T9195] IPVS: using max 31 ests per chain, 74400 per kthread
[  272.937434][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'.
[  273.214323][ T9206] fuse: Bad value for 'max_read'
[  273.350650][ T6543] usb 2-1: USB disconnect, device number 94
[  273.368453][ T5881] usb 3-1: USB disconnect, device number 86
[  273.801871][ T6543] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  273.941843][ T7945] usb 3-1: Service connection timeout for: 256
[  273.948313][ T7945] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  273.957752][ T7945] ath9k_htc: Failed to initialize the device
[  273.964643][ T5881] usb 3-1: ath9k_htc: USB layer deinitialized
[  273.981831][ T6543] usb 4-1: Using ep0 maxpacket: 8
[  273.990340][ T6543] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  274.011935][ T6543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.020017][ T6543] usb 4-1: Product: syz
[  274.041820][ T6543] usb 4-1: Manufacturer: syz
[  274.046473][ T6543] usb 4-1: SerialNumber: syz
[  274.063359][ T6543] usb 4-1: config 0 descriptor??
[  274.071033][ T6543] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  274.261845][ T5881] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  274.421998][ T5881] usb 3-1: Using ep0 maxpacket: 16
[  274.429075][ T5881] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[  274.437441][ T5881] usb 3-1: config 4 has no interface number 0
[  274.443799][ T5881] usb 3-1: config 4 interface 51 has no altsetting 0
[  274.454207][ T5881] usb 3-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b
[  274.463748][  T129] usb 2-1: new low-speed USB device number 95 using dummy_hcd
[  274.471613][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.481138][ T5881] usb 3-1: Product: syz
[  274.485477][ T5881] usb 3-1: Manufacturer: syz
[  274.490279][ T5881] usb 3-1: SerialNumber: syz
[  274.501474][ T5881] upd78f0730 3-1:4.51: upd78f0730 converter detected
[  274.515853][ T5881] usb 3-1: upd78f0730 converter now attached to ttyUSB0
[  274.621826][  T129] usb 2-1: Invalid ep0 maxpacket: 16
[  274.711245][ T5923] usb 3-1: USB disconnect, device number 87
[  274.729861][ T5923] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  274.743513][ T5923] upd78f0730 3-1:4.51: device disconnected
[  274.751842][  T129] usb 2-1: new low-speed USB device number 96 using dummy_hcd
[  274.824816][ T9240] netlink: 'syz.0.1049': attribute type 15 has an invalid length.
[  274.911977][  T129] usb 2-1: Invalid ep0 maxpacket: 16
[  274.917556][  T129] usb usb2-port1: attempt power cycle
[  275.091033][ T6543] usb 4-1: USB disconnect, device number 112
[  275.272450][  T129] usb 2-1: new low-speed USB device number 97 using dummy_hcd
[  275.292352][  T129] usb 2-1: Invalid ep0 maxpacket: 16
[  275.301460][ T9247] kvm: kvm [9246]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  275.310574][ T9247] kvm: kvm [9246]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  275.327152][ T9247] kvm_intel: kvm [9246]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  275.337917][ T9247] kvm: kvm [9246]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[  275.347327][ T9247] kvm: kvm [9246]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[  275.421920][  T129] usb 2-1: new low-speed USB device number 98 using dummy_hcd
[  275.443363][  T129] usb 2-1: Invalid ep0 maxpacket: 16
[  275.448978][  T129] usb usb2-port1: unable to enumerate USB device
[  275.571576][ T9256] netlink: 'syz.2.1053': attribute type 4 has an invalid length.
[  275.580347][ T9256] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1053'.
[  275.662093][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.734141][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.743937][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.755387][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.766800][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'.
[  275.797787][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.844702][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.860865][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  275.885961][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.911171][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.985879][ T9282] 9pnet_virtio: no channels available for device nl80211
[  276.261870][ T5914] usb 4-1: new full-speed USB device number 113 using dummy_hcd
[  276.413764][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  276.424813][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  276.436348][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64
[  276.447411][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  276.463638][ T5914] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  276.473025][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.481084][ T5914] usb 4-1: Product: syz
[  276.485395][ T5914] usb 4-1: Manufacturer: syz
[  276.490031][ T5914] usb 4-1: SerialNumber: syz
[  276.497096][ T5914] usb 4-1: config 0 descriptor??
