last executing test programs:

6.191111293s ago: executing program 1 (id=1041):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000000)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x430a3011}], 0x1, 0x40000000, 0x0)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xf, 0x1e, 0x8f, 0x20, 0x4c1, 0x9d, 0xcf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x2, 0x40, 0x3, 0xc0, 0x6, [{{0x9, 0x4, 0xe3, 0x6, 0x0, 0x55, 0x80, 0xbe, 0x9}}, {{0x9, 0x4, 0x9, 0xe, 0x0, 0x52, 0x42, 0x72, 0x4, [@generic={0x2, 0x21}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1409}}]})

5.949424768s ago: executing program 2 (id=1044):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x5, 0x9, 0xd25, 0x7, 0x60b, 0x8ae9, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}})
rt_sigprocmask(0x1, &(0x7f0000000000)={[0xb]}, &(0x7f0000000200), 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1b950000f44313209911aa68b2c30102030109021200010000000009040a0000c2d20400"], 0x0)

4.873391253s ago: executing program 1 (id=1050):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x14}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000380)={0x14, &(0x7f0000000840)={0x40, 0x9, 0xf8, {0xf8, 0x31, "728c9f21b16d24f0f5060e55422a6b213b3b2adcbd88209471e33ffbc1198f3620d06265d4e7ebbac7842bfa51c3b6790a733ea81c8f762efe1ea9d29f1e8267dfb8b8dbec93931ebb895d5d0a11e19b6a49654ff025a9a9a896ddac5bba46267ca1e24613921894792e8e1c104266b0bf2278155d3fdefe566674a46e0ff7d00afe085f318540ddfcc8b3834970825dcb207fed45a99cf9ea1e5308b8c23bd92a5fc9a1cf53bc82ae5c1269d896afb00617a455eb5064609110987167bbe12d61290f712098cf446125bb74ebe14e7210cacaab0487f78530d55968b4073f3b711930b7cdd260ee07ddffa1a970875af1f0c0d62e6d"}}, &(0x7f0000000940)={0x0, 0x3, 0x90, @string={0x90, 0x3, "b6e74870698477b0b730423e2849d79e38144d3d8c52b96e15aec2c8124407d3f28a675dc82314288a4a2e3873d75d3461af1b7aa86f1927ef6d2ace555447d78bb1ce112e38dc675f2292b991de5ade52644e3ccf0bf979ccbbd0ef5cb7a4350759aacaa73830a63983a3e55a192cca264404faadfd27d5f7b07e2b5744e5c1d2def82fb6a5807194dd1abe09da"}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000a00)={0x40, 0x14, 0x17, "59b4205096b0cf74acc26d67fb54d27cf7495d34d54cf9"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e80)={0x21, 0x0, 0x3, "292d9a"}})
syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x9, 0x61, {0x61, 0x23, "b1e28f735a2bce7571542eda77a5537873aa65de13afbf7dcffa8c69f0bc2f67105c32f7cab1a7327e5f25acbc65a50c778fd033abe15e0db7eec1a27646448b80a631c27f6332e0f83687589cb7dc4fb5711e80aa325c812a64f6d542e0a2"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000240)={0x0, 0x0, 0xbc, "c8cbb32b9ad05b66e55e4d9a1fc85aa6ff5e3433b12253f889995a5ee9ca491b9d102549968c003915998d4a30aba81668fef27d1ee045607d0e366b444146d44d4101c48a61557e82ae1b7feda989a5b004a5c7163e1862e627cecb4a431125e5d97f0bba06d0be8b70362a3a2cdab199a1ec2ad0043fd3c91caca2c59b068ff1d34b199df7c3c1d70174af2df634ccfbef69ac6abfdcd7d71e1b208f3c58194b2f2a0e040e94bcd30e71abeb1d4e7a66fe3476b213431dc8edf071"}, &(0x7f0000000400)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000180)={0x21, 0x0, 0x3, "954bf6"}})

2.88513236s ago: executing program 2 (id=1060):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, <r3=>0xffffffffffffffff, {0x2}}, './file0\x00'})
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x28048895)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)

2.621684969s ago: executing program 2 (id=1062):
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x1a6}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c", 0xc4}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x200000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.617348577s ago: executing program 2 (id=1064):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x9}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000001c00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x68, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x40000)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x24, 0x0, &(0x7f00000002c0))
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'nicvf0\x00'}}, 0x1e)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d00)={0x4c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x45004)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x16d0, r3, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x588, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xf}, @broadcast, @device_b, @initial, {0x5, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x1204, 0x5f, @default, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0xfffffff8, 0x6}}, [{0xdd, 0xf4, "e0f235761b1c2641c837525232d1614aa3d87cd33c5c890e2cb91375445c7f22fc75c0176264cfd2a3704ed62e6c500a5fd5cfe0b7a708965fc667cce88908fb9283ff49d28d4d271ea351e28b9e998c5bef78ba0ff5338a1dcbf25434bd8d9fc6fffb69236843086109e6eb029e3146b390eb67d24b25a8dffddba076899bf6b3f898a63622199c8e6c251d8260c1ed1dc01534b048edd850663ee07051470e6be3b63becf2f0eb2baf84d8ca1b6a77aadd68335ba6c3ff2512052b0ed9e3515b3a134e34ed9b06812857de232dd52cb44f33ed1e5bbedc10abb471466d0fcc3717993be2c6dd855f8df99fd98e45f476907942"}, {0xdd, 0x5e, "ab09fbc15e7d2a01941fcdc0d0026507d4aefa0d19b0160b7adba27bff873cd2ce013fa203b872ead2ca081d5c8d5e3b9985cd3a6396f9a17d08485a922a12259b304024424cdac129f721605068294cea3604e0dd186194bc2d592fe816"}, {0xdd, 0x2d, "bb4ca51147bd79dde1624ccbb6055175a12da04992719175814eb05d801a2a01968477b05a0a2c7c8334773c40"}, {0xdd, 0x45, "158722ef3f858435f4145dcab1cc7a23ea748ae0695c3caeb3f37b652dd2d09f9487435ee62bb5e65520d957ebaf256344927ddd031d4708b29ce0056cb9229cae390eb69b"}, {0xdd, 0xfb, "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"}, {0xdd, 0xd2, "64fa989d03b2519162019989d9843f377b430c473b8cf578f19d2b8ab6352d3f0b68a11e4e86bd14821d5e31d08f247d3303c946ec3737d6209f8c65b643b8d905ad47ceab1b7f22085ab892fe5b36569bf4c492cfbe099015c8f9f03c88b7817a0e26fcebdef5d8c2b6ba55d88fc143a40d01378db7bd7c9b623f09d75a100ff6a20eb21558f6f6473ebc02d8b9b0c9049282bb084a93b2f31128f0e5ecc91b9ec41629625887d70cfa9d9111574acd7bd125d3bbc2e764da984c68183ade478f9cd645d48f26e8eb1d0f9626a780ded40d"}, {0xdd, 0xf6, "7e593133d68cd05a6c6c0c04ae71e8dc75e7eeb6afe66c4d9ed3f9e1cbfaebf76490acd5fe1b0bd06ee9ade84cca97af0a17ea304e0be3dbd989a8b1e72f10da43bc79bb7789bc79190ac46c6f586912ed586f9cdc11b66b20926aeebe5b1d847c598eb317a4a190b6bbd9648923a39dd7e65c3965320942b961ffe2b84928d318d5a1bfb794c64899e0c6694a8919652e14184f7a61acbdbaa603628328fc711387c2cfb5a6d9290fb3582a34be4c7c74ec30597c40b8a646e813795c19cf8c74612c9cd4110a5f4b03495383130cd7fe59da838c6f8e7a913a23f267c3d6c37c3d2de7ad61e5e5452f20b71923fbca5ad9e916ead0"}, {0xdd, 0xaf, "3c0ac5c96f6af81e2a5aaa2c974b1dee16f493cf45f5e04d9dbc5f15a2c8836a915581b2104233e1b2e04ba5bd85443047db17972a2f731fa4a42a04b3bef076807d3bd38e2faa715a04b8a332668af7839f34023a4540bf8c5c01abf4ddc7f1618adc2563b7986bec4c09631768cceb237b028cea08a8deddb67c1e9e7f18ab2a86554adaaca15d079fe3a690b188beeec5fa7b564ddb24aa37a358406e4b88d15b0a7592c4a65aa706b57b0517e1"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x10d8, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @device_b, {0x8, 0x8}, @device_a, @value={0xe, 0x1, 0x1, 0x0, 0x8}, @value=@ver_80211n={0x0, 0x21e, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x1000, "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"}, {@broadcast, @device_b, 0x92, "1459c7ce0f258a47f01cf46e4efb3d2e839268b4a8f30bfd3f8084762d253517ad0890f5e581c48b0a76757e7e28b6bf31889d72603431328a5498f73c5cc2e20e10c3e162669200b9e2534c7e59b9cfc573485609861f9d48dde3eae7698b86c67ddc9982e7de1793a4ca4b3d1b24328044256119d54f67dbf830ed9346b10e1cabf35db2ab06b1a4a60ab1ced3081d763c"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x16d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$KVM_X86_SETUP_MCE(r13, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x5, 0x9})
setns(r10, 0x24020000)

2.616907766s ago: executing program 2 (id=1065):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', <r1=>0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @empty}}}})
syz_usb_connect(0x0, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x4b, 0x16, 0x8, 0x1039, 0x2111, 0xa11e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0x3c, 0x9e, 0x2e, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "63be32"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x433e, 0x8}, [@obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x9, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}]}]}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x4b, 0x16, 0x8, 0x1039, 0x2111, 0xa11e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0x3c, 0x9e, 0x2e, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "63be32"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x433e, 0x8}, [@obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x9, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}]}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x8, 0x10, 0x6, 0x7, {{0x10, 0x4, 0x2, 0x3, 0x40, 0x67, 0x0, 0x85, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0x1c, 0x74, 0x1, 0x3, [{@rand_addr=0x64010102, 0x7}, {@empty, 0x905}, {@remote, 0x40}]}, @end, @timestamp_addr={0x44, 0xc, 0xc4, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xd}]}]}}}}})
openat2(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) (async)
openat2(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)

1.76018696s ago: executing program 1 (id=1076):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = syz_open_dev$vim2m(0x0, 0x10003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x4, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x39565559})
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000040))
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000005840)={0x18, 0x0, 0x56})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002e40)='bic', 0x3)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x3, 0x400000)
dup2(0xffffffffffffffff, r6)

1.546299487s ago: executing program 3 (id=1079):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2)
madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
syz_usb_connect(0x4, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x90, 0x9a, 0x54, 0x8, 0x499, 0x7010, 0xc6a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x81, 0x6, 0x10}}]}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async)
mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) (async)
madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async)
syz_usb_connect(0x4, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x90, 0x9a, 0x54, 0x8, 0x499, 0x7010, 0xc6a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x81, 0x6, 0x10}}]}}, 0x0) (async)

1.311259997s ago: executing program 0 (id=1081):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x18, 0x20, 0x87, 0x0})

1.304469828s ago: executing program 0 (id=1082):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = syz_open_dev$loop(&(0x7f0000001580), 0x80000000, 0x501980)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000001680)={0x1, 0x0, 0x98, &(0x7f00000015c0)={0x1ff, 0x400, 0x6}})
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x110, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0xfc, 0x0, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@random="6a5cf0e37b58"}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
modify_ldt$write(0x1, &(0x7f0000000340)={0x346e, 0x20000800, 0xffffffffffffbbff, 0x0, 0x0, 0x1}, 0x10)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x18, 0x20, 0x87, 0x0})
r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_current(r4, &(0x7f0000000000)=@profile={'permprofile ', ']\x96%)//.!-\x00'}, 0x16)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001480), 0xffffffffffffffff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000016c0)={<r8=>0x0, 0x57, "8e0819756483eb77aa72431adbc357cf195b52d6f0bdfd6b1f8f54316ed33b34fd1a7f47ab4c7f47b1d5a060bbf18b388b7948776771c81a171cfd8a95b69f3803e0b9695836c643180bf0f5d91850fa4396523fa1578e"}, &(0x7f0000001740)=0x5f)
setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000001780)=@assoc_id=r8, 0x4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a62123e7", @ANYRES16=r6, @ANYBLOB="000327bd7000fddbdf250100000008000b000300000006000e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24044101}, 0x4000)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000440)={{r0}, "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"})

1.195930402s ago: executing program 2 (id=1083):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000140))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180, &(0x7f0000000180)={0x82, 0x1, 0x40000, {r0}}, 0x20) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f00000000c0)={0x20, 0x0, 0x52, {0x52, 0x21, "6da495d2d178500ca629a4785a13a4cad047bd3b528fc606744108c32fd998008a3ab556f76cb71ee782a626377c2e8ea9133926a1e61391fd7386d0b14d87521ca84e055837efde7390ccec92b0ffa7"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.05674273s ago: executing program 0 (id=1084):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x18, 0x20, 0x87, 0x0}) (fail_nth: 2)

790.384918ms ago: executing program 0 (id=1085):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0xffff, 0x4000, 0x0, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}]}, 0x154}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x1)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x64)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x1000, 0x9, 0x0, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet(0x2, 0x4000000000000001, 0x0)
close(0x3)

772.602055ms ago: executing program 3 (id=1086):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100001000000000000000000e00000020000000000000000000000000a0101000000000000000000000000004e240000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)

635.987073ms ago: executing program 3 (id=1087):
mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002600)='gfs2\x00', 0x2208004, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup\x00'})
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x7, 0x13a20000}, 0x100, './cgroup\x00'})
r1 = open$dir(&(0x7f0000000000)='./cgroup\x00', 0x82, 0x60)
statx(r1, &(0x7f0000000080)='./cgroup\x00', 0x800, 0x4, &(0x7f00000000c0))

599.174364ms ago: executing program 1 (id=1088):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x9}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000001c00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x68, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x40000)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x24, 0x0, &(0x7f00000002c0))
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'nicvf0\x00'}}, 0x1e)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d00)={0x4c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x45004)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x4)
ioctl$KVM_X86_SETUP_MCE(r13, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x5, 0x9})
setns(r10, 0x24020000)

564.001659ms ago: executing program 3 (id=1089):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)

467.884937ms ago: executing program 0 (id=1090):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) (fail_nth: 2)

293.45165ms ago: executing program 3 (id=1091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000100000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a32"], 0x6c}}, 0x0)

156.913151ms ago: executing program 0 (id=1092):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x4)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@empty, @in6=@loopback, 0x2, 0x1, 0xff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24020800}, 0x20040810)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000080))
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120141016cf426203d100101ea77400203010902120001000090010904"], 0x0)

151.388078ms ago: executing program 1 (id=1093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00!\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="040081000a000600080211000001000006001a010400"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0)

84.63265ms ago: executing program 3 (id=1094):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x1, 0x2})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x0, 0x40d})
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e64"])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x100, 0xc78, 0x40, 0x4, 0x80, 0xffffffff, 0x20, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xfffffec1, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r5, 0x0, r4})
r6 = dup(r2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="fd060299aeb19205379e4829abc655ad", 0x10)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000017ffffdfffffffaaaaaaaaaabb0873cb56651209379215922c004540001c00004000002f90787f000000f9ffff"], 0x2e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x5, 0x1e, 0x2}, {0x4, 0x1, 0x2, 0x2}]})

