last executing test programs:

6m18.733340633s ago: executing program 3 (id=1731):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
timer_create(0x2, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
writev(r3, 0x0, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
io_setup(0x8, &(0x7f0000000600))
epoll_create1(0x80000)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7)

6m17.895634077s ago: executing program 3 (id=1740):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40b00)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet(0x2, 0x3, 0x8d)
socket(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r2, @ANYBLOB='\a'], 0x0)
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000480))
syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040)

6m16.153446745s ago: executing program 3 (id=1758):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0xe526, 0x7, 0x9, {0x5, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x0, 0x1000, 0x7f, r2, r3, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

6m15.854324089s ago: executing program 3 (id=1762):
syz_open_dev$loop(0x0, 0xe0, 0x400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
write$sndseq(r0, 0x0, 0x0)

6m15.455829437s ago: executing program 3 (id=1769):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x24, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x24}}, 0x4000104)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

6m15.171323911s ago: executing program 3 (id=1774):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

6m13.803437768s ago: executing program 2 (id=1796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08002600b409000008008100090000000800270002"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
write(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x6d, &(0x7f0000000200)={0x7fff, 0x200, 0xc44, 0xf8e9, 0x4, 0x100, 0x6, 0xffffffffffff8001}, &(0x7f0000000180)={0x5, 0x2, 0x7, 0x8, 0x2, 0x0, 0xe, 0xfffffffffffffff9}, &(0x7f00000001c0)={0x9, 0x200000000fffb, 0x8, 0x2, 0x4, 0x6, 0xcad, 0x679d}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0xa0]}, 0x8})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8801, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000100), 0x2000014, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000714010026bd7000fddbdf2508004400", @ANYRES32=r6, @ANYBLOB='\b\x00D\x00', @ANYRES32=r7, @ANYBLOB="0500540001000000050054000100000008004400", @ANYRES32=r8, @ANYBLOB="0074da2138e6f9743815081b3a0d8f438889c29142a375ff0a8e63c6ccd95bb6457f6a990a0ca137d98966974e44a201257fb3fcc5679cbfbedbc590c9802fdedb31b02335ba0e3dd2dea115e93958f273a8873cc60490634dc4d3735845c5f266887553852a4b55b0b39d8b098c69ef9743e9bda656900a3c1ade78", @ANYRES32=r9, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x14)

6m13.652131314s ago: executing program 2 (id=1798):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lstat(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f00000001c0))
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0xe5c, 0x80000)
r3 = eventfd2(0x85, 0x80801)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x5, 0x2, r3})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x8000004, 0x0, r2})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3)

6m13.546733283s ago: executing program 2 (id=1800):
syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x25ad3684, 0x5, 0x2, 0x0, 0xf5})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
write$sndseq(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r3, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
io_setup(0xd4, &(0x7f0000000040))
io_setup(0x202, &(0x7f0000000200))
r5 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
close_range(r4, 0xffffffffffffffff, 0x0)

6m13.371628129s ago: executing program 2 (id=1802):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000780)={0x7, 0x0, [{0x5, 0x0, 0x50dc}, {0x200, 0x0, 0x800}, {0x7fffffff, 0x0, 0x8}, {0x6, 0x0, 0x2}, {0x44e, 0x0, 0x7f}, {0xd38, 0x0, 0x7}, {0x10000, 0x0, 0x6}, {0x7ff, 0x0, 0xbcd}, {0x5, 0x0, 0xa9}, {0x9, 0x0, 0x8}, {0x4, 0x0, 0x6}, {0x7ff, 0x0, 0x9}, {0x8dd6, 0x0, 0x3}, {0x3, 0x0, 0x6}, {0xd, 0x0, 0x7ff}, {0x2, 0x0, 0x6}]})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r5 = dup3(r4, r3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000180)={r8, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={r8}, 0x8)
dup(r0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0xe9, 0x6, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

6m13.233987393s ago: executing program 2 (id=1804):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
timer_create(0x2, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
writev(r3, 0x0, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
io_setup(0x8, &(0x7f0000000600))
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7)

6m12.984160154s ago: executing program 2 (id=1805):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x2) (async)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x2, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0)

5m59.372419456s ago: executing program 32 (id=1774):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

5m57.415567346s ago: executing program 33 (id=1805):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x2) (async)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x2, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0)

7.372518136s ago: executing program 0 (id=3971):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0)

7.3518123s ago: executing program 0 (id=3972):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x29d9c896, 0x2)
socket$netlink(0x10, 0x3, 0x4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24040000)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7)

6.638835997s ago: executing program 0 (id=3973):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @loopback, 0x5}, {0xa, 0x4e20, 0x3, @mcast2, 0x7ff}, 0xffffffffffffffff, 0x8d4}}, 0x48)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9b4}, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, r2, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback, 0xfffffff7}, {0xa, 0x4e20, 0x7, @mcast2}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80005}, {0xa, 0x4e20, 0x4, @loopback, 0x9}, r3, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r3, 0x6}}, 0x10)

6.548611751s ago: executing program 0 (id=3974):
syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x24, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='7', 0x1, 0x4000800, 0x0, 0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10c00, 0x2, 0xb6}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9993, 0x10002, 0x421, 0x31e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27682, 0x100, 0xfffffffd, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x379, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ea, 0x20, 0x5, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

6.386268802s ago: executing program 0 (id=3975):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @local})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
memfd_create(&(0x7f0000000680)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccDA-\xbe\xb8\xaf\xe8\xd0y\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42\v\x00\x00\x00\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dtw\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xfdv\x8e\r|C\xf3\x01\x8a\xd2L\xef\xaf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x194\xe7eJ\xfaI\xd7#fp\n\xbdB\xe0\xa4/\x95\xe8\xf8\\\xd3\x16\xe2\x19S\xa6\x83\'\xfd%\xbd\xcb%\xe5<\x92)$\xbb\xd1\x9b8\x98\bK\x15^\xc9P?H\x10\x1f7\xea\xf3\xec\xf6\x81\xb6\xa4]\xb0B\x9b\x94\xd01>^\xb7\xef\xe9nh\xc4H\x83\xf2S_\xb4\xee\xaaVF\xbfr\xb4\x8c\x89S6XyVee4\x1b0\xfcp', 0xd)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x95, {0x95, 0x23, "34ce38c9ec498e1f97f734cfd2c934b7ef71d7944afe127dd173da29703c44e6d6ae02b6ecc7c5800924d0c0347b0179f967c64cdac105520444bc5fc753b055a4475f4208fba3fda12a550cf95cf18310e2889cc207a449d46e69a69456996c269d7ec4dba7491ba714c480ce5106691cead929d84ce15af99c9ba1a933af070309fcee773312dfc73d6488a064f4ed113b77"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000300)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0x0, 0x3, [0xff3f17]}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "5f8dc8e773eb4675ad16857a5729118f"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "48c18a07ac2e8afcf9b6bd0ead9b529e"}, @generic={0x60, 0x10, 0x3, "8271726c02ac6e3c08911e2f74d47d6ce542bcd36efb4e244ee5b1c4925cc566d11670df75707128c30f733f6c727d63d029e3129f6c5a070031517d16edbe2d1665f6f5e061d9acfc7996baba795ef7aec9f6cef09c0c0d94aa6bb2ee"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0xb, 0x1, 0xeb, "36f5024c", "f6730e10"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x6, 0x90, 0x5, 0x5, 0xfffb}}}, &(0x7f0000001000)={0x84, &(0x7f00000004c0)={0x20, 0x14, 0xd4, "b70c4c503ad7a1781119c15903c76dc9744bda9f0ca27190ded69f948aee7df8ebac1bf40663ebea518a3870604af86c9d8f2b1e902f6166c1b0a56ac24ca070dca252f81bd947b0dda653769e1daaef23f93188c40a99a69ed82a172276ebb8392dffb20ff676e9ff437d77d2ff5dd1c91ccd1ce79683a29829f765480168abc5ddd1dab12265e7746957a5b6690d37e9f301d1d15163123dd8af979985df52d1ee88b127e3f8571665e8d0dce05edf23a15f95d6bb6fe5e59feebd459b90a70b96615380b0071532edfa0d34cdd8bdf99d3855"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x41afb53d7d8026f2, 0x80}}, &(0x7f0000000d40)={0x40, 0x7, 0x2}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "10ff"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "2482"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

6.318614151s ago: executing program 1 (id=3976):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0xc02}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x77, 0x8, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x4, 0x5d}}]}}}]}}]}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')
setreuid(0xffffffffffffffff, 0xee01)
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)='@', 0x1, 0xfffffffffffffffc)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x1, 0xb000, 0x2000, &(0x7f000089e000/0x2000)=nil})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\aK'], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.54936744s ago: executing program 5 (id=3980):
r0 = getpid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0x1, 0x0)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000004c0)={0x6, &(0x7f0000000340)=[{0x11, '\x00', @st={0x4, [{0x0, @uvalue=0x6}, {0x2, @uvalue=0x8}, {0x1, @uvalue=0x1}, {0x3, @uvalue=0x979b}]}, 0x7}]})

5.46015971s ago: executing program 5 (id=3981):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x29d9c896, 0x2)
socket$netlink(0x10, 0x3, 0x4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24040000)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7)

4.605282189s ago: executing program 5 (id=3982):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @loopback, 0x5}, {0xa, 0x4e20, 0x3, @mcast2, 0x7ff}, 0xffffffffffffffff, 0x8d4}}, 0x48)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9b4}, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, r2, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback, 0xfffffff7}, {0xa, 0x4e20, 0x7, @mcast2}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r3, 0x6}}, 0x10)

4.55107228s ago: executing program 1 (id=3983):
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
pipe(&(0x7f00000004c0))
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x8840, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (fail_nth: 3)

4.316239713s ago: executing program 5 (id=3984):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000040)={0x40, 0xd, 0x39, {0x39, 0x10, "5e582a40b24669ed2d6d8d4ee357ac790c0d9e07db257d77458921d5a85344846aa17cfa19ac956e6717778a94e3acc4470e149679737c"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0003940500009403218f30b063b6606adb3657a92bf6844983892da0e71fdefc42a8fc8f045e10087422ed6857698d39ce164b20606c5c8ce52f7ed407109ff7c1fe7fbc6c3e6d63b480ca3d0c13307edf9e7472f9b944bc052924cdd4f4e68ed45181a8f57f8b018086041d047e4c00"/124]}, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x20, 0xc, 0x2e, "1eedcc1dbcf6f12a4ad2a7a684e1f7bdba2241ca0f752385f9252b8409749dcd01e19260dffa4905c9898142fad8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "10c985c9e62d9dc44b4a38f1a8d58cf4b0fee8e0e249bc91ab8e43217540cec544c0b45e48a622e00c7870d9780eb0"}})

4.316011804s ago: executing program 1 (id=3985):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r3 = gettid()
read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SIOCGSTAMP(r4, 0x8906, 0x0)
sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0x10000, 0x0, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000))
syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000000904ca010338e88006090501021000060206090500000002f803070905061000041c0d090705c1"], 0x0)
tkill(r3, 0x14)

2.647493395s ago: executing program 0 (id=3987):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c"], 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x0, 0xe, 0xa4, {0xa4, 0x0, "cb310e8f5a7b2f755b3b7423781e4caeec3a43d1f5da805c02b6cd539202a03279aef8a0b91d821281adce3323008211391c27a942e21989e27c348ca55fcf9d3eb3b108d72a69504ebd23c89db44ce4efd5812b65e05667955b7f3585a5d6b77cac9103c0c6ea81d908579b696f0fef0d92221798a93b86e2039f62649f3e4e3483143cc70eaa27aca2dd846ce3f2f4dd062fb3d49c7f8cb2619cfe6e4266c02307"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x0, 0x10, 0xbd, "c681037ec57ba671fe7bdf659ce7f518395ef76e92e51edc865a8f12f0e638e3c5c9b8ecf3c2440921df4cfe0365436eb5ee1d7a5861896b5a5d50a3c2ad6b44267a49f7862741e74fd65b4df1a1fd6401f1056385cecfa371bc664d43bacdec69c91444f1a1274b3769b70cff0a43db7e8ccd1646e090afbc347d9e2ca94b964d44575790584f487eddf75fa2bd7d6d00961435b22f46af8610cb9c7646e511a7b022ddbe183dd4dd10f6cc19d415b31897fb97958f4878c101193542"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000840)={0x40, 0xa0, 0x4, 0xb}, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "5775c6b662308e4f751ee0a6b072ab4155f58cee7e2ea0e11d0b0308d25f27020c0faba1d08e58dad2e95622bd2089"}})

2.301891761s ago: executing program 4 (id=3988):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0xa00, 0x2}, 0x18, 0x3)
landlock_restrict_self(r1, 0x1)
landlock_restrict_self(r1, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000380))
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file1/file2\x00', 0x2a)
landlock_restrict_self(r1, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x4060, 0x1, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0xd)
write$UHID_CREATE(r0, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/3, 0x3, 0x0, 0x0, 0x2, 0x400}}, 0x120)

2.208366673s ago: executing program 4 (id=3989):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c0086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000"], 0xfdef)

1.85975057s ago: executing program 4 (id=3990):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x29d9c896, 0x2)
socket$netlink(0x10, 0x3, 0x4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
epoll_create1(0x80000)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r3], 0x7)

1.314287155s ago: executing program 5 (id=3991):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffd88, &(0x7f0000000040), 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='$', 0x1}], 0x1}}], 0x2, 0x2090)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @mcast1, 0x9}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="60d274560bd696081546c236cac4fad0f9e20279d6a3efcf461753dc3ef629acf0a6219f4a55dacaf58a2ba578f2f3521f45d938b99ebfe4134b0aaceafb655a02e28ee985bf6155005d75d9f5423c", 0x4f}], 0x1)

1.131262955s ago: executing program 1 (id=3992):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @loopback, 0x5}, {0xa, 0x4e20, 0x3, @mcast2, 0x7ff}, 0xffffffffffffffff, 0x8d4}}, 0x48)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9b4}, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, r2, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r3, 0x6}}, 0x10)

1.092485904s ago: executing program 4 (id=3993):
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="7800000018002507b9199b02ffff48000203be04020406050a0204f751570f00580f06050a0000000d0087a168d0bf46d3234565070849935ac24a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f652325025ceeb3f6aefcb081865dd61b191d74fc913d30832", 0x83, 0x2251197285d76a80, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x7c, 0x0, 0x0, 0xc, 0x10, 0x6, 0x7ff, 0xc5b, 0x5, 0x100, 0x4, 0x1, 0x1, 0x1ffff, 0x2, 0x7, 0x83, 0x2, 0x1000003, 0x1b14, 0x18, 0x0, 0xffffffff, 0xffffffff, 0xb, 0x6, 0x3b, 0x10, 0x10000006, 0x660, 0xfffffff8]})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000580)={{0x3, 0x3, 0x1, 0x1, 0x955}, 0x0, 0x40c, 0x400004})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="480002"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="480002"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