[  276.506516][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25
[  276.532488][    C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  276.708536][ T5919] usb 4-1: USB disconnect, device number 113
[  276.733995][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  276.734014][   T30] audit: type=1326 audit(1764660849.587:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46b38f749 code=0x0
[  277.573433][ T5919] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  277.643965][ T9310] syzkaller0: entered promiscuous mode
[  277.649602][ T9310] syzkaller0: entered allmulticast mode
[  277.656893][ T9310] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  277.743557][ T5919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  277.755133][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  277.756546][   T30] audit: type=1326 audit(1764660850.607:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.2.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46b38f749 code=0x0
[  277.768359][ T5919] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  277.801376][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.813917][ T5919] usb 4-1: config 0 descriptor??
[  278.061863][ T6543] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  278.221809][ T6543] usb 3-1: Using ep0 maxpacket: 8
[  278.231844][ T6543] usb 3-1: unable to get BOS descriptor or descriptor too short
[  278.241145][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.248510][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.256036][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.263515][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.270720][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.278377][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.285576][ T6543] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  278.294815][ T5919] razer 0003:1532:010D.001C: unknown main item tag 0x0
[  278.303633][ T6543] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  278.311834][ T6543] usb 3-1: Manufacturer: syz
[  278.316473][ T6543] usb 3-1: SerialNumber: syz
[  278.322613][ T5919] razer 0003:1532:010D.001C: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0
[  278.515629][  T129] usb 4-1: USB disconnect, device number 114
[  278.540316][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.553334][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.564736][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.575324][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.597724][ T9313] ==================================================================
[  278.605830][ T9313] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40
[  278.613304][ T9313] Read of size 1 at addr ffff88807bd98d98 by task syz.2.1067/9313
[  278.621110][ T9313] 
[  278.623457][ T9313] CPU: 1 UID: 0 PID: 9313 Comm: syz.2.1067 Not tainted syzkaller #0 PREEMPT(full) 
[  278.623482][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  278.623494][ T9313] Call Trace:
[  278.623504][ T9313]  <TASK>
[  278.623511][ T9313]  dump_stack_lvl+0x189/0x250
[  278.623533][ T9313]  ? __virt_addr_valid+0x1c8/0x5c0
[  278.623550][ T9313]  ? rcu_is_watching+0x15/0xb0
[  278.623567][ T9313]  ? __kasan_check_byte+0x12/0x40
[  278.623592][ T9313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.623608][ T9313]  ? rcu_is_watching+0x15/0xb0
[  278.623624][ T9313]  ? lock_release+0x4b/0x3b0
[  278.623648][ T9313]  ? __virt_addr_valid+0x1c8/0x5c0
[  278.623666][ T9313]  ? __virt_addr_valid+0x4a5/0x5c0
[  278.623680][ T9313]  print_report+0xca/0x240
[  278.623690][ T9313]  ? _raw_spin_lock+0x2e/0x40
[  278.623702][ T9313]  kasan_report+0x118/0x150
[  278.623711][ T9313]  ? _raw_spin_lock+0x2e/0x40
[  278.623723][ T9313]  ? mqueue_flush_file+0x49/0x270
[  278.623738][ T9313]  __kasan_check_byte+0x2a/0x40
[  278.623761][ T9313]  lock_acquire+0x84/0x340
[  278.623785][ T9313]  ? __pfx_mqueue_flush_file+0x10/0x10
[  278.623799][ T9313]  _raw_spin_lock+0x2e/0x40
[  278.623816][ T9313]  ? mqueue_flush_file+0x49/0x270
[  278.623831][ T9313]  mqueue_flush_file+0x49/0x270
[  278.623847][ T9313]  ? filp_flush+0xae/0x190
[  278.623865][ T9313]  ? __pfx_mqueue_flush_file+0x10/0x10
[  278.623880][ T9313]  filp_flush+0xbd/0x190
[  278.623898][ T9313]  filp_close+0x1d/0x40
[  278.623916][ T9313]  put_files_struct+0x1ba/0x350
[  278.623936][ T9313]  do_exit+0x67f/0x2310
[  278.623957][ T9313]  ? do_raw_spin_lock+0x121/0x290
[  278.623975][ T9313]  ? __pfx_do_exit+0x10/0x10
[  278.623991][ T9313]  ? raw_ioctl+0x19f5/0x40d0
[  278.624006][ T9313]  do_group_exit+0x21c/0x2d0
[  278.624016][ T9313]  ? lockdep_hardirqs_on+0x98/0x140
[  278.624030][ T9313]  get_signal+0x1285/0x1340
[  278.624059][ T9313]  arch_do_signal_or_restart+0x9a/0x7a0
[  278.624082][ T9313]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  278.624107][ T9313]  ? exit_to_user_mode_loop+0x55/0x4f0
[  278.624129][ T9313]  exit_to_user_mode_loop+0x87/0x4f0
[  278.624141][ T9313]  ? rcu_is_watching+0x15/0xb0
[  278.624151][ T9313]  do_syscall_64+0x2e3/0xf80
[  278.624165][ T9313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.624174][ T9313]  ? clear_bhb_loop+0x60/0xb0
[  278.624187][ T9313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.624204][ T9313] RIP: 0033:0x7ff46b38f34b
[  278.624229][ T9313] Code: Unable to access opcode bytes at 0x7ff46b38f321.
