last executing test programs:

7.945235669s ago: executing program 4 (id=1179):
socket$inet6(0xa, 0xa, 0x4000000)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x2, 0x651, 0x12c8000000000000, 0x8000009655, 0x225c17d03, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d09, 0x3, 0x9})
r3 = syz_open_dev$sndctrl(0x0, 0x2, 0x80)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f0000000040)=0x1000)

7.629678042s ago: executing program 4 (id=1180):
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0xfffffffa)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0xffff, 0x4)

6.456069828s ago: executing program 4 (id=1182):
r0 = socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e2e2f6367726f75702e6370752f73797a31d7"], 0x0, 0x0, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r1], 0xa4}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]})
r7 = msgget$private(0x0, 0x4a0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
msgctl$IPC_STAT(r7, 0x2, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48000)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000340)=@assoc_value, &(0x7f00000002c0)=0x8)

4.615657021s ago: executing program 3 (id=1190):
socket$inet6(0xa, 0xa, 0x4000000)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x2, 0x651, 0x12c8000000000000, 0x8000009655, 0x225c17d03, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d09, 0x3, 0x9})
r3 = syz_open_dev$sndctrl(0x0, 0x2, 0x80)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f0000000040)=0x1000)

4.423907949s ago: executing program 2 (id=1191):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x37)
close(0x3) (fail_nth: 2)

4.423700969s ago: executing program 0 (id=1192):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="100001800400", @ANYRES8=r2], 0x28}}, 0x0)
ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000380))
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686)

4.386870012s ago: executing program 3 (id=1193):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)={0xa0, 0x0, 0x403, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0xf}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2f, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x8a, 0xcf, @device_a, 0x8, 0x4, 0x23b4}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x8b, 0x9b17}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}]}], @NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x280c0}, 0x8800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a1"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.89124706s ago: executing program 2 (id=1194):
prctl$PR_SET_NAME(0x4, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8fc303111800000606000000000000c7e939fb6f5cbc22a5f4f7c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x25, 0x1, 0x70bd0b, 0x25dfdbfb, {0xc}, [@nested={0x3c, 0xe, 0x0, 0x1, [@nested={0x38, 0x30, 0x0, 0x1, [@typed={0x4, 0xfb}, @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0xe8, 0x0, 0x0, @fd}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private1}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000d}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x800)
ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fsopen(0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r6, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030000000000080002400000000308000440000000100900020073797a320000000014a2138d36603609c10a656d0000000a"], 0x80}, 0x1, 0x0, 0x0, 0x8895}, 0x24000000)

3.86646567s ago: executing program 4 (id=1195):
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x6a1d607b4984e75d, 0x80, "", [{{0x9, 0x4, 0x0, 0x2, 0x9, 0x3, 0x0, 0x1, 0x1, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x25c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc4, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="002329000004000000000000030000000000000000cb4fdca0560fb30d54f365c5b1ea3ee44fbf6fc93f0808251f5532b35c1f76bf4e3d8416e390e216ed3e15151a8326c0710e25632dca5620422c25ccecd4d043f052b33f523bfcf2be9787eb86f8c9180744836777d39416c61c04fc28a9052b119b25151971a68a19e3761821"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$uac2(0x5, 0xf4, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xe7, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0xf8, 0xe0, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6e, 0xb, 0x20, 0x4}, [@processing_unit={0xb, 0x24, 0x8, 0x1, 0x5, [0x2, 0x2, 0x6]}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x405, 0xb, 0x1, 0x8c, 0xe256, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0xee, 0x0, 0x0, 0x6, 0x87, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x0, 0x0, 0x1005, 0x8}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc7, 0x1, 0x7, 0xf7, "755d232b1160034d98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd1, 0x7, 0x5, {0x8, 0x25, 0x1, 0x80, 0x33, 0x5, 0x82cb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0x6, "de02"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x0, "fa413a", "fda5"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x40, 0x2, "789e1775a90f6472"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x48, 0xf5f, 0x5, 0xa}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x9, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x39, 0x6}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x33, 0x3, 0x8, 0x20, 0x4}, 0xc, &(0x7f0000000300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0xa, 0x8000}]}, 0x8, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}, {0xdc, &(0x7f0000000440)=@string={0xdc, 0x3, "235922229939f1feb58cab21907aafaa5de42c29d41936af1d6e21691623241322e728d6468b3fef7ae3086402605e63683d0b0c2cff4a662ab89fd3977bcddd7b01f2ed1a57c24719d08a200877acf3d884892e7b67c85ffb62125154828f08cacb629c9b8b0cc6d59d81ee7e1cafd4e3b9c1762cd97ed63ea4d606637f58ae9e3829207b5ed64ee87176b99b89953ed28094464bb9a9b56ab767915fdacee14529bb08b7e83700bbec769bb44a9735027fe9f9c7a097fd134249b03e08a6c76345e3953d3730278b4bc80b36ef6dad6d8ed47ebad500f7f842"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x82c}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x40, 0x4, 0xc9, {0xc9, 0x6, "ecc29d2d08cfdd3a6f3e401924440195180a8764ca782de1de181c0ffc2fe784024c8dd5026843ef3a37d7c7930c941a3c8a16f2340b0b3c64dfd62c2d1ee9ded1411872f00891531c592248377f1dd8dfaf120a284030887f9c9a23e23087e7ab25a973f94056e892b1966f3f21b52809568bcc573791eccfffa95fdd0b3c45e2cf926af2f3dbf778612bf4e0500275bf314aedb1d46c109d905bed2ff95371d3f484574cebbcea030fc7f769bf8478ccde5de4d65afae7baedefa2d14121296989c3590a29f5"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x0, 0xd, 0xb6, "bf3d0fc729a786af97eb6fe540e3a06251eb427249d8bbd43e8624c03af6a128324c6dfaf81a11effad36355db11c7b62981b778f6e8794bbeff4059235fca77090c7cc0e08da2dedf25e5b8f64a90b3fcd5d1735cc002d88b32ab08ccc347e9d50ff0b387f3f08b738769eda794d1a3b157c0746aa28786accfda81686b22fe9e4b043f37060fe06bfe81c3f57a1fb49f1a0cdbf7287fa938ebbcaa7f5e8f5a15dc52d55eec5930e2d794626e805a7c6c38345cc512"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000009c0)={0x20, 0x81, 0x2, 'uu'}, &(0x7f0000000a00)={0x20, 0x82, 0x3, "2251d0"}, &(0x7f0000000a40)={0x20, 0x83, 0x1, 'o'}, &(0x7f0000000a80)={0x20, 0x84, 0x4, "28a62ee8"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "c17716"}})

3.819245193s ago: executing program 0 (id=1196):
write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003", 0x1f)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090086dd"}}}}}, 0x0)

3.818519865s ago: executing program 3 (id=1197):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 2)

3.363457505s ago: executing program 3 (id=1198):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc, 0x7}})
unshare(0x22020600)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, 0x0)