1.058096661s ago: executing program 1 (id=3994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (fail_nth: 5)

915.942749ms ago: executing program 4 (id=3995):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x8}}, './file1\x00'})
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
r3 = syz_usb_connect(0x4, 0x36, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=<r4=>r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = fanotify_init(0xf00, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r6, 0x5, 0x4800003e, r7, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
utimes(&(0x7f00000000c0)='./file0\x00', 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x202}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x36d}], 0x1}}], 0x2, 0x42054)
sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218db", 0xc6}], 0x1}}], 0x1, 0x42054)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

755.593724ms ago: executing program 1 (id=3996):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @local})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
memfd_create(&(0x7f0000000680)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccDA-\xbe\xb8\xaf\xe8\xd0y\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42\v\x00\x00\x00\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dtw\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xfdv\x8e\r|C\xf3\x01\x8a\xd2L\xef\xaf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x194\xe7eJ\xfaI\xd7#fp\n\xbdB\xe0\xa4/\x95\xe8\xf8\\\xd3\x16\xe2\x19S\xa6\x83\'\xfd%\xbd\xcb%\xe5<\x92)$\xbb\xd1\x9b8\x98\bK\x15^\xc9P?H\x10\x1f7\xea\xf3\xec\xf6\x81\xb6\xa4]\xb0B\x9b\x94\xd01>^\xb7\xef\xe9nh\xc4H\x83\xf2S_\xb4\xee\xaaVF\xbfr\xb4\x8c\x89S6XyVee4\x1b0\xfcp', 0xd)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x95, {0x95, 0x23, "34ce38c9ec498e1f97f734cfd2c934b7ef71d7944afe127dd173da29703c44e6d6ae02b6ecc7c5800924d0c0347b0179f967c64cdac105520444bc5fc753b055a4475f4208fba3fda12a550cf95cf18310e2889cc207a449d46e69a69456996c269d7ec4dba7491ba714c480ce5106691cead929d84ce15af99c9ba1a933af070309fcee773312dfc73d6488a064f4ed113b77"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000300)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0x0, 0x3, [0xff3f17]}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "5f8dc8e773eb4675ad16857a5729118f"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "48c18a07ac2e8afcf9b6bd0ead9b529e"}, @generic={0x60, 0x10, 0x3, "8271726c02ac6e3c08911e2f74d47d6ce542bcd36efb4e244ee5b1c4925cc566d11670df75707128c30f733f6c727d63d029e3129f6c5a070031517d16edbe2d1665f6f5e061d9acfc7996baba795ef7aec9f6cef09c0c0d94aa6bb2ee"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0xb, 0x1, 0xeb, "36f5024c", "f6730e10"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x6, 0x90, 0x5, 0x5, 0xfffb}}}, &(0x7f0000001000)={0x84, &(0x7f00000004c0)={0x20, 0x14, 0xd4, "b70c4c503ad7a1781119c15903c76dc9744bda9f0ca27190ded69f948aee7df8ebac1bf40663ebea518a3870604af86c9d8f2b1e902f6166c1b0a56ac24ca070dca252f81bd947b0dda653769e1daaef23f93188c40a99a69ed82a172276ebb8392dffb20ff676e9ff437d77d2ff5dd1c91ccd1ce79683a29829f765480168abc5ddd1dab12265e7746957a5b6690d37e9f301d1d15163123dd8af979985df52d1ee88b127e3f8571665e8d0dce05edf23a15f95d6bb6fe5e59feebd459b90a70b96615380b0071532edfa0d34cdd8bdf99d3855"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x41afb53d7d8026f2, 0x80}}, &(0x7f0000000d40)={0x40, 0x7, 0x2}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "10ff"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "2482"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

348.927578ms ago: executing program 5 (id=3997):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000c485, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x6)

0s ago: executing program 4 (id=3998):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="01002abd7000000000003900d393080003009c92006885e250fa8f08f75ad3b8b8565258954583afa22f86611b9590c36c770373f608043b", @ANYRES32=r3, @ANYBLOB="10005a800c0000800400010004000a"], 0x2c}, 0x1, 0x0, 0x0, 0x40895}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r5 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000140)='R\x10rust\xe3c\x1f\'Zs\xed\xb4\xfe\xda\xb5\b\xae\xb1\x01\xad\b\x00\xe2\xba\xc5\xf8\xca\xf4\v\xb2%d\xc4\xb0}> \xcc*\xc4y\xd8\xd8\x87\xbcL\xe5\x96 qg,)\xa2T\xdf\xff\xa3\x13i\xac\xba\n\xec>!\xcbK\x00\x00\x00', 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xcc}}, 0x8001)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="01002abd7000000000003900d393080003009c92006885e250fa8f08f75ad3b8b8565258954583afa22f86611b9590c36c770373f608043b", @ANYRES32=r3, @ANYBLOB="10005a800c0000800400010004000a"], 0x2c}, 0x1, 0x0, 0x0, 0x40895}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000140)='R\x10rust\xe3c\x1f\'Zs\xed\xb4\xfe\xda\xb5\b\xae\xb1\x01\xad\b\x00\xe2\xba\xc5\xf8\xca\xf4\v\xb2%d\xc4\xb0}> \xcc*\xc4y\xd8\xd8\x87\xbcL\xe5\x96 qg,)\xa2T\xdf\xff\xa3\x13i\xac\xba\n\xec>!\xcbK\x00\x00\x00', 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xcc}}, 0x8001) (async)

kernel console output (not intermixed with test programs):