[  278.624238][ T9313] RSP: 002b:00007ff46c148f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  278.624257][ T9313] RAX: fffffffffffffff0 RBX: 000000000000000a RCX: 00007ff46b38f34b
[  278.624270][ T9313] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a
[  278.624279][ T9313] RBP: 00007ff46c149fe0 R08: 0000000000000000 R09: 00322e6364755f79
[  278.624286][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.624292][ T9313] R13: 00007ff46c148fb0 R14: 0000200000000040 R15: 00007ff46b7113f0
[  278.624303][ T9313]  </TASK>
[  278.624307][ T9313] 
[  278.916171][ T9313] Allocated by task 9312:
[  278.920492][ T9313]  kasan_save_track+0x3e/0x80
[  278.925182][ T9313]  __kasan_slab_alloc+0x6c/0x80
[  278.930058][ T9313]  kmem_cache_alloc_lru_noprof+0x36c/0x6e0
[  278.935950][ T9313]  mqueue_alloc_inode+0x28/0x40
[  278.940792][ T9313]  alloc_inode+0x6a/0x1b0
[  278.945106][ T9313]  new_inode+0x22/0x170
[  278.949250][ T9313]  mqueue_get_inode+0x27/0xb50
[  278.954007][ T9313]  mqueue_create_attr+0x1ac/0x2e0
[  278.959021][ T9313]  vfs_mkobj+0xcf/0x290
[  278.963169][ T9313]  do_mq_open+0x60d/0x7c0
[  278.967481][ T9313]  __x64_sys_mq_open+0x16a/0x1c0
[  278.972422][ T9313]  do_syscall_64+0xfa/0xf80
[  278.976924][ T9313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.982814][ T9313] 
[  278.985123][ T9313] Freed by task 0:
[  278.988847][ T9313]  kasan_save_track+0x3e/0x80
[  278.993534][ T9313]  kasan_save_free_info+0x46/0x50
[  278.998553][ T9313]  __kasan_slab_free+0x5c/0x80
[  279.003315][ T9313]  kmem_cache_free+0x197/0x620
[  279.008081][ T9313]  rcu_core+0xd70/0x1870
[  279.012319][ T9313]  handle_softirqs+0x27d/0x850
[  279.017080][ T9313]  __irq_exit_rcu+0xca/0x1f0
[  279.021670][ T9313]  irq_exit_rcu+0x9/0x30
[  279.025917][ T9313]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  279.031572][ T9313]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  279.037669][ T9313] 
[  279.040001][ T9313] Last potentially related work creation:
[  279.045705][ T9313]  kasan_save_stack+0x3e/0x60
[  279.050388][ T9313]  kasan_record_aux_stack+0xbd/0xd0
[  279.055578][ T9313]  call_rcu+0x157/0x9c0
[  279.059729][ T9313]  evict+0x931/0xae0
[  279.063643][ T9313]  __dentry_kill+0x209/0x660
[  279.068779][ T9313]  finish_dput+0xc9/0x480
[  279.073112][ T9313]  __fput+0x68e/0xa70
[  279.077084][ T9313]  task_work_run+0x1d4/0x260
[  279.081667][ T9313]  exit_to_user_mode_loop+0xff/0x4f0
[  279.086949][ T9313]  do_syscall_64+0x2e3/0xf80
[  279.091633][ T9313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.097516][ T9313] 
[  279.099945][ T9313] The buggy address belongs to the object at ffff88807bd98d80
[  279.099945][ T9313]  which belongs to the cache mqueue_inode_cache of size 1576
[  279.114684][ T9313] The buggy address is located 24 bytes inside of
[  279.114684][ T9313]  freed 1576-byte region [ffff88807bd98d80, ffff88807bd993a8)
[  279.128486][ T9313] 
[  279.130806][ T9313] The buggy address belongs to the physical page:
[  279.137217][ T9313] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bd98
[  279.145970][ T9313] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  279.154457][ T9313] memcg:ffff888078bc4c01
[  279.158689][ T9313] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  279.166222][ T9313] page_type: f5(slab)
[  279.170195][ T9313] raw: 00fff00000000040 ffff88801d782b40 dead000000000122 0000000000000000