3.16332263s ago: executing program 3 (id=1199):
r0 = socket(0xa, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil)
r2 = socket(0x2, 0x80805, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f00000010c0)=ANY=[@ANYBLOB="541a0000", @ANYRES16=r3, @ANYBLOB="04002abd7000fedbdf25750000000c0099000300000044000000f014f08004000400050001000100000008000a000600000004000c8010000b007a55f6f51c3c3f4b7ca9337bc4140e80c40000009e100472c9ad5c71f3851971821c9fef934e75bb72a943aa7b1c48353e4971f869d25bb11780a85462b5051d873e41f08d0af90664cfe21faa4ecc6e85f2ec0f4eb49fab28c5be01d6dfc40778e1049525100d31727412d4db598945ce9a21b641bfa0747e1d3a2571d34c4777b3f98aa4dca50e16e8848d006e53c08349409a29dc952b2806b6c322381966ad00d6956d7f1143caf8da3856fcd5f2fa967d6aa8c9c4e37b57605da89cb0d745c0321324f2d2422ad47e76420d1a4e29b569bc4d000000a68c25beedf8942d52c45701d1ac64d7379d8738cad7cf52a11e784374db078abb54afc1a021947e0b597cdc61a347b9a1370ef6929c0566eb1d157be7d96e5b86fc0c1e485ffb4f400000008200000083677d6fecdf20e34c919eee5a7976da2c9a72c6b1143b9b22d990fbca80fe00579b3cda80956f16ea2fc15035fc0b6f8a0eb7fdcba73167b65190d14a3f7a87ab733509149273059c9cfe684132e80d66c9d54e343a6a2ef2447806f1bd1d551e5aa533ced8b26fd68e89381e8aad498bd8f71ef6dbd529e2e70538f181000004100000b62a301d692c26b0fb0dbc50bc348b881fafb3e7478c1f896e866376ed4dbcc053cb76c31a74844c459d4660627f97034965e6a7b43130a46f17f10b89db16c431f36ebcf5c1d1aa91723c4c9db5f3fd5bc0e5fc78fcc1c34d454241e8a9afc5f9e36ceebb3c47abd2d3ad32cd64437619a7af4f80bf9d2da80f1d6d94172bcd17746ef2872d9961568b4d937074cd6dbc24d71e26d713f5ce052a6f26bb4611b3d68de86160efc43adba667143cc49071a18417af236585b84652394abb06b8ea78edb7dee3b664506f5a44ed5159cfa6fc99abe488b83bedfb8fa7a480100d7fca5083a06c3cb67070c419ce6d9f03fa9684ddcff615cf79c52983b4ad5aba17c944a744aed4d31586a52028f1d141a38d09f425e20d2b46211dca822ea99e5cfa083d2d1626403faf4503eb6c6af7e6c49fc30b91277dd7e97aeb6f79681c914ad33a67387a703e98f38737b1e1cd87532b8723a2c2a83ffff14e9068adce36b1bcbaee73933f2ef50f072563011022a17f1cc600fd7abff7c57f74f839c1ed5bb4c99daa7506ea43750ef9ddbdb7f3d5616686b47f5db8575df9f748ab6af5f4efaeee7879316d117a0677b0769ac07477af7ddf6c4840173d4aafceddfc9f6733211c150e839a332d2ba7a64202c408c14cb22d240e50fc05d8c754cec8bc861d7df77626a695677269d33ff2d6be9405eca57afd3781f16ec47169a97a848f059bc8ffb8650576d0980ec3655785befaab5e953ea51d54012dcc9b27da5535000f90c2e0756d780a2a314c04f7d397653730728e2d32fdcc9b2246129ec5be760f9a991b5f9c6297c376477086126c1ffd1c4e3eb261c015bc93b95397f8b87195b34953bdb5fc50ae821cf0cd7dea9904460efc02c5916cfd55e12454dc996599914b4d4217055827ff0cfb8226d40369facd4ee51ddc4fffe910a2efab61915728585e11d0f5a4faafea46062bdbf168abaf3cc677b05363b027756f7e2d6332ecc48a3f1bed4a0baef245f6a34fb7b4e0ba43b792b7a1c142d374597633fa487a4b8e7a9a9d8f764d95c28bed94a443540b6bf5acc0d698251a50a6ad4c7c674d953e38132758830136fa1b1b08a6b4be2d8470ac57af1b53147b4fd07375d98f15f98f147898ee7e266bcdd6efe0e59849fdce71fc20aeaa415983c1241a06a46c28fe9ef6179a08c24a0c34499b4506af689524c6e64b71d102874f571463abf022533907e13dae64faf72402ac9777c07599dfd2c6d2dc2cbb4dc88628c71a6d4f3cb20b945769bfd90a187c5c702bb8c9252c92f0c7a067298dccfa0e6aa2753e8d7d116386b1cadd2943d6e9b4faea009e10c24335635db87cb8e795e0db3fee6abb86b778c7b1379711fd4a2933e93f4936e16dbf03e7b333525819555e56c02dfb08c59a9f008a682ed89a81fdfaa947d1f79786bff800b780dd4292bcce3cd90627c64e489bb5101b25fcf946b9dd7f4f50710852de339a834e29c3cacdb01ea4d98357c295163f5891c02706b3234a8b1a5060434dee2754f46cd85bbef09336e366f4ed9d181817c711c080a1a4a9f00cbb8904b23cce9b39e56444be156d0bf55ef40ed62987454a0273f9ea963fa73a34add9d53e502c24113d595836e312e9fdf71ee0248ee42dbd5839a89b813a7ea7b79d7b5e9ec98f8bf60947176588c356660f11ee3bf9ecf82ab8e0289f4d93cef6400461d5e2b46c9cfe4ea7b59a6170c651542a366752ecdcefd842b4fb28830c5aeb0614307697db74812b564e8e086cccff6ada0755c21422ad3bde094a07aeaa41f035cac030c2d95c0b793d76f2467105ff2b927245ee42f894b3895a8a7675be0b333e7e57e8bed1f8f96c9a5c1ffa97d4d7e93a020a7d0d8543d6459bc52a37ef8d7353da3a73952dbde71b919ef505d9dcbbf837c1e3c6b49c540d7c8b0f3d43c665942f5e55bfd9b7d14990bcbfffcd58d642eea391c82fc1c4ba11b2088926f9fbba239288f379abb74029b3d345a3153f0d09a9875727a7df3397a7397864e6b3ff3361c562a739785119af79e88892e864d591a672dc3c2b6f0ec73811983e930e50a31bda3361a72ed17c5b3afc86d78e4be35c74e7878761334cf20ca1f2bc8f19064a3e15f4bf907fedcc33f61f908ce7c3933da758e93e56a9d3f58c37d516c06489613ab8ef6dd1b878886b330cb3752bacd9fa1c3b81ab55a42a82b8132853212e3063503a41d25128ad551d3188a78ad1fe1a2edad9595f07aecb2730038f61603e3b804b9be03ac6b59f1e660dd4d8341cddffb57fa15097f5bd59b9fe8bf38f20a0bbc31a5bc527c44e5eeb618e7517323e29084251e39af39a50a70006b97042e7d39b4712d4481fc97e8bbbe22a46ac3d05c608a16d00c26cf709abe5656877eb5e8b4627844552917cadc4bfb402690b974633da1e61b5b624cccdc91a50bbdfe7328a631c9e6199dd889581498eb11adb9cdbdcaa529a8b29aae9cca53c9357fa708558522d179b86207ae752afe5c04f7366471d692ad2bfae1b83f00aaaa32f1b3fa566bbc2318623cd407845b101884cbe6311bdda5e4de7784f7479548f947dac47fca9cf60e90bff0542fa71e45f79bd4d2c3d2ec18694c8631c0cfd5469bde346255e7189d37df217b20e9c1d45ca534a8a7cb6eb69de96cfae3440961a76a7c61356962050cbffedcdec24d429154e91d18333f88cdd424a4d460f2cabc364624b7b6fcb838aaa0b84c7f585bd18360d3c0b37ac3cd266f556c0746a252058af9672d99f28f0416cc92c1c133f6b07d236c28818f710dd221474dc20dde0d7f09a1e2e0e8d66ba715ae37f7da4a2433d6ca6c45b9498ac280a3d075dd21cc58fb0eff6afca36b49353fd643a372d072c92ca92fd4e8554dbacb4561f39a18d16c005f1bdbb2483ad2962e6e7cf9e2a06de785300c49573715b537812a8b61d3abf4cba6036dc335cace961db17f6b1f93a094bc11c78240550811065a4eff8ab1a60344d51137b8bf75ab3553ea7148d191beba95ee93d57a01349550cb29b0cc313e7e9f71c54c17c882e5dd19b21fd6a3dd84f33791e211cfd4f750e6ae7a0ba7fd850291485cd1b4b613e06851dc46afa4697fb861a0b6bc30276d159f871d4f1aa55124aa73e29729d731fa4c2a93d8c303359277b35fce9ccd8d75ac6ccf9fb10e703589f523a47b305291f32ba8b8eb87fb58d6d73e29cca5318ecb417858c7043e7507bd66eb67a0c23dbbd328f735ceeb9751c19fccae8c2c67e558c72e45c0eaa134509de16c0ee656d7bac7876bc158989ed9efde542cd195a0246a4401231885a16bdff0d6e54af8493c88d59d7e30b1fa8d9983f405b4c9c4f032651a4d1e2966077b436425fd90b3716144432f3fc6d966b95a1fee3717d4d7a48dc4c71cd2c29b69c5214d1a1cb16acca9d7134d16f6cc83bd117c3da7de31ea6399dc25a337f611c8de2afeeccb814dde9405fe4f278a1da19a0cafce9cb4223dc831914ee9ecc1a07e0474025a383ed8adc1434a91a55726a09b8eac76ad5ffd4ad81ff5915482221bef5ed26ec98502df49dc446a2ec994a745fc98e827d35fa593c095f98f23ad822886b4ff9f122bd38ad154e45d296e221a02d7b8254a5691285dffbe2e64519de272dce508b4ffafd531f87355a7dbb379dcf3c5d16caa784497b43fa48817d62e76f5c976fed699ca7ca358221fa076b4170741343b88409a11ac0b3fcd6fd7a788854c8e1ceb94ef25736720d2c0b557b006621f81c0501ee18801bc0ce7b88cd829b842bf39bdc1107419e850a1465bc88be06d5f984fea71005cc18b19cac2eb98c761e27f2fbba3b7f38cfe22cf3879ee777d275113692725f7e6ffc8d6fde721076e55e0e85e10251453edf645cedfadc326696d574d430896b96dea1c7da530bc4d513d824e1fb1d7a31467296cc60d5c6a617287d1db24914be38fa897ae4e652ec777b9154c3246a04b53d4ef4e164c1cde2cd134bf7bd8c6f4534564044ef25c0e0d69d6cac5a30dfcf12f1b682f49b4a875fe100abbfda70a231c060bd01f6e8a4832639d7e9b7dde54bd07bd323741dfb5dac83f7460cf1d875148f1c2ea7a3b61572c21736daafc7bebf40f6dde03ac62ac7f9069c3f5024ecfabae87c129a6ed81a8a77051e19a51149a12884e2296b05cd656b1dfe9e93786914401b86932ed0680ac7b9de6558f2f7f9ca088f9d70ccc4dd519bf6ed05248ccc92d5fd8b17a805330009cb1411fa70e05cbf8bbfc1aa80520e2c48e191f435feb81089fc04080946449d52a667f564a258372a6a0eb09a7f147a7f97bf2921849918e9a390588762102aebeed8d8c58564af2975c8fb95a64361f0850c95858f1984e8ae58bfe147f51112ffd94eec4007afc424958e579cc5c1a352008d07dedc6e8deb777bfda6474eab74ba16908aef3f7f2be3fdbf309870dbf2b507d43ccacc1596da340bc2d13c18a2d3f915410b9f824c0dc99a51bdfa1c20c8a5e6ed0f47693035c37de7813cf7bd0b5b8acaf74592dd41f32296ce724e9f9607f8b9febff4cf9208ac979aee3ff9a5febad988545e3f18377282ca7ab6b462d26b804d93ea5d56bebf1b14c3a922f95b9f8d33b4cd1a9018961db31cc99a909ac7f