0s ago: executing program 1 (id=1095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x11c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x6de}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x3, 0x2a}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xbe, 0x9, 0x1b}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xfe, 0xc, 0x5, 0x20, 0x3}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf4, 0x81, 0x4, 0xb9}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44b}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "94bea92bf30d58d8edea89d0e3745529b5cd05"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44a}}]})
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x60, 0xc, 0xf3, {0xf3, 0x4, "e5eddcb804d1a0018a9099771ef42dc11d2b0daf38852068ee6ec44ff626892f0f204d122ab82191cb103051264627d27daf6dcc0d22313d8caca9c8ccbb1b8c0490ef7ac8cd3231c94d8e987c8796497b853f22a918069a36b25afbfd958408df133891a6f3fbd3b711007521761589f89678c2fabfeefaf08f1ad7d297d63db3137c2566dce2a28db5192f845d510dfe4dd3fd5ed1e19bd6664c8f500c5984d52f66a3ed69e1b9c707c82f150fe1226e9cc080632ff6da6bbd37b11bb28073fdb478dd1ddead5b11415388b16a8d328437751a4d7decd180d98fea967a81769125c4811b45dd057e35710b52230990b6"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000001640)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x5bfd}, @generic={0x21, 0x10, 0x2, "9a3a6c96b8f393a7a1508e8052167570b01e833d667a5d66ddb3877eb8b2"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x9, 0x6, "4ad8a228", "1a01894c"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x4, 0x3, 0xc, 0x8, 0x7fff}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x40, 0x6, 0x76, "f9f91e758556a2e010ee5ced49fdae69236f25934aa5a8b86bdf88051edef586615fd2b772f112e01a7c794ce5cadd3d62dc601df3420a597e60833ac9e72be8c1d4abe265307d2d07246f5f9cf202cf835996f5d1a3afaf193a098349e58ceab6c3519c5b1237bd570085dc208a50189f7a2214d0b6"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0xa0, 0x10}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0xb, 0x2, "88c6"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "ceb3"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0xa9}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x2}})
bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000100), 0x0) (async)
writev(r0, &(0x7f0000000100), 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2)
ppoll(&(0x7f0000000080)=[{r3, 0x100}, {r3, 0x1a9}], 0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xf3}}}}}]}}]}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "00168720"}]}}, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x2a0, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28e, 0x2, 0x1, 0x75, 0x80, 0x2c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "576416ee"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0xffff, 0x1f}, {0x6}, [@mdlm_detail={0x104, 0x24, 0x13, 0x9, "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"}, @mdlm={0x15}, @country_functional={0xc, 0x24, 0x7, 0x2, 0xca5c, [0xe, 0xa583, 0xa]}, @mdlm_detail={0xef, 0x24, 0x13, 0x6, "4c05e0274b747f66944baaae91f6a6cd46b7597ba54d9f364d29e765c6d2722f45881f12013258fee4376d1a3a27cd48c08c182dd0fe92e7b9efa46f45f686b9dab74628eb58611b2a812b3a1d01cec477ea70316e65d26c8870c74f41355d3ad6535d31a86bbbb9ed590ea35806d01fca6bfcabcd48c85337c1bacc56341358354ed0850a0bd293836b34357549ecc4bcb6ecc00451eb7c4c4976fe87666096c77b54e132d240c64391c9d8af9e12e929a26f17746537ce346adc2798851ff58464cd9f381ee37fd54d4caf30a2a9b745fbf0a864aa377b850a83af6a1cfc71af916a64c75fe7e106ba6c"}, @mdlm={0x15, 0x24, 0x12, 0xcf2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xc5, 0x8f, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x34, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xb, 0x8}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x200, 0xd, 0x3, 0x4e, 0x10, 0x5}, 0x106, &(0x7f0000000f40)={0x5, 0xf, 0x106, 0x5, [@generic={0xdd, 0x10, 0xa, "9f430ccd8bb227bb3a738134e95ee2a2c9faa0a781d43284beb3ffe317141770fdcefb781bdd2f6206d7ba433a586a296e4383daca8e0a0367eb4327e4ba9af531762eb05a98643fe19a5a05e8c5fd8887be45cbf82a89b3ed5d4980d2178b728fc279ad9658132eceb7a21912d6578cea73d72b8ec6a231306b711b54671f8fc4e25f8a50e2ca5888cfe436c667d877063d7a4e4f1f1b167d49377521200769f63f476fa350193e033b4515df48b7da0c76042e137d80de657c88ddf8216b02a443e41f6df9ed178132a6d31eb14caaeff7acbf50b39cb9ab69"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2551adf75e7d8ab153184cef10337576"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x3, 0xa0}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x34, &(0x7f0000001080)=@string={0x34, 0x3, "8b274f26b238dffe267dc22b75a8be3c96f7b44a2a0cc4683d3d3ea1598c2555af1fd03d54b39f355fab0657b1b50dc5dcbf"}}, {0xc1, &(0x7f0000001200)=@string={0xc1, 0x3, "9d0b23ab1906dd235d05132eade30ba1fff28a6e8ed91627430937bd4e2a162d03c8f7e7c6fc87395f5508732863ff80dd42b172544d3acd10453aa85676e8a43b0b02ad0514593eebe8cc8c941fd4f2c3f5483636be44f3ef55928187dd7d9a7d50150ef341c08152e4aafe5112cf478d62ad09e063c398360453052dde80cbeaef381ba357075855dcd0856e3e82ff418796fc282761cbf3cb643c1697e5a4db3aa906335c968320dccc69db2849b2b76f9f3728625ae58eb62baeac7cc2"}}, {0xdb, &(0x7f0000001300)=@string={0xdb, 0x3, "12a00536f35f19f7a01f9ac82f0675be0de1bf124fccd2a0df0dc93bfc9c839ca606e01cf30be2c17b854f8b3c7e14cdfd3b1190c599bbed5bef7b6ed9a8e1dfefb59358d7bf7c6601d3cad31e500a06c22e1d4d202b018c498b136da8d7adcea8e7434096878d1288dd341994ee0b1ecb80967d6bd684b8cec1c83e61789cb75a194bc354ce8a06a180ff9b929854837f1ca0cccead627922ec3202c17a9762480d15d1dd632dbe0f4e80afcae8c130635a6050453443354e33dd28cf5d47e3cf483c3a9e737ea1544dfa96493327ae3dc35e714e94244029"}}]})
syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001180)={0x14, &(0x7f0000001400)={0x0, 0x5, 0xdb, {0xdb, 0x21, "34ea167256d9ae04d58663ebff60187cf511f2f2957b4a915033846ba4977d1753e0598d0bfcf2f288c56bc4c701ea860c5ff23836302feac6770317f00991e73bf91d0a6ebd092292491435d521c97171d4a87b41a91207e159a9c07dc79e8311b7ba4f12c69b96d8487b273e826a11942699d84451a580d68e3bd83c94a19c57d22dad7758a6ec2c8aa7c20c8160fd9d0d7ef4681026109f144e8a9ef0e09ca6b5436e8a5d3ffdd1e2db0f5d2e8e32f54be9263b5f3558da15207ce8267b8377c1d0882dea94c0a64da86c984eb4ba6a81cf9b300a154c80"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001600)={0x1c, &(0x7f0000001500)={0x0, 0x16, 0x41, "495a1a21b95ffdb11ab54bb2046a2064cd916bea5771ce2e95142066b6c8c0d61a7dd36212fda71ba3c3e1f3f6d61a71e408288b91c97f2b036b2d2d95499dd49f"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000015c0)={0x0, 0x8, 0x1}}) (async)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001180)={0x14, &(0x7f0000001400)={0x0, 0x5, 0xdb, {0xdb, 0x21, "34ea167256d9ae04d58663ebff60187cf511f2f2957b4a915033846ba4977d1753e0598d0bfcf2f288c56bc4c701ea860c5ff23836302feac6770317f00991e73bf91d0a6ebd092292491435d521c97171d4a87b41a91207e159a9c07dc79e8311b7ba4f12c69b96d8487b273e826a11942699d84451a580d68e3bd83c94a19c57d22dad7758a6ec2c8aa7c20c8160fd9d0d7ef4681026109f144e8a9ef0e09ca6b5436e8a5d3ffdd1e2db0f5d2e8e32f54be9263b5f3558da15207ce8267b8377c1d0882dea94c0a64da86c984eb4ba6a81cf9b300a154c80"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001600)={0x1c, &(0x7f0000001500)={0x0, 0x16, 0x41, "495a1a21b95ffdb11ab54bb2046a2064cd916bea5771ce2e95142066b6c8c0d61a7dd36212fda71ba3c3e1f3f6d61a71e408288b91c97f2b036b2d2d95499dd49f"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000015c0)={0x0, 0x8, 0x1}})

kernel console output (not intermixed with test programs):