as no altsetting 0
[  660.707950][ T5813] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  660.707978][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.707998][ T5813] usb 5-1: Product: syz
[  660.708012][ T5813] usb 5-1: Manufacturer: syz
[  660.708022][ T5813] usb 5-1: SerialNumber: syz
[  660.711372][ T5813] usb 5-1: config 0 descriptor??
[  660.934894][  T821] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  660.968695][ T5813] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  660.971013][ T5813] gspca_spca1528: reg_w err -71
[  660.983817][ T5813] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  660.989854][ T5813] usb 5-1: USB disconnect, device number 77
[  661.094167][  T821] usb 1-1: Using ep0 maxpacket: 16
[  661.096767][  T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.096802][  T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.096825][  T821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  661.096865][  T821] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  661.096888][  T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.122985][  T821] usb 1-1: config 0 descriptor??
[  661.203497][T16752] FAULT_INJECTION: forcing a failure.
[  661.203497][T16752] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  661.203531][T16752] CPU: 0 UID: 0 PID: 16752 Comm: syz.5.3770 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  661.203558][T16752] Tainted: [L]=SOFTLOCKUP
[  661.203565][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  661.203574][T16752] Call Trace:
[  661.203581][T16752]  <TASK>
[  661.203590][T16752]  dump_stack_lvl+0xe8/0x150
[  661.203619][T16752]  should_fail_ex+0x46b/0x600
[  661.203649][T16752]  _copy_from_user+0x2d/0xb0
[  661.203671][T16752]  kstrtouint_from_user+0xd6/0x180
[  661.203700][T16752]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  661.203740][T16752]  proc_fail_nth_write+0x8e/0x210
[  661.203761][T16752]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  661.203788][T16752]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  661.203808][T16752]  vfs_write+0x2a3/0xba0
[  661.203837][T16752]  ? __pfx_vfs_write+0x10/0x10
[  661.203860][T16752]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  661.203882][T16752]  ? lockdep_hardirqs_on+0x7a/0x110
[  661.203901][T16752]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  661.203923][T16752]  ? mutex_lock_nested+0x152/0x1d0
[  661.203951][T16752]  ? fdget_pos+0x252/0x320
[  661.203976][T16752]  ksys_write+0x156/0x270
[  661.204006][T16752]  ? __pfx_ksys_write+0x10/0x10
[  661.204030][T16752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.204048][T16752]  do_syscall_64+0x174/0x580
[  661.204065][T16752]  ? trace_irq_disable+0x3b/0x140
[  661.204088][T16752]  ? clear_bhb_loop+0x40/0x90
[  661.204113][T16752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.204131][T16752] RIP: 0033:0x7f0c6d04d68e
[  661.204145][T16752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  661.204159][T16752] RSP: 002b:00007f0c6b2e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  661.204176][T16752] RAX: ffffffffffffffda RBX: 00007f0c6b2e66c0 RCX: 00007f0c6d04d68e
[  661.204187][T16752] RDX: 0000000000000001 RSI: 00007f0c6b2e60a0 RDI: 0000000000000007
[  661.204197][T16752] RBP: 00007f0c6b2e6090 R08: 0000000000000000 R09: 0000000000000000
[  661.204207][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.204216][T16752] R13: 00007f0c6d306038 R14: 00007f0c6d305fa0 R15: 00007ffd03ef57e8
[  661.204243][T16752]  </TASK>
[  661.565903][  T821] usbhid 1-1:0.0: can't add hid device: -71
[  661.566028][  T821] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  661.569840][  T821] usb 1-1: USB disconnect, device number 47
[  661.654972][ T5813] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  661.783566][ T5813] usb 6-1: device descriptor read/64, error -71
[  662.023547][ T5813] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  662.033585][T11958] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  662.153642][ T5813] usb 6-1: device descriptor read/64, error -71
[  662.186557][T11958] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.186596][T11958] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  662.188766][T11958] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  662.188796][T11958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.188817][T11958] usb 2-1: Product: syz
[  662.188831][T11958] usb 2-1: Manufacturer: syz
[  662.188840][T11958] usb 2-1: SerialNumber: syz
[  662.224246][T11958] cdc_mbim 2-1:1.0: skipping garbage
[  662.263829][ T5813] usb usb6-port1: attempt power cycle
[  662.313652][    T9] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  662.447798][T16770] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  662.469015][    T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  662.469052][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.469100][    T9] usb 1-1: Product: syz
[  662.469108][    T9] usb 1-1: Manufacturer: syz
[  662.469116][    T9] usb 1-1: SerialNumber: syz
[  662.477170][    T9] usb 1-1: config 0 descriptor??
[  662.528467][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  662.603652][ T5813] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  662.626350][ T5813] usb 6-1: device descriptor read/8, error -71
[  662.718819][ T4926] Bluetooth: hci0: unexpected event for opcode 0x2029
[  662.863565][ T5813] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  662.884230][ T5813] usb 6-1: device descriptor read/8, error -71
[  662.943475][  T821] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  662.993976][ T5813] usb usb6-port1: unable to enumerate USB device
[  663.054231][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.055339][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.056760][T16770] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  663.057543][T11958] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  663.069331][T11958] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  663.092817][T11958] wwan wwan0: port wwan0mbim0 attached
[  663.105938][  T821] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  663.105962][  T821] usb 5-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  663.105982][  T821] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  663.106003][  T821] usb 5-1: config 1 has no interface number 1
[  663.106044][  T821] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  663.106087][  T821] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[  663.112846][  T821] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  663.112877][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.112898][  T821] usb 5-1: Product: syz
[  663.112912][  T821] usb 5-1: Manufacturer: syz
[  663.112927][  T821] usb 5-1: SerialNumber: syz
[  663.128884][T11958] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 1e:87:0a:a2:94:fc
[  663.402449][ T5813] usb 2-1: USB disconnect, device number 22
[  663.415397][ T5813] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  663.595070][T16776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3779'.
[  663.609984][ T5813] wwan wwan0: port wwan0mbim0 disconnected
[  664.262518][  T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  664.262658][  T821] usb 5-1: MIDIStreaming interface descriptor not found
[  664.406048][  T821] usb 5-1: USB disconnect, device number 78
[  664.531342][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'.
[  664.571279][T14239] udevd[14239]: setting owner of /dev/bus/usb/005/078 to uid=0, gid=0 failed: No such file or directory
[  664.642339][T10994] udevd[10994]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  665.070031][    T9] gspca_stk1135: reg_w 0x300 err -71
[  665.071071][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071084][    T9] gspca_stk1135: Sensor write failed
[  665.071110][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071119][    T9] gspca_stk1135: Sensor write failed
[  665.071143][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071152][    T9] gspca_stk1135: Sensor read failed
[  665.071176][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071184][    T9] gspca_stk1135: Sensor read failed
[  665.071191][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  665.071218][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071227][    T9] gspca_stk1135: Sensor read failed
[  665.071251][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071260][    T9] gspca_stk1135: Sensor read failed
[  665.071292][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071301][    T9] gspca_stk1135: Sensor write failed
[  665.071325][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  665.071334][    T9] gspca_stk1135: Sensor write failed
[  665.071415][    T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  665.084432][    T9] usb 1-1: USB disconnect, device number 48
[  665.143494][ T5719] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  665.316043][ T5719] usb 5-1: Using ep0 maxpacket: 8
[  665.322457][ T5719] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  665.322485][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.322506][ T5719] usb 5-1: Product: syz
[  665.322522][ T5719] usb 5-1: Manufacturer: syz
[  665.322536][ T5719] usb 5-1: SerialNumber: syz
[  665.371046][ T5719] usb 5-1: config 0 descriptor??
[  665.580945][ T5719] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  665.605201][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  665.753608][    T9] usb 2-1: Using ep0 maxpacket: 8
[  665.769897][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  665.772177][    T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  665.772212][    T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  665.772233][    T9] usb 2-1: Product: syz
[  665.772247][    T9] usb 2-1: Manufacturer: syz
[  665.772261][    T9] usb 2-1: SerialNumber: syz
[  665.893550][ T5813] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  666.015510][    T9] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  666.015526][    T9] usb 2-1: Handspring Visor / Palm OS: port 29, is for unknown use
[  666.015545][    T9] usb 2-1: Handspring Visor / Palm OS: port 1, is for Debugger use
[  666.015564][    T9] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  666.043634][ T5813] usb 1-1: Using ep0 maxpacket: 16
[  666.061511][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.061613][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  666.061638][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  666.061680][ T5813] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  666.061749][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.085668][ T5813] usb 1-1: config 0 descriptor??
[  666.218157][    T9] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  666.218360][    T9] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  666.248451][    T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  666.256539][    T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  666.267257][    T9] usb 2-1: USB disconnect, device number 23
[  666.289966][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  666.305340][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  666.307439][    T9] visor 2-1:1.0: device disconnected
[  666.544248][ T5813] usbhid 1-1:0.0: can't add hid device: -71
[  666.544353][ T5813] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  666.567029][ T5813] usb 1-1: USB disconnect, device number 49
[  666.990404][ T5719] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  667.009911][ T5719] usb 5-1: USB disconnect, device number 79
[  667.313567][T15000] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  667.476223][T15000] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.476275][T15000] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  667.496324][T15000] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  667.496354][T15000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.496382][T15000] usb 2-1: Product: syz
[  667.496396][T15000] usb 2-1: Manufacturer: syz
[  667.496411][T15000] usb 2-1: SerialNumber: syz
[  667.559876][T15000] cdc_mbim 2-1:1.0: skipping garbage
[  667.752278][T16828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  668.093645][T11958] usb 6-1: new full-speed USB device number 81 using dummy_hcd
[  668.223553][T11958] usb 6-1: device descriptor read/64, error -71
[  668.369972][T16828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  668.372206][T16828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  668.391863][T16828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  668.392734][T15000] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  668.417129][T15000] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  668.422642][T15000] wwan wwan0: port wwan0mbim0 attached
[  668.455860][T15000] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 16:63:d7:ce:86:22
[  668.473808][T11958] usb 6-1: new full-speed USB device number 82 using dummy_hcd
[  668.603630][T11958] usb 6-1: device descriptor read/64, error -71
[  668.715917][T11958] usb usb6-port1: attempt power cycle
[  668.716692][ T5813] usb 2-1: USB disconnect, device number 24
[  668.727723][ T5813] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  668.868217][ T5813] wwan wwan0: port wwan0mbim0 disconnected
[  668.993558][  T822] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  669.046855][ T5795] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  669.053619][T11958] usb 6-1: new full-speed USB device number 83 using dummy_hcd
[  669.074218][T11958] usb 6-1: device descriptor read/8, error -71
[  669.145713][  T822] usb 5-1: Using ep0 maxpacket: 8
[  669.150279][  T822] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  669.150308][  T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.150329][  T822] usb 5-1: Product: syz
[  669.150343][  T822] usb 5-1: Manufacturer: syz
[  669.150358][  T822] usb 5-1: SerialNumber: syz
[  669.156988][  T822] usb 5-1: config 0 descriptor??
[  669.196482][ T5795] usb 1-1: Using ep0 maxpacket: 16
[  669.201016][ T5795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.201048][ T5795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.201071][ T5795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  669.201110][ T5795] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  669.201133][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.211928][ T5795] usb 1-1: config 0 descriptor??
[  669.323672][T11958] usb 6-1: new full-speed USB device number 84 using dummy_hcd
[  669.345178][T11958] usb 6-1: device descriptor read/8, error -71
[  669.428898][  T822] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  669.472702][T11958] usb usb6-port1: unable to enumerate USB device
[  669.636975][ T5795] usbhid 1-1:0.0: can't add hid device: -71
[  669.637493][ T5795] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  669.667263][ T5795] usb 1-1: USB disconnect, device number 50
[  669.913614][  T821] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  670.073813][  T821] usb 2-1: Using ep0 maxpacket: 16
[  670.076687][  T821] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  670.076712][  T821] usb 2-1: config 0 has no interface number 0
[  670.076743][  T821] usb 2-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30
[  670.076869][  T821] usb 2-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  670.076897][  T821] usb 2-1: config 0 interface 1 has no altsetting 0
[  670.079943][  T821] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  670.079969][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.079990][  T821] usb 2-1: Product: syz
[  670.080004][  T821] usb 2-1: Manufacturer: syz
[  670.080018][  T821] usb 2-1: SerialNumber: syz
[  670.174057][  T821] usb 2-1: config 0 descriptor??
[  670.410850][  T821] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  670.415431][  T821] gspca_spca1528: reg_w err -71
[  670.433587][  T821] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  670.438541][  T821] usb 2-1: USB disconnect, device number 25
[  670.850775][  T822] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  670.873088][  T822] usb 5-1: USB disconnect, device number 80
[  671.202919][T16901] binder: 16900:16901 ioctl 810c9365 200000000440 returned -22
[  671.473576][ T5795] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  671.503500][ T5719] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  671.623520][  T822] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  671.625720][ T5795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.625765][ T5795] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  671.627891][ T5795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  671.627919][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.627939][ T5795] usb 6-1: Product: syz
[  671.627954][ T5795] usb 6-1: Manufacturer: syz
[  671.627965][ T5795] usb 6-1: SerialNumber: syz
[  671.653649][ T5719] usb 2-1: Using ep0 maxpacket: 32
[  671.695068][ T5719] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  671.695095][ T5719] usb 2-1: config 0 has no interface number 0
[  671.695137][ T5719] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  671.700368][ T5719] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  671.700396][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.700416][ T5719] usb 2-1: Product: syz
[  671.700430][ T5719] usb 2-1: Manufacturer: syz
[  671.700445][ T5719] usb 2-1: SerialNumber: syz
[  671.752114][ T5719] usb 2-1: config 0 descriptor??
[  671.759054][ T5719] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  671.759088][ T5719] em28xx 2-1:0.132: Video interface 132 found:
[  671.782278][ T5795] cdc_mbim 6-1:1.0: skipping garbage
[  671.803545][  T822] usb 5-1: Using ep0 maxpacket: 16
[  671.811757][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.811789][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  671.811812][  T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  671.811896][  T822] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  671.811910][  T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.835469][T16903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  671.878110][  T822] usb 5-1: config 0 descriptor??
[  672.170395][ T5719] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  672.295732][  T822] usbhid 5-1:0.0: can't add hid device: -71
[  672.296183][  T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  672.322157][  T822] usb 5-1: USB disconnect, device number 81
[  672.440008][T16903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.441367][T16903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.443161][T16903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  672.444859][ T5795] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  672.448275][ T5795] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  672.451906][ T5795] wwan wwan0: port wwan0mbim0 attached
[  672.468538][ T5795] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 22:56:9c:ae:5b:7b
[  672.700650][ T5720] usb 6-1: USB disconnect, device number 85
[  672.724235][ T5720] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  672.792735][ T5719] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  672.792766][ T5719] em28xx 2-1:0.132: failed to read eeprom (err=-5)
[  672.792817][ T5719] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  672.853665][ T5719] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  672.853764][ T5719] em28xx 2-1:0.132: analog set to bulk mode.