27ce1eb7f5a9ebc8793acb212f6f6b1bebcbee5828102af1a4b10b5044314241e2ecf55525d0a6bd5fe4d4a61c3b2b0bf6c10eb5eb5c6ebfac28e9ae77b48b73796db9587844edc97f788a0d0e969827f6b4bea7f83cd9412d160a8f0a0a129404ccc84d7fcb96f52ba3ff3e9c4975a68b3a215a413f599afef5b0de36e43907470412cf7a7745282540375912f03fbb5a18b9af764ed80027f5eac5dd7293a5930305f6323aa3547aceed9ec32b95b68e2aa92f19017c429a65cac99eeccbc47cbee2e3760672df97f864f33eb6783cbdd72dcef2d3f8ba3dda6df176eba8dd7072ff715548afa89b9a52a7d732213615e2eceb0871eb8c5b85314cd0ff416870a464e3cf2aba30e23d1356eacd93cef775e0a5784270327a5924a458b600af1d943521453e90d77d429750ef73b0def27bd6dc61e21e7bc70f53a4f86507f4295699c0207bbfaec038ea2abe1ec2813f7219a573205a1ebc4ff6a31c41e673b8ff448ee878d13d8af230710e60543817776379288963983cd39d6b213e51cf3819d46a5fd9b58a9dada49e6bc34c9f42499b7f5f23c1a95e444888126b4921539893af3b745357514925e85abc36a4209f554f5f17a46fa094f40da7a3a9837d76f950a6d8dbd0b7752d067af7e56ab874b1a11352097c56a5b78053bbfa34d98f209b72438015de0f649b21184fc98768a7c04deeedcb883d6c5f222591022a9c85e047404063a01af101f2999be0dcd9d238f2f144172807271cb76a4923aaf6b2e9d5f31bf9e15e48bf0444539934638826a4bc56bd7f28aded8e162bc5b82121bc484dd3cfb7f1a1734ab25deb2f763842d1b9dd9ad08cc283245a9dfa4f4e3a0f5f5ee8c34977612612775dd24f97577c9f137a85fe865274a240a247151cdc8949df36b37d1179a9a65c3a588046cfcfc6ce9961a3874c1c52e736b5fd0b9213c44cfd4121e851471eba933fe612408bec14b5807d6bd82ff26d403b60e8dcd51af61cd013afc390571d5a24bdaec14a9ff063cad6785363faa40f2c7edb443c18588a2ecc9dfeca708367444d933ea6da5a43b81bc8c5320dc4bde2dc8d6ed9faf143689a65dc2f8ac7ec2f2cd3bbaee1b382dac96ad49ffece5e18afcfbd484f75c0ec1f8fd000000706fad8c5b5bddebd49d45f5fcfaabd21c41c33d4dd6f5454e247d1c0751faf4c31a0400c3a2e23da3f54f94e82728c1ade8f946a076d8bfacfd7f3d3bd40c81995603ff3a251df81632c7e1bc9dc13267b6674b89cab2feae7d895e731e8632f94c2fbf93e7b584b0dc2c0b6721ebe4063af2a16e03b766d599a8db1fa3b2578763806a105341e5ba981288b6d99052e4c3f3a913904cd523072adecd69046a567b2c452055e7e8e49b3a11af4deb8dc924e92092124558b01687b16cf27374351761a5aa35fea01d87315161135c9b4caece1427a1b3da1a50131a12ffe4468ee7231dcbdf1af50f3fd9e7373d3245b699626245277bd944000000fc0000007d439168d5160c0aa48f22781c70d5e01cd6470961b6438094df49b5938ea70e7ea76b92cb3f422cc5d1fdd2fa420f2aab0b176ce3e75537a7e877a4a560b411c0e6ce7b851dd5cf8b1a312d6ff109b1799fbc48c2319d9a56dc962c1752d200e3fac5adeee9b5d48f1ed6a00767365480428d7c5e4a8318c5f28030f744401246c997fd9e76ce89a19114de66d10e654c91fc7c46215f0642ce19520e24e9de4e6d76dd386a7305c7f4340c6c5229f27429dca849f5d9bd495320b5b2d5ab14109016cd90e51cfefbdb73e88b49779a66dfd305d182e1ee05d2b23c0c46c34cbc8f99add3d7d2e9ed0ce1f10d961938d4e8fc9c74f06e7a4000000013eca813d5919085770b452db886ab2b35a6c038700a7f1d19d89292477bec570918de17911a213c4b24e925d0600541e6af845a5cd53469b9dff141c10000003bbca96dfee4a79dd67170d5950e52ee5fa0f7a170cb775aa1cd2c99dc2afd144e3cabea0f69d51e8c7a852b79db21144d7dd3ff3c88eb3cc0aa1ade4353bd0fb93149445d16ce21ed665668e7cfc4df6b68d3f4b190443eeda7484d8e941ca1a61ae7e5e7ff7b81477cfe5900e133cac2ab10b524de29c13426037672be6ae071af256e750b67dddc8e42f9304cc11af696f916cb086ffee9d465d1741cc3aaed29f2ee42546fe2d622d3c06ac5c5c31f549fa0538c57e6671fbe111300000022000000a32a6329e1944656622583315aec60d736dcf97ab11789519dddcf0e5d9700008800f080050010000600000039000b0064edd8c43f20742053e594cae844f8513499fae7503a348b66fb6d015f066047edc5524ab47a947567e7dce3880a46e18464465c4f00000016000b00f3f37020199e2159cfe00c6ac922cc243e92000005000600060000000a00080008021100000000000a000200954fce0d8c30000005001000070000003800f08034000b00191b9d589585183405cba5a6d56312c7de96c444da177926a034f2f1b2ead456ebf6a280c22a2791012c3d609014697f8800f08004000900050a0300080000000a0008000802110000010000050003000200000062000b00f9cd74487fd3ad1ebb528faa82db3606060170674ca98960ce16852c10c65a58d4328ef9077358ef05b554a8e6ecdbf20105d804141112c0084ddae4a5312e0a3a8cba7cc784b8e8c0aed9e3de997747780f0e4392f08bd75332f20ad1600000ec03f08004000500d8030c80050003008b000000400004800a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a000600080211000001000003010200ca6ae4dc5f7b8f19e7cec06de7914fe63a119ea47812d462fe0ac90d04c8bd93a1c9d271a62c81829ea5e25e4e4e8889b1a2882ed489dfd27d364fc9b9f644514d0a6892ee06fd6a0032112158a76ce5d0d7f30ecc7c94ecf81fa2ede60abc4be772f1ce4643ac5ab223e6f3a74d2cf1efa586b18860d0a8f2e2bd8b3b8bfb4a9489dacf9d50fd9dfa873255188849a27b57a12c8a0545fd247c3b5be23bc628881512abb19e1256a47957a169f927270cecf8b201090a592fe5e0f0664d2e1710fe6610f463a84f46ea3d0da2a361a4cfd0dadfbe3df1355b8dd45b2beeaf8f49a65c8479221e282d703b164994aa1dc603122ef575d9ae18646df2c42f5b00700004800a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600080211000000000003010200ec71aadedc704e4da7dc37eb267bb70d06c952c6c4a0c3440edde890c8dd4fd9a01b17f5c267f729b9a2a249cf72b5e4a84a52f193f2d0b4a69b4e4c1eff265aa47df709024c0e52008886f9bb86e4f035c9bc00d82995c29aa5cc92e126819ecb57b301609f7c3afd8b9c9cd4560fd307f5077c1a5c167eb812e7c4d1b123df1975278b95603f7f18baf8e39834e4563cff0a7911fad77fa1aeb88d0f219fbec193da9d16fb6419b79394c66d70bae6d1e09635379270802e63002d4a31a40438309238777b28f72c41824ed652e285026c3440392f02932adfe825db85de3485e4943254bf5506831d346372e0789631b1df8b426def82b9ec780067098200050003000a00000005000300020000000301020076a14f33adcd9a618edd8531c29629a7154823416f9c721a4485f777705280dff77a1089db1e59f0f646eeca046755cfbe6fa95215db93c72476ee9e3583cfacf7e3e6d448430f9593bdf79189b7fb12f9e96f85882677cea833e9a2085e097d6c0fadf443403ce0abfb03d4f9ae490e9e5b00cecf8efd0a510a436dcf42baf2a3ffaea030c425d3fcc2b192dae1a3ca615f39f3190b6b34479b6277ed14985fa0eae8ad4fb612353d720c213a7c9094fd6abee36810592c194bdb44d689d2cc7184e2ec48fd7aee71fa1f364a448831780bd04f730a9cef33ecf48996fc0f9cf1c02ad607d38448670b919ec934a24a0f8d47a4ef1698cb93809f40b0b81b000a000200e3d53b42aaa500001000f080050001000200000004000900"], 0x1a54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x10, 0xc6e, 0x8, 0x80, 0x9, 0x5, 0xffff, 0x8001}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x10, {0x10, 0x1, "39abc5fb2c0f542e7812e1cc3d4d"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x3e, "eee6de807f9f81f172f8da8f3a1de22aa5d664763eafdf7de5d410ae43acd38b3859e67f40406fe953307d0b80f5e9282e882b9c40a1dd5bb4d4271f8d44"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xf, 0x5, 0xfffffff5, 0x3, 0x7, 0x200, 0x6, 0x1, 0x5c, 0x8, 0x2, 0x6}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}})
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@local, 0xfffc, 0x0, 0x1, 0xfffd, 0xa, 0xe0, 0x20}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.908161079s ago: executing program 2 (id=1200):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x5836, 0x1038000000000001, 0x9, 0x40, 0x1, 0x3, 0x103b, 0x6, 0xfffffffffffffffc, 0x10, 0x3, 0x800100000002, 0x9, 0x504, 0x2, 0xffffffffffffff92], 0x2000, 0x385813})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0x58, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000040)=""/66, 0x42}], 0x4}}], 0x1, 0x40030002, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2.155656859s ago: executing program 0 (id=1203):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)={0x70, 0x0, 0x403, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0xf}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2f, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x8a, 0xcf, @device_a, 0x8, 0x4, 0x23b4}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}]}], @NL80211_ATTR_HE_OBSS_PD={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x280c0}, 0x8800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.140167944s ago: executing program 0 (id=1204):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000100001082cbd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="21310000048a00001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000880", @ANYRES32, @ANYBLOB="1400030076657468305f766972745f77696669"], 0x58}}, 0x400c040)