 bytes leftover after parsing attributes in process `syz.3.645'.
[  194.927836][ T5887] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  194.956666][ T5887] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  195.035073][ T7876] FAULT_INJECTION: forcing a failure.
[  195.035073][ T7876] name failslab, interval 1, probability 0, space 0, times 0
[  195.048372][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT(full) 
[  195.048396][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  195.048407][ T7876] Call Trace:
[  195.048415][ T7876]  <TASK>
[  195.048423][ T7876]  dump_stack_lvl+0xe8/0x150
[  195.048453][ T7876]  should_fail_ex+0x412/0x560
[  195.048479][ T7876]  should_failslab+0xa8/0x100
[  195.048506][ T7876]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  195.048538][ T7876]  ? __alloc_skb+0x1d0/0x7d0
[  195.048564][ T7876]  ? __local_bh_enable_ip+0xd0/0x130
[  195.048592][ T7876]  __alloc_skb+0x1d0/0x7d0
[  195.048624][ T7876]  netlink_dump+0x1ef/0xe80
[  195.048661][ T7876]  ? __pfx_netlink_dump+0x10/0x10
[  195.048709][ T7876]  ? genl_start+0x499/0x6c0
[  195.048736][ T7876]  __netlink_dump_start+0x5cb/0x7e0
[  195.048771][ T7876]  genl_family_rcv_msg_dumpit+0x213/0x310
[  195.048796][ T7876]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  195.048816][ T7876]  ? genl_get_cmd+0x4a8/0x930
[  195.048840][ T7876]  ? __pfx_genl_start+0x10/0x10
[  195.048858][ T7876]  ? __pfx_genl_dumpit+0x10/0x10
[  195.048876][ T7876]  ? __pfx_genl_done+0x10/0x10
[  195.048901][ T7876]  ? __lock_acquire+0x6b5/0x2cf0
[  195.048930][ T7876]  genl_rcv_msg+0x5e8/0x7a0
[  195.048955][ T7876]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.048974][ T7876]  ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10
[  195.048995][ T7876]  ? __lock_acquire+0x6b5/0x2cf0
[  195.049028][ T7876]  netlink_rcv_skb+0x232/0x4b0
[  195.049055][ T7876]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.049076][ T7876]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  195.049119][ T7876]  ? down_read+0x272/0x2e0
[  195.049141][ T7876]  ? genl_rcv+0xd/0x40
[  195.049162][ T7876]  genl_rcv+0x28/0x40
[  195.049179][ T7876]  netlink_unicast+0x80f/0x9b0
[  195.049211][ T7876]  ? __pfx_netlink_unicast+0x10/0x10
[  195.049236][ T7876]  ? netlink_sendmsg+0x650/0xb40
[  195.049261][ T7876]  ? skb_put+0x11b/0x210
[  195.049282][ T7876]  netlink_sendmsg+0x813/0xb40
[  195.049317][ T7876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.049346][ T7876]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  195.049378][ T7876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.049403][ T7876]  sock_sendmsg_nosec+0x18f/0x1d0
[  195.049431][ T7876]  ____sys_sendmsg+0x589/0x8c0
[  195.049460][ T7876]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.049488][ T7876]  ? import_iovec+0x73/0xa0
[  195.049516][ T7876]  ___sys_sendmsg+0x2a5/0x360
[  195.049540][ T7876]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.049593][ T7876]  ? __fget_files+0x2a/0x420
[  195.049617][ T7876]  ? __fget_files+0x3a0/0x420
[  195.049652][ T7876]  __x64_sys_sendmsg+0x1bd/0x2a0
[  195.049674][ T7876]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.049708][ T7876]  ? __pfx_ksys_write+0x10/0x10
[  195.049738][ T7876]  do_syscall_64+0x14d/0xf80
[  195.049758][ T7876]  ? trace_irq_disable+0x3b/0x150
[  195.049783][ T7876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.049802][ T7876]  ? clear_bhb_loop+0x40/0x90
[  195.049825][ T7876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.049843][ T7876] RIP: 0033:0x7f67cad9bf79
[  195.049860][ T7876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.049876][ T7876] RSP: 002b:00007f67cbc2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.049896][ T7876] RAX: ffffffffffffffda RBX: 00007f67cb015fa0 RCX: 00007f67cad9bf79
[  195.049910][ T7876] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009
[  195.049921][ T7876] RBP: 00007f67cbc2d090 R08: 0000000000000000 R09: 0000000000000000
[  195.049933][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.049943][ T7876] R13: 00007f67cb016038 R14: 00007f67cb015fa0 R15: 00007ffd6aac29b8
[  195.049973][ T7876]  </TASK>
[  195.117754][ T7874] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  195.296987][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[  196.746020][ T5910] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  196.865627][ T7902] netlink: 14 bytes leftover after parsing attributes in process `syz.0.656'.
[  196.928269][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.950222][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  196.963584][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  196.975505][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  196.985957][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  197.001500][ T5910] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  197.015244][ T7906] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.657'.
[  197.017382][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  197.034903][ T7906] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.657'.
[  197.049400][ T5910] usb 3-1: Product: syz
[  197.059563][ T5910] usb 3-1: Manufacturer: syz
[  197.064606][ T5910] usb 3-1: SerialNumber: syz
[  197.073478][ T5910] usb 3-1: config 0 descriptor??
[  197.135795][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  197.144295][ T5887] usb 2-1: USB disconnect, device number 38
[  197.199125][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  197.275703][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  197.296039][ T5910] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  197.309680][ T5887] quatech2 2-1:0.51: device disconnected
[  197.325774][ T5910] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  197.497761][ T5910] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  197.530026][ T5910] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  197.546317][ T5910] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  197.625388][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.663'.
[  197.695277][ T5910] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  197.863252][ T7937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.666'.
[  198.284890][ T7948] netlink: 136 bytes leftover after parsing attributes in process `syz.3.670'.
[  198.497103][ T5910] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  198.507035][ T5910] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  198.550521][ T5910] usb 3-1: USB disconnect, device number 33
[  198.836018][ T5887] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  198.968474][ T5887] usb 4-1: device descriptor read/64, error -71
[  198.986556][ T7963] netlink: 14 bytes leftover after parsing attributes in process `syz.1.676'.
[  199.072019][ T7966] binder: 7965:7966 ioctl c0306201 0 returned -14
[  199.082268][ T7966] binder: 7965:7966 ioctl c0306201 2000000000c0 returned -11
[  199.206117][ T5887] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  199.353741][ T5887] usb 4-1: device descriptor read/64, error -71
[  199.476432][ T5887] usb usb4-port1: attempt power cycle
[  199.516137][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'.
[  199.690242][ T7988] trusted_key: encrypted_key: master key parameter is missing
[  199.767456][ T5869] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  199.783409][ T7990] netlink: 14 bytes leftover after parsing attributes in process `syz.1.686'.
[  199.816212][ T5887] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  199.846564][ T5887] usb 4-1: device descriptor read/8, error -71
[  199.948122][ T5869] usb 1-1: Using ep0 maxpacket: 8
[  199.960906][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short
[  199.973564][ T5869] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024
[  199.985476][ T5869] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[  200.003418][ T5869] usb 1-1: config 8 interface 0 has no altsetting 0
[  200.061714][ T5869] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  200.070978][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.079101][ T5869] usb 1-1: Product: syz
[  200.083340][ T5869] usb 1-1: Manufacturer: syz
[  200.088079][ T5869] usb 1-1: SerialNumber: syz
[  200.116073][ T5887] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  200.136859][ T5887] usb 4-1: device descriptor read/8, error -71
[  200.216113][   T24] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  200.247110][ T5887] usb usb4-port1: unable to enumerate USB device
[  200.308935][ T5869] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  200.316628][ T5869] usb 1-1: selecting invalid altsetting 0
[  200.367688][ T5869] usb 1-1: USB disconnect, device number 36
[  200.373011][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.386939][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  200.399096][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  200.441227][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  200.452022][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  200.473896][   T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  200.483470][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  200.491871][   T24] usb 2-1: Product: syz
[  200.496749][   T24] usb 2-1: Manufacturer: syz
[  200.501387][   T24] usb 2-1: SerialNumber: syz
[  200.509803][   T24] usb 2-1: config 0 descriptor??
[  200.726651][   T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  200.733501][   T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  200.929428][   T24] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  200.940908][ T8004] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.690'.
[  200.954014][   T24] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  200.966959][   T24] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  201.130100][   T24] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  201.145775][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[  201.529473][ T8025] netlink: 14 bytes leftover after parsing attributes in process `syz.0.696'.
[  201.566057][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  201.711669][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  201.724226][ T8031] Invalid source name
[  201.732028][ T8031] UBIFS error (pid: 8031): cannot open "./file0", error -22
[  201.869165][ T8033] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[  201.941378][   T24] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  201.953245][   T24] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  201.980123][   T24] usb 2-1: USB disconnect, device number 39
[  202.396055][ T5887] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  202.551163][ T5887] usb 3-1: Using ep0 maxpacket: 32
[  202.564864][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0
[  202.583684][ T5887] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  202.616196][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.624301][ T5887] usb 3-1: Product: syz
[  202.636716][ T5887] usb 3-1: Manufacturer: syz
[  202.641440][ T5887] usb 3-1: SerialNumber: syz
[  202.679685][ T5887] usb 3-1: config 0 descriptor??
[  202.692819][ T5887] gs_usb 3-1:0.0: Required endpoints not found
[  202.913721][   T24] usb 3-1: USB disconnect, device number 34
[  202.947131][ T8053] netlink: 14 bytes leftover after parsing attributes in process `syz.1.706'.
[  203.406127][ T5887] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  203.556014][   T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  203.568200][ T5887] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.589607][ T5887] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  203.613241][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0
[  203.620076][ T5887] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  203.630456][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.644124][ T5887] usb 1-1: config 0 descriptor??
[  203.727829][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.738171][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  203.749768][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  203.760955][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  203.770823][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  203.786267][   T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  203.795366][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  203.803885][   T10] usb 2-1: Product: syz
[  203.808415][   T10] usb 2-1: Manufacturer: syz
[  203.813115][   T10] usb 2-1: SerialNumber: syz
[  203.824111][   T10] usb 2-1: config 0 descriptor??
[  203.876318][ T8063] af_packet: tpacket_rcv: packet too big, clamped from 5044 to 3952. macoff=96
[  204.035509][   T10] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  204.042583][   T10] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  204.090721][ T5887] gembird 0003:11FF:3331.0009: item fetching failed at offset 2/5
[  204.101035][ T5887] gembird 0003:11FF:3331.0009: probe with driver gembird failed with error -22
[  204.243168][   T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32
[  204.251762][   T10] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  204.263125][   T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  204.313013][ T5910] usb 1-1: USB disconnect, device number 37
[  204.418016][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'.
[  204.472106][ T8086] netlink: 'syz.3.716': attribute type 10 has an invalid length.
[  204.485023][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.716'.
[  204.494711][ T8086] batadv0: entered promiscuous mode
[  204.500709][ T8086] batadv0: entered allmulticast mode
[  204.507588][ T8086] bridge0: port 3(batadv0) entered blocking state
[  204.535721][ T8086] bridge0: port 3(batadv0) entered disabled state
[  204.628663][ T8091] netlink: 14 bytes leftover after parsing attributes in process `syz.2.717'.
[  204.698891][ T8096] FAULT_INJECTION: forcing a failure.
[  204.698891][ T8096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.716927][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.3.718 Not tainted syzkaller #0 PREEMPT(full) 
[  204.716956][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  204.716970][ T8096] Call Trace:
[  204.716977][ T8096]  <TASK>
[  204.716986][ T8096]  dump_stack_lvl+0xe8/0x150
[  204.717020][ T8096]  should_fail_ex+0x412/0x560
[  204.717048][ T8096]  _copy_from_user+0x2d/0xb0
[  204.717077][ T8096]  do_tcp_getsockopt+0x22e/0x2950
[  204.717116][ T8096]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  204.717146][ T8096]  ? sock_recv_errqueue+0x4f0/0x590
[  204.717177][ T8096]  ? __lock_acquire+0x6b5/0x2cf0
[  204.717204][ T8096]  ? aa_label_sk_perm+0x532/0x6e0
[  204.717229][ T8096]  ? kstrtoull+0x12f/0x1d0
[  204.717250][ T8096]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  204.717271][ T8096]  ? kstrtouint+0x6e/0xe0
[  204.717296][ T8096]  ? get_pid_task+0x20/0x1f0
[  204.717333][ T8096]  ? __lock_acquire+0x6b5/0x2cf0
[  204.717375][ T8096]  ? aa_sk_perm+0x6d5/0x900
[  204.717413][ T8096]  tcp_getsockopt+0x83/0x130
[  204.717448][ T8096]  ? sock_recv_errqueue+0x4f0/0x590
[  204.717475][ T8096]  ? sock_recv_errqueue+0x4f0/0x590
[  204.717501][ T8096]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  204.717531][ T8096]  do_sock_getsockopt+0x2d3/0x3f0
[  204.717556][ T8096]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  204.717578][ T8096]  ? __fget_files+0x3a0/0x420
[  204.717605][ T8096]  ? __fget_files+0x2a/0x420
[  204.717639][ T8096]  __x64_sys_getsockopt+0x1a4/0x240
[  204.717670][ T8096]  do_syscall_64+0x14d/0xf80
[  204.717693][ T8096]  ? trace_irq_disable+0x3b/0x150
[  204.717720][ T8096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.717741][ T8096]  ? clear_bhb_loop+0x40/0x90
[  204.717766][ T8096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.717786][ T8096] RIP: 0033:0x7f67cad9bf79
[  204.717805][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.717829][ T8096] RSP: 002b:00007f67cbc0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  204.717851][ T8096] RAX: ffffffffffffffda RBX: 00007f67cb016090 RCX: 00007f67cad9bf79
[  204.717866][ T8096] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  204.717878][ T8096] RBP: 00007f67cbc0c090 R08: 0000200000000100 R09: 0000000000000000
[  204.717890][ T8096] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  204.717903][ T8096] R13: 00007f67cb016128 R14: 00007f67cb016090 R15: 00007ffd6aac29b8
[  204.717934][ T8096]  </TASK>
[  205.006160][ T1324] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  205.015884][ T1324] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  205.154011][ T8103] vxfs: WRONG superblock magic 00000000 at 1
[  205.163859][ T8103] vxfs: WRONG superblock magic 00000000 at 8
[  205.171430][ T8103] vxfs: can't find superblock.
[  205.880871][ T8123] netlink: 14 bytes leftover after parsing attributes in process `syz.3.729'.
[  206.091376][ T8130] netlink: 'syz.2.731': attribute type 7 has an invalid length.
[  206.121501][ T8130] : entered promiscuous mode
[  206.221915][ T8134] FAULT_INJECTION: forcing a failure.
[  206.221915][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.239354][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.3.732 Not tainted syzkaller #0 PREEMPT(full) 
[  206.239385][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  206.239398][ T8134] Call Trace:
[  206.239407][ T8134]  <TASK>
[  206.239416][ T8134]  dump_stack_lvl+0xe8/0x150
[  206.239449][ T8134]  should_fail_ex+0x412/0x560
[  206.239490][ T8134]  _copy_from_user+0x2d/0xb0
[  206.239519][ T8134]  ___sys_sendmsg+0x1c6/0x360
[  206.239546][ T8134]  ? __pfx____sys_sendmsg+0x10/0x10
[  206.239604][ T8134]  ? __fget_files+0x2a/0x420
[  206.239631][ T8134]  ? __fget_files+0x3a0/0x420
[  206.239668][ T8134]  __x64_sys_sendmsg+0x1bd/0x2a0
[  206.239694][ T8134]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  206.239722][ T8134]  ? __pfx_ksys_write+0x10/0x10
[  206.239754][ T8134]  do_syscall_64+0x14d/0xf80
[  206.239776][ T8134]  ? trace_irq_disable+0x3b/0x150
[  206.239804][ T8134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.239824][ T8134]  ? clear_bhb_loop+0x40/0x90
[  206.239849][ T8134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.239869][ T8134] RIP: 0033:0x7f67cad9bf79
[  206.239888][ T8134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.239906][ T8134] RSP: 002b:00007f67cbc2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.239928][ T8134] RAX: ffffffffffffffda RBX: 00007f67cb015fa0 RCX: 00007f67cad9bf79
[  206.239942][ T8134] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003
[  206.239956][ T8134] RBP: 00007f67cbc2d090 R08: 0000000000000000 R09: 0000000000000000
[  206.239968][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.239980][ T8134] R13: 00007f67cb016038 R14: 00007f67cb015fa0 R15: 00007ffd6aac29b8
[  206.240012][ T8134]  </TASK>
[  206.424309][ T8136] netlink: 'syz.2.733': attribute type 4 has an invalid length.
[  206.493388][ T8138] netlink: 'syz.1.734': attribute type 7 has an invalid length.
[  206.503820][   T24] usb 2-1: USB disconnect, device number 40
[  206.564463][ T8138] : entered promiscuous mode
[  206.694897][ T8145] netlink: 84 bytes leftover after parsing attributes in process `syz.1.737'.
[  206.809111][ T5887] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  206.951112][ T8153] netlink: 14 bytes leftover after parsing attributes in process `syz.1.739'.
[  206.986080][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  206.998536][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0
[  207.021089][ T5887] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  207.040631][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.062546][ T5887] usb 4-1: Product: syz