[  279.178771][ T9313] raw: 0000000000000000 0000000080120012 00000000f5000000 ffff888078bc4c01
[  279.187352][ T9313] head: 00fff00000000040 ffff88801d782b40 dead000000000122 0000000000000000
[  279.196028][ T9313] head: 0000000000000000 0000000080120012 00000000f5000000 ffff888078bc4c01
[  279.204700][ T9313] head: 00fff00000000003 ffffea0001ef6601 00000000ffffffff 00000000ffffffff
[  279.213394][ T9313] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  279.222050][ T9313] page dumped because: kasan: bad access detected
[  279.228479][ T9313] page_owner tracks the page as allocated
[  279.234179][ T9313] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6706, tgid 6705 (syz.3.229), ts 130937897219, free_ts 130859182400
[  279.255454][ T9313]  post_alloc_hook+0x234/0x290
[  279.260227][ T9313]  get_page_from_freelist+0x2365/0x2440
[  279.265902][ T9313]  __alloc_frozen_pages_noprof+0x181/0x370
[  279.271729][ T9313]  alloc_pages_mpol+0x232/0x4a0
[  279.276572][ T9313]  allocate_slab+0x86/0x3b0
[  279.281157][ T9313]  ___slab_alloc+0xf2b/0x1960
[  279.285851][ T9313]  __slab_alloc+0x65/0x100
[  279.290319][ T9313]  kmem_cache_alloc_lru_noprof+0x3fe/0x6e0
[  279.296125][ T9313]  mqueue_alloc_inode+0x28/0x40
[  279.300968][ T9313]  alloc_inode+0x6a/0x1b0
[  279.305303][ T9313]  new_inode+0x22/0x170
[  279.309471][ T9313]  mqueue_fill_super+0xdc/0x380
[  279.314426][ T9313]  get_tree_nodev+0xbb/0x150
[  279.319024][ T9313]  vfs_get_tree+0x92/0x2a0
[  279.323508][ T9313]  fc_mount_longterm+0x1c/0x100
[  279.328419][ T9313]  mq_init_ns+0x275/0x360
[  279.332749][ T9313] page last free pid 5199 tgid 5199 stack trace:
[  279.339064][ T9313]  __free_frozen_pages+0xbc8/0xd30
[  279.344172][ T9313]  __put_partials+0x146/0x170
[  279.348845][ T9313]  put_cpu_partial+0x1f2/0x2d0
[  279.353597][ T9313]  __slab_free+0x288/0x2a0
[  279.358005][ T9313]  qlist_free_all+0x97/0x100
[  279.362584][ T9313]  kasan_quarantine_reduce+0x148/0x160
[  279.368033][ T9313]  __kasan_slab_alloc+0x22/0x80
[  279.372879][ T9313]  __kmalloc_cache_noprof+0x37c/0x700
[  279.378247][ T9313]  kernfs_fop_open+0x397/0xca0
[  279.383011][ T9313]  do_dentry_open+0x7ce/0x1420
[  279.387858][ T9313]  vfs_open+0x3b/0x340
[  279.391922][ T9313]  path_openat+0x340e/0x3dd0
[  279.396618][ T9313]  do_filp_open+0x1fa/0x410
[  279.401132][ T9313]  do_sys_openat2+0x121/0x200
[  279.405804][ T9313]  __x64_sys_openat+0x138/0x170
[  279.410647][ T9313]  do_syscall_64+0xfa/0xf80
[  279.415153][ T9313] 
[  279.417480][ T9313] Memory state around the buggy address:
[  279.423131][ T9313]  ffff88807bd98c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  279.431448][ T9313]  ffff88807bd98d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  279.439685][ T9313] >ffff88807bd98d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.447737][ T9313]                             ^
[  279.452581][ T9313]  ffff88807bd98e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.460632][ T9313]  ffff88807bd98e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.468697][ T9313] ==================================================================
[  279.477726][ T9313] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  279.484937][ T9313] CPU: 1 UID: 0 PID: 9313 Comm: syz.2.1067 Not tainted syzkaller #0 PREEMPT(full) 