2.060957698s ago: executing program 0 (id=1205):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000280), 0x0, 0x40808d4)
socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080003, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x108}}], 0x2, 0xc040)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

1.968049906s ago: executing program 0 (id=1206):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
write$nci(r2, &(0x7f0000000040)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x2, {0x1, 0x1000, 0x4, 0x7f, 0x2, 0xb4, 0x5, 0xaf5e, 0x19, "d0c4a305e09bd0150c3e4e8ee2d149bbc875ac6c70dbd96c56"}}, 0x2a) (async)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) (async, rerun: 64)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) (rerun: 64)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) (async, rerun: 32)
syz_usb_control_io(r0, &(0x7f0000000180)={0xffffffffffffffcd, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='Q')

996.107408ms ago: executing program 1 (id=1211):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc95779", 0x1b}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff", 0x8c}, {&(0x7f0000000640)="7a7881cb86185f895aae7f897da575b56f6ad57d1ebcffe23733458643542a2492c68f38f8225af4", 0x28}], 0x3}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x4b1}], 0x1}}], 0x2, 0x42054)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

936.113525ms ago: executing program 1 (id=1212):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8884}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

869.436901ms ago: executing program 1 (id=1213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff6f, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004850)

784.051699ms ago: executing program 1 (id=1214):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)={0x70, 0x0, 0x403, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0xf}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2f, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x8a, 0xcf, @device_a, 0x8, 0x4, 0x23b4}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}]}], @NL80211_ATTR_HE_OBSS_PD={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x280c0}, 0x8800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

766.316844ms ago: executing program 1 (id=1215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x2, 0x200004}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000))
r3 = epoll_create(0xaf2)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000201b})
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

746.084542ms ago: executing program 4 (id=1216):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x408, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000002c0)=0x10000, 0x4)

688.421555ms ago: executing program 2 (id=1217):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 2)

596.353527ms ago: executing program 4 (id=1218):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0)
landlock_create_ruleset(0x0, 0x0, 0x1)

551.783541ms ago: executing program 2 (id=1219):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
unshare(0x24020400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0xf, 0x6, 0x5, 0x3, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x8, 0x0, 0x40, 0xd, 0xe, 0x5, 0x0, 0x4, 0x1c00, 0xc, 0x7, 0xbed4, 0xffffffff, 0x8000100, 0x2, 0x5, 0x11000, 0x8, 0x5, 0x798, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180001, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x4, 0xffffe, 0x8, 0x752, 0x0, 0x3, 0x9, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x7ffffffd, 0xfdfffffc, 0x0, 0x2, 0x84, 0x100, 0x4, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x10000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x7, 0x100, 0x80066cd, 0xc, 0x8, 0x1, 0x0, 0xc5c, 0x3ff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x3a73c3, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r5=>0x0})
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)

502.864954ms ago: executing program 2 (id=1220):
socket(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

61.047409ms ago: executing program 1 (id=1221):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x4, &(0x7f0000000080)=0x31a, 0x4)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x4800, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000190001002dbd70000000000080201000001100050043000008000f"], 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000100)=[{0xfffd, 0x8800, 0x0, 0x0}, {0xfffe, 0x0, 0x0, 0x0}, {0x2, 0x11, 0x1000, &(0x7f0000003100)="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"/4105}, {0xdb29, 0x8000, 0x5, &(0x7f00000012c0)="51367338293deca2d9b35c3067e2d72a95"}, {0xb8f, 0x201, 0x41, &(0x7f0000001300)="c7d0606627e989c61350ccb934235a2426b047b4580d11a86563d11f01749f6930e27f5eea5bdc79e12166ef26d8cc59c09c5489dea187148b807b376b0dc4677a"}], 0x5})
socket$netlink(0x10, 0x3, 0x4)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @local, @local, {[@routing={0x84, 0x0, 0x0, 0x6}], "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"}}}}}, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000001c0)="98137daf8f71cd3f153f584baee2ce52aa4c52fa6ac1f1b46be77b52b746633e77aabf00ee05cfa3dcb8c763a9d528b92ff767ed7b7b5ee6ad6df1ddfb9275da90ff21f4958f67aea4b50d1c513d96b06dee94f9b4daf5120a76a6d6796fcab73c5391b6f384023eb12a66f9632ce8d82779a4c8bef3127d6b971a920c0275191ccd762667f02e999ffa08773763d0aceb5b7bc9abb2b5a9281bdc6481f8d62672717b980d79942bfc2410af0acf2dafc1d08744839d4290397252a99f5d78501ab6bfe5cdf836e4508a3f4cf41b685f0515a2a8828ddc61e640a211ecd02854a3c7c8b3")
r5 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x7, 0xc2, 0x4f, 0x40, 0x44, 0x4, 0x53, 0x5e, 0x44, 0x8, 0xfd, 0x3}, {0xb, 0xa6f3, 0x4, 0x8, 0x9, 0x60, 0x24, 0x3, 0xa, 0x7f, 0x7, 0x8, 0xfffffffffffffffb}, {0x2, 0x0, 0xd, 0x10, 0x25, 0x9, 0x8, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x20000000000c}], 0x9})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x10679, 0x6, 0xf3b8, 0x800000000011de, 0x20000000000051, 0x400, 0x4002004c4, 0x2, 0xfffffffffffffffd, 0x97, 0x10, 0x1, 0x39a, 0x4, 0x0, 0x5], 0x2000, 0x400})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

0s ago: executing program 3 (id=1222):
socket$kcm(0x10, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/76, 0x0, 0xeeee8000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x801, 0x80000)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
capset(&(0x7f0000000500)={0x20080522}, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000c65000/0x2000)=nil, 0x2000}, 0x5})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e220102030109022400010200"], 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, 0x0, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
ioprio_get$pid(0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000c70000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})

kernel console output (not intermixed with test programs):

f ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.599093][ T8697] RSP: 002b:00007f26fd3e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.599117][ T8697] RAX: ffffffffffffffda RBX: 00007f26fc815fa0 RCX: 00007f26fc59ce59
[  282.599133][ T8697] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003
[  282.599148][ T8697] RBP: 00007f26fc632d6f R08: 0000000000000000 R09: 0000000000000000
[  282.599161][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.599174][ T8697] R13: 00007f26fc816038 R14: 00007f26fc815fa0 R15: 00007f26fc93fa48
[  282.599210][ T8697]  </TASK>
[  283.246310][   T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  283.455225][   T24] usb 1-1: Using ep0 maxpacket: 32
[  283.473630][   T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  283.491218][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.506414][   T24] usb 1-1: Product: syz
[  283.511495][   T24] usb 1-1: Manufacturer: syz
[  283.520583][   T24] usb 1-1: SerialNumber: syz
[  283.536614][   T24] usb 1-1: config 0 descriptor??
[  283.550270][   T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  283.556839][   T44] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  283.717917][   T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  283.734171][   T44] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  283.743846][  T995] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  283.753802][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.763888][   T44] usb 3-1: Product: syz
[  283.768569][   T44] usb 3-1: Manufacturer: syz
[  283.773454][   T44] usb 3-1: SerialNumber: syz
[  283.794404][   T44] usb 3-1: config 0 descriptor??
[  283.925582][  T995] usb 5-1: Using ep0 maxpacket: 8
[  283.938324][  T995] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  283.949252][  T995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.960069][  T995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.970603][  T995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  283.982970][  T995] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.997008][  T995] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.006957][  T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.043109][ T5364] usb 3-1: USB disconnect, device number 56
[  284.209895][ T8719] dlm: non-version read from control device 36
[  284.233912][  T995] usb 5-1: usb_control_msg returned -32
[  284.240147][  T995] usbtmc 5-1:16.0: can't read capabilities
[  284.465152][   T44] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  284.592990][ T8701] bond1: entered allmulticast mode
[  284.605069][ T8701] gre3: entered allmulticast mode
[  284.646222][   T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  284.666420][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.679920][   T44] usb 4-1: Product: syz
[  284.684271][   T44] usb 4-1: Manufacturer: syz
[  284.690879][   T44] usb 4-1: SerialNumber: syz
[  284.799392][ T8731] usbtmc 5-1:16.0: usb_bulk_msg returned -71
[  285.021904][ T8700] bond1: left allmulticast mode
[  285.035125][ T8700] gre3: left allmulticast mode
[  285.054562][   T24] gspca_ov534_9: reg_r err -71
[  285.110337][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  285.135179][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  285.355380][ T8742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  285.366225][   T24] gspca_ov534_9: Unknown sensor 0000
[  285.366379][   T24] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  285.411519][   T24] usb 1-1: USB disconnect, device number 50
[  286.160611][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  286.189574][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  286.254470][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  286.294114][   T44] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  286.554761][   T44] usb 5-1: USB disconnect, device number 55
[  287.075433][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.103422][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.300769][   T44] usb 4-1: USB disconnect, device number 54
[  287.518917][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.532430][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.546037][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.558325][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.576021][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.600143][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.614461][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.627739][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.639696][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.652739][ T8770] kvm_intel: kvm [8769]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  287.735403][  T995] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  287.775104][   T44] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  287.816197][ T5364] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  287.956286][  T995] usb 3-1: Using ep0 maxpacket: 32
[  287.972014][   T44] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 175, changing to 4
[  287.985574][ T5364] usb 5-1: Using ep0 maxpacket: 32
[  287.998650][ T5364] usb 5-1: config 0 has no interfaces?
[  288.011875][ T5364] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  288.027663][  T995] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  288.040128][ T5364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.058357][   T44] usb 4-1: string descriptor 0 read error: -22
[  288.059863][ T5364] usb 5-1: Product: syz
[  288.071355][  T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.078459][ T5364] usb 5-1: Manufacturer: syz
[  288.090704][   T44] usb 4-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice= 0.40
[  288.092762][ T5364] usb 5-1: SerialNumber: syz
[  288.106053][  T995] usb 3-1: Product: syz
[  288.115501][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.134731][  T995] usb 3-1: Manufacturer: syz
[  288.139849][  T995] usb 3-1: SerialNumber: syz
[  288.158125][ T5364] usb 5-1: config 0 descriptor??
[  288.173086][  T995] usb 3-1: config 0 descriptor??
[  288.206089][   T44] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  288.227240][  T995] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  288.459619][   T44] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  288.486792][   T44] usb 4-1: can't set first interface for hiFace device.
[  288.502863][   T44] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5
[  288.533452][   T44] usb 4-1: can't set first interface for hiFace device.
[  288.552637][   T44] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5
[  288.579179][   T44] usb 4-1: can't set first interface for hiFace device.
[  288.595069][   T44] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5
[  288.621226][   T44] usb 4-1: USB disconnect, device number 55
[  289.165105][ T5755] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  289.237112][ T8775] syz_tun: entered allmulticast mode
[  289.326042][ T5755] usb 1-1: Using ep0 maxpacket: 32
[  289.343180][ T5755] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[  289.357329][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.383994][ T5755] usb 1-1: Product: syz
[  289.388634][ T5755] usb 1-1: Manufacturer: syz
[  289.393376][ T5755] usb 1-1: SerialNumber: syz
[  289.631797][ T5755] ems_usb 1-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  289.661928][ T8774] syz_tun: left allmulticast mode
[  289.671529][ T5755] ems_usb 1-1:91.0: probe with driver ems_usb failed with error -22
[  289.686863][  T995] gspca_ov534_9: reg_r err -71
[  289.715386][ T5755] usb 1-1: USB disconnect, device number 51
[  289.795898][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.813537][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.956964][  T995] gspca_ov534_9: Unknown sensor 0000
[  289.957247][  T995] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  290.003159][  T995] usb 3-1: USB disconnect, device number 57
[  290.340750][ T5755] usb 5-1: USB disconnect, device number 56
[  290.435486][   T44] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  290.635992][   T44] usb 4-1: Using ep0 maxpacket: 16
[  290.650718][   T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.683216][   T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  290.712577][   T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  290.737622][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.755270][   T44] usb 4-1: Product: syz
[  290.764037][   T44] usb 4-1: Manufacturer: syz
[  290.784321][   T44] usb 4-1: SerialNumber: syz
[  290.834659][   T44] usb 4-1: 0:2 : does not exist
[  290.850568][   T44] usb 4-1: unit 6 not found!
[  290.866415][  T995] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  291.027276][  T995] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  291.055722][  T995] usb 5-1: config 1 has no interface number 0
[  291.074294][  T995] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D
[  291.099722][ T5755] usb 4-1: USB disconnect, device number 56
[  291.108866][  T995] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64
[  291.135470][  T995] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  291.163611][  T995] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  291.174807][  T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.184885][  T995] usb 5-1: Product: syz
[  291.190136][  T995] usb 5-1: Manufacturer: syz
[  291.195554][  T995] usb 5-1: SerialNumber: syz
[  291.219134][ T8826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  291.348176][ T5364] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  291.349646][ T8843] netlink: 1788 bytes leftover after parsing attributes in process `syz.0.1025'.
[  291.446316][ T8826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  291.517025][ T5364] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  291.544573][ T5364] usb 3-1: config 0 has no interface number 0
[  291.565128][ T5364] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  291.578752][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.599505][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.608166][ T5364] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  291.623182][ T8849] syz_tun: entered allmulticast mode
[  291.639600][ T5364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.649458][ T8849] dvmrp8: entered allmulticast mode
[  291.668705][ T8848] syz_tun: left allmulticast mode
[  291.674700][  T995] usb 5-1: Incompatible driver and firmware versions
[  291.681541][ T5364] usb 3-1: Product: syz
[  291.681562][ T5364] usb 3-1: Manufacturer: syz
[  291.681578][ T5364] usb 3-1: SerialNumber: syz
[  291.710972][ T5364] usb 3-1: config 0 descriptor??
[  291.742106][ T5364] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  291.967767][ T8838] trusted_key: encrypted_key: master key parameter '' is invalid
[  292.134591][  T995] usb 3-1: USB disconnect, device number 58