[  207.071475][ T5887] usb 4-1: Manufacturer: syz
[  207.085094][ T5887] usb 4-1: SerialNumber: syz
[  207.121265][ T5887] usb 4-1: config 0 descriptor??
[  207.422390][ T5822] Bluetooth: hci0: Invalid handle: 0x95c9 > 0x0eff
[  207.478751][ T5869] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  207.542666][ T5887] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  207.616096][   T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  207.659227][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.670015][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  207.682212][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  207.694647][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  207.705041][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  207.722091][ T5869] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  207.732112][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  207.740658][ T5869] usb 1-1: Product: syz
[  207.745107][ T5869] usb 1-1: Manufacturer: syz
[  207.750679][ T5869] usb 1-1: SerialNumber: syz
[  207.760710][ T5869] usb 1-1: config 0 descriptor??
[  207.777193][   T10] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  207.791070][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.799722][   T10] usb 3-1: Product: syz
[  207.803924][   T10] usb 3-1: Manufacturer: syz
[  207.808637][   T10] usb 3-1: SerialNumber: syz
[  207.817873][   T10] usb 3-1: config 0 descriptor??
[  207.835737][ T5822] Bluetooth: hci4: urb ffff888036528600 submission failed (2)
[  207.958491][ T5887] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO)
[  207.968714][ T5887] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[  207.989402][ T5869] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  208.006508][ T5869] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  208.029214][ T8167] netlink: 'syz.2.744': attribute type 4 has an invalid length.
[  208.053244][   T24] usb 3-1: USB disconnect, device number 35
[  208.160745][ T8142] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.160769][ T8174] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.177458][ T5887] usb 4-1: USB disconnect, device number 36
[  208.190785][ T5869] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32
[  208.201410][ T5869] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  208.214225][ T5869] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  208.895993][   T24] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  209.039665][ T8189] netlink: 14 bytes leftover after parsing attributes in process `syz.2.751'.
[  209.077844][   T24] usb 2-1: too many configurations: 224, using maximum allowed: 8
[  209.089070][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.102289][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.115750][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.128674][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.140257][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.153253][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.177415][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.189984][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.200969][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.212941][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.224898][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.241830][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.272183][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.289415][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.313835][   T24] usb 2-1: config 2 has an invalid descriptor of length 203, skipping remainder of the config
[  209.334119][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  209.351459][   T24] usb 2-1: string descriptor 0 read error: -22
[  209.358433][   T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=3e.fb
[  209.367998][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.604169][   T24] usb 2-1: USB disconnect, device number 41
[  210.056020][   T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  210.219481][   T24] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  210.262764][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 512, setting to 64
[  210.282123][ T5910] usb 1-1: USB disconnect, device number 38
[  210.293549][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  210.343330][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.359722][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.368593][   T24] usb 4-1: SerialNumber: syz
[  210.400601][   T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  210.584984][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'.
[  210.603566][ T8215] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  210.611946][ T8215] netlink: 244 bytes leftover after parsing attributes in process `syz.2.759'.
[  210.625410][ T8205] IPVS: Error connecting to the multicast addr
[  210.783174][ T8221] netlink: 14 bytes leftover after parsing attributes in process `syz.0.761'.
[  211.055310][ T5869] usb 4-1: USB disconnect, device number 37
[  211.136969][   T24] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  211.316052][ T5887] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  211.320066][   T24] usb 3-1: config 0 has an invalid interface number: 107 but max is 0
[  211.332529][   T24] usb 3-1: config 0 has no interface number 0
[  211.339456][   T24] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64
[  211.353785][   T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  211.363313][   T24] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  211.372487][   T24] usb 3-1: Product: syz
[  211.376964][   T24] usb 3-1: Manufacturer: syz
[  211.381632][   T24] usb 3-1: SerialNumber: syz
[  211.386371][ T5910] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  211.398589][   T24] usb 3-1: config 0 descriptor??
[  211.405047][ T8225] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  211.418448][   T24] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected
[  211.427075][   T24] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81
[  211.436449][ T5869] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  211.439907][   T24] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1
[  211.454330][   T24] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  211.466489][   T24] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2
[  211.477667][   T24] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  211.480422][ T5887] usb 1-1: config 0 has an invalid interface number: 107 but max is 0
[  211.493004][   T24] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4
[  211.507899][   T24] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  211.519392][   T24] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6
[  211.524532][ T5887] usb 1-1: config 0 has no interface number 0
[  211.536861][   T24] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  211.543899][ T5887] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64
[  211.547461][ T5910] usb 2-1: Using ep0 maxpacket: 16
[  211.568413][ T5910] usb 2-1: config 251 has an invalid interface number: 202 but max is 0
[  211.569092][ T5887] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  211.577537][ T5910] usb 2-1: config 251 has no interface number 0
[  211.593967][ T5910] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  211.605411][ T5910] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  211.615677][ T5887] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  211.624363][ T5869] usb 4-1: Using ep0 maxpacket: 32
[  211.633572][ T5887] usb 1-1: Product: syz
[  211.638798][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  211.654155][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'.
[  211.656728][ T5887] usb 1-1: Manufacturer: syz
[  211.666236][ T5910] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  211.669125][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  211.710255][ T5910] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  211.721678][ T5887] usb 1-1: SerialNumber: syz
[  211.728986][ T5869] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  211.738699][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.756733][ T5869] usb 4-1: Product: syz
[  211.762031][ T5869] usb 4-1: Manufacturer: syz
[  211.776370][ T5869] usb 4-1: SerialNumber: syz
[  211.786660][ T5910] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  211.807189][ T5887] usb 1-1: config 0 descriptor??
[  211.820366][ T5910] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 40568, setting to 1024
[  211.825119][ T8234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  211.839617][ T5910] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024
[  211.850093][ T5869] usb 4-1: config 0 descriptor??
[  211.858556][ T5910] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  211.858941][ T5869] usb 4-1: no audio or video endpoints found
[  211.880887][ T5910] usb 2-1: config 251 interface 202 has no altsetting 0
[  211.889522][ T5887] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected
[  211.898644][ T5910] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  211.911591][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  211.921327][ T5887] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81
[  211.933091][ T5910] usb 2-1: Product: syz
[  211.945973][ T5910] usb 2-1: SerialNumber: syz
[  211.949691][ T5887] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1
[  211.969117][ T8237] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  211.986716][ T5887] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB4
[  211.997085][ T5887] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2
[  212.007750][ T5887] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB5
[  212.019071][ T5887] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4
[  212.029428][ T5887] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB6
[  212.040320][ T5887] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6
[  212.056465][ T5887] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB7
[  212.110041][   T24] usb 4-1: USB disconnect, device number 38
[  212.217330][ T5910] cxacru 2-1:251.202: submit of write urb for cm 0x90 failed (-90)
[  212.225769][ T5910] cxacru 2-1:251.202: usbatm_usb_probe: invalid endpoint 02!
[  212.234790][ T5910] cxacru 2-1:251.202: probe with driver cxacru failed with error -22
[  212.256263][ T5910] usb 2-1: USB disconnect, device number 42
[  212.275198][ T8240] usb usb8: usbfs: process 8240 (syz.1.765) did not claim interface 32 before use
[  212.946082][ T5887] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  213.097882][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.108471][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  213.120287][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  213.132175][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  213.142846][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  213.157748][ T5887] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  213.167063][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  213.175158][ T5887] usb 4-1: Product: syz
[  213.179462][ T5887] usb 4-1: Manufacturer: syz
[  213.184097][ T5887] usb 4-1: SerialNumber: syz
[  213.191536][ T5887] usb 4-1: config 0 descriptor??
[  213.402583][ T5887] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  213.416026][ T5887] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  213.605446][ T5887] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32
[  213.614053][ T5887] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  213.623913][ T5887] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  213.696352][ T8255] netlink: 14 bytes leftover after parsing attributes in process `syz.1.770'.
[  213.842092][ T5874] usb 3-1: USB disconnect, device number 36
[  213.870779][ T5874] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  213.890693][ T5874] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  213.914079][ T5874] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  213.945632][ T5874] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  213.960258][ T5874] keyspan 3-1:0.107: device disconnected
[  213.995178][   T24] usb 1-1: USB disconnect, device number 39
[  214.020794][   T24] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4
[  214.049169][   T24] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5
[  214.075662][   T24] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6
[  214.101951][   T24] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7
[  214.115140][   T24] keyspan 1-1:0.107: device disconnected
[  214.206121][ T5887] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  214.296043][ T5874] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  214.357897][ T5887] usb 2-1: config 0 has an invalid interface number: 107 but max is 0
[  214.374135][ T5887] usb 2-1: config 0 has no interface number 0
[  214.388387][ T5887] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64
[  214.407683][ T5887] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  214.417542][ T5887] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  214.425772][ T5887] usb 2-1: Product: syz
[  214.430638][ T5887] usb 2-1: Manufacturer: syz
[  214.435286][ T5887] usb 2-1: SerialNumber: syz
[  214.452174][ T5887] usb 2-1: config 0 descriptor??
[  214.458197][ T8263] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  214.469719][ T5874] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  214.474272][ T5887] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected
[  214.486061][ T5874] usb 3-1: config 0 has no interface number 0
[  214.487934][ T5887] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81
[  214.499667][ T5874] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  214.514370][ T5887] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1
[  214.531730][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  214.536766][ T5887] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  214.551017][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.559279][ T5887] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2
[  214.572947][ T5887] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  214.592587][ T5874] usb 3-1: config 0 descriptor??
[  214.596219][ T5887] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4
[  214.623751][ T5887] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  214.665683][ T5887] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6
[  214.683971][ T5887] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  214.693226][ T8263] FAULT_INJECTION: forcing a failure.
[  214.693226][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.716418][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT(full) 
[  214.716445][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  214.716458][ T8263] Call Trace:
[  214.716466][ T8263]  <TASK>
[  214.716474][ T8263]  dump_stack_lvl+0xe8/0x150
[  214.716507][ T8263]  should_fail_ex+0x412/0x560
[  214.716535][ T8263]  _copy_from_iter+0x1d3/0x1670
[  214.716562][ T8263]  ? rcu_is_watching+0x15/0xb0
[  214.716596][ T8263]  ? __pfx__copy_from_iter+0x10/0x10
[  214.716627][ T8263]  ? netlink_sendmsg+0x650/0xb40
[  214.716656][ T8263]  ? skb_put+0x11b/0x210
[  214.716678][ T8263]  netlink_sendmsg+0x6c0/0xb40
[  214.716716][ T8263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.716747][ T8263]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  214.716779][ T8263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.716804][ T8263]  sock_sendmsg_nosec+0x18f/0x1d0
[  214.716834][ T8263]  ____sys_sendmsg+0x589/0x8c0
[  214.716864][ T8263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.716894][ T8263]  ? import_iovec+0x73/0xa0
[  214.716923][ T8263]  ___sys_sendmsg+0x2a5/0x360
[  214.716950][ T8263]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.717008][ T8263]  ? __fget_files+0x2a/0x420
[  214.717043][ T8263]  ? __fget_files+0x3a0/0x420
[  214.717081][ T8263]  __x64_sys_sendmsg+0x1bd/0x2a0
[  214.717106][ T8263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.717138][ T8263]  ? __pfx_ksys_write+0x10/0x10
[  214.717170][ T8263]  do_syscall_64+0x14d/0xf80
[  214.717194][ T8263]  ? trace_irq_disable+0x3b/0x150
[  214.717228][ T8263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.717250][ T8263]  ? clear_bhb_loop+0x40/0x90
[  214.717273][ T8263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.717294][ T8263] RIP: 0033:0x7fdea119bf79
[  214.717314][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.717332][ T8263] RSP: 002b:00007fdea1f8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.717354][ T8263] RAX: ffffffffffffffda RBX: 00007fdea1416090 RCX: 00007fdea119bf79
[  214.717369][ T8263] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[  214.717382][ T8263] RBP: 00007fdea1f8c090 R08: 0000000000000000 R09: 0000000000000000
[  214.717395][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.717407][ T8263] R13: 00007fdea1416128 R14: 00007fdea1416090 R15: 00007ffc22cf1988
[  214.717438][ T8263]  </TASK>
[  215.203013][ T5874] logitech-djreceiver 0003:046D:C517.000A: hidraw0: USB HID v10.00 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input34
[  215.408590][ T5887] usb 3-1: USB disconnect, device number 37
[  215.683057][ T8286] netlink: 14 bytes leftover after parsing attributes in process `syz.0.779'.
[  215.732036][   T24] usb 4-1: USB disconnect, device number 39
[  215.872441][ T8293] netlink: 100 bytes leftover after parsing attributes in process `syz.0.781'.
[  216.156049][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  216.316029][   T24] usb 4-1: Using ep0 maxpacket: 16
[  216.324394][   T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  216.346134][   T24] usb 4-1: config 0 has no interface number 0
[  216.361133][   T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  216.373279][ T8306] netlink: 'syz.0.785': attribute type 27 has an invalid length.
[  216.375679][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.389335][   T24] usb 4-1: Product: syz
[  216.393604][   T24] usb 4-1: Manufacturer: syz
[  216.398655][   T24] usb 4-1: SerialNumber: syz
[  216.416891][   T24] usb 4-1: config 0 descriptor??
[  216.430540][   T24] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  216.448540][ T8307] autofs: Bad value for 'fd'
[  216.524965][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.532878][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.674710][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.691998][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.785460][ T8306] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  216.959365][   T29] usb 2-1: USB disconnect, device number 43
[  216.991103][   T29] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  217.046649][ T1324] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.048550][   T29] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  217.081782][ T1324] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.095759][   T29] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  217.121184][   T29] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  217.134006][ T1324] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.167105][   T29] keyspan 2-1:0.107: device disconnected
[  217.173999][ T1324] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.309727][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.320056][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.357370][ T8328] binder: 8327:8328 ioctl c0306201 2000000003c0 returned -14