[  672.853886][  T821] em28xx 2-1:0.132: Registering V4L2 extension
[  672.895032][ T5720] wwan wwan0: port wwan0mbim0 disconnected
[  672.918671][ T5719] usb 2-1: USB disconnect, device number 26
[  672.932402][ T5719] em28xx 2-1:0.132: Disconnecting em28xx
[  673.221896][  T821] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  673.221920][  T821] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  673.221934][  T821] em28xx 2-1:0.132: No AC97 audio processor
[  673.377311][T16934] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  673.396195][T16934] cramfs: wrong magic
[  673.670954][  T821] usb 2-1: Decoder not found
[  673.671041][  T821] em28xx 2-1:0.132: failed to create media graph
[  673.671116][  T821] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  673.918867][  T821] em28xx 2-1:0.132: Remote control support is not available for this card.
[  673.919856][ T5719] em28xx 2-1:0.132: Closing input extension
[  673.978062][ T5712] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  674.124331][ T5712] usb 1-1: Using ep0 maxpacket: 8
[  674.159190][ T5712] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  674.159221][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.159242][ T5712] usb 1-1: Product: syz
[  674.159258][ T5712] usb 1-1: Manufacturer: syz
[  674.159273][ T5712] usb 1-1: SerialNumber: syz
[  674.221308][ T5712] usb 1-1: config 0 descriptor??
[  674.437731][ T5712] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  674.869980][ T5719] em28xx 2-1:0.132: Freeing device
[  675.143475][  T822] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  675.273614][ T5719] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  675.296081][  T822] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  675.296112][  T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.301613][  T822] usb 6-1: config 0 descriptor??
[  675.423822][ T5719] usb 2-1: Using ep0 maxpacket: 8
[  675.433033][ T5719] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  675.437853][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.437878][ T5719] usb 2-1: Product: syz
[  675.437895][ T5719] usb 2-1: Manufacturer: syz
[  675.437909][ T5719] usb 2-1: SerialNumber: syz
[  675.483690][ T5719] usb 2-1: config 0 descriptor??
[  675.505555][ T5719] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  675.510515][  T822] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  675.731059][  T822] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  675.731084][  T822] [drm] Initialized udl on minor 2
[  675.803537][ T5795] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  675.888710][ T5712] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  675.899704][ T5712] usb 1-1: USB disconnect, device number 51
[  675.924480][T16967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.925919][T16967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  675.980521][ T5795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.980625][ T5795] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  675.983545][ T5795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  675.983573][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.983645][ T5795] usb 5-1: Product: syz
[  675.983661][ T5795] usb 5-1: Manufacturer: syz
[  675.983675][ T5795] usb 5-1: SerialNumber: syz
[  676.065594][ T5795] cdc_mbim 5-1:1.0: skipping garbage
[  676.227896][  T822] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  676.258285][T16971] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  676.310167][  T822] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  676.347644][  T822] usb 6-1: USB disconnect, device number 86
[  676.365117][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  676.366500][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  676.899640][T16971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.903316][T16971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.906889][T16971] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  676.907946][ T5795] cdc_mbim 5-1:1.0: setting tx_max = 16384
[  676.934417][    T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  676.938966][ T5795] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  676.947911][ T5795] wwan wwan0: port wwan0mbim0 attached
[  676.962702][ T5795] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, e6:0d:47:b0:5e:e2
[  677.086105][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  677.086158][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  677.087746][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  677.087782][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  677.087803][    T9] usb 1-1: SerialNumber: syz
[  677.117023][ T5712] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  677.144036][    T9] hub 1-1:1.0: bad descriptor, ignoring hub
[  677.144071][    T9] hub 1-1:1.0: probe with driver hub failed with error -5
[  677.215644][T15000] usb 5-1: USB disconnect, device number 82
[  677.232892][T15000] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  677.316729][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  677.316757][ T5712] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  677.318076][ T5712] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  677.318105][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  677.318177][ T5712] usb 6-1: SerialNumber: syz
[  677.400615][T15000] wwan wwan0: port wwan0mbim0 disconnected
[  677.453920][    T9] usb 1-1: USB disconnect, device number 52
[  677.628108][ T5712] usb 6-1: 0:2 : does not exist
[  677.628239][ T5712] usb 6-1: unit 5 not found!
[  677.776641][ T5712] usb 6-1: USB disconnect, device number 87
[  678.273549][ T5795] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  678.325387][    T9] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  678.413563][ T5719] gspca_sonixj: i2c_w8 err -71
[  678.432418][ T5795] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  678.432448][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.432469][ T5795] usb 5-1: Product: syz
[  678.432485][ T5795] usb 5-1: Manufacturer: syz
[  678.432699][ T5795] usb 5-1: SerialNumber: syz
[  678.440906][ T5795] usb 5-1: config 0 descriptor??
[  678.448663][ T5795] hub 5-1:0.0: bad descriptor, ignoring hub
[  678.448699][ T5795] hub 5-1:0.0: probe with driver hub failed with error -5
[  678.453628][ T5719] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  678.486121][    T9] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[  678.504037][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  678.506021][ T5719] usb 2-1: USB disconnect, device number 27
[  678.511574][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  678.523936][    T9] usb 1-1: string descriptor 0 read error: -22
[  678.524441][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  678.527307][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.591606][T17005] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  678.618860][    T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  678.650306][ T5795] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  678.672088][ T5795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  678.676473][ T5795] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  678.676538][ T5795] usb 5-1: media controller created
[  678.738545][ T5795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  678.835159][    T9] usb 1-1: USB disconnect, device number 53
[  678.852739][T17003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.853281][T17003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.879489][ T5795] DVB: Unable to find symbol dib7000p_attach()
[  678.879504][ T5795] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  678.945284][ T5795] rc_core: IR keymap rc-dib0700-rc5 not found
[  678.945298][ T5795] Registered IR keymap rc-empty
[  678.945475][ T5795] dvb-usb: could not initialize remote control.
[  678.945481][ T5795] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  679.000084][ T5795] usb 5-1: USB disconnect, device number 83
[  679.097614][ T5795] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  679.211846][T17025] FAULT_INJECTION: forcing a failure.
[  679.211846][T17025] name failslab, interval 1, probability 0, space 0, times 0
[  679.211870][T17025] CPU: 0 UID: 0 PID: 17025 Comm: syz.5.3835 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  679.211886][T17025] Tainted: [L]=SOFTLOCKUP
[  679.211890][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  679.211897][T17025] Call Trace:
[  679.211903][T17025]  <TASK>
[  679.211910][T17025]  dump_stack_lvl+0xe8/0x150
[  679.211934][T17025]  should_fail_ex+0x46b/0x600
[  679.211964][T17025]  should_failslab+0xa8/0x100
[  679.211988][T17025]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  679.212015][T17025]  ? skb_clone+0x212/0x3a0
[  679.212036][T17025]  ? skb_clone+0x212/0x3a0
[  679.212062][T17025]  skb_clone+0x212/0x3a0
[  679.212078][T17025]  __netlink_deliver_tap+0x424/0x8b0
[  679.212097][T17025]  ? netlink_deliver_tap+0x2e/0x1b0
[  679.212111][T17025]  netlink_deliver_tap+0x19c/0x1b0
[  679.212124][T17025]  netlink_unicast+0x754/0x920
[  679.212141][T17025]  netlink_sendmsg+0x813/0xb40
[  679.212158][T17025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.212173][T17025]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  679.212189][T17025]  ? aa_sock_msg_perm+0x122/0x200
[  679.212211][T17025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.212224][T17025]  sock_sendmsg_nosec+0x13a/0x180
[  679.212241][T17025]  ____sys_sendmsg+0x55c/0x870
[  679.212257][T17025]  ? __pfx_____sys_sendmsg+0x10/0x10
[  679.212274][T17025]  ? import_iovec+0x73/0xa0
[  679.212288][T17025]  ___sys_sendmsg+0x2a5/0x360
[  679.212300][T17025]  ? __lock_acquire+0x6b5/0x2d10
[  679.212316][T17025]  ? __pfx____sys_sendmsg+0x10/0x10
[  679.212345][T17025]  ? __fget_files+0x2a/0x420
[  679.212365][T17025]  ? __fget_files+0x3a6/0x420
[  679.212381][T17025]  __x64_sys_sendmsg+0x1b7/0x290
[  679.212395][T17025]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  679.212417][T17025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.212429][T17025]  do_syscall_64+0x174/0x580
[  679.212443][T17025]  ? trace_irq_disable+0x3b/0x140
[  679.212456][T17025]  ? clear_bhb_loop+0x40/0x90
[  679.212470][T17025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.212480][T17025] RIP: 0033:0x7f0c6d08ce59
[  679.212491][T17025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.212501][T17025] RSP: 002b:00007f0c6b2e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  679.212514][T17025] RAX: ffffffffffffffda RBX: 00007f0c6d305fa0 RCX: 00007f0c6d08ce59
[  679.212521][T17025] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003
[  679.212529][T17025] RBP: 00007f0c6b2e6090 R08: 0000000000000000 R09: 0000000000000000
[  679.212536][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.212547][T17025] R13: 00007f0c6d306038 R14: 00007f0c6d305fa0 R15: 00007ffd03ef57e8
[  679.212563][T17025]  </TASK>
[  679.392976][ T5719] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  679.528864][T17031] loop8: detected capacity change from 0 to 7
[  679.534733][T17031] Dev loop8: unable to read RDB block 7
[  679.534773][T17031]  loop8: unable to read partition table
[  679.534965][T17031] loop8: partition table beyond EOD, truncated
[  679.534995][T17031] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  679.573611][ T5795] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  679.673618][ T5719] usb 2-1: Using ep0 maxpacket: 8
[  679.678074][ T5719] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  679.678090][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.678102][ T5719] usb 2-1: Product: syz
[  679.678111][ T5719] usb 2-1: Manufacturer: syz
[  679.678120][ T5719] usb 2-1: SerialNumber: syz
[  679.721487][ T5719] usb 2-1: config 0 descriptor??
[  679.731782][ T5795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.731829][ T5795] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  679.742111][ T5795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  679.742142][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.742162][ T5795] usb 6-1: Product: syz
[  679.742176][ T5795] usb 6-1: Manufacturer: syz
[  679.742191][ T5795] usb 6-1: SerialNumber: syz
[  679.818009][ T5795] cdc_mbim 6-1:1.0: skipping garbage
[  679.934250][ T5719] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  680.011395][T17029] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  680.157289][T17045] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3843'.
[  680.319882][T17046] befs: (nullb0): invalid magic header
[  680.632919][T17029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.647100][T17029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.664156][T17029] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  680.665240][ T5795] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  680.681749][ T5795] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  680.699845][ T5795] wwan wwan0: port wwan0mbim0 attached
[  680.771869][ T5795] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 2e:05:5c:3a:b3:3a
[  680.996197][ T5795] usb 6-1: USB disconnect, device number 88
[  681.004851][ T5795] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  681.207343][ T5795] wwan wwan0: port wwan0mbim0 disconnected
[  681.380224][ T5719] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  681.397372][ T5719] usb 2-1: USB disconnect, device number 28
[  681.622600][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  681.782860][ T4926] Bluetooth: hci1: unexpected event for opcode 0x0c7d
[  682.091124][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3851'.
[  682.287551][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'.
[  682.343568][ T5795] usb 6-1: new low-speed USB device number 89 using dummy_hcd
[  682.369951][T17099] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3856'.
[  682.436051][  T822] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  682.497860][ T5795] usb 6-1: LPM exit latency is zeroed, disabling LPM.
[  682.498924][ T5795] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  682.498963][ T5795] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  682.502251][ T5795] usb 6-1: string descriptor 0 read error: -22
[  682.502357][ T5795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  682.502370][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.505997][    T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  682.542271][T17083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  682.564461][ T5795] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  682.583552][  T822] usb 1-1: Using ep0 maxpacket: 16
[  682.586256][  T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.586286][  T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.586309][  T822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  682.586336][  T822] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  682.586355][  T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.594604][  T822] usb 1-1: config 0 descriptor??
[  682.629613][T17107] FAULT_INJECTION: forcing a failure.
[  682.629613][T17107] name failslab, interval 1, probability 0, space 0, times 0
[  682.629653][T17107] CPU: 0 UID: 0 PID: 17107 Comm: syz.1.3857 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  682.629683][T17107] Tainted: [L]=SOFTLOCKUP
[  682.629690][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  682.629700][T17107] Call Trace:
[  682.629707][T17107]  <TASK>
[  682.629715][T17107]  dump_stack_lvl+0xe8/0x150
[  682.629743][T17107]  should_fail_ex+0x46b/0x600
[  682.629774][T17107]  should_failslab+0xa8/0x100
[  682.629798][T17107]  __kmalloc_cache_node_noprof+0xa9/0x710
[  682.629821][T17107]  ? __get_vm_area_node+0x13f/0x300
[  682.629847][T17107]  ? __get_vm_area_node+0x13f/0x300
[  682.629874][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.629902][T17107]  __get_vm_area_node+0x13f/0x300
[  682.629929][T17107]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  682.629952][T17107]  __vmalloc_node_range_noprof+0x36a/0x1750
[  682.629981][T17107]  ? copy_process+0x837/0x42e0
[  682.630008][T17107]  ? percpu_ref_get_many+0x19/0x140
[  682.630045][T17107]  ? percpu_ref_get_many+0x19/0x140
[  682.630070][T17107]  ? percpu_ref_get_many+0x19/0x140
[  682.630097][T17107]  ? __memcg_slab_post_alloc_hook+0x4c2/0xff0
[  682.630135][T17107]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  682.630165][T17107]  ? rcu_is_watching+0x15/0xb0
[  682.630193][T17107]  ? trace_kmem_cache_alloc+0x29/0xe0
[  682.630222][T17107]  ? memcpy_and_pad+0x48/0x80
[  682.630250][T17107]  __vmalloc_node_noprof+0xc2/0x100
[  682.630269][T17107]  ? copy_process+0x837/0x42e0
[  682.630293][T17107]  ? copy_process+0x837/0x42e0
[  682.630323][T17107]  dup_task_struct+0x298/0x860
[  682.630348][T17107]  ? rt_spin_unlock+0x160/0x200
[  682.630369][T17107]  copy_process+0x837/0x42e0
[  682.630423][T17107]  ? __pfx_copy_process+0x10/0x10
[  682.630463][T17107]  vhost_task_create+0x1f9/0x380
[  682.630486][T17107]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  682.630513][T17107]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  682.630540][T17107]  ? __pfx_vhost_task_create+0x10/0x10
[  682.630570][T17107]  ? __pfx_vhost_task_fn+0x10/0x10
[  682.630595][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.630618][T17107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.630641][T17107]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  682.630665][T17107]  ? mutex_lock_nested+0x152/0x1d0
[  682.630691][T17107]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  682.630724][T17107]  kvm_mmu_post_init_vm+0x147/0x2b0
[  682.630755][T17107]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  682.630789][T17107]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  682.630813][T17107]  ? do_raw_spin_lock+0x12b/0x2f0
[  682.630846][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.630869][T17107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.630892][T17107]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  682.630915][T17107]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  682.630939][T17107]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  682.630960][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.630983][T17107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.631005][T17107]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  682.631033][T17107]  ? rt_write_unlock+0x190/0x230
[  682.631055][T17107]  kvm_vcpu_ioctl+0xa65/0xfe0
[  682.631088][T17107]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  682.631132][T17107]  ? __fget_files+0x2a/0x420
[  682.631155][T17107]  ? __fget_files+0x2a/0x420
[  682.631173][T17107]  ? __fget_files+0x3a6/0x420
[  682.631191][T17107]  ? __fget_files+0x2a/0x420
[  682.631212][T17107]  ? bpf_lsm_file_ioctl+0x9/0x20
[  682.631236][T17107]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  682.631263][T17107]  __se_sys_ioctl+0xff/0x170
[  682.631287][T17107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.631308][T17107]  do_syscall_64+0x174/0x580
[  682.631330][T17107]  ? trace_irq_disable+0x3b/0x140
[  682.631352][T17107]  ? clear_bhb_loop+0x40/0x90
[  682.631376][T17107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.631395][T17107] RIP: 0033:0x7efffcd5ce59
[  682.631413][T17107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.631429][T17107] RSP: 002b:00007efffaf95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  682.631449][T17107] RAX: ffffffffffffffda RBX: 00007efffcfd6090 RCX: 00007efffcd5ce59