[  292.163060][  T995] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  292.315482][ T5759] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  292.363448][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  292.487003][ T5759] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  292.503382][ T5759] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  292.513275][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.523588][ T5759] usb 4-1: Product: syz
[  292.528805][ T5759] usb 4-1: Manufacturer: syz
[  292.533759][ T5759] usb 4-1: SerialNumber: syz
[  292.542786][ T5759] usb 4-1: config 0 descriptor??
[  292.620593][ T8863] kAFS: unable to lookup cell '(,cѕМ'
[  292.713275][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.737016][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.765720][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.796507][ T5364] usb 4-1: USB disconnect, device number 57
[  292.810189][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.475849][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.648961][ T8887] FAULT_INJECTION: forcing a failure.
[  293.648961][ T8887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.697448][ T5364] usb 5-1: USB disconnect, device number 57
[  293.762827][ T8887] CPU: 0 UID: 0 PID: 8887 Comm: syz.2.1037 Not tainted syzkaller #0 PREEMPT(full) 
[  293.762857][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  293.762871][ T8887] Call Trace:
[  293.762880][ T8887]  <TASK>
[  293.762890][ T8887]  dump_stack_lvl+0xe8/0x150
[  293.762920][ T8887]  should_fail_ex+0x412/0x560
[  293.762949][ T8887]  _copy_from_user+0x2d/0xb0
[  293.762969][ T8887]  kstrtouint_from_user+0xd6/0x180
[  293.762987][ T8887]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  293.763015][ T8887]  proc_fail_nth_write+0x8e/0x210
[  293.763035][ T8887]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  293.763060][ T8887]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  293.763080][ T8887]  vfs_write+0x29a/0xb90
[  293.763109][ T8887]  ? __pfx_vfs_write+0x10/0x10
[  293.763132][ T8887]  ? __fget_files+0x2a/0x420
[  293.763153][ T8887]  ? __fget_files+0x3a0/0x420
[  293.763171][ T8887]  ? __fget_files+0x2a/0x420
[  293.763195][ T8887]  ksys_write+0x150/0x270
[  293.763218][ T8887]  ? __pfx_ksys_write+0x10/0x10
[  293.763245][ T8887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.763264][ T8887]  do_syscall_64+0x174/0x580
[  293.763280][ T8887]  ? trace_irq_disable+0x3b/0x140
[  293.763303][ T8887]  ? clear_bhb_loop+0x40/0x90
[  293.763321][ T8887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.763336][ T8887] RIP: 0033:0x7f5af395d68e
[  293.763369][ T8887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  293.763389][ T8887] RSP: 002b:00007f5af48affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  293.763406][ T8887] RAX: ffffffffffffffda RBX: 00007f5af48b06c0 RCX: 00007f5af395d68e
[  293.763417][ T8887] RDX: 0000000000000001 RSI: 00007f5af48b00a0 RDI: 0000000000000005
[  293.763427][ T8887] RBP: 00007f5af48b0090 R08: 0000000000000000 R09: 0000000000000000
[  293.763436][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.763445][ T8887] R13: 00007f5af3c16218 R14: 00007f5af3c16180 R15: 00007f5af3d3fa48
[  293.763469][ T8887]  </TASK>
[  294.466207][ T5364] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  294.500175][ T8900] syz_tun: entered allmulticast mode
[  294.606975][ T8899] dvmrp6: entered allmulticast mode
[  294.626120][ T5364] usb 4-1: Using ep0 maxpacket: 8
[  294.639406][ T5364] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  294.658562][ T5364] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.704060][ T5364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.753916][ T5364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  294.807493][ T5364] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.840190][ T8898] syz_tun: left allmulticast mode
[  294.870630][ T5364] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  294.921313][ T5364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.217157][ T8908] syz_tun: entered allmulticast mode
[  295.265316][ T5364] usb 4-1: usb_control_msg returned -32
[  295.276875][ T8908] FAULT_INJECTION: forcing a failure.
[  295.276875][ T8908] name failslab, interval 1, probability 0, space 0, times 0
[  295.297336][ T5364] usbtmc 4-1:16.0: can't read capabilities
[  295.351635][ T8908] CPU: 0 UID: 0 PID: 8908 Comm: syz.4.1043 Not tainted syzkaller #0 PREEMPT(full) 
[  295.351671][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  295.351685][ T8908] Call Trace:
[  295.351694][ T8908]  <TASK>
[  295.351703][ T8908]  dump_stack_lvl+0xe8/0x150
[  295.351734][ T8908]  should_fail_ex+0x412/0x560
[  295.351764][ T8908]  should_failslab+0xa8/0x100
[  295.351787][ T8908]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  295.351823][ T8908]  ? __alloc_skb+0x1d0/0x7d0
[  295.351851][ T8908]  ? __local_bh_enable_ip+0xd0/0x130
[  295.351879][ T8908]  __alloc_skb+0x1d0/0x7d0
[  295.351908][ T8908]  ? atomic_notifier_call_chain+0x26/0x180
[  295.351940][ T8908]  mroute_netlink_event+0x8f/0x150
[  295.351967][ T8908]  ipmr_mfc_add+0x6f4/0x24a0
[  295.352006][ T8908]  ? ipmr_mfc_add+0x105/0x24a0
[  295.352036][ T8908]  ? __might_fault+0xaf/0x130
[  295.352069][ T8908]  ? __pfx_ipmr_mfc_add+0x10/0x10
[  295.352099][ T8908]  ? __pfx___mutex_lock+0x10/0x10
[  295.352144][ T8908]  ip_mroute_setsockopt+0xe5b/0x10d0
[  295.352185][ T8908]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[  295.352219][ T8908]  ? get_pid_task+0x20/0x1f0
[  295.352260][ T8908]  ? __lock_acquire+0x6b5/0x2cf0
[  295.352289][ T8908]  do_ip_setsockopt+0xf1e/0x2ea0
[  295.352327][ T8908]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  295.352357][ T8908]  ? aa_sk_perm+0x6d5/0x900
[  295.352389][ T8908]  ? __fget_files+0x2a/0x420
[  295.352420][ T8908]  ? __pfx_aa_sk_perm+0x10/0x10
[  295.352453][ T8908]  ? __fget_files+0x2a/0x420
[  295.352477][ T8908]  ? aa_sock_opt_perm+0xff/0x1a0
[  295.352512][ T8908]  ip_setsockopt+0x66/0x110
[  295.352538][ T8908]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  295.352570][ T8908]  do_sock_setsockopt+0x17c/0x1b0
[  295.352607][ T8908]  __x64_sys_setsockopt+0x13d/0x1b0
[  295.352642][ T8908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.352673][ T8908]  do_syscall_64+0x174/0x580
[  295.352696][ T8908]  ? trace_irq_disable+0x3b/0x140
[  295.352727][ T8908]  ? clear_bhb_loop+0x40/0x90
[  295.352754][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.352775][ T8908] RIP: 0033:0x7f752d59ce59
[  295.352795][ T8908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.352813][ T8908] RSP: 002b:00007f752e4e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  295.352835][ T8908] RAX: ffffffffffffffda RBX: 00007f752d815fa0 RCX: 00007f752d59ce59
[  295.352851][ T8908] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[  295.352864][ T8908] RBP: 00007f752e4e8090 R08: 000000000000003c R09: 0000000000000000
[  295.352878][ T8908] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  295.352891][ T8908] R13: 00007f752d816038 R14: 00007f752d815fa0 R15: 00007f752d93fa48
[  295.352926][ T8908]  </TASK>
[  295.647382][ T8907] syz_tun: left allmulticast mode
[  295.657399][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.717044][ T8912] binder: 8909:8912 ioctl 89e0 0 returned -22
[  295.785716][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.966945][ T5364] usb 4-1: USB disconnect, device number 58
[  296.086820][ T8916] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!'
[  296.130764][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(full) 
[  296.130796][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  296.130811][ T8916] Call Trace:
[  296.130821][ T8916]  <TASK>
[  296.130831][ T8916]  dump_stack_lvl+0xe8/0x150
[  296.130864][ T8916]  sysfs_warn_dup+0x8e/0xa0
[  296.130893][ T8916]  sysfs_do_create_link_sd+0xc0/0x110
[  296.130925][ T8916]  device_add_class_symlinks+0x1cf/0x240
[  296.130954][ T8916]  device_add+0x475/0xbb0
[  296.130991][ T8916]  wiphy_register+0x1dc5/0x2dc0
[  296.131036][ T8916]  ? __pfx_wiphy_register+0x10/0x10
[  296.131062][ T8916]  ? __pfx_netdev_run_todo+0x10/0x10
[  296.131087][ T8916]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  296.131126][ T8916]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  296.131157][ T8916]  ieee80211_register_hw+0x3d82/0x4a70
[  296.131201][ T8916]  ? ieee80211_register_hw+0x18f1/0x4a70
[  296.131255][ T8916]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  296.131286][ T8916]  ? __asan_memset+0x22/0x50
[  296.131314][ T8916]  ? __hrtimer_setup+0x1b7/0x260
[  296.131341][ T8916]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  296.131369][ T8916]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  296.131435][ T8916]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  296.131466][ T8916]  ? kstrndup+0xbf/0x160
[  296.131500][ T8916]  hwsim_new_radio_nl+0xf6a/0x1c00
[  296.131557][ T8916]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  296.131600][ T8916]  ? rcu_is_watching+0x15/0xb0
[  296.131626][ T8916]  ? trace_kmalloc+0x2a/0xf0
[  296.131663][ T8916]  ? __nla_parse+0x40/0x60
[  296.131695][ T8916]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  296.131723][ T8916]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  296.131759][ T8916]  genl_family_rcv_msg_doit+0x22a/0x330
[  296.131796][ T8916]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  296.131838][ T8916]  ? bpf_lsm_capable+0x9/0x20
[  296.131859][ T8916]  ? security_capable+0x7e/0x2c0
[  296.131897][ T8916]  genl_rcv_msg+0x61c/0x7a0
[  296.131932][ T8916]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.131958][ T8916]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  296.132015][ T8916]  netlink_rcv_skb+0x232/0x4b0
[  296.132051][ T8916]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.132080][ T8916]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  296.132131][ T8916]  ? down_read+0x270/0x2e0
[  296.132156][ T8916]  ? genl_rcv+0xd/0x40
[  296.132183][ T8916]  genl_rcv+0x28/0x40
[  296.132207][ T8916]  netlink_unicast+0x75c/0x8e0
[  296.132253][ T8916]  netlink_sendmsg+0x813/0xb40
[  296.132287][ T8916]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.132313][ T8916]  ? aa_sock_msg_perm+0xf1/0x1b0
[  296.132348][ T8916]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.132381][ T8916]  ____sys_sendmsg+0x972/0x9f0
[  296.132404][ T8916]  ? __might_fault+0xaf/0x130
[  296.132440][ T8916]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.132473][ T8916]  ? import_iovec+0x73/0xa0
[  296.132505][ T8916]  ___sys_sendmsg+0x2a5/0x360
[  296.132527][ T8916]  ? __lock_acquire+0x6b5/0x2cf0
[  296.132556][ T8916]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.132586][ T8916]  ? futex_wait+0x2a2/0x390
[  296.132646][ T8916]  ? __fget_files+0x2a/0x420
[  296.132672][ T8916]  ? __fget_files+0x3a0/0x420
[  296.132710][ T8916]  __x64_sys_sendmsg+0x1bd/0x2a0
[  296.132736][ T8916]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  296.132769][ T8916]  ? rcu_is_watching+0x15/0xb0
[  296.132806][ T8916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.132830][ T8916]  do_syscall_64+0x174/0x580
[  296.132853][ T8916]  ? trace_irq_disable+0x3b/0x140
[  296.132883][ T8916]  ? clear_bhb_loop+0x40/0x90