[  217.421270][ T8330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.789'.
[  217.591800][   T24] gspca_spca1528: reg_w err -71
[  217.597634][   T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  217.634827][   T24] usb 4-1: USB disconnect, device number 40
[  217.894531][ T8347] FAULT_INJECTION: forcing a failure.
[  217.894531][ T8347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.911421][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.2.794 Not tainted syzkaller #0 PREEMPT(full) 
[  217.911449][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  217.911462][ T8347] Call Trace:
[  217.911469][ T8347]  <TASK>
[  217.911477][ T8347]  dump_stack_lvl+0xe8/0x150
[  217.911516][ T8347]  should_fail_ex+0x412/0x560
[  217.911543][ T8347]  _copy_from_user+0x2d/0xb0
[  217.911570][ T8347]  ___sys_sendmsg+0x1c6/0x360
[  217.911598][ T8347]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.911653][ T8347]  ? __fget_files+0x2a/0x420
[  217.911679][ T8347]  ? __fget_files+0x3a0/0x420
[  217.911715][ T8347]  __x64_sys_sendmsg+0x1bd/0x2a0
[  217.911739][ T8347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  217.911770][ T8347]  ? __pfx_ksys_write+0x10/0x10
[  217.911802][ T8347]  do_syscall_64+0x14d/0xf80
[  217.911825][ T8347]  ? trace_irq_disable+0x3b/0x150
[  217.911854][ T8347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.911874][ T8347]  ? clear_bhb_loop+0x40/0x90
[  217.911899][ T8347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.911919][ T8347] RIP: 0033:0x7f3ab0d9bf79
[  217.911938][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.911955][ T8347] RSP: 002b:00007f3ab1c1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.911981][ T8347] RAX: ffffffffffffffda RBX: 00007f3ab1015fa0 RCX: 00007f3ab0d9bf79
[  217.911992][ T8347] RDX: 0000000000008000 RSI: 0000200000000480 RDI: 0000000000000005
[  217.912001][ T8347] RBP: 00007f3ab1c1b090 R08: 0000000000000000 R09: 0000000000000000
[  217.912010][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.912019][ T8347] R13: 00007f3ab1016038 R14: 00007f3ab1015fa0 R15: 00007ffc9c9e1408
[  217.912041][ T8347]  </TASK>
[  218.348130][ T8358] netlink: 14 bytes leftover after parsing attributes in process `syz.3.799'.
[  218.406392][   T24] usb 1-1: new low-speed USB device number 40 using dummy_hcd
[  218.662078][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.671643][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.786524][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  218.820764][   T24] usb 1-1: unable to read config index 0 descriptor/start: -71
[  218.847321][   T24] usb 1-1: can't read configurations, error -71
[  218.895525][ T8375] Mount JFS Failure: -5
[  218.904119][ T8375] jfs_mount failed w/return code = -5
[  219.325845][ T8392] netlink: 14 bytes leftover after parsing attributes in process `syz.1.808'.
[  219.701890][ T8406] binder: 8405:8406 ioctl 8933 200000000240 returned -22
[  220.066027][ T5888] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  220.213166][ T8310] IPVS: starting estimator thread 0...
[  220.256720][ T5888] usb 2-1: Using ep0 maxpacket: 16
[  220.263246][ T5888] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  220.271791][ T5888] usb 2-1: config 1 has no interface number 0
[  220.281060][ T5888] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  220.291112][ T5888] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  220.303202][ T5888] usb 2-1: config 1 interface 105 has no altsetting 0
[  220.313016][ T5888] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  220.316665][ T8425] IPVS: using max 28 ests per chain, 67200 per kthread
[  220.330362][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.338731][ T5888] usb 2-1: Product: syz
[  220.343068][ T5888] usb 2-1: Manufacturer: syz
[  220.347874][ T5888] usb 2-1: SerialNumber: syz
[  220.356789][ T8414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  220.364264][ T8414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  220.458044][ T8428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.819'.
[  220.789430][ T8414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  220.807837][ T8414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  220.867583][   T78] IPVS: stop unused estimator thread 0...
[  221.254279][ T5888] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  221.467636][ T5888] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  221.493067][ T5888] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:66:31:44:0a:5d
[  221.557963][ T5888] usb 2-1: USB disconnect, device number 44
[  221.587946][ T5888] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  221.667246][ T8455] netlink: 14 bytes leftover after parsing attributes in process `syz.2.829'.
[  221.706704][ T5888] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  221.724869][ T5888] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  221.745337][ T5888] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  221.797273][ T8467] Device name not specified.
[  221.797273][ T8467] 
[  222.685298][ T8490] netlink: 14 bytes leftover after parsing attributes in process `syz.3.840'.
[  223.196121][    T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  223.363571][    T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  223.375993][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.387226][    T9] usb 4-1: Product: syz
[  223.391445][    T9] usb 4-1: Manufacturer: syz
[  223.398489][ T8510] openvswitch: netlink: Duplicate or invalid key (type 0).
[  223.405859][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.425980][    T9] usb 4-1: SerialNumber: syz
[  223.435611][    T9] usb 4-1: config 0 descriptor??
[  223.444699][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  223.459153][ T8510] openvswitch: netlink: Duplicate or invalid key (type 0).
[  223.469773][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.483414][ T8510] openvswitch: netlink: Duplicate or invalid key (type 0).
[  223.491209][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.501897][ T8510] openvswitch: netlink: Duplicate or invalid key (type 0).
[  223.509664][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.520564][ T8510] openvswitch: netlink: Duplicate or invalid key (type 0).
[  223.528442][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.654947][    T9] gspca_stk1135: reg_w 0x2 err -71
[  223.661291][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.671026][    T9] gspca_stk1135: Sensor write failed
[  223.676510][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.682894][    T9] gspca_stk1135: Sensor write failed
[  223.688726][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.695119][    T9] gspca_stk1135: Sensor read failed
[  223.700739][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.707764][   T24] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  223.708785][    T9] gspca_stk1135: Sensor read failed
[  223.720668][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  223.727779][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.734315][    T9] gspca_stk1135: Sensor read failed
[  223.739617][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.746232][    T9] gspca_stk1135: Sensor read failed
[  223.751495][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.757927][    T9] gspca_stk1135: Sensor write failed
[  223.763281][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  223.769748][    T9] gspca_stk1135: Sensor write failed
[  223.775116][    T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  223.790580][    T9] usb 4-1: USB disconnect, device number 41
[  223.837324][ T8308] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  223.890573][ T5822] Bluetooth: hci2: unexpected event for opcode 0x0411
[  223.900779][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  223.909580][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  223.919380][   T24] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  223.928488][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  223.936878][   T24] usb 2-1: config 2 has no interface number 0
[  223.943547][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  223.954040][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  223.962564][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  223.975765][   T24] usb 2-1: config 2 has no interface number 0
[  223.985652][ T5822] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  223.993895][ T5822] Bluetooth: hci2: SCO packet for unknown connection handle 201
[  223.995640][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.008522][ T8308] usb 3-1: config 160 has no interfaces?
[  224.027410][ T8308] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=13.b2
[  224.036902][ T8308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.037812][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.044940][ T8308] usb 3-1: Product: syz
[  224.044959][ T8308] usb 3-1: Manufacturer: syz
[  224.044975][ T8308] usb 3-1: SerialNumber: syz
[  224.067511][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  224.076321][   T24] usb 2-1: config 2 has no interface number 0
[  224.095112][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.114130][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.137261][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  224.145523][   T24] usb 2-1: config 2 has no interface number 0
[  224.153096][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.163587][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.171906][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  224.181377][ T8522] netlink: 14 bytes leftover after parsing attributes in process `syz.0.851'.
[  224.201864][   T24] usb 2-1: config 2 has no interface number 0
[  224.208253][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.218850][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.227041][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  224.245830][   T24] usb 2-1: config 2 has no interface number 0
[  224.255618][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.282096][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.317445][ T8308] usb 3-1: USB disconnect, device number 38
[  224.328303][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  224.337108][   T24] usb 2-1: config 2 has no interface number 0
[  224.343257][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.367056][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.385954][   T24] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  224.400231][   T24] usb 2-1: config 2 has no interface number 0
[  224.411103][   T24] usb 2-1: config 2 interface 173 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  224.421950][   T24] usb 2-1: config 2 interface 173 has no altsetting 0
[  224.432012][   T24] usb 2-1: New USB device found, idVendor=413c, idProduct=7385, bcdDevice=b0.57
[  224.441466][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.449749][   T24] usb 2-1: Product: syz
[  224.453973][   T24] usb 2-1: Manufacturer: syz
[  224.458889][   T24] usb 2-1: SerialNumber: syz
[  224.616017][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  224.687307][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.699553][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.727746][   T24] usb 2-1: USB disconnect, device number 45
[  224.766137][    T9] usb 4-1: Using ep0 maxpacket: 8
[  224.775599][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  224.785301][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.793442][    T9] usb 4-1: Product: syz
[  224.797685][    T9] usb 4-1: Manufacturer: syz
[  224.802302][    T9] usb 4-1: SerialNumber: syz
[  224.809776][    T9] usb 4-1: config 0 descriptor??
[  224.880979][ T8532] program syz.2.854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  225.020496][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.030473][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.041427][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  225.663774][ T8553] binder: BINDER_SET_CONTEXT_MGR already set
[  225.671291][ T8553] binder: 8552:8553 ioctl 4018620d 200000000100 returned -16
[  225.683881][ T8553] binder: BINDER_SET_CONTEXT_MGR already set
[  225.690185][ T8553] binder: 8552:8553 ioctl 4018620d 200000004a80 returned -16
[  225.736009][ T8310] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  225.806987][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.821071][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.833692][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  225.852746][ T8555] netlink: 14 bytes leftover after parsing attributes in process `syz.1.861'.
[  225.865168][    T9] usb 4-1: USB disconnect, device number 42
[  225.905971][ T8310] usb 3-1: Using ep0 maxpacket: 16
[  225.922442][ T8310] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  225.943099][ T8310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.947859][ T8308] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  225.951744][ T8310] usb 3-1: Product: syz
[  225.963790][ T8310] usb 3-1: Manufacturer: syz
[  225.969818][ T8310] usb 3-1: SerialNumber: syz
[  225.984609][ T8310] usb 3-1: config 0 descriptor??
[  225.998476][ T8310] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  226.119159][ T8308] usb 1-1: config 4 has an invalid interface number: 88 but max is 1
[  226.128181][ T8308] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  226.138484][ T8308] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2
[  226.149165][ T8308] usb 1-1: config 4 has no interface number 0
[  226.159464][ T8308] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  226.168668][ T8308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.176822][ T8308] usb 1-1: Product: syz
[  226.181044][ T8308] usb 1-1: Manufacturer: syz
[  226.185673][ T8308] usb 1-1: SerialNumber: syz
[  226.362315][ T8566] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  226.372734][ T8566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  226.386996][ T8566] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  226.398639][ T8566] overlayfs: conflicting lowerdir path
[  226.413698][ T8567] program syz.1.865 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.423577][ T8553] binder: 8552:8553 ioctl ab02 101 returned -22
[  226.449164][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.458084][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.466302][ T8310] usb 3-1: clie_3_5_startup: get interface number failed: -71
[  226.473957][ T8310] visor 3-1:0.0: probe with driver visor failed with error -71
[  226.484403][ T8312] usb 1-1: USB disconnect, device number 42
[  226.518085][ T8310] usb 3-1: USB disconnect, device number 39
[  226.593393][ T8570] netlink: 'syz.1.866': attribute type 10 has an invalid length.
[  226.605224][ T8570] veth0_vlan: entered allmulticast mode
[  226.638786][ T8570] veth0_vlan: left promiscuous mode
[  226.674326][ T8570] veth0_vlan: entered promiscuous mode
[  226.697784][ T8572] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000)
[  226.712625][ T8570] team0: Device veth0_vlan failed to register rx_handler
[  226.892568][ T8578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.870'.
[  227.067556][ T8311] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  227.122310][ T8588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'.
[  227.237408][ T8311] usb 4-1: Using ep0 maxpacket: 32
[  227.251098][ T8311] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  227.272174][ T8311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.286072][ T8311] usb 4-1: Product: syz
[  227.290766][ T8311] usb 4-1: Manufacturer: syz
[  227.309914][ T8311] usb 4-1: SerialNumber: syz
[  227.331014][ T8311] usb 4-1: config 0 descriptor??
[  227.363776][ T8311] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  227.381550][ T8311] dvb-usb: bulk message failed: -22 (4/0)
[  227.391606][ T8311] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  227.402646][ T8311] dvb-usb: bulk message failed: -22 (5/0)
[  227.408575][ T8311] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  227.426459][ T8311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  227.437191][ T8311] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  227.445272][ T8311] usb 4-1: media controller created
[  227.456649][ T8599] Bluetooth: hci1: invalid length 3, exp 2 for type 1
[  227.469031][ T8311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.496410][ T8311] usb 4-1: selecting invalid altsetting 3
[  227.502361][ T8311] ttusb2: set interface to alts=3 failed
[  227.562174][ T8311] DVB: Unable to find symbol tda10086_attach()
[  227.569065][ T8311] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  227.578686][ T8311] dvb-usb: bulk message failed: -22 (4/0)
[  227.584761][ T8311] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  227.596059][ T8311] dvb-usb: bulk message failed: -22 (5/0)
[  227.601907][ T8311] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  227.616783][ T8311] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  227.728457][ T8605] FAULT_INJECTION: forcing a failure.
[  227.728457][ T8605] name failslab, interval 1, probability 0, space 0, times 0
[  227.742896][ T8605] CPU: 1 UID: 0 PID: 8605 Comm: syz.2.877 Not tainted syzkaller #0 PREEMPT(full) 
[  227.742924][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  227.742938][ T8605] Call Trace:
[  227.742947][ T8605]  <TASK>
[  227.742955][ T8605]  dump_stack_lvl+0xe8/0x150
[  227.742995][ T8605]  should_fail_ex+0x412/0x560
[  227.743024][ T8605]  should_failslab+0xa8/0x100
[  227.743050][ T8605]  __kmalloc_noprof+0xe8/0x760
[  227.743072][ T8605]  ? new_nbp+0x29/0x450
[  227.743104][ T8605]  new_nbp+0x29/0x450
[  227.743129][ T8605]  ? mutex_is_locked+0x17/0x50
[  227.743162][ T8605]  br_add_if+0x283/0xeb0
[  227.743186][ T8605]  ? apparmor_capable+0x126/0x170
[  227.743215][ T8605]  ? bpf_lsm_capable+0x9/0x20
[  227.743241][ T8605]  ? security_capable+0x7e/0x2c0
[  227.743269][ T8605]  br_dev_siocdevprivate+0xb84/0x1630
[  227.743305][ T8605]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  227.743333][ T8605]  ? trace_contention_end+0x3d/0x150
[  227.743368][ T8605]  ? tomoyo_path_number_perm+0x219/0x630
[  227.743402][ T8605]  ? do_vfs_ioctl+0x1166/0x1530
[  227.743426][ T8605]  ? dev_ioctl+0x83c/0x1150
[  227.743457][ T8605]  ? full_name_hash+0x92/0xe0
[  227.743491][ T8605]  dev_ifsioc+0xba6/0x1280
[  227.743528][ T8605]  dev_ioctl+0x84c/0x1150
[  227.743561][ T8605]  sock_ioctl+0x75f/0x7f0
[  227.743588][ T8605]  ? __pfx_sock_ioctl+0x10/0x10
[  227.743614][ T8605]  ? __fget_files+0x3a0/0x420
[  227.743641][ T8605]  ? __fget_files+0x2a/0x420
[  227.743672][ T8605]  ? bpf_lsm_file_ioctl+0x9/0x20
[  227.743696][ T8605]  ? __pfx_sock_ioctl+0x10/0x10
[  227.743729][ T8605]  __se_sys_ioctl+0xfc/0x170
[  227.743753][ T8605]  do_syscall_64+0x14d/0xf80
[  227.743774][ T8605]  ? trace_irq_disable+0x3b/0x150
[  227.743801][ T8605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.743821][ T8605]  ? clear_bhb_loop+0x40/0x90
[  227.743845][ T8605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.743865][ T8605] RIP: 0033:0x7f3ab0d9bf79
[  227.743884][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.743901][ T8605] RSP: 002b:00007f3ab1c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.743921][ T8605] RAX: ffffffffffffffda RBX: 00007f3ab1015fa0 RCX: 00007f3ab0d9bf79
[  227.743935][ T8605] RDX: 0000200000000080 RSI: 00000000000089f6 RDI: 0000000000000005
[  227.743948][ T8605] RBP: 00007f3ab1c1b090 R08: 0000000000000000 R09: 0000000000000000
[  227.743960][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.743971][ T8605] R13: 00007f3ab1016038 R14: 00007f3ab1015fa0 R15: 00007ffc9c9e1408