[  682.631464][T17107] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  682.631476][T17107] RBP: 00007efffaf95090 R08: 0000000000000000 R09: 0000000000000000
[  682.631488][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.631499][T17107] R13: 00007efffcfd6128 R14: 00007efffcfd6090 R15: 00007ffc16d091d8
[  682.631529][T17107]  </TASK>
[  682.651903][T17107] syz.1.3857: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  682.651974][T17107] CPU: 0 UID: 0 PID: 17107 Comm: syz.1.3857 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  682.652003][T17107] Tainted: [L]=SOFTLOCKUP
[  682.652011][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  682.652029][T17107] Call Trace:
[  682.652037][T17107]  <TASK>
[  682.652046][T17107]  dump_stack_lvl+0xe8/0x150
[  682.652075][T17107]  warn_alloc+0x24c/0x270
[  682.652097][T17107]  ? __kasan_kmalloc+0x22/0xb0
[  682.652119][T17107]  ? __pfx_warn_alloc+0x10/0x10
[  682.652138][T17107]  ? __get_vm_area_node+0x13f/0x300
[  682.652173][T17107]  ? __get_vm_area_node+0x2b5/0x300
[  682.652198][T17107]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  682.652225][T17107]  __vmalloc_node_range_noprof+0x38f/0x1750
[  682.652255][T17107]  ? percpu_ref_get_many+0x19/0x140
[  682.652284][T17107]  ? percpu_ref_get_many+0x19/0x140
[  682.652306][T17107]  ? percpu_ref_get_many+0x19/0x140
[  682.652333][T17107]  ? __memcg_slab_post_alloc_hook+0x4c2/0xff0
[  682.652370][T17107]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  682.652400][T17107]  ? rcu_is_watching+0x15/0xb0
[  682.652428][T17107]  ? trace_kmem_cache_alloc+0x29/0xe0
[  682.652458][T17107]  ? memcpy_and_pad+0x48/0x80
[  682.652485][T17107]  __vmalloc_node_noprof+0xc2/0x100
[  682.652504][T17107]  ? copy_process+0x837/0x42e0
[  682.652529][T17107]  ? copy_process+0x837/0x42e0
[  682.652558][T17107]  dup_task_struct+0x298/0x860
[  682.652585][T17107]  ? rt_spin_unlock+0x160/0x200
[  682.652606][T17107]  copy_process+0x837/0x42e0
[  682.652662][T17107]  ? __pfx_copy_process+0x10/0x10
[  682.652701][T17107]  vhost_task_create+0x1f9/0x380
[  682.652724][T17107]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  682.652751][T17107]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  682.652779][T17107]  ? __pfx_vhost_task_create+0x10/0x10
[  682.652809][T17107]  ? __pfx_vhost_task_fn+0x10/0x10
[  682.652835][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.652858][T17107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.652881][T17107]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  682.652902][T17107]  ? mutex_lock_nested+0x152/0x1d0
[  682.652927][T17107]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  682.652958][T17107]  kvm_mmu_post_init_vm+0x147/0x2b0
[  682.652989][T17107]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  682.653032][T17107]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  682.653057][T17107]  ? do_raw_spin_lock+0x12b/0x2f0
[  682.653089][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.653112][T17107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.653135][T17107]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  682.653158][T17107]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  682.653183][T17107]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  682.653203][T17107]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  682.653226][T17107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.653248][T17107]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  682.653271][T17107]  ? rt_write_unlock+0x190/0x230
[  682.653293][T17107]  kvm_vcpu_ioctl+0xa65/0xfe0
[  682.653327][T17107]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  682.653370][T17107]  ? __fget_files+0x2a/0x420
[  682.653393][T17107]  ? __fget_files+0x2a/0x420
[  682.653411][T17107]  ? __fget_files+0x3a6/0x420
[  682.653428][T17107]  ? __fget_files+0x2a/0x420
[  682.653450][T17107]  ? bpf_lsm_file_ioctl+0x9/0x20
[  682.653472][T17107]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  682.653499][T17107]  __se_sys_ioctl+0xff/0x170
[  682.653523][T17107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.653545][T17107]  do_syscall_64+0x174/0x580
[  682.653567][T17107]  ? trace_irq_disable+0x3b/0x140
[  682.653591][T17107]  ? clear_bhb_loop+0x40/0x90
[  682.653614][T17107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.653633][T17107] RIP: 0033:0x7efffcd5ce59
[  682.653651][T17107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.653667][T17107] RSP: 002b:00007efffaf95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  682.653686][T17107] RAX: ffffffffffffffda RBX: 00007efffcfd6090 RCX: 00007efffcd5ce59
[  682.653701][T17107] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  682.653713][T17107] RBP: 00007efffaf95090 R08: 0000000000000000 R09: 0000000000000000
[  682.653725][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.653737][T17107] R13: 00007efffcfd6128 R14: 00007efffcfd6090 R15: 00007ffc16d091d8
[  682.653767][T17107]  </TASK>
[  682.677324][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.677421][    T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  682.685311][T17107] Mem-Info:
[  682.685324][T17107] active_anon:7301 inactive_anon:0 isolated_anon:0
[  682.685324][T17107]  active_file:0 inactive_file:55273 isolated_file:0
[  682.685324][T17107]  unevictable:768 dirty:72 writeback:0
[  682.685324][T17107]  slab_reclaimable:12359 slab_unreclaimable:104264
[  682.685324][T17107]  mapped:25904 shmem:1299 pagetables:1529
[  682.685324][T17107]  sec_pagetables:0 bounce:0
[  682.685324][T17107]  kernel_misc_reclaimable:0
[  682.685324][T17107]  free:1309975 free_pcp:2861 free_cma:0
[  682.685389][T17107] Node 0 active_anon:29204kB inactive_anon:0kB active_file:0kB inactive_file:220888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103616kB dirty:284kB writeback:0kB shmem:3660kB kernel_stack:15536kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  682.685541][T17107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  682.685589][T17107] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  682.685699][T17107] lowmem_reserve[]: 0 2491 2492 2492 2492
[  682.685732][T17107] Node 0 DMA32 free:1289648kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29204kB inactive_anon:0kB active_file:0kB inactive_file:220888kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2551612kB mlocked:0kB bounce:0kB free_pcp:11444kB local_pcp:5920kB free_cma:0kB
[  682.685839][T17107] lowmem_reserve[]: 0 0 0 0 0
[  682.685871][T17107] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:596kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  682.685923][T17107] lowmem_reserve[]: 0 0 0 0 0
[  682.686003][T17107] Node 1 Normal free:3934892kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  682.686066][T17107] lowmem_reserve[]: 0 0 0 0 0
[  682.686097][T17107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  682.686256][T17107] Node 0 
[  682.686373][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  682.686399][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.686468][    T9] usb 5-1: Product: syz
[  682.686483][    T9] usb 5-1: Manufacturer: syz
[  682.686498][    T9] usb 5-1: SerialNumber: syz
[  682.687803][T17107] DMA32: 945*4kB (UME) 641*8kB (UME) 370*16kB (UME) 360*32kB (UME) 77*64kB (UME) 61*128kB (UME) 43*256kB (UME) 23*512kB (UME) 11*1024kB (ME) 12*2048kB (M) 291*4096kB (UM) = 1289644kB
[  682.689799][T17107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  682.691198][T17107] Node 1 Normal: 5*4kB (UM) 9*8kB (UM) 11*16kB (UM) 9*32kB (UM) 12*64kB (UM) 3*128kB (UM) 2*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3934892kB
[  682.697750][T17107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  682.697768][T17107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  682.697784][T17107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  682.697800][T17107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  682.697816][T17107] 56573 total pagecache pages
[  682.698192][T17107] 0 pages in swap cache
[  682.698201][T17107] Free swap  = 124996kB
[  682.698209][T17107] Total swap = 124996kB
[  682.698235][T17107] 2097051 pages RAM
[  682.698243][T17107] 0 pages HighMem/MovableOnly
[  682.698250][T17107] 427385 pages reserved
[  682.698256][T17107] 0 pages cma reserved
[  682.765971][    T9] cdc_mbim 5-1:1.0: skipping garbage
[  682.958064][T17092] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  683.041175][  T822] usbhid 1-1:0.0: can't add hid device: -71
[  683.041338][  T822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  683.096005][  T822] usb 1-1: USB disconnect, device number 54
[  683.408357][ T5795] usb 6-1: USB disconnect, device number 89
[  683.572213][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.583715][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.588434][T17092] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  683.590710][    T9] cdc_mbim 5-1:1.0: setting tx_max = 16384
[  683.597742][    T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  683.608199][    T9] wwan wwan0: port wwan0mbim0 attached
[  683.641672][    T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 1e:7a:e2:d1:d5:ea
[  683.928009][ T5795] usb 5-1: USB disconnect, device number 84
[  683.939745][ T5795] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  684.231239][ T5795] wwan wwan0: port wwan0mbim0 disconnected
[  684.324182][T17127] autofs: Bad value for 'fd'
[  684.378986][T17127] loop9: detected capacity change from 0 to 4096
[  684.588191][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'.
[  684.743961][T15000] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  684.903592][T15000] usb 2-1: Using ep0 maxpacket: 16
[  684.907837][T15000] usb 2-1: config 6 has an invalid interface number: 224 but max is 0
[  684.907863][T15000] usb 2-1: config 6 has no interface number 0
[  684.907907][T15000] usb 2-1: config 6 interface 224 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 64
[  684.907933][T15000] usb 2-1: config 6 interface 224 has no altsetting 0
[  684.911338][T15000] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= e.3e
[  684.911368][T15000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.911389][T15000] usb 2-1: Product: syz
[  684.911404][T15000] usb 2-1: Manufacturer: syz
[  684.911418][T15000] usb 2-1: SerialNumber: syz
[  684.982101][ T5719] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  684.997442][T17135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  685.024575][  T822] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  685.147851][ T5719] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 142, changing to 7
[  685.151678][ T5719] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  685.151708][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.151781][ T5719] usb 5-1: Product: syz
[  685.151797][ T5719] usb 5-1: Manufacturer: syz
[  685.151812][ T5719] usb 5-1: SerialNumber: syz
[  685.174783][  T822] usb 6-1: Using ep0 maxpacket: 16
[  685.177964][  T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.177994][  T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  685.178016][  T822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  685.178057][  T822] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  685.178080][  T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.262349][  T822] usb 6-1: config 0 descriptor??
[  685.288102][T15000] ti_usb_3410_5052 2-1:6.224: TI USB 5052 2 port adapter converter detected
[  685.288446][T15000] ti_usb_3410_5052 2-1:6.224: missing endpoints
[  685.346833][T15000] usb 2-1: USB disconnect, device number 29
[  685.413662][  T821] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  685.494008][T17142] syz.4.3866 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  685.589692][  T821] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[  685.591830][  T821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  685.591869][  T821] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  685.630096][  T821] usb 1-1: string descriptor 0 read error: -22
[  685.630462][  T821] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  685.630699][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.673829][T17154] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  685.680644][  T822] usbhid 6-1:0.0: can't add hid device: -71
[  685.680756][  T822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  685.712294][  T821] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  685.783567][  T822] usb 6-1: USB disconnect, device number 90
[  685.862639][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  685.862811][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  686.022523][    T9] usb 1-1: USB disconnect, device number 55
[  686.203601][  T821] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  686.363481][  T821] usb 2-1: Using ep0 maxpacket: 8
[  686.367749][  T821] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  686.367830][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.367852][  T821] usb 2-1: Product: syz
[  686.367864][  T821] usb 2-1: Manufacturer: syz
[  686.367872][  T821] usb 2-1: SerialNumber: syz
[  686.373210][  T821] usb 2-1: config 0 descriptor??
[  686.436032][  T821] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  686.603107][T17172] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3872'.
[  686.674429][T17172] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3872'.
[  686.759534][T17171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.783847][T15000] usb 6-1: new full-speed USB device number 91 using dummy_hcd
[  686.966684][T15000] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  686.966714][T15000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.972034][T15000] usb 6-1: config 0 descriptor??
[  686.988799][T15000] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  687.400718][T15000] gp8psk: usb out operation failed.
[  687.400733][T15000] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  687.400984][T15000] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  687.450963][T15000] usb 6-1: USB disconnect, device number 91
[  687.583622][ T5712] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  687.746627][ T5719] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  687.747175][ T5719] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  687.775108][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.775175][ T5712] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  687.777477][ T5712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  687.777493][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.777504][ T5712] usb 1-1: Product: syz
[  687.777511][ T5712] usb 1-1: Manufacturer: syz
[  687.777519][ T5712] usb 1-1: SerialNumber: syz
[  687.848371][ T5712] cdc_mbim 1-1:1.0: skipping garbage
[  687.924693][ T5719] usb 5-1: USB disconnect, device number 85
[  688.040241][T17175] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  688.122241][T17181] FAULT_INJECTION: forcing a failure.
[  688.122241][T17181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.122265][T17181] CPU: 1 UID: 0 PID: 17181 Comm: syz.5.3876 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  688.122280][T17181] Tainted: [L]=SOFTLOCKUP
[  688.122284][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  688.122292][T17181] Call Trace:
[  688.122296][T17181]  <TASK>
[  688.122304][T17181]  dump_stack_lvl+0xe8/0x150
[  688.122322][T17181]  should_fail_ex+0x46b/0x600
[  688.122340][T17181]  _copy_to_user+0x31/0xb0
[  688.122354][T17181]  simple_read_from_buffer+0xe1/0x170
[  688.122370][T17181]  proc_fail_nth_read+0x1be/0x230
[  688.122391][T17181]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  688.122413][T17181]  ? rw_verify_area+0x2ac/0x4e0
[  688.122434][T17181]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  688.122453][T17181]  vfs_read+0x212/0xa80
[  688.122481][T17181]  ? __pfx_vfs_read+0x10/0x10
[  688.122504][T17181]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  688.122521][T17181]  ? lockdep_hardirqs_on+0x7a/0x110
[  688.122534][T17181]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  688.122547][T17181]  ? mutex_lock_nested+0x152/0x1d0
[  688.122562][T17181]  ? fdget_pos+0x252/0x320
[  688.122577][T17181]  ksys_read+0x156/0x270
[  688.122591][T17181]  ? __pfx_ksys_read+0x10/0x10
[  688.122608][T17181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.122619][T17181]  do_syscall_64+0x174/0x580
[  688.122632][T17181]  ? trace_irq_disable+0x3b/0x140
[  688.122646][T17181]  ? clear_bhb_loop+0x40/0x90
[  688.122659][T17181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.122670][T17181] RIP: 0033:0x7f0c6d04d68e
[  688.122681][T17181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  688.122690][T17181] RSP: 002b:00007f0c6b2e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  688.122702][T17181] RAX: ffffffffffffffda RBX: 00007f0c6b2e66c0 RCX: 00007f0c6d04d68e
[  688.122710][T17181] RDX: 000000000000000f RSI: 00007f0c6b2e60a0 RDI: 0000000000000004
[  688.122717][T17181] RBP: 00007f0c6b2e6090 R08: 0000000000000000 R09: 0000000000000000
[  688.122723][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.122730][T17181] R13: 00007f0c6d306038 R14: 00007f0c6d305fa0 R15: 00007ffd03ef57e8
[  688.122745][T17181]  </TASK>
[  688.325200][ T5719] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  688.474014][ T5719] usb 5-1: Using ep0 maxpacket: 8
[  688.475672][ T5719] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  688.475702][ T5719] usb 5-1: New USB device found, idVendor=0421, idProduct=033e, bcdDevice=5f.0e
[  688.475715][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.481322][ T5719] usb 5-1: config 0 descriptor??
[  688.499693][ T5719] rndis_host 5-1:0.0: rndis: master #0/ffff88803876e000 slave #1/0000000000000000
[  688.648544][T17175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.649754][T17175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.651074][T17175] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  688.651665][ T5712] cdc_mbim 1-1:1.0: setting tx_max = 16384
[  688.660640][ T5712] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  688.666633][ T5712] wwan wwan0: port wwan0mbim0 attached
[  688.703670][ T5699] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  688.718756][ T5719] usb 5-1: USB disconnect, device number 86
[  688.737549][ T5712] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 22:69:01:4d:76:e5
[  688.883636][ T5699] usb 6-1: Using ep0 maxpacket: 16
[  688.886737][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.886771][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  688.886851][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  688.886894][ T5699] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  688.886918][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.922050][ T5699] usb 6-1: config 0 descriptor??
[  688.932245][ T5719] usb 1-1: USB disconnect, device number 56
[  688.948601][ T5719] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  689.060999][  T821] gspca_sonixj: reg_w1 err -71
[  689.103643][  T821] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  689.130364][  T821] usb 2-1: USB disconnect, device number 30
[  689.318876][ T5719] wwan wwan0: port wwan0mbim0 disconnected
[  689.341762][ T5699] usbhid 6-1:0.0: can't add hid device: -71