[  296.132911][ T8916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.132933][ T8916] RIP: 0033:0x7f752d59ce59
[  296.132953][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.132979][ T8916] RSP: 002b:00007f752e4e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.133003][ T8916] RAX: ffffffffffffffda RBX: 00007f752d815fa0 RCX: 00007f752d59ce59
[  296.133020][ T8916] RDX: 0000000004004004 RSI: 0000200000000100 RDI: 0000000000000003
[  296.133035][ T8916] RBP: 00007f752d632d6f R08: 0000000000000000 R09: 0000000000000000
[  296.133061][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.133074][ T8916] R13: 00007f752d816038 R14: 00007f752d815fa0 R15: 00007f752d93fa48
[  296.133109][ T8916]  </TASK>
[  296.602989][ T8921] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!'
[  296.732501][ T8921] CPU: 0 UID: 0 PID: 8921 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(full) 
[  296.732536][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  296.732546][ T8921] Call Trace:
[  296.732553][ T8921]  <TASK>
[  296.732560][ T8921]  dump_stack_lvl+0xe8/0x150
[  296.732583][ T8921]  sysfs_warn_dup+0x8e/0xa0
[  296.732605][ T8921]  sysfs_do_create_link_sd+0xc0/0x110
[  296.732627][ T8921]  device_add_class_symlinks+0x1cf/0x240
[  296.732647][ T8921]  device_add+0x475/0xbb0
[  296.732665][ T8921]  wiphy_register+0x1dc5/0x2dc0
[  296.732729][ T8921]  ? __pfx_wiphy_register+0x10/0x10
[  296.732754][ T8921]  ? __pfx_netdev_run_todo+0x10/0x10
[  296.732778][ T8921]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  296.732818][ T8921]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  296.732846][ T8921]  ieee80211_register_hw+0x3d82/0x4a70
[  296.732873][ T8921]  ? lapic_next_event+0x11/0x20
[  296.732911][ T8921]  ? ieee80211_register_hw+0x18f1/0x4a70
[  296.732964][ T8921]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  296.732994][ T8921]  ? __asan_memset+0x22/0x50
[  296.733021][ T8921]  ? __hrtimer_setup+0x1b7/0x260
[  296.733047][ T8921]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  296.733075][ T8921]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  296.733141][ T8921]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  296.733171][ T8921]  ? kstrndup+0xbf/0x160
[  296.733204][ T8921]  hwsim_new_radio_nl+0xf6a/0x1c00
[  296.733262][ T8921]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  296.733304][ T8921]  ? rcu_is_watching+0x15/0xb0
[  296.733334][ T8921]  ? trace_kmalloc+0x2a/0xf0
[  296.733361][ T8921]  ? __nla_parse+0x40/0x60
[  296.733383][ T8921]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  296.733409][ T8921]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  296.733436][ T8921]  genl_family_rcv_msg_doit+0x22a/0x330
[  296.733461][ T8921]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  296.733491][ T8921]  ? bpf_lsm_capable+0x9/0x20
[  296.733506][ T8921]  ? security_capable+0x7e/0x2c0
[  296.733533][ T8921]  genl_rcv_msg+0x61c/0x7a0
[  296.733557][ T8921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.733576][ T8921]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  296.733610][ T8921]  netlink_rcv_skb+0x232/0x4b0
[  296.733662][ T8921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.733691][ T8921]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  296.733727][ T8921]  ? down_read+0x270/0x2e0
[  296.733744][ T8921]  ? genl_rcv+0xd/0x40
[  296.733763][ T8921]  genl_rcv+0x28/0x40
[  296.733780][ T8921]  netlink_unicast+0x75c/0x8e0
[  296.733812][ T8921]  netlink_sendmsg+0x813/0xb40
[  296.733835][ T8921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.733853][ T8921]  ? aa_sock_msg_perm+0xf1/0x1b0
[  296.733877][ T8921]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.733902][ T8921]  ____sys_sendmsg+0x972/0x9f0
[  296.733920][ T8921]  ? __might_fault+0xaf/0x130
[  296.733945][ T8921]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.733968][ T8921]  ? import_iovec+0x73/0xa0
[  296.733991][ T8921]  ___sys_sendmsg+0x2a5/0x360
[  296.734005][ T8921]  ? __lock_acquire+0x6b5/0x2cf0
[  296.734026][ T8921]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.734047][ T8921]  ? futex_wait+0x2a2/0x390
[  296.734089][ T8921]  ? __fget_files+0x2a/0x420
[  296.734107][ T8921]  ? __fget_files+0x3a0/0x420
[  296.734134][ T8921]  __x64_sys_sendmsg+0x1bd/0x2a0
[  296.734153][ T8921]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  296.734176][ T8921]  ? rcu_is_watching+0x15/0xb0
[  296.734202][ T8921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.734219][ T8921]  do_syscall_64+0x174/0x580
[  296.734235][ T8921]  ? trace_irq_disable+0x3b/0x140
[  296.734258][ T8921]  ? clear_bhb_loop+0x40/0x90
[  296.734277][ T8921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.734293][ T8921] RIP: 0033:0x7f752d59ce59
[  296.734308][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.734321][ T8921] RSP: 002b:00007f752e446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.734338][ T8921] RAX: ffffffffffffffda RBX: 00007f752d816090 RCX: 00007f752d59ce59
[  296.734349][ T8921] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003
[  296.734360][ T8921] RBP: 00007f752d632d6f R08: 0000000000000000 R09: 0000000000000000
[  296.734370][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.734379][ T8921] R13: 00007f752d816128 R14: 00007f752d816090 R15: 00007f752d93fa48
[  296.734409][ T8921]  </TASK>
[  297.798822][ T5697] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  297.847913][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  297.901014][ T8947] usb usb7: usbfs: process 8947 (syz.3.1052) did not claim interface 0 before use
[  297.997201][ T5697] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  298.029038][ T5697] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  298.071004][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.117430][ T5697] usb 5-1: Product: syz
[  298.139621][ T5697] usb 5-1: Manufacturer: syz
[  298.161113][ T5697] usb 5-1: SerialNumber: syz
[  298.192145][ T5697] usb 5-1: config 0 descriptor??
[  298.261809][ T8958] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.1056'.
[  298.463066][ T5364] usb 5-1: USB disconnect, device number 58
[  298.616000][ T5759] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  298.795324][ T5759] usb 3-1: Using ep0 maxpacket: 16
[  298.814356][ T5759] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.861412][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  298.906823][ T5759] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  298.933551][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.942296][ T5759] usb 3-1: Product: syz
[  298.947937][ T5759] usb 3-1: Manufacturer: syz
[  298.955838][ T5759] usb 3-1: SerialNumber: syz
[  299.007635][ T5759] usb 3-1: 0:2 : does not exist
[  299.194507][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.240771][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.464263][ T8987] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  299.527562][  T995] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  299.556033][   T44] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  299.591516][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'.
[  299.717245][  T995] usb 1-1: config 0 has no interfaces?
[  299.730598][  T995] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  299.771414][   T44] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  299.786319][  T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.805860][   T44] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  299.816795][  T995] usb 1-1: Product: syz
[  299.822804][  T995] usb 1-1: Manufacturer: syz
[  299.831458][   T44] usb 4-1: Product: syz
[  299.836484][  T995] usb 1-1: SerialNumber: syz
[  299.841287][   T44] usb 4-1: SerialNumber: syz
[  299.850625][  T995] usb 1-1: config 0 descriptor??
[  299.866180][   T44] usb 4-1: config 0 descriptor??
[  300.109999][   T44] hso 4-1:0.0: Failed to find BULK eps
[  300.319433][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.358355][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.389483][ T8985] syz_tun: entered allmulticast mode
[  300.480597][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.514248][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.636788][ T9004] bond1: entered promiscuous mode
[  300.669925][ T9004] 8021q: adding VLAN 0 to HW filter on device bond1
[  300.720795][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.751472][  T995] usb 1-1: USB disconnect, device number 52
[  300.764446][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.945643][   T44] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  301.097420][ T5364] usb 4-1: USB disconnect, device number 59
[  301.109529][ T8983] syz_tun: left allmulticast mode
[  301.138433][   T44] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  301.184884][   T44] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  301.223750][   T44] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  301.261319][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.292777][   T44] usb 5-1: Product: syz
[  301.312538][   T44] usb 5-1: Manufacturer: syz
[  301.331076][   T44] usb 5-1: SerialNumber: syz
[  302.185567][   T44] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  302.208086][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.242241][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.375055][   T44] usb 1-1: device descriptor read/64, error -71
[  302.506244][   T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  302.635179][   T44] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  302.715690][   T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  302.772222][   T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  302.795866][   T44] usb 1-1: device descriptor read/64, error -71
[  302.835133][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.860001][   T24] usb 4-1: Product: syz
[  302.875933][   T24] usb 4-1: Manufacturer: syz
[  302.890927][   T24] usb 4-1: SerialNumber: syz
[  302.925548][   T24] usb 4-1: config 0 descriptor??
[  302.945888][   T44] usb usb1-port1: attempt power cycle
[  302.989356][   T24] usb 5-1: USB disconnect, device number 59
[  303.184336][ T5759] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  303.210088][   T24] usb 4-1: USB disconnect, device number 60
[  303.295815][   T44] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  303.346451][   T44] usb 1-1: device descriptor read/8, error -71
[  303.417036][ T5759] usb 3-1: USB disconnect, device number 59
[  303.533559][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.586194][ T9060] capability: warning: `syz.2.1076' uses deprecated v2 capabilities in a way that may be insecure
[  303.625252][   T44] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  303.655837][   T44] usb 1-1: device descriptor read/8, error -71
[  303.735079][   T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  303.785228][   T44] usb usb1-port1: unable to enumerate USB device
[  303.898765][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.910959][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  303.921747][   T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  303.945230][ T5759] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  303.954705][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  303.975127][   T24] usb 5-1: SerialNumber: syz