[  227.744002][ T8605]  </TASK>
[  228.023588][ T5822] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  228.032452][ T5822] Bluetooth: hci2: Injecting HCI hardware error event
[  228.041085][ T5822] Bluetooth: hci2: hardware error 0x00
[  228.131290][ T8308] usb 4-1: USB disconnect, device number 43
[  228.142309][ T8609] mkiss: ax0: crc mode is auto.
[  228.273272][ T8308] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  228.380002][ T8614] netlink: 14 bytes leftover after parsing attributes in process `syz.0.879'.
[  228.859138][ T8308] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  229.040357][ T8308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.056024][ T8308] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  229.081082][ T8308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.121589][ T8308] usb 3-1: config 0 descriptor??
[  229.151631][ T8308] pwc: Askey VC010 type 2 USB webcam detected.
[  229.192852][ T8646] netlink: 14 bytes leftover after parsing attributes in process `syz.3.890'.
[  229.366021][   T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  229.442461][ T8654] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[8654]
[  229.517355][   T24] usb 2-1: Using ep0 maxpacket: 32
[  229.540000][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  229.558402][   T24] usb 2-1: too many configurations: 207, using maximum allowed: 8
[  229.566476][ T8308] pwc: recv_control_msg error -32 req 02 val 2b00
[  229.574871][ T8308] pwc: recv_control_msg error -32 req 02 val 2700
[  229.601708][ T8308] pwc: recv_control_msg error -32 req 02 val 2c00
[  229.618196][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  229.645987][   T24] usb 2-1: can't read configurations, error -61
[  229.786159][   T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  229.956081][   T24] usb 2-1: Using ep0 maxpacket: 32
[  229.975136][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  229.976425][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  229.986196][   T24] usb 2-1: too many configurations: 207, using maximum allowed: 8
[  230.019046][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  230.026810][   T24] usb 2-1: can't read configurations, error -61
[  230.035395][ T8308] pwc: recv_control_msg error -71 req 04 val 1400
[  230.035875][   T24] usb usb2-port1: attempt power cycle
[  230.064510][ T8308] pwc: recv_control_msg error -71 req 02 val 2000
[  230.085235][ T8308] pwc: recv_control_msg error -71 req 02 val 2100
[  230.092334][ T8308] pwc: recv_control_msg error -71 req 04 val 1500
[  230.100035][ T8308] pwc: recv_control_msg error -71 req 02 val 2500
[  230.108841][ T8308] pwc: recv_control_msg error -71 req 02 val 2400
[  230.117260][ T8308] pwc: recv_control_msg error -71 req 02 val 2600
[  230.124198][ T8308] pwc: recv_control_msg error -71 req 02 val 2900
[  230.138144][ T5822] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  230.152634][ T8308] pwc: recv_control_msg error -71 req 02 val 2800
[  230.166577][ T8308] pwc: recv_control_msg error -71 req 04 val 1100
[  230.173676][ T8308] pwc: recv_control_msg error -71 req 04 val 1200
[  230.182734][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.199331][ T8308] pwc: Registered as video103.
[  230.226270][    T9] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  230.247405][ T8308] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21
[  230.266365][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.300196][    T9] usb 1-1: config 0 descriptor??
[  230.305619][ T8308] usb 3-1: USB disconnect, device number 40
[  230.330780][    T9] usb 1-1: bad CDC descriptors
[  230.406033][   T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  230.462802][   T24] usb 2-1: Using ep0 maxpacket: 32
[  230.479692][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  230.493798][   T24] usb 2-1: too many configurations: 207, using maximum allowed: 8
[  230.528750][ T8314] usb 1-1: USB disconnect, device number 43
[  230.537641][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  230.547886][   T24] usb 2-1: can't read configurations, error -61
[  230.669753][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'.
[  230.696146][   T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  230.716955][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'.
[  230.746579][   T24] usb 2-1: Using ep0 maxpacket: 32
[  230.754611][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  230.764977][   T24] usb 2-1: too many configurations: 207, using maximum allowed: 8
[  230.787129][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  230.795051][   T24] usb 2-1: can't read configurations, error -61
[  230.814966][   T24] usb usb2-port1: unable to enumerate USB device
[  230.875254][ T8689] netlink: 14 bytes leftover after parsing attributes in process `syz.3.903'.
[  230.895516][ T8687] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.902'.
[  231.244149][ T8699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.906'.
[  231.466999][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  231.626740][    T9] usb 3-1: Using ep0 maxpacket: 8
[  231.633479][    T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  231.642270][    T9] usb 3-1: config 179 has no interface number 0
[  231.648623][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  231.659839][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  231.671662][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  231.683022][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  231.694630][    T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  231.708196][    T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  231.717323][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.729428][ T8701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  232.151208][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.160143][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.276071][   T24] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[  232.373019][ T8313] usb 3-1: USB disconnect, device number 41
[  232.373057][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  232.388243][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  232.416140][   T24] usb 4-1: device descriptor read/64, error -71
[  232.427727][ T8314] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  232.600179][ T8314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.609429][ T8314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.617668][ T8314] usb 2-1: Product: syz
[  232.621868][ T8314] usb 2-1: Manufacturer: syz
[  232.626707][ T8314] usb 2-1: SerialNumber: syz
[  232.666038][   T24] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[  232.806015][   T24] usb 4-1: device descriptor read/64, error -71
[  232.927321][   T24] usb usb4-port1: attempt power cycle
[  233.276081][   T24] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  233.296009][    T9] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[  233.306651][   T24] usb 4-1: device descriptor read/8, error -71
[  233.447988][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  233.459295][    T9] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  233.470835][    T9] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.481937][    T9] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  233.495553][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  233.502683][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  233.512734][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.525240][    T9] usb 3-1: config 0 descriptor??
[  233.566441][   T24] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  233.609404][   T24] usb 4-1: device descriptor read/8, error -71
[  233.642835][ T8314] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  233.649574][ T8314] cdc_ncm 2-1:1.0: setting rx_max = 16384
[  233.738059][   T24] usb usb4-port1: unable to enumerate USB device
[  233.957601][    T9] koneplus 0003:1E7D:2E22.000B: hidraw0: USB HID vf4.f6 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0
[  234.279104][ T8314] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  234.312017][ T8314] usb 2-1: USB disconnect, device number 50
[  234.319709][ T8314] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  235.003687][ T8740] netlink: 14 bytes leftover after parsing attributes in process `syz.1.920'.
[  235.571266][ T8316] usb 3-1: USB disconnect, device number 42
[  235.656019][    T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  235.817578][    T9] usb 4-1: device descriptor read/64, error -71
[  235.831709][ T8757] netlink: 1780 bytes leftover after parsing attributes in process `syz.2.926'.
[  235.846812][ T8757] netlink: 1340 bytes leftover after parsing attributes in process `syz.2.926'.
[  235.920118][ T8757] syzkaller1: entered promiscuous mode
[  235.929572][ T8757] syzkaller1: entered allmulticast mode
[  236.056083][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  236.200873][    T9] usb 4-1: device descriptor read/64, error -71
[  236.207403][ T8308] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  236.317356][    T9] usb usb4-port1: attempt power cycle
[  236.376057][ T8308] usb 2-1: Using ep0 maxpacket: 32
[  236.384620][ T8308] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.391302][ T8768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.930'.
[  236.438116][ T8308] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  236.456138][ T8308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.464313][ T8308] usb 2-1: Product: syz
[  236.475973][ T8308] usb 2-1: Manufacturer: syz
[  236.480634][ T8308] usb 2-1: SerialNumber: syz
[  236.497267][ T8308] usb 2-1: config 0 descriptor??
[  236.509218][ T8308] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  236.685463][    T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  236.735693][    T9] usb 4-1: device descriptor read/8, error -71
[  236.764901][ T8775] FAULT_INJECTION: forcing a failure.
[  236.764901][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.779311][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: syz.0.932 Not tainted syzkaller #0 PREEMPT(full) 
[  236.779338][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  236.779351][ T8775] Call Trace:
[  236.779360][ T8775]  <TASK>
[  236.779368][ T8775]  dump_stack_lvl+0xe8/0x150
[  236.779401][ T8775]  should_fail_ex+0x412/0x560
[  236.779428][ T8775]  _copy_from_user+0x2d/0xb0
[  236.779456][ T8775]  kvm_arch_vcpu_ioctl+0x11ad/0x2c70
[  236.779491][ T8775]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  236.779517][ T8775]  ? unwind_next_frame+0xa5/0x23c0
[  236.779567][ T8775]  ? is_bpf_text_address+0x26/0x2b0
[  236.779593][ T8775]  ? is_bpf_text_address+0x292/0x2b0
[  236.779612][ T8775]  ? is_bpf_text_address+0x26/0x2b0
[  236.779635][ T8775]  ? kernel_text_address+0xa5/0xe0
[  236.779658][ T8775]  ? __kernel_text_address+0xd/0x30
[  236.779679][ T8775]  ? unwind_get_return_address+0x4d/0x90
[  236.779707][ T8775]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  236.779729][ T8775]  ? arch_stack_walk+0xfb/0x150
[  236.779771][ T8775]  ? stack_trace_save+0xa9/0x100
[  236.779797][ T8775]  ? stack_depot_save_flags+0x33/0x810
[  236.779823][ T8775]  ? __lock_acquire+0x6b5/0x2cf0
[  236.779852][ T8775]  ? tomoyo_path_number_perm+0x501/0x630
[  236.779882][ T8775]  ? security_file_ioctl+0xc3/0x2a0
[  236.779910][ T8775]  ? __se_sys_ioctl+0x47/0x170
[  236.779929][ T8775]  ? do_syscall_64+0x14d/0xf80
[  236.779952][ T8775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.779987][ T8775]  ? __mutex_trylock_common+0x158/0x260
[  236.780020][ T8775]  ? __pfx___mutex_trylock_common+0x10/0x10
[  236.780054][ T8775]  ? rcu_is_watching+0x15/0xb0
[  236.780081][ T8775]  ? trace_contention_end+0x3d/0x150
[  236.780110][ T8775]  ? __mutex_lock+0x319/0x1300
[  236.780142][ T8775]  ? kasan_quarantine_put+0xbb/0x1f0
[  236.780175][ T8775]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  236.780199][ T8775]  ? __pfx___mutex_lock+0x10/0x10
[  236.780232][ T8775]  ? tomoyo_path_number_perm+0x219/0x630
[  236.780266][ T8775]  ? do_vfs_ioctl+0x1166/0x1530
[  236.780291][ T8775]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  236.780316][ T8775]  kvm_vcpu_ioctl+0x7e4/0xfd0
[  236.780343][ T8775]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  236.780361][ T8775]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  236.780407][ T8775]  ? __fget_files+0x2a/0x420
[  236.780437][ T8775]  ? __fget_files+0x2a/0x420
[  236.780464][ T8775]  ? __fget_files+0x3a0/0x420
[  236.780490][ T8775]  ? __fget_files+0x2a/0x420
[  236.780521][ T8775]  ? bpf_lsm_file_ioctl+0x9/0x20
[  236.780545][ T8775]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  236.780566][ T8775]  __se_sys_ioctl+0xfc/0x170
[  236.780589][ T8775]  do_syscall_64+0x14d/0xf80
[  236.780611][ T8775]  ? trace_irq_disable+0x3b/0x150
[  236.780639][ T8775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.780660][ T8775]  ? clear_bhb_loop+0x40/0x90
[  236.780686][ T8775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.780707][ T8775] RIP: 0033:0x7f3de119bf79
[  236.780726][ T8775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.780743][ T8775] RSP: 002b:00007f3de1fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  236.780763][ T8775] RAX: ffffffffffffffda RBX: 00007f3de1415fa0 RCX: 00007f3de119bf79
[  236.780778][ T8775] RDX: 0000200000000000 RSI: 000000004040aea0 RDI: 0000000000000005
[  236.780790][ T8775] RBP: 00007f3de1fb8090 R08: 0000000000000000 R09: 0000000000000000
[  236.780802][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.780814][ T8775] R13: 00007f3de1416038 R14: 00007f3de1415fa0 R15: 00007ffdeb228fc8
[  236.780847][ T8775]  </TASK>
[  237.186076][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  237.224396][    T9] usb 4-1: device descriptor read/8, error -71
[  237.366482][    T9] usb usb4-port1: unable to enumerate USB device
[  237.556025][    T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  237.676640][ T8308] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  237.683605][ T8308] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  237.699178][ T8308] usb 2-1: USB disconnect, device number 51
[  237.706998][    T9] usb 1-1: Using ep0 maxpacket: 16
[  237.722640][    T9] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[  237.733648][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  237.742819][    T9] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  237.753319][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.764022][    T9] usb 1-1: config 0 descriptor??
[  238.265804][ T8791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.939'.
[  238.506069][ T8316] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  238.665989][ T8316] usb 2-1: Using ep0 maxpacket: 8
[  238.672869][ T8316] usb 2-1: config 162 has an invalid interface number: 188 but max is 0
[  238.681377][ T8316] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  238.691800][ T8316] usb 2-1: config 162 has no interface number 0
[  238.698245][ T8316] usb 2-1: config 162 interface 188 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  238.708302][ T8316] usb 2-1: config 162 interface 188 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.721512][ T8316] usb 2-1: config 162 interface 188 has no altsetting 0
[  238.730752][ T8316] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=56.74
[  238.741085][ T8316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.749199][ T8316] usb 2-1: Product: syz
[  238.753386][ T8316] usb 2-1: Manufacturer: syz
[  238.758147][ T8316] usb 2-1: SerialNumber: syz
[  238.979712][ T8316] peak_usb 2-1:162.188 can0: sending cmd f=0x6 n=0x1 failure: -22
[  238.987843][ T8316] peak_usb 2-1:162.188: unable to read PCAN-USB serial number (err -22)
[  239.017827][ T8316] peak_usb 2-1:162.188: probe with driver peak_usb failed with error -22
[  239.034190][ T8316] usb 2-1: USB disconnect, device number 52
[  239.131315][ T8806] Invalid source name
[  239.476333][ T8821] netlink: 14 bytes leftover after parsing attributes in process `syz.2.949'.
[  239.503240][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.950'.
[  240.268201][ T8858] netlink: 14 bytes leftover after parsing attributes in process `syz.2.963'.
[  240.331260][ T8308] usb 1-1: USB disconnect, device number 44
[  240.460217][ T8865] netlink: 72 bytes leftover after parsing attributes in process `syz.0.965'.
[  240.622831][ T8876] FAULT_INJECTION: forcing a failure.
[  240.622831][ T8876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.636866][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) 
[  240.636894][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  240.636919][ T8876] Call Trace:
[  240.636927][ T8876]  <TASK>
[  240.636936][ T8876]  dump_stack_lvl+0xe8/0x150
[  240.636969][ T8876]  should_fail_ex+0x412/0x560
[  240.636997][ T8876]  _copy_from_user+0x2d/0xb0
[  240.637025][ T8876]  do_bnep_sock_ioctl+0x2cd/0x650
[  240.637054][ T8876]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  240.637087][ T8876]  ? tomoyo_path_number_perm+0x219/0x630
[  240.637136][ T8876]  sock_do_ioctl+0x101/0x320
[  240.637165][ T8876]  ? __pfx_sock_do_ioctl+0x10/0x10
[  240.637187][ T8876]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  240.637227][ T8876]  sock_ioctl+0x5c6/0x7f0
[  240.637254][ T8876]  ? __pfx_sock_ioctl+0x10/0x10
[  240.637279][ T8876]  ? __fget_files+0x2a/0x420
[  240.637305][ T8876]  ? __fget_files+0x3a0/0x420
[  240.637331][ T8876]  ? __fget_files+0x2a/0x420
[  240.637362][ T8876]  ? bpf_lsm_file_ioctl+0x9/0x20
[  240.637386][ T8876]  ? __pfx_sock_ioctl+0x10/0x10
[  240.637410][ T8876]  __se_sys_ioctl+0xfc/0x170
[  240.637435][ T8876]  do_syscall_64+0x14d/0xf80
[  240.637456][ T8876]  ? trace_irq_disable+0x3b/0x150
[  240.637484][ T8876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.637504][ T8876]  ? clear_bhb_loop+0x40/0x90
[  240.637528][ T8876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.637548][ T8876] RIP: 0033:0x7fdea119bf79
[  240.637568][ T8876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.637584][ T8876] RSP: 002b:00007fdea1f8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  240.637606][ T8876] RAX: ffffffffffffffda RBX: 00007fdea1416090 RCX: 00007fdea119bf79
[  240.637621][ T8876] RDX: 0000200000000040 RSI: 00000000800442d2 RDI: 0000000000000006
[  240.637642][ T8876] RBP: 00007fdea1f8c090 R08: 0000000000000000 R09: 0000000000000000
[  240.637655][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.637666][ T8876] R13: 00007fdea1416128 R14: 00007fdea1416090 R15: 00007ffc22cf1988
[  240.637699][ T8876]  </TASK>
[  240.986027][ T8308] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  241.036619][ T8316] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  241.135971][ T8308] usb 3-1: Using ep0 maxpacket: 8
[  241.142795][ T8308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.153345][ T8308] usb 3-1: config 0 has no interfaces?
[  241.160902][ T8308] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  241.170076][ T8308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.176177][   T24] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  241.178177][ T8308] usb 3-1: Product: syz
[  241.190104][ T8308] usb 3-1: Manufacturer: syz
[  241.195068][ T8308] usb 3-1: SerialNumber: syz
[  241.202481][ T8308] usb 3-1: config 0 descriptor??
[  241.212653][ T8316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.223026][ T8316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  241.234360][ T8316] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  241.243980][ T8316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  241.252368][ T8316] usb 1-1: SerialNumber: syz