[  689.342374][ T5699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  689.372390][ T5699] usb 6-1: USB disconnect, device number 92
[  689.663553][  T821] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  689.815889][  T821] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  689.815945][  T821] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  689.815974][  T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.850655][  T821] gspca_main: stv0680-2.14.0 probing 041e:4007
[  689.965831][T17221] ipvlan1: entered promiscuous mode
[  689.967691][T17221] ipvlan1: entered allmulticast mode
[  689.967708][T17221] veth0_vlan: entered allmulticast mode
[  690.013553][    T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  690.014268][T17226] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  690.014344][T17226] FAULT_INJECTION: forcing a failure.
[  690.014344][T17226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.014373][T17226] CPU: 1 UID: 0 PID: 17226 Comm: syz.1.3887 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.014399][T17226] Tainted: [L]=SOFTLOCKUP
[  690.014406][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.014417][T17226] Call Trace:
[  690.014425][T17226]  <TASK>
[  690.014434][T17226]  dump_stack_lvl+0xe8/0x150
[  690.014460][T17226]  should_fail_ex+0x46b/0x600
[  690.014498][T17226]  _copy_to_user+0x31/0xb0
[  690.014521][T17226]  simple_read_from_buffer+0xe1/0x170
[  690.014545][T17226]  proc_fail_nth_read+0x1be/0x230
[  690.014568][T17226]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  690.014589][T17226]  ? rw_verify_area+0x2ac/0x4e0
[  690.014611][T17226]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  690.014632][T17226]  vfs_read+0x212/0xa80
[  690.014661][T17226]  ? __pfx_vfs_read+0x10/0x10
[  690.014686][T17226]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  690.014710][T17226]  ? lockdep_hardirqs_on+0x7a/0x110
[  690.014733][T17226]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  690.014757][T17226]  ? mutex_lock_nested+0x152/0x1d0
[  690.014785][T17226]  ? fdget_pos+0x252/0x320
[  690.014812][T17226]  ksys_read+0x156/0x270
[  690.014841][T17226]  ? __pfx_ksys_read+0x10/0x10
[  690.014879][T17226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.014901][T17226]  do_syscall_64+0x174/0x580
[  690.014956][T17226]  ? trace_irq_disable+0x3b/0x140
[  690.014971][T17226]  ? clear_bhb_loop+0x40/0x90
[  690.014984][T17226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.014995][T17226] RIP: 0033:0x7efffcd1d68e
[  690.015006][T17226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.015016][T17226] RSP: 002b:00007efffafb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  690.015028][T17226] RAX: ffffffffffffffda RBX: 00007efffafb66c0 RCX: 00007efffcd1d68e
[  690.015036][T17226] RDX: 000000000000000f RSI: 00007efffafb60a0 RDI: 0000000000000004
[  690.015043][T17226] RBP: 00007efffafb6090 R08: 0000000000000000 R09: 0000000000000000
[  690.015050][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.015056][T17226] R13: 00007efffcfd6038 R14: 00007efffcfd5fa0 R15: 00007ffc16d091d8
[  690.015072][T17226]  </TASK>
[  690.300449][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  690.300481][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.300502][    T9] usb 1-1: Product: syz
[  690.300516][    T9] usb 1-1: Manufacturer: syz
[  690.300532][    T9] usb 1-1: SerialNumber: syz
[  690.433671][ T5712] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  690.465795][ T5699] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  690.542899][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  690.542943][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  690.557098][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.557617][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.583733][ T5712] usb 2-1: Using ep0 maxpacket: 16
[  690.592725][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  690.592779][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  690.615188][ T5712] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  690.616258][ T5712] usb 2-1: config 0 has no interface number 0
[  690.616308][ T5712] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  690.616347][ T5712] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  690.618246][ T5699] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  690.618283][ T5699] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  690.649241][ T5712] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  690.649270][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.649348][ T5712] usb 2-1: Product: syz
[  690.649362][ T5712] usb 2-1: Manufacturer: syz
[  690.649377][ T5712] usb 2-1: SerialNumber: syz
[  690.652710][ T5699] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  690.652736][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.652756][ T5699] usb 6-1: Product: syz
[  690.652770][ T5699] usb 6-1: Manufacturer: syz
[  690.652784][ T5699] usb 6-1: SerialNumber: syz
[  690.688891][ T5712] usb 2-1: config 0 descriptor??
[  690.689748][T17228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  690.690361][T17228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  690.727712][ T5699] cdc_mbim 6-1:1.0: skipping garbage
[  690.767892][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  690.796722][    T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  690.815263][    T9] usb 1-1: USB disconnect, device number 57
[  690.883177][T17245] use of bytesused == 0 is deprecated and will be removed in the future,
[  690.883192][T17245] use the actual size instead.
[  690.887411][  T821] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  690.896965][T17228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  690.897512][T17228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  690.911369][T17231] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  690.918564][  T821] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  690.918853][  T821] stv0680 5-1:4.0: last error: 0,  command = 0x0
[  691.101633][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.102203][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.121129][ T5712] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  691.373544][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  691.400358][T17200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.401082][T17200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.405583][T17200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.408870][T17200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.521954][ T5712] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  691.522251][ T5712] asix 2-1:0.34: probe with driver asix failed with error -61
[  691.523482][    T9] usb 1-1: Using ep0 maxpacket: 16
[  691.538355][T17231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.540933][T17231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.542912][T17231] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  691.571511][ T5699] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  691.579850][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  691.579876][    T9] usb 1-1: config 0 has no interface number 0
[  691.579908][    T9] usb 1-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30
[  691.579946][    T9] usb 1-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  691.579973][    T9] usb 1-1: config 0 interface 1 has no altsetting 0
[  691.595742][    T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  691.595771][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.595791][    T9] usb 1-1: Product: syz
[  691.595805][    T9] usb 1-1: Manufacturer: syz
[  691.595819][    T9] usb 1-1: SerialNumber: syz
[  691.673483][    T9] usb 1-1: config 0 descriptor??
[  691.679619][ T5699] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  691.698774][ T5699] wwan wwan0: port wwan0mbim0 attached
[  691.741110][ T5699] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, aa:30:5e:df:06:b3
[  691.838051][T11958] usb 6-1: USB disconnect, device number 93
[  691.871678][T11958] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  691.939664][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  691.979154][T11958] wwan wwan0: port wwan0mbim0 disconnected
[  692.140025][  T822] usb 2-1: USB disconnect, device number 31
[  692.161414][    T9] gspca_spca1528: reg_w err -71
[  692.174362][    T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  692.193597][    T9] usb 1-1: USB disconnect, device number 58
[  692.459578][ T5699] usb 5-1: USB disconnect, device number 87
[  692.550378][T17269] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3896'.
[  692.583731][  T822] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  692.623901][T17269] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3896'.
[  692.735806][  T822] usb 2-1: Using ep0 maxpacket: 16
[  692.741976][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.742011][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.742035][  T822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  692.742077][  T822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  692.742100][  T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.759859][  T822] usb 2-1: config 0 descriptor??
[  693.194507][  T822] usbhid 2-1:0.0: can't add hid device: -71
[  693.194640][  T822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  693.218098][  T822] usb 2-1: USB disconnect, device number 32
[  693.873532][  T822] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  694.027783][  T822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.027819][  T822] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  694.029928][  T822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  694.029956][  T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.029976][  T822] usb 5-1: Product: syz
[  694.029990][  T822] usb 5-1: Manufacturer: syz
[  694.029998][  T822] usb 5-1: SerialNumber: syz
[  694.067277][  T822] cdc_mbim 5-1:1.0: skipping garbage
[  694.080874][  T821] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  694.153685][ T5699] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  694.233546][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  694.253498][  T821] usb 6-1: Using ep0 maxpacket: 16
[  694.255432][  T821] usb 6-1: config 1 has an invalid interface descriptor of length 8, skipping
[  694.255454][  T821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  694.255474][  T821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  694.257731][  T821] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  694.257759][  T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.257779][  T821] usb 6-1: Product: syz
[  694.257794][  T821] usb 6-1: Manufacturer: syz
[  694.257809][  T821] usb 6-1: SerialNumber: syz
[  694.289502][T17306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  694.347954][ T5699] usb 2-1: Using ep0 maxpacket: 16
[  694.355614][ T5699] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  694.355640][ T5699] usb 2-1: config 0 has no interface number 0
[  694.355672][ T5699] usb 2-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30
[  694.355763][ T5699] usb 2-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  694.355791][ T5699] usb 2-1: config 0 interface 1 has no altsetting 0
[  694.358901][ T5699] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  694.358929][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.359001][ T5699] usb 2-1: Product: syz
[  694.359017][ T5699] usb 2-1: Manufacturer: syz
[  694.359032][ T5699] usb 2-1: SerialNumber: syz
[  694.383456][    T9] usb 1-1: Using ep0 maxpacket: 8
[  694.420268][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  694.420300][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.420369][    T9] usb 1-1: Product: syz
[  694.420384][    T9] usb 1-1: Manufacturer: syz
[  694.420398][    T9] usb 1-1: SerialNumber: syz
[  694.439502][    T9] usb 1-1: config 0 descriptor??
[  694.484864][ T5699] usb 2-1: config 0 descriptor??
[  694.588514][  T821] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  694.651029][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  694.694840][  T821] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  694.709366][  T821] usb 6-1: USB disconnect, device number 94
[  694.755959][T14131] udevd[14131]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.792391][ T5699] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  694.899458][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.900307][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.902189][T17306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  694.904049][  T822] cdc_mbim 5-1:1.0: setting tx_max = 16384
[  694.917682][  T822] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  694.930729][  T822] wwan wwan0: port wwan0mbim0 attached
[  694.966449][  T822] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 6a:9b:83:41:16:a9
[  694.997023][ T5699] gspca_spca1528: reg_w err -71
[  695.013674][ T5699] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  695.050269][ T5699] usb 2-1: USB disconnect, device number 33
[  695.199783][  T822] usb 5-1: USB disconnect, device number 88
[  695.216393][  T822] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  695.447938][  T822] wwan wwan0: port wwan0mbim0 disconnected
[  695.883551][ T5699] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  695.917385][T11958] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  696.043474][ T5699] usb 6-1: Using ep0 maxpacket: 16
[  696.047169][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  696.047201][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  696.047225][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  696.047262][ T5699] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  696.047284][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.063525][T11958] usb 2-1: Using ep0 maxpacket: 16
[  696.094822][  T822] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  696.131895][T11958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  696.131928][T11958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  696.131952][T11958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  696.131994][T11958] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  696.132017][T11958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.161008][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  696.193571][ T5699] usb 6-1: config 0 descriptor??
[  696.212142][    T9] usb 1-1: USB disconnect, device number 59
[  696.239659][T11958] usb 2-1: config 0 descriptor??
[  696.253571][  T822] usb 5-1: device descriptor read/64, error -71
[  696.493655][  T822] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  696.604043][ T5699] usbhid 6-1:0.0: can't add hid device: -71
[  696.604153][ T5699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  696.627864][  T822] usb 5-1: device descriptor read/64, error -71
[  696.638424][ T5699] usb 6-1: USB disconnect, device number 95
[  696.738331][  T822] usb usb5-port1: attempt power cycle
[  696.770389][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3915'.
[  696.799245][T11958] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input44
[  697.095944][  T822] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  697.115325][  T822] usb 5-1: device descriptor read/8, error -71
[  697.227763][T11958] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  697.250065][T11958] usb 2-1: USB disconnect, device number 34
[  697.348248][T17372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  697.348248][T17372] The task syz.5.3917 (17372) triggered the difference, watch for misbehavior.
[  697.348891][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'.
[  697.354428][  T822] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  697.390708][  T822] usb 5-1: device descriptor read/8, error -71
[  697.407268][T17369] fido_id[17369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  697.494141][  T822] usb usb5-port1: unable to enumerate USB device
[  698.253536][T11958] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  698.403594][T11958] usb 1-1: Using ep0 maxpacket: 16
[  698.406970][T11958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  698.406994][T11958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  698.409187][T11958] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  698.409214][T11958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.409235][T11958] usb 1-1: Product: syz
[  698.409249][T11958] usb 1-1: Manufacturer: syz
[  698.409265][T11958] usb 1-1: SerialNumber: syz
[  698.464105][T11958] usb 1-1: 0:2 : does not exist
[  698.475792][ T5712] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  698.646278][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.646326][ T5712] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  698.649272][ T5712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  698.649293][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.649303][ T5712] usb 6-1: Product: syz
[  698.649311][ T5712] usb 6-1: Manufacturer: syz
[  698.649319][ T5712] usb 6-1: SerialNumber: syz
[  698.711383][ T5712] cdc_mbim 6-1:1.0: skipping garbage
[  698.765262][  T821] usb 1-1: USB disconnect, device number 60
[  698.910406][T17386] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  699.223573][ T5699] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  699.386865][ T5699] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  699.386889][ T5699] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  699.386911][ T5699] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  699.386924][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.414032][T17390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  699.427553][ T5699] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  699.548353][T17386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  699.551147][T17386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.553079][T17386] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  699.556752][ T5712] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  699.562169][ T5712] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  699.576536][ T5712] wwan wwan0: port wwan0mbim0 attached
[  699.627857][ T5712] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 82:3e:01:8e:bb:45
[  699.793710][T11958] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  699.845701][ T5712] usb 6-1: USB disconnect, device number 96
[  699.848381][ T5712] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  700.092857][T11958] usb 1-1: Using ep0 maxpacket: 16
[  700.102284][T11958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.102318][T11958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.102341][T11958] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  700.102605][T11958] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  700.102638][T11958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.205878][T11958] usb 1-1: config 0 descriptor??
[  700.216374][ T5712] wwan wwan0: port wwan0mbim0 disconnected
[  700.364826][ T5699] usb 5-1: USB disconnect, device number 93
[  700.419331][T11958] usbhid 1-1:0.0: can't add hid device: -71
[  700.419445][T11958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  700.451245][T11958] usb 1-1: USB disconnect, device number 61
[  700.516109][T17400] FAULT_INJECTION: forcing a failure.
[  700.516109][T17400] name failslab, interval 1, probability 0, space 0, times 0