[  279.494301][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  279.504490][ T9313] Call Trace:
[  279.507783][ T9313]  <TASK>
[  279.510708][ T9313]  dump_stack_lvl+0x99/0x250
[  279.515304][ T9313]  ? __asan_memcpy+0x40/0x70
[  279.519936][ T9313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.525197][ T9313]  ? __pfx__printk+0x10/0x10
[  279.529908][ T9313]  vpanic+0x237/0x6d0
[  279.534019][ T9313]  ? __pfx_vpanic+0x10/0x10
[  279.538533][ T9313]  ? irqentry_exit+0x5dd/0x660
[  279.543366][ T9313]  ? trace_irq_disable+0x37/0x100
[  279.548411][ T9313]  panic+0xb9/0xc0
[  279.552148][ T9313]  ? __pfx_panic+0x10/0x10
[  279.556677][ T9313]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  279.562587][ T9313]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  279.568921][ T9313]  ? _raw_spin_lock+0x2e/0x40
[  279.573599][ T9313]  check_panic_on_warn+0x89/0xb0
[  279.578554][ T9313]  ? _raw_spin_lock+0x2e/0x40
[  279.583293][ T9313]  end_report+0x6f/0x140
[  279.587556][ T9313]  kasan_report+0x129/0x150
[  279.592078][ T9313]  ? _raw_spin_lock+0x2e/0x40
[  279.596785][ T9313]  ? mqueue_flush_file+0x49/0x270
[  279.601812][ T9313]  __kasan_check_byte+0x2a/0x40
[  279.606686][ T9313]  lock_acquire+0x84/0x340
[  279.611141][ T9313]  ? __pfx_mqueue_flush_file+0x10/0x10
[  279.616607][ T9313]  _raw_spin_lock+0x2e/0x40
[  279.621118][ T9313]  ? mqueue_flush_file+0x49/0x270
[  279.626151][ T9313]  mqueue_flush_file+0x49/0x270
[  279.631097][ T9313]  ? filp_flush+0xae/0x190
[  279.635604][ T9313]  ? __pfx_mqueue_flush_file+0x10/0x10
[  279.641068][ T9313]  filp_flush+0xbd/0x190
[  279.645314][ T9313]  filp_close+0x1d/0x40
[  279.649471][ T9313]  put_files_struct+0x1ba/0x350
[  279.654333][ T9313]  do_exit+0x67f/0x2310
[  279.658511][ T9313]  ? do_raw_spin_lock+0x121/0x290
[  279.663534][ T9313]  ? __pfx_do_exit+0x10/0x10
[  279.668143][ T9313]  ? raw_ioctl+0x19f5/0x40d0
[  279.672791][ T9313]  do_group_exit+0x21c/0x2d0
[  279.677393][ T9313]  ? lockdep_hardirqs_on+0x98/0x140
[  279.682612][ T9313]  get_signal+0x1285/0x1340
[  279.687157][ T9313]  arch_do_signal_or_restart+0x9a/0x7a0
[  279.692713][ T9313]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  279.698870][ T9313]  ? exit_to_user_mode_loop+0x55/0x4f0
[  279.704379][ T9313]  exit_to_user_mode_loop+0x87/0x4f0
[  279.709671][ T9313]  ? rcu_is_watching+0x15/0xb0
[  279.714428][ T9313]  do_syscall_64+0x2e3/0xf80
[  279.719033][ T9313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.725120][ T9313]  ? clear_bhb_loop+0x60/0xb0
[  279.729812][ T9313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.735759][ T9313] RIP: 0033:0x7ff46b38f34b
[  279.740277][ T9313] Code: Unable to access opcode bytes at 0x7ff46b38f321.
[  279.747311][ T9313] RSP: 002b:00007ff46c148f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  279.755728][ T9313] RAX: fffffffffffffff0 RBX: 000000000000000a RCX: 00007ff46b38f34b
[  279.763705][ T9313] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a
[  279.771682][ T9313] RBP: 00007ff46c149fe0 R08: 0000000000000000 R09: 00322e6364755f79
[  279.779646][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.787609][ T9313] R13: 00007ff46c148fb0 R14: 0000200000000040 R15: 00007ff46b7113f0
[  279.795580][ T9313]  </TASK>
[  279.799094][ T9313] Kernel Offset: disabled
[  279.803515][ T9313] Rebooting in 86400 seconds..