[  241.338326][   T24] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  241.348399][   T24] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  241.357630][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.473728][ T8316] usb 1-1: 0:2 : does not exist
[  241.479039][ T8316] usb 1-1: unit 5: unexpected type 0x0b
[  241.513692][ T8316] usb 1-1: USB disconnect, device number 45
[  241.542709][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.574739][   T24] usb 4-1: string descriptor 0 read error: -71
[  241.582261][   T24] hub 4-1:32.0: bad descriptor, ignoring hub
[  241.594322][   T24] hub 4-1:32.0: probe with driver hub failed with error -5
[  241.658437][   T24] usb 4-1: USB disconnect, device number 52
[  241.686067][ T8314] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  241.816011][ T8314] usb 2-1: device descriptor read/64, error -71
[  242.055979][ T8314] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  242.119432][ T8891] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  242.123804][ T8891] netlink: 'syz.3.975': attribute type 3 has an invalid length.
[  242.196558][ T8314] usb 2-1: device descriptor read/64, error -71
[  242.346306][ T8314] usb usb2-port1: attempt power cycle
[  242.687668][ T8314] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  242.706623][ T8314] usb 2-1: device descriptor read/8, error -71
[  242.946071][ T8314] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  242.989029][ T8314] usb 2-1: device descriptor read/8, error -71
[  242.998132][ T8899] netlink: 14 bytes leftover after parsing attributes in process `syz.0.976'.
[  243.107801][ T8314] usb usb2-port1: unable to enumerate USB device
[  243.199964][ T8909] FAULT_INJECTION: forcing a failure.
[  243.199964][ T8909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.214005][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(full) 
[  243.214034][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  243.214055][ T8909] Call Trace:
[  243.214061][ T8909]  <TASK>
[  243.214068][ T8909]  dump_stack_lvl+0xe8/0x150
[  243.214092][ T8909]  should_fail_ex+0x412/0x560
[  243.214112][ T8909]  _copy_from_user+0x2d/0xb0
[  243.214132][ T8909]  ____sys_sendmsg+0x329/0x8c0
[  243.214155][ T8909]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.214176][ T8909]  ? import_iovec+0x73/0xa0
[  243.214214][ T8909]  ___sys_sendmsg+0x2a5/0x360
[  243.214241][ T8909]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.214298][ T8909]  ? __fget_files+0x2a/0x420
[  243.214324][ T8909]  ? __fget_files+0x3a0/0x420
[  243.214350][ T8909]  __x64_sys_sendmsg+0x1bd/0x2a0
[  243.214368][ T8909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.214392][ T8909]  ? __pfx_ksys_write+0x10/0x10
[  243.214415][ T8909]  do_syscall_64+0x14d/0xf80
[  243.214432][ T8909]  ? trace_irq_disable+0x3b/0x150
[  243.214453][ T8909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.214468][ T8909]  ? clear_bhb_loop+0x40/0x90
[  243.214486][ T8909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.214500][ T8909] RIP: 0033:0x7f3de119bf79
[  243.214514][ T8909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.214527][ T8909] RSP: 002b:00007f3de1fb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.214558][ T8909] RAX: ffffffffffffffda RBX: 00007f3de1415fa0 RCX: 00007f3de119bf79
[  243.214573][ T8909] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005
[  243.214586][ T8909] RBP: 00007f3de1fb8090 R08: 0000000000000000 R09: 0000000000000000
[  243.214598][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.214609][ T8909] R13: 00007f3de1416038 R14: 00007f3de1415fa0 R15: 00007ffdeb228fc8
[  243.214646][ T8909]  </TASK>
[  243.501345][ T8316] usb 3-1: USB disconnect, device number 43
[  243.711202][ T8922] FAULT_INJECTION: forcing a failure.
[  243.711202][ T8922] name failslab, interval 1, probability 0, space 0, times 0
[  243.724008][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.0.984 Not tainted syzkaller #0 PREEMPT(full) 
[  243.724036][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  243.724049][ T8922] Call Trace:
[  243.724057][ T8922]  <TASK>
[  243.724066][ T8922]  dump_stack_lvl+0xe8/0x150
[  243.724097][ T8922]  should_fail_ex+0x412/0x560
[  243.724123][ T8922]  should_failslab+0xa8/0x100
[  243.724147][ T8922]  __kmalloc_noprof+0xe8/0x760
[  243.724169][ T8922]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  243.724198][ T8922]  tomoyo_realpath_from_path+0xe3/0x5d0
[  243.724232][ T8922]  ? tomoyo_path_number_perm+0x219/0x630
[  243.724262][ T8922]  tomoyo_path_number_perm+0x246/0x630
[  243.724296][ T8922]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  243.724331][ T8922]  ? __lock_acquire+0x6b5/0x2cf0
[  243.724377][ T8922]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  243.724424][ T8922]  ? __fget_files+0x2a/0x420
[  243.724455][ T8922]  ? __fget_files+0x2a/0x420
[  243.724480][ T8922]  ? __fget_files+0x3a0/0x420
[  243.724506][ T8922]  ? __fget_files+0x2a/0x420
[  243.724536][ T8922]  security_file_ioctl+0xc3/0x2a0
[  243.724567][ T8922]  __se_sys_ioctl+0x47/0x170
[  243.724591][ T8922]  do_syscall_64+0x14d/0xf80
[  243.724612][ T8922]  ? trace_irq_disable+0x3b/0x150
[  243.724638][ T8922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.724658][ T8922]  ? clear_bhb_loop+0x40/0x90
[  243.724683][ T8922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.724701][ T8922] RIP: 0033:0x7f3de119bf79
[  243.724719][ T8922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.724736][ T8922] RSP: 002b:00007f3de1fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  243.724756][ T8922] RAX: ffffffffffffffda RBX: 00007f3de1415fa0 RCX: 00007f3de119bf79
[  243.724770][ T8922] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000004
[  243.724782][ T8922] RBP: 00007f3de1fb8090 R08: 0000000000000000 R09: 0000000000000000
[  243.724795][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.724811][ T8922] R13: 00007f3de1416038 R14: 00007f3de1415fa0 R15: 00007ffdeb228fc8
[  243.724843][ T8922]  </TASK>
[  243.724877][ T8922] ERROR: Out of memory at tomoyo_realpath_from_path.
[  244.117786][ T8933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.987'.
[  244.157488][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'.
[  244.167129][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'.
[  244.176077][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'.
[  244.452302][ T8945] netlink: 'syz.2.991': attribute type 1 has an invalid length.
[  244.460254][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  244.471383][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'.
[  244.481342][ T8945] netlink: 'syz.2.991': attribute type 2 has an invalid length.
[  244.488496][    T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  244.494851][ T8945] netlink: 'syz.2.991': attribute type 2 has an invalid length.
[  244.505996][ T8945] netlink: 'syz.2.991': attribute type 2 has an invalid length.
[  244.656327][    T9] usb 1-1: Using ep0 maxpacket: 32
[  244.673106][    T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  244.681912][    T9] usb 1-1: config 0 has no interface number 0
[  244.691567][    T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  244.702403][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.711183][    T9] usb 1-1: Product: syz
[  244.715606][    T9] usb 1-1: Manufacturer: syz
[  244.720757][    T9] usb 1-1: SerialNumber: syz
[  244.729173][    T9] usb 1-1: config 0 descriptor??
[  244.742246][    T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  244.906161][ T8308] usb 2-1: new low-speed USB device number 57 using dummy_hcd
[  245.081501][ T8308] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  245.101766][ T8308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.119432][ T8308] usb 2-1: config 0 descriptor??
[  245.146218][ T8308] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  245.302374][    T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  245.326681][    T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  245.497058][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  245.505164][ T5888] usb 1-1: USB disconnect, device number 46
[  245.516060][    T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  245.536783][ T5888] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  245.559887][ T8308] pwc: send_video_command error -71
[  245.565166][ T8308] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  245.576853][ T8308] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  245.587117][ T5888] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  245.607745][ T5888] quatech2 1-1:0.51: device disconnected
[  245.613890][ T8308] usb 2-1: USB disconnect, device number 57
[  245.677354][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  245.688533][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  245.699903][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  245.709606][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  245.716128][ T8316] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  245.717890][    T9] usb 4-1: SerialNumber: syz
[  245.737419][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  245.746667][    T9] usb-storage 4-1:1.0: USB Mass Storage device detected
[  245.759742][    T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  245.768216][    T9] scsi host1: usb-storage 4-1:1.0
[  245.869990][ T8316] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  245.879148][ T8316] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  245.887769][ T8316] usb 3-1: Product: syz
[  245.891972][ T8316] usb 3-1: Manufacturer: syz
[  245.896665][ T8316] usb 3-1: SerialNumber: syz
[  245.910669][ T8316] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  246.079535][ T8976] netlink: 14 bytes leftover after parsing attributes in process `syz.0.997'.
[  246.131939][ T8316] vp7045: USB control message 'out' went wrong.
[  246.148022][ T8316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  246.175566][ T8316] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  246.199985][ T8316] usb 3-1: USB disconnect, device number 44
[  246.291633][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.306796][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.576064][ T5888] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  246.709249][ T5888] usb 1-1: device descriptor read/64, error -71
[  246.762743][ T8994] syzkaller1: entered promiscuous mode
[  246.776628][ T8994] syzkaller1: entered allmulticast mode
[  246.956085][ T5888] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  247.086789][ T5888] usb 1-1: device descriptor read/64, error -71
[  247.196451][ T5888] usb usb1-port1: attempt power cycle
[  247.536064][ T5888] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  247.556818][ T5888] usb 1-1: device descriptor read/8, error -71
[  247.796016][ T5888] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  247.836642][ T5888] usb 1-1: device descriptor read/8, error -71
[  247.946662][ T5888] usb usb1-port1: unable to enumerate USB device
[  248.322239][    T9] usb 4-1: USB disconnect, device number 53
[  248.726028][ T8316] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  248.783429][ T9028] syzkaller1: entered promiscuous mode
[  248.789223][ T9028] syzkaller1: entered allmulticast mode
[  248.806070][    T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  248.879679][ T8316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.888869][ T8316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.897001][ T8316] usb 2-1: Product: syz
[  248.901189][ T8316] usb 2-1: Manufacturer: syz
[  248.905822][ T8316] usb 2-1: SerialNumber: syz
[  248.956135][    T9] usb 4-1: Using ep0 maxpacket: 16
[  248.963339][    T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.974526][    T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.985136][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  248.992296][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  249.001449][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.012336][    T9] usb 4-1: config 0 descriptor??
[  249.046134][ T5888] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  249.196007][ T5888] usb 3-1: Using ep0 maxpacket: 8
[  249.203024][ T5888] usb 3-1: config 162 has an invalid interface number: 79 but max is 1
[  249.211906][ T5888] usb 3-1: config 162 has an invalid interface number: 183 but max is 1
[  249.220544][ T5888] usb 3-1: config 162 has no interface number 0
[  249.227557][ T5888] usb 3-1: config 162 has no interface number 1
[  249.234641][ T5888] usb 3-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  249.248252][ T5888] usb 3-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  249.259462][ T5888] usb 3-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  249.271442][ T5888] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  249.283348][ T5888] usb 3-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  249.294068][ T5888] usb 3-1: config 162 interface 183 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  249.307445][ T5888] usb 3-1: config 162 interface 79 has no altsetting 0
[  249.314368][ T5888] usb 3-1: config 162 interface 183 has no altsetting 0
[  249.324613][ T5888] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[  249.346810][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.354896][ T5888] usb 3-1: Product: syz
[  249.359184][ T5888] usb 3-1: Manufacturer: syz
[  249.363837][ T5888] usb 3-1: SerialNumber: syz
[  249.424636][ T9030] tmpfs: Bad value for 'mpol'
[  249.441795][    T9] hid_parser_main: 5 callbacks suppressed
[  249.441818][    T9] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  249.456243][    T9] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  249.463803][    T9] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  249.471598][    T9] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  249.479101][    T9] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  249.490494][    T9] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  249.596910][ T5888] pl2303 3-1:162.79: required endpoints missing
[  249.633589][ T5888] pl2303 3-1:162.183: required interrupt-in endpoint missing
[  249.648554][ T8314] usb 4-1: USB disconnect, device number 54
[  249.655103][ T5888] usb 3-1: USB disconnect, device number 45
[  249.927785][ T8316] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  249.934363][ T8316] cdc_ncm 2-1:1.0: setting rx_max = 16384
[  250.023692][ T9033] trusted_key: syz.0.1018 sent an empty control message without MSG_MORE.
[  250.141754][ T8316] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  250.172458][ T8316] usb 2-1: USB disconnect, device number 58
[  250.203833][ T8316] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  250.285170][ T9037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1020'.
[  250.561272][ T8314] IPVS: starting estimator thread 0...
[  250.626535][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  250.655991][ T9053] IPVS: using max 28 ests per chain, 67200 per kthread
[  250.748824][ T8314] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  250.848021][ T9061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1028'.
[  250.896031][ T8314] usb 3-1: device descriptor read/64, error -71
[  251.095974][ T8316] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  251.135972][ T8314] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  251.248790][ T8316] usb 2-1: not running at top speed; connect to a high speed hub
[  251.258140][ T8316] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  251.269318][ T8316] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  251.280349][ T8314] usb 3-1: device descriptor read/64, error -71
[  251.286832][ T8316] usb 2-1: config 1 interface 0 has no altsetting 0
[  251.296805][ T8316] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  251.306161][ T8316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.314278][ T8316] usb 2-1: Product: ࠔ
[  251.318836][ T8316] usb 2-1: Manufacturer: 稞㥡㋑朿좟䭽崐꽠⪬繧딀ꎦ错赑᜖葍হ퍸栾쳑ﶃണ狌Ᵹ⡋됽怢婌곮栽앬끕븣ℱ栗牢ޗ䚂ᖦ䎭ꮶ鄼팆ƺ籠耱丝澡䌱꧿ᢿ秱돻脻틳詤묪℔蔝靥䇜䣟楢ṩἙⓞ⃇馥륆켨樤齮⡳믙磥ᔣʎ
[  251.348319][ T8316] usb 2-1: SerialNumber: ဌ
[  251.356212][ T9061] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  251.396280][ T8314] usb usb3-port1: attempt power cycle
[  251.578772][ T8316] usbhid 2-1:1.0: can't add hid device: -71
[  251.584880][ T8316] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  251.613826][ T8316] usb 2-1: USB disconnect, device number 59
[  251.746006][ T8314] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  251.777315][ T8314] usb 3-1: device descriptor read/8, error -71
[  251.777982][ T9080] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1034'.
[  252.016082][ T8314] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  252.036600][ T8314] usb 3-1: device descriptor read/8, error -71
[  252.066061][ T8316] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  252.146514][ T8314] usb usb3-port1: unable to enumerate USB device
[  252.175997][   T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  252.221762][ T8316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.236070][ T8316] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  252.245170][ T8316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.265264][ T8316] usb 1-1: config 0 descriptor??
[  252.356011][   T24] usb 4-1: Using ep0 maxpacket: 16
[  252.363989][   T24] usb 4-1: config 5 has an invalid interface number: 168 but max is 0
[  252.372489][   T24] usb 4-1: config 5 has no interface number 0
[  252.386082][   T24] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  252.398754][   T24] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  252.415958][   T24] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023
[  252.435962][   T24] usb 4-1: config 5 interface 168 has no altsetting 0
[  252.445577][   T24] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  252.455433][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.464217][   T24] usb 4-1: Product: syz
[  252.468775][   T24] usb 4-1: Manufacturer: syz
[  252.473482][   T24] usb 4-1: SerialNumber: syz
[  252.486446][ T9087] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  252.493918][ T9087] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  252.695728][ T8316] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  252.738672][    C1] usb 4-1: NFC: Urb failure (status -71)
[  252.745811][    C1] usb 4-1: NFC: Urb failure (status -71)
[  252.757124][   T24] usb 4-1: NFC: Unable to get FW version
[  252.786336][   T24] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71
[  252.821518][   T24] usb 4-1: USB disconnect, device number 55
[  253.089065][ T8316] lenovo 0003:17EF:6047.000D: Failed to switch middle button: -71
[  253.099395][ T8316] lenovo 0003:17EF:6047.000D: Fn-lock setting failed: -71
[  253.107830][ T8316] lenovo 0003:17EF:6047.000D: Sensitivity setting failed: -71
[  253.124151][ T8316] usb 1-1: USB disconnect, device number 51
[  253.677005][ T5888] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  253.845992][ T5888] usb 2-1: Using ep0 maxpacket: 32
[  253.853935][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short
[  253.864220][ T5888] usb 2-1: config 64 has an invalid interface number: 227 but max is 1
[  253.873152][ T5888] usb 2-1: config 64 has an invalid interface number: 9 but max is 1
[  253.881555][ T5888] usb 2-1: config 64 has no interface number 0
[  253.888135][ T5888] usb 2-1: config 64 has no interface number 1
[  253.895112][ T5888] usb 2-1: config 64 interface 227 has no altsetting 0
[  253.903609][ T5888] usb 2-1: config 64 interface 9 has no altsetting 0