[  700.516142][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.5.3926 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  700.516163][T17400] Tainted: [L]=SOFTLOCKUP
[  700.516169][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  700.516178][T17400] Call Trace:
[  700.516184][T17400]  <TASK>
[  700.516191][T17400]  dump_stack_lvl+0xe8/0x150
[  700.516216][T17400]  should_fail_ex+0x46b/0x600
[  700.516242][T17400]  should_failslab+0xa8/0x100
[  700.516262][T17400]  __kmalloc_noprof+0xfe/0x7e0
[  700.516278][T17400]  ? tomoyo_encode+0x28b/0x550
[  700.516294][T17400]  ? tomoyo_encode+0x28b/0x550
[  700.516315][T17400]  tomoyo_encode+0x28b/0x550
[  700.516336][T17400]  tomoyo_realpath_from_path+0x58d/0x5d0
[  700.516363][T17400]  tomoyo_mount_permission+0x3e8/0x9d0
[  700.516383][T17400]  ? tomoyo_mount_permission+0x2b3/0x9d0
[  700.516398][T17400]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  700.516458][T17400]  security_sb_mount+0xe4/0x320
[  700.516481][T17400]  path_mount+0xbc/0x10e0
[  700.516498][T17400]  ? user_path_at+0xd4/0x160
[  700.516521][T17400]  ? user_path_at+0xd4/0x160
[  700.516539][T17400]  __se_sys_mount+0x31d/0x420
[  700.516564][T17400]  ? __pfx___se_sys_mount+0x10/0x10
[  700.516585][T17400]  ? __x64_sys_mount+0x20/0xc0
[  700.516601][T17400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.516627][T17400]  do_syscall_64+0x174/0x580
[  700.516645][T17400]  ? trace_irq_disable+0x3b/0x140
[  700.516664][T17400]  ? clear_bhb_loop+0x40/0x90
[  700.516684][T17400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.516701][T17400] RIP: 0033:0x7f0c6d08ce59
[  700.516716][T17400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  700.516729][T17400] RSP: 002b:00007f0c6b2e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  700.516745][T17400] RAX: ffffffffffffffda RBX: 00007f0c6d305fa0 RCX: 00007f0c6d08ce59
[  700.516755][T17400] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000
[  700.516765][T17400] RBP: 00007f0c6b2e6090 R08: 0000000000000000 R09: 0000000000000000
[  700.516774][T17400] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001
[  700.516782][T17400] R13: 00007f0c6d306038 R14: 00007f0c6d305fa0 R15: 00007ffd03ef57e8
[  700.516805][T17400]  </TASK>
[  700.516931][T17400] ERROR: Out of memory at tomoyo_realpath_from_path.
[  701.081685][T17419] FAULT_INJECTION: forcing a failure.
[  701.081685][T17419] name failslab, interval 1, probability 0, space 0, times 0
[  701.081719][T17419] CPU: 0 UID: 0 PID: 17419 Comm: syz.1.3933 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  701.081746][T17419] Tainted: [L]=SOFTLOCKUP
[  701.081754][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  701.081765][T17419] Call Trace:
[  701.081774][T17419]  <TASK>
[  701.081782][T17419]  dump_stack_lvl+0xe8/0x150
[  701.081808][T17419]  should_fail_ex+0x46b/0x600
[  701.081840][T17419]  should_failslab+0xa8/0x100
[  701.081863][T17419]  __kmalloc_noprof+0xfe/0x7e0
[  701.081883][T17419]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  701.081903][T17419]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  701.081927][T17419]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  701.081955][T17419]  genl_family_rcv_msg_doit+0xd9/0x330
[  701.081991][T17419]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  701.082029][T17419]  ? apparmor_capable+0x126/0x170
[  701.082054][T17419]  ? bpf_lsm_capable+0x9/0x20
[  701.082078][T17419]  ? security_capable+0x7e/0x2c0
[  701.082115][T17419]  genl_rcv_msg+0x61c/0x7a0
[  701.082149][T17419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  701.082176][T17419]  ? ref_tracker_free+0x673/0x820
[  701.082201][T17419]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  701.082229][T17419]  ? __pfx_nl80211_join_mesh+0x10/0x10
[  701.082251][T17419]  ? __pfx_nl80211_post_doit+0x10/0x10
[  701.082279][T17419]  ? ____sys_sendmsg+0x55c/0x870
[  701.082301][T17419]  ? ___sys_sendmsg+0x2a5/0x360
[  701.082323][T17419]  ? __x64_sys_sendmsg+0x1b7/0x290
[  701.082345][T17419]  ? do_syscall_64+0x174/0x580
[  701.082368][T17419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.082397][T17419]  netlink_rcv_skb+0x232/0x4b0
[  701.082423][T17419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  701.082453][T17419]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  701.082490][T17419]  ? netlink_deliver_tap+0x2e/0x1b0
[  701.082515][T17419]  ? netlink_deliver_tap+0x2e/0x1b0
[  701.082551][T17419]  genl_rcv+0x28/0x40
[  701.082579][T17419]  netlink_unicast+0x780/0x920
[  701.082611][T17419]  netlink_sendmsg+0x813/0xb40
[  701.082646][T17419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  701.082673][T17419]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  701.082702][T17419]  ? aa_sock_msg_perm+0x122/0x200
[  701.082724][T17419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  701.082748][T17419]  sock_sendmsg_nosec+0x13a/0x180
[  701.082780][T17419]  ____sys_sendmsg+0x55c/0x870
[  701.082809][T17419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  701.082843][T17419]  ? import_iovec+0x73/0xa0
[  701.082868][T17419]  ___sys_sendmsg+0x2a5/0x360
[  701.082892][T17419]  ? __lock_acquire+0x6b5/0x2d10
[  701.082921][T17419]  ? __pfx____sys_sendmsg+0x10/0x10
[  701.082981][T17419]  ? __fget_files+0x2a/0x420
[  701.083000][T17419]  ? __fget_files+0x3a6/0x420
[  701.083029][T17419]  __x64_sys_sendmsg+0x1b7/0x290
[  701.083056][T17419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  701.083099][T17419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.083120][T17419]  do_syscall_64+0x174/0x580
[  701.083144][T17419]  ? trace_irq_disable+0x3b/0x140
[  701.083168][T17419]  ? clear_bhb_loop+0x40/0x90
[  701.083193][T17419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.083212][T17419] RIP: 0033:0x7efffcd5ce59
[  701.083231][T17419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.083249][T17419] RSP: 002b:00007efffafb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  701.083270][T17419] RAX: ffffffffffffffda RBX: 00007efffcfd5fa0 RCX: 00007efffcd5ce59
[  701.083285][T17419] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  701.083297][T17419] RBP: 00007efffafb6090 R08: 0000000000000000 R09: 0000000000000000
[  701.083309][T17419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.083322][T17419] R13: 00007efffcfd6038 R14: 00007efffcfd5fa0 R15: 00007ffc16d091d8
[  701.083353][T17419]  </TASK>
[  702.202247][T17433] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3934'.
[  702.263505][ T5720] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  702.274104][T17433] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3934'.
[  702.394800][T17432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.423463][ T5720] usb 1-1: Using ep0 maxpacket: 16
[  702.439908][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  702.439940][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  702.446963][ T5720] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  702.446992][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.447013][ T5720] usb 1-1: Product: syz
[  702.447027][ T5720] usb 1-1: Manufacturer: syz
[  702.447042][ T5720] usb 1-1: SerialNumber: syz
[  702.470805][ T5720] usb 1-1: config 0 descriptor??
[  702.490256][ T5720] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  702.490290][ T5720] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  702.515204][T17440] binder: BINDER_SET_CONTEXT_MGR already set
[  702.515219][T17440] binder: 17439:17440 ioctl 4018620d 200000004a80 returned -16
[  703.129192][ T5720] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  703.157176][ T5720] em28xx 1-1:0.0: Config register raw data: 0x41
[  703.178325][T17456] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  703.448494][T17467] sock: sock_timestamping_bind_phc: sock not bind to device
[  703.463224][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3941'.
[  703.485302][ T5795] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  703.635868][ T5795] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  703.635900][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.667581][ T5795] usb 5-1: config 0 descriptor??
[  703.672866][ T5795] cp210x 5-1:0.0: cp210x converter detected
[  703.790660][T17478] cgroup: noprefix used incorrectly
[  703.851927][T17480] nft_compat: unsupported protocol 5
[  704.294309][ T5795] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  704.294423][ T5795] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  704.303132][ T5795] usb 5-1: cp210x converter now attached to ttyUSB0
[  704.316303][ T5795] usb 5-1: USB disconnect, device number 94
[  704.337753][ T5795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  704.338607][ T5795] cp210x 5-1:0.0: device disconnected
[  704.457346][T11958] usb 1-1: USB disconnect, device number 62
[  704.467984][T11958] em28xx 1-1:0.0: Disconnecting em28xx
[  704.537764][T11958] em28xx 1-1:0.0: Freeing device
[  704.666570][T17475] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  704.707174][T17488] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3947'.
[  704.753854][T17488] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3947'.
[  704.875113][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.085054][T17495] netlink: 'syz.4.3950': attribute type 3 has an invalid length.
[  705.177352][T17499] FAULT_INJECTION: forcing a failure.
[  705.177352][T17499] name failslab, interval 1, probability 0, space 0, times 0
[  705.177383][T17499] CPU: 1 UID: 0 PID: 17499 Comm: syz.4.3952 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  705.177408][T17499] Tainted: [L]=SOFTLOCKUP
[  705.177414][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  705.177424][T17499] Call Trace:
[  705.177430][T17499]  <TASK>
[  705.177438][T17499]  dump_stack_lvl+0xe8/0x150
[  705.177459][T17499]  should_fail_ex+0x46b/0x600
[  705.177483][T17499]  should_failslab+0xa8/0x100
[  705.177500][T17499]  __kmalloc_noprof+0xfe/0x7e0
[  705.177519][T17499]  ? tomoyo_encode+0x28b/0x550
[  705.177534][T17499]  ? tomoyo_encode+0x28b/0x550
[  705.177554][T17499]  tomoyo_encode+0x28b/0x550
[  705.177573][T17499]  tomoyo_realpath_from_path+0x58d/0x5d0
[  705.177590][T17499]  ? tomoyo_domain+0xd7/0x130
[  705.177609][T17499]  ? tomoyo_path_number_perm+0x219/0x630
[  705.177630][T17499]  tomoyo_path_number_perm+0x246/0x630
[  705.177654][T17499]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  705.177675][T17499]  ? __lock_acquire+0x6b5/0x2d10
[  705.177696][T17499]  ? do_raw_spin_lock+0x12b/0x2f0
[  705.177742][T17499]  ? __fget_files+0x2a/0x420
[  705.177761][T17499]  ? __fget_files+0x2a/0x420
[  705.177775][T17499]  ? __fget_files+0x3a6/0x420
[  705.177790][T17499]  ? __fget_files+0x2a/0x420
[  705.177809][T17499]  security_file_ioctl+0xc3/0x2a0
[  705.177834][T17499]  __se_sys_ioctl+0x47/0x170
[  705.177855][T17499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.177871][T17499]  do_syscall_64+0x174/0x580
[  705.177889][T17499]  ? trace_irq_disable+0x3b/0x140
[  705.177908][T17499]  ? clear_bhb_loop+0x40/0x90
[  705.177927][T17499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.177943][T17499] RIP: 0033:0x7f0ceea8ce59
[  705.177959][T17499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.177973][T17499] RSP: 002b:00007f0ceccde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  705.177991][T17499] RAX: ffffffffffffffda RBX: 00007f0ceed05fa0 RCX: 00007f0ceea8ce59
[  705.178003][T17499] RDX: 0000200000000040 RSI: 0000000000008924 RDI: 0000000000000003
[  705.178013][T17499] RBP: 00007f0ceccde090 R08: 0000000000000000 R09: 0000000000000000
[  705.178023][T17499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.178032][T17499] R13: 00007f0ceed06038 R14: 00007f0ceed05fa0 R15: 00007ffd090492b8
[  705.178056][T17499]  </TASK>
[  705.178182][T17499] ERROR: Out of memory at tomoyo_realpath_from_path.
[  705.443550][T11958] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  705.461469][T17504] nft_compat: unsupported protocol 5
[  705.581292][T17508] FAULT_INJECTION: forcing a failure.
[  705.581292][T17508] name failslab, interval 1, probability 0, space 0, times 0
[  705.581325][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.1.3955 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  705.581349][T17508] Tainted: [L]=SOFTLOCKUP
[  705.581356][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  705.581366][T17508] Call Trace:
[  705.581373][T17508]  <TASK>
[  705.581382][T17508]  dump_stack_lvl+0xe8/0x150
[  705.581406][T17508]  should_fail_ex+0x46b/0x600
[  705.581430][T17508]  should_failslab+0xa8/0x100
[  705.581447][T17508]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  705.581469][T17508]  ? skb_clone+0x212/0x3a0
[  705.581485][T17508]  ? skb_clone+0x212/0x3a0
[  705.581507][T17508]  skb_clone+0x212/0x3a0
[  705.581527][T17508]  __netlink_deliver_tap+0x424/0x8b0
[  705.581553][T17508]  ? netlink_deliver_tap+0x2e/0x1b0
[  705.581572][T17508]  netlink_deliver_tap+0x19c/0x1b0
[  705.581590][T17508]  netlink_unicast+0x754/0x920
[  705.581614][T17508]  netlink_sendmsg+0x813/0xb40
[  705.581638][T17508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.581658][T17508]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  705.581680][T17508]  ? aa_sock_msg_perm+0x122/0x200
[  705.581697][T17508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.581726][T17508]  sock_sendmsg_nosec+0x13a/0x180
[  705.581751][T17508]  ____sys_sendmsg+0x55c/0x870
[  705.581776][T17508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  705.581803][T17508]  ? import_iovec+0x73/0xa0
[  705.581822][T17508]  ___sys_sendmsg+0x2a5/0x360
[  705.581838][T17508]  ? __lock_acquire+0x6b5/0x2d10
[  705.581859][T17508]  ? __pfx____sys_sendmsg+0x10/0x10
[  705.581902][T17508]  ? __fget_files+0x2a/0x420
[  705.581916][T17508]  ? __fget_files+0x3a6/0x420
[  705.581938][T17508]  __x64_sys_sendmsg+0x1b7/0x290
[  705.581961][T17508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  705.581993][T17508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.582011][T17508]  do_syscall_64+0x174/0x580
[  705.582029][T17508]  ? trace_irq_disable+0x3b/0x140
[  705.582048][T17508]  ? clear_bhb_loop+0x40/0x90
[  705.582066][T17508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.582081][T17508] RIP: 0033:0x7efffcd5ce59
[  705.582097][T17508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.582110][T17508] RSP: 002b:00007efffafb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  705.582128][T17508] RAX: ffffffffffffffda RBX: 00007efffcfd5fa0 RCX: 00007efffcd5ce59
[  705.582140][T17508] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003
[  705.582151][T17508] RBP: 00007efffafb6090 R08: 0000000000000000 R09: 0000000000000000
[  705.582160][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.582170][T17508] R13: 00007efffcfd6038 R14: 00007efffcfd5fa0 R15: 00007ffc16d091d8
[  705.582195][T17508]  </TASK>
[  705.582356][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'.
[  705.593505][T11958] usb 1-1: Using ep0 maxpacket: 8
[  705.657087][T11958] usb 1-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40
[  705.657116][T11958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.657136][T11958] usb 1-1: Product: syz
[  705.657150][T11958] usb 1-1: Manufacturer: syz
[  705.657165][T11958] usb 1-1: SerialNumber: syz
[  705.879875][T17500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.888168][T17500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.933151][T11958] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  705.991498][T17511] FAULT_INJECTION: forcing a failure.
[  705.991498][T17511] name failslab, interval 1, probability 0, space 0, times 0
[  705.991532][T17511] CPU: 1 UID: 0 PID: 17511 Comm: syz.4.3956 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  705.991563][T17511] Tainted: [L]=SOFTLOCKUP
[  705.991570][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  705.991582][T17511] Call Trace:
[  705.991590][T17511]  <TASK>
[  705.991599][T17511]  dump_stack_lvl+0xe8/0x150
[  705.991626][T17511]  should_fail_ex+0x46b/0x600
[  705.991664][T17511]  should_failslab+0xa8/0x100
[  705.991688][T17511]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  705.991717][T17511]  ? mm_alloc+0x1b/0x60
[  705.991742][T17511]  ? mm_alloc+0x1b/0x60
[  705.991773][T17511]  mm_alloc+0x1b/0x60
[  705.991797][T17511]  alloc_bprm+0x3ad/0x660
[  705.991825][T17511]  do_execveat_common+0x175/0x690
[  705.991853][T17511]  ? do_getname+0x151/0x250
[  705.991880][T17511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.991901][T17511]  __x64_sys_execve+0x97/0xc0
[  705.991926][T17511]  do_syscall_64+0x174/0x580
[  705.991950][T17511]  ? trace_irq_disable+0x3b/0x140
[  705.991973][T17511]  ? clear_bhb_loop+0x40/0x90
[  705.991995][T17511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.992013][T17511] RIP: 0033:0x7f0ceea8ce59
[  705.992031][T17511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.992046][T17511] RSP: 002b:00007f0ceccde028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  705.992066][T17511] RAX: ffffffffffffffda RBX: 00007f0ceed05fa0 RCX: 00007f0ceea8ce59
[  705.992081][T17511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  705.992093][T17511] RBP: 00007f0ceccde090 R08: 0000000000000000 R09: 0000000000000000
[  705.992106][T17511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.992118][T17511] R13: 00007f0ceed06038 R14: 00007f0ceed05fa0 R15: 00007ffd090492b8
[  705.992148][T17511]  </TASK>
[  706.085940][T11958] usb 1-1: USB disconnect, device number 63
[  706.280940][T11128] udevd[11128]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  706.394541][ T5795] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  706.489752][T17524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3962'.
[  706.546380][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.546410][ T5795] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  706.546423][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.552193][ T5795] usb 6-1: config 0 descriptor??
[  706.603625][T17524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3962'.
[  706.718718][T17522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.723722][  T822] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  706.760538][ T5795] usbhid 6-1:0.0: can't add hid device: -71
[  706.760613][ T5795] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  706.770202][ T5795] usb 6-1: USB disconnect, device number 97
[  706.873587][  T822] usb 5-1: Using ep0 maxpacket: 8
[  706.874502][  T822] usb 5-1: no configurations
[  706.874512][  T822] usb 5-1: can't read configurations, error -22
[  707.004071][  T822] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  707.153561][  T822] usb 5-1: Using ep0 maxpacket: 8
[  707.154302][  T822] usb 5-1: no configurations
[  707.154313][  T822] usb 5-1: can't read configurations, error -22
[  707.154879][  T822] usb usb5-port1: attempt power cycle
[  707.203597][ T5795] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  707.359493][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.359531][ T5795] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  707.359544][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.369819][ T5795] usb 6-1: config 0 descriptor??
[  707.510289][  T822] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  707.525227][  T822] usb 5-1: Using ep0 maxpacket: 8
[  707.526655][  T822] usb 5-1: no configurations
[  707.526670][  T822] usb 5-1: can't read configurations, error -22
[  707.562367][T17537] futex_wake_op: syz.0.3966 tries to shift op by 32; fix this program
[  707.653520][  T822] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  707.694331][  T822] usb 5-1: Using ep0 maxpacket: 8
[  707.695346][  T822] usb 5-1: no configurations
[  707.695356][  T822] usb 5-1: can't read configurations, error -22
[  707.696138][  T822] usb usb5-port1: unable to enumerate USB device
[  707.854237][T17550] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3972'.
[  707.883767][ T5720] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  707.924180][T17550] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3972'.
[  708.024466][T17549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  708.045074][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.047376][ T5720] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  708.047404][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.047422][ T5720] usb 2-1: Product: syz
[  708.047430][ T5720] usb 2-1: Manufacturer: syz
[  708.047437][ T5720] usb 2-1: SerialNumber: syz
[  708.051924][ T5720] usb 2-1: config 0 descriptor??
[  708.101734][ T5720] ums-karma 2-1:0.0: USB Mass Storage device detected
[  708.223910][ T5795] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[  708.227601][ T5795] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45
[  708.312947][T17539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.334390][T17539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.341073][T11958] usb 2-1: USB disconnect, device number 35
[  709.083500][ T5712] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  709.123662][ T5720] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  709.126873][ T5795] usb 6-1: USB disconnect, device number 98
[  709.126985][    C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  709.215621][T17563] syzkaller1: entered promiscuous mode
[  709.243482][ T5712] usb 1-1: Using ep0 maxpacket: 8
[  709.250705][ T5712] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  709.250733][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.250753][ T5712] usb 1-1: Product: syz
[  709.250767][ T5712] usb 1-1: Manufacturer: syz
[  709.250782][ T5712] usb 1-1: SerialNumber: syz
[  709.258545][ T5712] usb 1-1: config 0 descriptor??
[  709.289228][ T5720] usb 2-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  709.289263][ T5720] usb 2-1: config 0 interface 0 has no altsetting 0
[  709.289295][ T5720] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00
[  709.289317][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.298576][ T5712] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  709.306167][ T5720] usb 2-1: config 0 descriptor??
[  709.713333][T17573] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3981'.
[  709.783885][T17573] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3981'.
[  709.865246][T17572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  709.943547][  T821] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  710.023983][ T5720] usbhid 2-1:0.0: can't add hid device: -71
[  710.024152][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  710.051099][ T5720] usb 2-1: USB disconnect, device number 36
[  710.108926][  T821] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  710.108946][  T821] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.108956][  T821] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  710.108967][  T821] usb 5-1: config 1 has no interface number 1
[  710.108992][  T821] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  710.109007][  T821] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[  710.111633][  T821] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  710.111654][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.111665][  T821] usb 5-1: Product: syz
[  710.111673][  T821] usb 5-1: Manufacturer: syz
[  710.111681][  T821] usb 5-1: SerialNumber: syz
[  710.343849][T17567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3979'.
[  710.345143][T17567] FAULT_INJECTION: forcing a failure.
[  710.345143][T17567] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  710.345178][T17567] CPU: 0 UID: 0 PID: 17567 Comm: syz.4.3979 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  710.345205][T17567] Tainted: [L]=SOFTLOCKUP
[  710.345213][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  710.345225][T17567] Call Trace:
[  710.345233][T17567]  <TASK>
[  710.345242][T17567]  dump_stack_lvl+0xe8/0x150
[  710.345264][T17567]  should_fail_ex+0x46b/0x600
[  710.345282][T17567]  _copy_from_user+0x2d/0xb0
[  710.345299][T17567]  __sys_bind+0x1cc/0x410
[  710.345320][T17567]  ? __pfx___sys_bind+0x10/0x10
[  710.345351][T17567]  ? __pfx_ksys_write+0x10/0x10
[  710.345379][T17567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.345401][T17567]  __x64_sys_bind+0x7a/0x90
[  710.345422][T17567]  do_syscall_64+0x174/0x580
[  710.345440][T17567]  ? trace_irq_disable+0x3b/0x140
[  710.345454][T17567]  ? clear_bhb_loop+0x40/0x90
[  710.345469][T17567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.345487][T17567] RIP: 0033:0x7f0ceea8ce59
[  710.345506][T17567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.345522][T17567] RSP: 002b:00007f0ceccde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  710.345543][T17567] RAX: ffffffffffffffda RBX: 00007f0ceed05fa0 RCX: 00007f0ceea8ce59
[  710.345558][T17567] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004
[  710.345571][T17567] RBP: 00007f0ceccde090 R08: 0000000000000000 R09: 0000000000000000
[  710.345585][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  710.345597][T17567] R13: 00007f0ceed06038 R14: 00007f0ceed05fa0 R15: 00007ffd090492b8
[  710.345617][T17567]  </TASK>
[  710.408382][  T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  710.408487][  T821] usb 5-1: MIDIStreaming interface descriptor not found
[  710.693190][  T821] usb 5-1: USB disconnect, device number 99
[  711.006419][T10994] udevd[10994]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  711.113942][ T5795] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  711.266593][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  711.266628][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  711.266666][ T5795] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  711.266689][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.272725][ T5795] usb 6-1: config 0 descriptor??
[  711.323508][  T822] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  711.403625][  T821] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  711.474408][  T822] usb 2-1: Using ep0 maxpacket: 16
[  711.478005][  T822] usb 2-1: config 251 has an invalid interface number: 202 but max is 0
[  711.478242][  T822] usb 2-1: config 251 has no interface number 0
[  711.478289][  T822] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16
[  711.478316][  T822] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  711.478338][  T822] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  711.478577][  T822] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  711.478604][  T822] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  711.478631][  T822] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  711.478658][  T822] usb 2-1: config 251 interface 202 has no altsetting 0
[  711.542338][  T822] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  711.553837][  T821] usb 5-1: Using ep0 maxpacket: 16
[  711.560031][  T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.560072][  T822] usb 2-1: Product: syz
[  711.560087][  T822] usb 2-1: Manufacturer: syz
[  711.560096][  T822] usb 2-1: SerialNumber: syz
[  711.618253][  T821] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  711.618281][  T821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  711.621543][  T821] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  711.621573][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.621644][  T821] usb 5-1: Product: syz
[  711.621660][  T821] usb 5-1: Manufacturer: syz
[  711.621674][  T821] usb 5-1: SerialNumber: syz
[  711.689887][T17592] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  711.730365][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.730404][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.730648][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.730675][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.730701][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.730727][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.730962][ T5795] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  711.795398][  T821] usb 5-1: 0:2 : does not exist
[  711.795473][  T821] usb 5-1: unit 10 not found!
[  711.816356][ T5795] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  711.896648][ T5795] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00
[  712.018273][ T5712] gspca_sonixj: reg_w1 err -71
[  712.070102][ T5712] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  712.084706][ T5712] usb 1-1: USB disconnect, device number 64
[  712.099571][ T5795] cp2112 0003:10C4:EA90.0019: error requesting SMBus config
[  712.162351][  T821] usb 5-1: USB disconnect, device number 100
[  712.187483][ T5795] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -5
[  712.276290][T11128] udevd[11128]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  712.803458][  T821] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  712.953734][  T821] usb 1-1: Using ep0 maxpacket: 8
[  712.956908][  T821] usb 1-1: no configurations
[  712.956928][  T821] usb 1-1: can't read configurations, error -22
[  713.096961][  T821] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  713.275287][  T821] usb 1-1: Using ep0 maxpacket: 8
[  713.276143][  T821] usb 1-1: no configurations
[  713.276161][  T821] usb 1-1: can't read configurations, error -22
[  713.276484][  T821] usb usb1-port1: attempt power cycle
[  713.382249][T17602] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3990'.
[  713.455483][T17602] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3990'.
[  713.535038][T17601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.631999][  T821] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  713.679461][  T821] usb 1-1: Using ep0 maxpacket: 8
[  713.680291][  T821] usb 1-1: no configurations
[  713.680307][  T821] usb 1-1: can't read configurations, error -22
[  713.803509][  T821] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  713.824224][  T821] usb 1-1: Using ep0 maxpacket: 8
[  713.824888][  T821] usb 1-1: no configurations
[  713.824905][  T821] usb 1-1: can't read configurations, error -22
[  713.825246][  T821] usb usb1-port1: unable to enumerate USB device
[  713.877319][  T821] usb 6-1: USB disconnect, device number 99
[  713.985368][  T822] cxacru 2-1:251.202: cxacru_bind: interface has incorrect endpoints
[  713.985483][  T822] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19!
[  714.012284][  T822] usb 2-1: USB disconnect, device number 37
[  714.147019][T17610] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3993'.
[  714.178521][T17610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3993'.
[  714.179112][T17613] FAULT_INJECTION: forcing a failure.
[  714.179112][T17613] name failslab, interval 1, probability 0, space 0, times 0
[  714.179144][T17613] CPU: 0 UID: 0 PID: 17613 Comm: syz.1.3994 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  714.179167][T17611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3993'.
[  714.179180][T17613] Tainted: [L]=SOFTLOCKUP
[  714.179188][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  714.179200][T17613] Call Trace:
[  714.179208][T17613]  <TASK>
[  714.179216][T17613]  dump_stack_lvl+0xe8/0x150
[  714.179243][T17613]  should_fail_ex+0x46b/0x600
[  714.179275][T17613]  should_failslab+0xa8/0x100
[  714.179300][T17613]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  714.179329][T17613]  ? skb_clone+0x212/0x3a0
[  714.179352][T17613]  ? skb_clone+0x212/0x3a0
[  714.179381][T17613]  skb_clone+0x212/0x3a0
[  714.179409][T17613]  __netlink_deliver_tap+0x424/0x8b0
[  714.179445][T17613]  ? netlink_deliver_tap+0x2e/0x1b0
[  714.179472][T17613]  netlink_deliver_tap+0x19c/0x1b0
[  714.179497][T17613]  netlink_unicast+0x754/0x920
[  714.179529][T17613]  netlink_sendmsg+0x813/0xb40
[  714.179562][T17613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  714.179588][T17613]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  714.179615][T17613]  ? aa_sock_msg_perm+0x122/0x200
[  714.179636][T17613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  714.179660][T17613]  sock_sendmsg_nosec+0x13a/0x180
[  714.179690][T17613]  ____sys_sendmsg+0x55c/0x870
[  714.179720][T17613]  ? __pfx_____sys_sendmsg+0x10/0x10
[  714.179753][T17613]  ? import_iovec+0x73/0xa0
[  714.179779][T17613]  ___sys_sendmsg+0x2a5/0x360
[  714.179802][T17613]  ? __lock_acquire+0x6b5/0x2d10
[  714.179831][T17613]  ? __pfx____sys_sendmsg+0x10/0x10
[  714.179889][T17613]  ? __fget_files+0x2a/0x420
[  714.179909][T17613]  ? __fget_files+0x3a6/0x420
[  714.179941][T17613]  __x64_sys_sendmsg+0x1b7/0x290
[  714.179966][T17613]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  714.180008][T17613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.180030][T17613]  do_syscall_64+0x174/0x580
[  714.180054][T17613]  ? trace_irq_disable+0x3b/0x140
[  714.180078][T17613]  ? clear_bhb_loop+0x40/0x90
[  714.180102][T17613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.180121][T17613] RIP: 0033:0x7efffcd5ce59
[  714.180140][T17613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.180158][T17613] RSP: 002b:00007efffafb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.180185][T17613] RAX: ffffffffffffffda RBX: 00007efffcfd5fa0 RCX: 00007efffcd5ce59
[  714.180200][T17613] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003
[  714.180213][T17613] RBP: 00007efffafb6090 R08: 0000000000000000 R09: 0000000000000000
[  714.180226][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.180238][T17613] R13: 00007efffcfd6038 R14: 00007efffcfd5fa0 R15: 00007ffc16d091d8
[  714.180269][T17613]  </TASK>
[  714.763686][  T822] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  714.913699][  T822] usb 2-1: Using ep0 maxpacket: 8
[  714.922122][  T822] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  714.922153][  T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.922174][  T822] usb 2-1: Product: syz
[  714.922189][  T822] usb 2-1: Manufacturer: syz
[  714.922203][  T822] usb 2-1: SerialNumber: syz
[  714.981079][  T822] usb 2-1: config 0 descriptor??
[  714.999763][  T822] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  715.578226][ T5615] ==================================================================
[  715.578318][ T5615] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[  715.578389][ T5615] Read of size 8 at addr ffffc9001087e008 by task kworker/u9:2/5615
[  715.578406][ T5615] 
[  715.578453][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  715.578503][ T5615] Tainted: [L]=SOFTLOCKUP
[  715.578509][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  715.578520][ T5615] Workqueue: hci1 hci_rx_work
[  715.578539][ T5615] Call Trace:
[  715.578547][ T5615]  <TASK>
[  715.578555][ T5615]  dump_stack_lvl+0xe8/0x150
[  715.578575][ T5615]  print_address_description+0x55/0x1e0
[  715.578596][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.578619][ T5615]  print_report+0x58/0x70
[  715.578637][ T5615]  kasan_report+0x117/0x150
[  715.578654][ T5615]  ? rt_spin_lock+0x20e/0x400
[  715.578669][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.578695][ T5615]  __list_del_entry_valid_or_report+0xb5/0x190
[  715.578720][ T5615]  kcov_remote_start+0x2af/0x710
[  715.578738][ T5615]  hci_rx_work+0x10f/0x1040
[  715.578757][ T5615]  ? process_one_work+0x8be/0x1630
[  715.578779][ T5615]  process_one_work+0x98b/0x1630
[  715.578807][ T5615]  ? __pfx_process_one_work+0x10/0x10
[  715.578827][ T5615]  ? do_raw_spin_lock+0x12b/0x2f0
[  715.578849][ T5615]  worker_thread+0xb49/0x1140
[  715.578874][ T5615]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  715.578898][ T5615]  kthread+0x388/0x470
[  715.578915][ T5615]  ? __pfx_worker_thread+0x10/0x10
[  715.578937][ T5615]  ? __pfx_kthread+0x10/0x10
[  715.578954][ T5615]  ret_from_fork+0x514/0xb70
[  715.578973][ T5615]  ? __pfx_ret_from_fork+0x10/0x10
[  715.578991][ T5615]  ? __switch_to+0xc79/0x1410
[  715.579006][ T5615]  ? __pfx_kthread+0x10/0x10
[  715.579023][ T5615]  ret_from_fork_asm+0x1a/0x30
[  715.579047][ T5615]  </TASK>
[  715.579053][ T5615] 
[  715.579057][ T5615] The buggy address belongs to a vmalloc virtual mapping
[  715.579106][ T5615] Memory state around the buggy address:
[  715.579145][ T5615]  ffffc9001087df00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  715.579157][ T5615]  ffffc9001087df80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  715.579167][ T5615] >ffffc9001087e000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  715.579175][ T5615]                       ^
[  715.579183][ T5615]  ffffc9001087e080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  715.579193][ T5615]  ffffc9001087e100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  715.579201][ T5615] ==================================================================
[  715.579276][ T5615] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  715.579292][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  715.579316][ T5615] Tainted: [L]=SOFTLOCKUP
[  715.579322][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  715.579335][ T5615] Workqueue: hci1 hci_rx_work
[  715.579354][ T5615] Call Trace:
[  715.579361][ T5615]  <TASK>
[  715.579368][ T5615]  vpanic+0x56c/0xa60
[  715.579398][ T5615]  ? __pfx_vpanic+0x10/0x10
[  715.579434][ T5615]  panic+0xc5/0xd0
[  715.579460][ T5615]  ? __pfx_panic+0x10/0x10
[  715.579486][ T5615]  ? preempt_schedule_thunk+0x16/0x40
[  715.579516][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.579545][ T5615]  ? preempt_schedule_thunk+0x16/0x40
[  715.579575][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.579603][ T5615]  check_panic_on_warn+0x89/0xb0
[  715.579627][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.579655][ T5615]  end_report+0x73/0x170
[  715.579676][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.579704][ T5615]  kasan_report+0x128/0x150
[  715.579723][ T5615]  ? rt_spin_lock+0x20e/0x400
[  715.579742][ T5615]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  715.579773][ T5615]  __list_del_entry_valid_or_report+0xb5/0x190
[  715.579803][ T5615]  kcov_remote_start+0x2af/0x710
[  715.579826][ T5615]  hci_rx_work+0x10f/0x1040
[  715.579851][ T5615]  ? process_one_work+0x8be/0x1630
[  715.579877][ T5615]  process_one_work+0x98b/0x1630
[  715.579912][ T5615]  ? __pfx_process_one_work+0x10/0x10
[  715.579937][ T5615]  ? do_raw_spin_lock+0x12b/0x2f0
[  715.579965][ T5615]  worker_thread+0xb49/0x1140
[  715.579997][ T5615]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  715.580026][ T5615]  kthread+0x388/0x470
[  715.580047][ T5615]  ? __pfx_worker_thread+0x10/0x10
[  715.580074][ T5615]  ? __pfx_kthread+0x10/0x10
[  715.580100][ T5615]  ret_from_fork+0x514/0xb70
[  715.580123][ T5615]  ? __pfx_ret_from_fork+0x10/0x10
[  715.580145][ T5615]  ? __switch_to+0xc79/0x1410
[  715.580165][ T5615]  ? __pfx_kthread+0x10/0x10
[  715.580186][ T5615]  ret_from_fork_asm+0x1a/0x30
[  715.580218][ T5615]  </TASK>
[  715.580362][ T5615] Kernel Offset: disabled