[  253.913359][ T5888] usb 2-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=cf.97
[  253.922887][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  253.932450][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.941813][ T5888] usb 2-1: Product: syz
[  253.946285][ T5888] usb 2-1: Manufacturer: ᐉ
[  253.951225][ T5888] usb 2-1: SerialNumber: syz
[  254.086002][    T9] usb 3-1: device descriptor read/64, error -71
[  254.197971][ T5888] usb 2-1: USB disconnect, device number 60
[  254.294990][ T9112] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1046'.
[  254.336038][    T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  254.444548][ T9114] netlink: 'syz.3.1047': attribute type 27 has an invalid length.
[  254.476007][    T9] usb 3-1: device descriptor read/64, error -71
[  254.586331][    T9] usb usb3-port1: attempt power cycle
[  254.807023][ T5888] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  254.946948][    T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  254.966940][    T9] usb 3-1: device descriptor read/8, error -71
[  254.974521][ T5888] usb 4-1: config 54 has an invalid interface number: 57 but max is 0
[  254.983024][ T5888] usb 4-1: config 54 has no interface number 0
[  254.989661][ T8317] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  254.999882][ T5888] usb 4-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=35.c3
[  255.009201][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.017600][ T5888] usb 4-1: Product: syz
[  255.021813][ T5888] usb 4-1: Manufacturer: syz
[  255.026639][ T5888] usb 4-1: SerialNumber: syz
[  255.126008][ T8317] usb 2-1: device descriptor read/64, error -71
[  255.206090][    T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  255.226692][    T9] usb 3-1: device descriptor read/8, error -71
[  255.241353][ T5888] usb 4-1: Could not find all expected endpoints
[  255.257031][ T5888] usb 4-1: USB disconnect, device number 56
[  255.336229][    T9] usb usb3-port1: unable to enumerate USB device
[  255.366033][ T8317] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  255.495999][ T8317] usb 2-1: device descriptor read/64, error -71
[  255.607088][ T8317] usb usb2-port1: attempt power cycle
[  255.730101][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.737070][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.923700][ T9139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1055'.
[  255.956063][ T8317] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  255.986609][ T8317] usb 2-1: device descriptor read/8, error -71
[  256.026830][ T9141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1054'.
[  256.044477][ T9141] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1054'.
[  256.055266][ T9141] netlink: 'syz.0.1054': attribute type 5 has an invalid length.
[  256.064308][ T9141] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1054'.
[  256.124169][ T9145] overlayfs: missing 'lowerdir'
[  256.237910][ T8317] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  256.276769][ T8317] usb 2-1: device descriptor read/8, error -71
[  256.387273][ T8317] usb usb2-port1: unable to enumerate USB device
[  256.872801][ T9162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1064'.
[  257.014015][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.040599][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.118736][ T9171] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8983, magic 89 != 6b]
[  257.247184][ T8317] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  257.278244][ T9178] fuse: Unknown parameter '00000000000000000000003'
[  257.332519][ T9180] FAULT_INJECTION: forcing a failure.
[  257.332519][ T9180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  257.355430][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.0.1070 Not tainted syzkaller #0 PREEMPT(full) 
[  257.355459][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  257.355473][ T9180] Call Trace:
[  257.355481][ T9180]  <TASK>
[  257.355490][ T9180]  dump_stack_lvl+0xe8/0x150
[  257.355524][ T9180]  should_fail_ex+0x412/0x560
[  257.355552][ T9180]  _copy_to_user+0x31/0xb0
[  257.355582][ T9180]  simple_read_from_buffer+0xe1/0x170
[  257.355614][ T9180]  proc_fail_nth_read+0x1bb/0x230
[  257.355644][ T9180]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  257.355675][ T9180]  ? rw_verify_area+0x2a6/0x4d0
[  257.355706][ T9180]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  257.355733][ T9180]  vfs_read+0x20c/0xa70
[  257.355751][ T9180]  ? fdget_pos+0x246/0x320
[  257.355783][ T9180]  ? __pfx___mutex_lock+0x10/0x10
[  257.355808][ T9180]  ? __pfx_vfs_read+0x10/0x10
[  257.355829][ T9180]  ? __fget_files+0x2a/0x420
[  257.355860][ T9180]  ? __fget_files+0x3a0/0x420
[  257.355890][ T9180]  ? __fget_files+0x2a/0x420
[  257.355925][ T9180]  ksys_read+0x150/0x270
[  257.355947][ T9180]  ? __pfx_ksys_read+0x10/0x10
[  257.355978][ T9180]  do_syscall_64+0x14d/0xf80
[  257.355999][ T9180]  ? trace_irq_disable+0x3b/0x150
[  257.356025][ T9180]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.356045][ T9180]  ? clear_bhb_loop+0x40/0x90
[  257.356069][ T9180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.356089][ T9180] RIP: 0033:0x7f3de115c84e
[  257.356107][ T9180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  257.356125][ T9180] RSP: 002b:00007f3de1fb7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  257.356147][ T9180] RAX: ffffffffffffffda RBX: 00007f3de1fb86c0 RCX: 00007f3de115c84e
[  257.356162][ T9180] RDX: 000000000000000f RSI: 00007f3de1fb80a0 RDI: 0000000000000004
[  257.356175][ T9180] RBP: 00007f3de1fb8090 R08: 0000000000000000 R09: 0000000000000000
[  257.356188][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.356200][ T9180] R13: 00007f3de1416038 R14: 00007f3de1415fa0 R15: 00007ffdeb228fc8
[  257.356240][ T9180]  </TASK>
[  257.595982][ T8317] usb 3-1: Using ep0 maxpacket: 8
[  257.603084][ T8317] usb 3-1: config 0 has an invalid interface number: 99 but max is 0
[  257.611337][ T8317] usb 3-1: config 0 has no interface number 0
[  257.617591][ T8317] usb 3-1: New USB device found, idVendor=1039, idProduct=2111, bcdDevice=a1.1e
[  257.626738][ T8317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.637684][ T8317] usb 3-1: config 0 descriptor??
[  257.646362][ T8317] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2111) Rev (0XA11E): Eagle I
[  257.786788][ T8317] usb 3-1: reset high-speed USB device number 54 using dummy_hcd
[  257.845232][ T9194] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1074'.
[  258.316311][ T9212] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  258.335102][   T30] audit: type=1400 audit(1770862748.800:9): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=9211 comm="syz.0.1082"
[  258.343381][ T9212] sctp: [Deprecated]: syz.0.1082 (pid 9212) Use of int in maxseg socket option.
[  258.343381][ T9212] Use struct sctp_assoc_value instead
[  258.518795][ T9220] FAULT_INJECTION: forcing a failure.
[  258.518795][ T9220] name failslab, interval 1, probability 0, space 0, times 0
[  258.544550][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.0.1084 Not tainted syzkaller #0 PREEMPT(full) 
[  258.544579][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  258.544592][ T9220] Call Trace:
[  258.544600][ T9220]  <TASK>
[  258.544609][ T9220]  dump_stack_lvl+0xe8/0x150
[  258.544642][ T9220]  should_fail_ex+0x412/0x560
[  258.544670][ T9220]  should_failslab+0xa8/0x100
[  258.544694][ T9220]  __kmalloc_noprof+0xe8/0x760
[  258.544715][ T9220]  ? tomoyo_encode+0x28b/0x550
[  258.544745][ T9220]  tomoyo_encode+0x28b/0x550
[  258.544774][ T9220]  tomoyo_realpath_from_path+0x58d/0x5d0
[  258.544809][ T9220]  ? tomoyo_path_number_perm+0x219/0x630
[  258.544841][ T9220]  tomoyo_path_number_perm+0x246/0x630
[  258.544875][ T9220]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  258.544909][ T9220]  ? __lock_acquire+0x6b5/0x2cf0
[  258.544947][ T9220]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  258.544994][ T9220]  ? __fget_files+0x2a/0x420
[  258.545025][ T9220]  ? __fget_files+0x2a/0x420
[  258.545050][ T9220]  ? __fget_files+0x3a0/0x420
[  258.545076][ T9220]  ? __fget_files+0x2a/0x420
[  258.545106][ T9220]  security_file_ioctl+0xc3/0x2a0
[  258.545139][ T9220]  __se_sys_ioctl+0x47/0x170
[  258.545165][ T9220]  do_syscall_64+0x14d/0xf80
[  258.545186][ T9220]  ? trace_irq_disable+0x3b/0x150
[  258.545213][ T9220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.545233][ T9220]  ? clear_bhb_loop+0x40/0x90
[  258.545257][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.545277][ T9220] RIP: 0033:0x7f3de119bf79
[  258.545296][ T9220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.545313][ T9220] RSP: 002b:00007f3de1fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.545335][ T9220] RAX: ffffffffffffffda RBX: 00007f3de1415fa0 RCX: 00007f3de119bf79
[  258.545349][ T9220] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003
[  258.545362][ T9220] RBP: 00007f3de1fb8090 R08: 0000000000000000 R09: 0000000000000000
[  258.545375][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.545387][ T9220] R13: 00007f3de1416038 R14: 00007f3de1415fa0 R15: 00007ffdeb228fc8
[  258.545421][ T9220]  </TASK>
[  258.545451][ T9220] ERROR: Out of memory at tomoyo_realpath_from_path.
[  258.855797][ T9224] netlink: 'syz.0.1085': attribute type 32 has an invalid length.
[  258.880166][ T9226] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1086'.
[  259.036045][ T8317] usb 3-1: device descriptor read/64, error -71
[  259.077055][ T9231] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1088'.
[  259.118178][ T9237] FAULT_INJECTION: forcing a failure.
[  259.118178][ T9237] name failslab, interval 1, probability 0, space 0, times 0
[  259.148671][ T9237] CPU: 0 UID: 0 PID: 9237 Comm: syz.0.1090 Not tainted syzkaller #0 PREEMPT(full) 
[  259.148699][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  259.148712][ T9237] Call Trace:
[  259.148720][ T9237]  <TASK>
[  259.148729][ T9237]  dump_stack_lvl+0xe8/0x150
[  259.148762][ T9237]  should_fail_ex+0x412/0x560
[  259.148790][ T9237]  should_failslab+0xa8/0x100
[  259.148816][ T9237]  __kmalloc_noprof+0xe8/0x760
[  259.148837][ T9237]  ? tomoyo_encode+0x28b/0x550
[  259.148866][ T9237]  tomoyo_encode+0x28b/0x550
[  259.148895][ T9237]  tomoyo_realpath_from_path+0x58d/0x5d0
[  259.148929][ T9237]  ? tomoyo_path_number_perm+0x219/0x630
[  259.148960][ T9237]  tomoyo_path_number_perm+0x246/0x630
[  259.148993][ T9237]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  259.149028][ T9237]  ? __lock_acquire+0x6b5/0x2cf0
[  259.149065][ T9237]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  259.149110][ T9237]  ? __fget_files+0x2a/0x420
[  259.149141][ T9237]  ? __fget_files+0x2a/0x420
[  259.149185][ T9237]  ? __fget_files+0x3a0/0x420
[  259.149211][ T9237]  ? __fget_files+0x2a/0x420
[  259.149243][ T9237]  security_file_ioctl+0xc3/0x2a0
[  259.149276][ T9237]  __se_sys_ioctl+0x47/0x170
[  259.149301][ T9237]  do_syscall_64+0x14d/0xf80
[  259.149323][ T9237]  ? trace_irq_disable+0x3b/0x150
[  259.149350][ T9237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.149372][ T9237]  ? clear_bhb_loop+0x40/0x90
[  259.149397][ T9237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.149417][ T9237] RIP: 0033:0x7f3de119bf79
[  259.149437][ T9237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.149454][ T9237] RSP: 002b:00007f3de1fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  259.149476][ T9237] RAX: ffffffffffffffda RBX: 00007f3de1415fa0 RCX: 00007f3de119bf79
[  259.149491][ T9237] RDX: 0000200000000040 RSI: 0000000000008b20 RDI: 0000000000000004
[  259.149504][ T9237] RBP: 00007f3de1fb8090 R08: 0000000000000000 R09: 0000000000000000
[  259.149517][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.149528][ T9237] R13: 00007f3de1416038 R14: 00007f3de1415fa0 R15: 00007ffdeb228fc8
[  259.149561][ T9237]  </TASK>
[  259.149582][ T9237] ERROR: Out of memory at tomoyo_realpath_from_path.
[  259.506405][ T8317] usb 3-1: reset high-speed USB device number 54 using dummy_hcd
[  259.520932][ T8317] usb 3-1: device reset changed ep0 maxpacket size!
[  259.546701][ T8317] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  259.560783][ T8317] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  259.569355][ T5888] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  259.580639][ T9247] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  259.596492][ T8317] usb 3-1: USB disconnect, device number 54
[  259.603233][ T5888] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  259.613423][ T9247] syzkaller1: entered promiscuous mode
[  259.621330][ T9247] syzkaller1: entered allmulticast mode
[  259.646836][ T5888] ------------[ cut here ]------------
[  259.652715][ T5888] !atomic_read(&kn->count)
[  259.652745][ T5888] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#0: kworker/0:6/5888
[  259.666954][ T5888] Modules linked in:
[  259.671275][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  259.681041][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  259.691508][ T5888] Workqueue: events request_firmware_work_func
[  259.698039][ T5888] RIP: 0010:kernfs_get+0x72/0x90
[  259.703040][ T5888] Code: e8 63 88 56 ff 48 89 df be 04 00 00 00 e8 c6 ae c0 ff f0 ff 03 eb 05 e8 4c 88 56 ff 5b 5d e9 85 43 4c 09 cc e8 3f 88 56 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 c5
[  259.722898][ T5888] RSP: 0018:ffffc900044276c0 EFLAGS: 00010293
[  259.729242][ T5888] RAX: ffffffff826f65a1 RBX: ffff888036e394b0 RCX: ffff8880330e3c80
[  259.737498][ T5888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  259.745546][ T5888] RBP: 0000000000000000 R08: ffff888036e394b3 R09: 1ffff11006dc7296
[  259.753625][ T5888] R10: dffffc0000000000 R11: ffffed1006dc7297 R12: ffff8880291bad28
[  259.761690][ T5888] R13: 1ffff110052375a6 R14: ffff8880291bad30 R15: ffff8880291bad18
[  259.766139][ T8316] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  259.769767][ T5888] FS:  0000000000000000(0000) GS:ffff88812500b000(0000) knlGS:0000000000000000
[  259.786397][ T5888] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.792992][ T5888] CR2: 00007fdea1f456b8 CR3: 000000000e74c000 CR4: 00000000003526f0
[  259.801186][ T5888] Call Trace:
[  259.804500][ T5888]  <TASK>
[  259.807582][ T5888]  kobject_add_internal+0x6be/0xd00
[  259.812828][ T5888]  kobject_add+0x163/0x240
[  259.817355][ T5888]  ? rcu_is_watching+0x15/0xb0
[  259.822163][ T5888]  ? __pfx_kobject_add+0x10/0x10
[  259.827224][ T5888]  ? __kasan_kmalloc+0x93/0xb0
[  259.832218][ T5888]  ? kobject_init+0x83/0x1e0
[  259.837115][ T5888]  get_device_parent+0x316/0x3a0
[  259.842114][ T5888]  device_add+0x2e1/0xb70
[  259.846547][ T5888]  firmware_fallback_sysfs+0x2e4/0xa30
[  259.852055][ T5888]  ? kfree+0x1c1/0x630
[  259.856247][ T5888]  _request_firmware+0x1052/0x1780
[  259.861438][ T5888]  ? __pfx__request_firmware+0x10/0x10
[  259.867049][ T5888]  request_firmware_work_func+0xaf/0x1c0
[  259.872738][ T5888]  ? process_one_work+0x87c/0x1650
[  259.877994][ T5888]  process_one_work+0x949/0x1650
[  259.883003][ T5888]  ? __pfx_process_one_work+0x10/0x10
[  259.888551][ T5888]  ? do_raw_spin_lock+0x12b/0x2f0
[  259.893630][ T5888]  worker_thread+0xb46/0x1140
[  259.898472][ T5888]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  259.904342][ T5888]  kthread+0x388/0x470
[  259.908499][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  259.913653][ T5888]  ? __pfx_kthread+0x10/0x10
[  259.918344][ T5888]  ret_from_fork+0x51e/0xb90
[  259.922984][ T5888]  ? __pfx_ret_from_fork+0x10/0x10
[  259.928219][ T5888]  ? __switch_to+0xc7d/0x1450
[  259.933154][ T5888]  ? __pfx_kthread+0x10/0x10
[  259.938039][ T5888]  ret_from_fork_asm+0x1a/0x30
[  259.942881][ T5888]  </TASK>
[  259.945972][ T5888] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  259.953288][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  259.962691][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  259.972789][ T5888] Workqueue: events request_firmware_work_func
[  259.979012][ T5888] Call Trace:
[  259.982330][ T5888]  <TASK>
[  259.985299][ T5888]  vpanic+0x56c/0xa60
[  259.989338][ T5888]  ? __pfx__printk+0x10/0x10
[  259.993982][ T5888]  ? __pfx_vpanic+0x10/0x10
[  259.998531][ T5888]  ? is_bpf_text_address+0x292/0x2b0
[  260.003853][ T5888]  ? is_bpf_text_address+0x26/0x2b0
[  260.009105][ T5888]  panic+0xc5/0xd0
[  260.012872][ T5888]  ? __pfx_panic+0x10/0x10
[  260.017332][ T5888]  ? ret_from_fork_asm+0x1a/0x30
[  260.022319][ T5888]  __warn+0x315/0x4f0
[  260.026344][ T5888]  ? kernfs_get+0x72/0x90
[  260.030715][ T5888]  ? kernfs_get+0x72/0x90
[  260.035160][ T5888]  __report_bug+0x29a/0x540
[  260.039709][ T5888]  ? kernfs_get+0x72/0x90
[  260.044074][ T5888]  ? __pfx___report_bug+0x10/0x10
[  260.049127][ T5888]  ? kernfs_add_one+0x477/0x5c0
[  260.054063][ T5888]  ? up_write+0x1ab/0x410
[  260.058421][ T5888]  ? kernfs_get+0x72/0x90
[  260.062772][ T5888]  report_bug+0x16a/0x220
[  260.067178][ T5888]  ? kernfs_get+0x72/0x90
[  260.071529][ T5888]  ? kernfs_get+0x74/0x90
[  260.075882][ T5888]  handle_bug+0x98/0x200
[  260.080148][ T5888]  exc_invalid_op+0x1a/0x50
[  260.084679][ T5888]  asm_exc_invalid_op+0x1a/0x20
[  260.089550][ T5888] RIP: 0010:kernfs_get+0x72/0x90
[  260.094511][ T5888] Code: e8 63 88 56 ff 48 89 df be 04 00 00 00 e8 c6 ae c0 ff f0 ff 03 eb 05 e8 4c 88 56 ff 5b 5d e9 85 43 4c 09 cc e8 3f 88 56 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 c5
[  260.114136][ T5888] RSP: 0018:ffffc900044276c0 EFLAGS: 00010293
[  260.120226][ T5888] RAX: ffffffff826f65a1 RBX: ffff888036e394b0 RCX: ffff8880330e3c80
[  260.128220][ T5888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  260.136213][ T5888] RBP: 0000000000000000 R08: ffff888036e394b3 R09: 1ffff11006dc7296
[  260.144238][ T5888] R10: dffffc0000000000 R11: ffffed1006dc7297 R12: ffff8880291bad28
[  260.152240][ T5888] R13: 1ffff110052375a6 R14: ffff8880291bad30 R15: ffff8880291bad18
[  260.160249][ T5888]  ? kernfs_get+0x71/0x90
[  260.164613][ T5888]  kobject_add_internal+0x6be/0xd00
[  260.169848][ T5888]  kobject_add+0x163/0x240
[  260.174291][ T5888]  ? rcu_is_watching+0x15/0xb0
[  260.179091][ T5888]  ? __pfx_kobject_add+0x10/0x10
[  260.184054][ T5888]  ? __kasan_kmalloc+0x93/0xb0
[  260.188843][ T5888]  ? kobject_init+0x83/0x1e0
[  260.193461][ T5888]  get_device_parent+0x316/0x3a0
[  260.198431][ T5888]  device_add+0x2e1/0xb70
[  260.202790][ T5888]  firmware_fallback_sysfs+0x2e4/0xa30
[  260.208283][ T5888]  ? kfree+0x1c1/0x630
[  260.212390][ T5888]  _request_firmware+0x1052/0x1780
[  260.217543][ T5888]  ? __pfx__request_firmware+0x10/0x10
[  260.223035][ T5888]  request_firmware_work_func+0xaf/0x1c0
[  260.228705][ T5888]  ? process_one_work+0x87c/0x1650
[  260.233837][ T5888]  process_one_work+0x949/0x1650
[  260.238818][ T5888]  ? __pfx_process_one_work+0x10/0x10
[  260.244207][ T5888]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.249266][ T5888]  worker_thread+0xb46/0x1140
[  260.253979][ T5888]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  260.259822][ T5888]  kthread+0x388/0x470
[  260.263908][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  260.269059][ T5888]  ? __pfx_kthread+0x10/0x10
[  260.273683][ T5888]  ret_from_fork+0x51e/0xb90
[  260.278312][ T5888]  ? __pfx_ret_from_fork+0x10/0x10
[  260.283452][ T5888]  ? __switch_to+0xc7d/0x1450
[  260.288169][ T5888]  ? __pfx_kthread+0x10/0x10
[  260.292790][ T5888]  ret_from_fork_asm+0x1a/0x30
[  260.297597][ T5888]  </TASK>
[  260.301284][ T5888] Kernel Offset: disabled
[  260.305637][ T5888] Rebooting in 86400 seconds..