[  304.117485][ T5364] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  304.124693][ T5759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.155937][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.185121][ T5759] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  304.204177][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.235705][   T24] usb 5-1: 0:2 : does not exist
[  304.245347][ T5759] usb 3-1: config 0 descriptor??
[  304.285286][ T5364] usb 4-1: Using ep0 maxpacket: 8
[  304.297241][ T5364] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  304.319091][ T5364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.350543][   T24] usb 5-1: USB disconnect, device number 60
[  304.367556][ T5364] pvrusb2: Hardware description: Terratec Grabster AV400
[  304.374947][ T5364] pvrusb2: **********
[  304.383983][ T5364] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  304.398414][ T5364] pvrusb2: Important functionality might not be entirely working.
[  304.431928][ T5364] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  304.444378][ T5364] pvrusb2: **********
[  304.562843][ T2366] pvrusb2: Invalid write control endpoint
[  304.597245][ T5759] usb 3-1: USB disconnect, device number 60
[  304.662064][ T2366] pvrusb2: Invalid write control endpoint
[  304.669108][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  304.684812][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  304.696491][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  304.696916][   T29] kauditd_printk_skb: 89 callbacks suppressed
[  304.696958][   T29] audit: type=1326 audit(1781233180.966:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  304.708974][ T2366] pvrusb2: Device being rendered inoperable
[  304.732861][   T29] audit: type=1326 audit(1781233180.966:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  304.770201][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.812584][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  304.821227][ T9068] xt_hashlimit: size too large, truncated to 1048576
[  304.848823][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  304.887920][   T29] audit: type=1326 audit(1781233180.986:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  304.930041][ T2366] pvrusb2: Attached sub-driver cx25840
[  304.966242][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  304.987735][   T29] audit: type=1326 audit(1781233180.996:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.017197][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  305.064611][   T29] audit: type=1326 audit(1781233181.006:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.114463][   T29] audit: type=1326 audit(1781233181.006:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.140520][   T29] audit: type=1326 audit(1781233181.006:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.169795][   T29] audit: type=1326 audit(1781233181.036:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.199645][ T9092] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.278549][   T29] audit: type=1326 audit(1781233181.036:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.313234][ T5759] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  305.379980][   T29] audit: type=1326 audit(1781233181.056:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.1.1080" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26fc59ce59 code=0x7ffc0000
[  305.527498][ T5759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.564542][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.579740][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.591005][ T5759] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  305.601646][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.623001][   T24] usb 4-1: USB disconnect, device number 61
[  305.637460][ T5759] usb 5-1: config 0 descriptor??
[  306.065241][ T5759] wacom 0003:056A:0000.000E: unknown main item tag 0x0
[  306.090701][ T5759] wacom 0003:056A:0000.000E: unknown main item tag 0x0
[  306.118180][ T5759] wacom 0003:056A:0000.000E: Unknown device_type for 'HID 056a:0000'. Assuming pen.
[  306.192761][ T5759] wacom 0003:056A:0000.000E: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0
[  306.260081][ T9086] netlink: 'syz.4.1081': attribute type 1 has an invalid length.
[  306.298411][ T5759] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.000E/input/input34
[  306.347012][   T44] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  306.533817][   T44] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  306.594511][   T44] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  306.596150][ T5697] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  306.650053][ T9086] 8021q: adding VLAN 0 to HW filter on device bond1
[  306.656945][ T5638] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  306.690350][   T44] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  306.719741][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.748091][   T44] usb 1-1: Product: syz
[  306.753016][ T9106] bond1 (unregistering): Released all slaves
[  306.779222][   T44] usb 1-1: Manufacturer: syz
[  306.799043][   T44] usb 1-1: SerialNumber: syz
[  306.846302][ T5697] usb 3-1: Using ep0 maxpacket: 16
[  306.857192][ T5638] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  306.884427][ T5697] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  306.885732][ T5638] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  306.950293][ T5638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.970585][ T5697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.995368][ T5638] usb 4-1: Product: syz
[  307.005545][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.035355][ T5638] usb 4-1: Manufacturer: syz
[  307.040792][ T5697] usb 3-1: Product: ඌ䚩⠥殩ꂔ㢳ﶓ玣ኦ컓숷쥳鎳瑬쫌͵ꋨ醽椁ﭐᅝ裍ۙ䟦莖⌽税ᄲ呒ᷱ踁９㜓媫쓼脻鱠㋉躼젙녱报겛攲ᓆ격ﭾ餰画⻫梨蝈䔁챃뤤씎�෇尬ح鵡ᒍ뤆쌓殇鶍’㪛᪰ỗ
[  307.097605][ T5697] usb 3-1: Manufacturer: Р­
[  307.098555][ T5638] usb 4-1: SerialNumber: syz
[  307.113012][ T5697] usb 3-1: SerialNumber: Р¶
[  307.159011][ T5638] usb 4-1: config 0 descriptor??
[  307.447736][ T5364] usb 4-1: USB disconnect, device number 62
[  307.536497][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.553791][ T5697] cdc_ncm 3-1:1.0: bind() failure
[  307.563376][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.599442][ T5638] usb 5-1: USB disconnect, device number 61
[  307.619937][ T5697] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  307.637830][ T5697] cdc_ncm 3-1:1.1: bind() failure
[  307.681359][ T5697] usb 3-1: USB disconnect, device number 61
[  308.213248][ T9124] Sensor A: =================  START STATUS  =================
[  308.233805][ T9124] Sensor A: Test Pattern: 75% Colorbar
[  308.257120][ T9124] Sensor A: Show Information: All
[  308.268546][ T9124] Sensor A: Vertical Flip: false
[  308.293691][ T9124] Sensor A: Horizontal Flip: false
[  308.314485][ T9124] Sensor A: Brightness: 128
[  308.336271][ T9124] Sensor A: Contrast: 128
[  308.357762][ T9124] Sensor A: Hue: 0
[  308.357801][ T9124] Sensor A: Saturation: 128
[  308.357828][ T9124] Sensor A: Pixel Rate: 160000000
[  308.359077][ T9124] Sensor A: Horizontal Blanking: 800
[  308.359108][ T9124] Sensor A: Vertical Blanking: 3223
[  308.359135][ T9124] Sensor A: ==================  END STATUS  ==================
[  308.363927][ T5638] usb 1-1: USB disconnect, device number 57
[  308.976408][ T9133] debugfs: '1ща^!' already exists in 'ieee80211'
[  309.114864][ T5642] Bluetooth: hci4: unexpected event for opcode 0x0c1a
[  309.224909][ T9133] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!'
[  309.257223][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.0.1093 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.257262][ T9133] Tainted: [L]=SOFTLOCKUP
[  309.257271][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  309.257290][ T9133] Call Trace:
[  309.257301][ T9133]  <TASK>
[  309.257315][ T9133]  dump_stack_lvl+0xe8/0x150
[  309.257347][ T9133]  sysfs_warn_dup+0x8e/0xa0
[  309.257376][ T9133]  sysfs_do_create_link_sd+0xc0/0x110
[  309.257408][ T9133]  device_add_class_symlinks+0x1cf/0x240
[  309.257436][ T9133]  device_add+0x475/0xbb0
[  309.257464][ T9133]  wiphy_register+0x1dc5/0x2dc0
[  309.257508][ T9133]  ? __pfx_wiphy_register+0x10/0x10
[  309.257532][ T9133]  ? __pfx_netdev_run_todo+0x10/0x10
[  309.257557][ T9133]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  309.257595][ T9133]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  309.257634][ T9133]  ieee80211_register_hw+0x3d82/0x4a70
[  309.257679][ T9133]  ? ieee80211_register_hw+0x18f1/0x4a70
[  309.257734][ T9133]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  309.257765][ T9133]  ? __asan_memset+0x22/0x50
[  309.257793][ T9133]  ? __hrtimer_setup+0x1b7/0x260
[  309.257819][ T9133]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  309.257847][ T9133]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  309.257912][ T9133]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  309.257943][ T9133]  ? kstrndup+0xbf/0x160
[  309.257977][ T9133]  hwsim_new_radio_nl+0xf6a/0x1c00
[  309.258035][ T9133]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  309.258079][ T9133]  ? rcu_is_watching+0x15/0xb0
[  309.258105][ T9133]  ? trace_kmalloc+0x2a/0xf0
[  309.258142][ T9133]  ? __nla_parse+0x40/0x60
[  309.258174][ T9133]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  309.258205][ T9133]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  309.258243][ T9133]  genl_family_rcv_msg_doit+0x22a/0x330
[  309.258278][ T9133]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  309.258319][ T9133]  ? bpf_lsm_capable+0x9/0x20
[  309.258340][ T9133]  ? security_capable+0x7e/0x2c0
[  309.258378][ T9133]  genl_rcv_msg+0x61c/0x7a0
[  309.258412][ T9133]  ? __pfx_genl_rcv_msg+0x10/0x10
[  309.258437][ T9133]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  309.258470][ T9133]  ? __pfx_ref_tracker_free+0x10/0x10
[  309.258508][ T9133]  netlink_rcv_skb+0x232/0x4b0
[  309.258542][ T9133]  ? __pfx_genl_rcv_msg+0x10/0x10
[  309.258570][ T9133]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  309.258634][ T9133]  ? down_read+0x270/0x2e0
[  309.258657][ T9133]  ? genl_rcv+0xd/0x40
[  309.258684][ T9133]  genl_rcv+0x28/0x40
[  309.258708][ T9133]  netlink_unicast+0x75c/0x8e0
[  309.258751][ T9133]  netlink_sendmsg+0x813/0xb40
[  309.258783][ T9133]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.258809][ T9133]  ? aa_sock_msg_perm+0xf1/0x1b0
[  309.258843][ T9133]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.258876][ T9133]  ____sys_sendmsg+0x972/0x9f0
[  309.258898][ T9133]  ? __might_fault+0xaf/0x130
[  309.258933][ T9133]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.258967][ T9133]  ? import_iovec+0x73/0xa0
[  309.258998][ T9133]  ___sys_sendmsg+0x2a5/0x360
[  309.259018][ T9133]  ? __lock_acquire+0x6b5/0x2cf0
[  309.259047][ T9133]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.259077][ T9133]  ? futex_wait+0x2a2/0x390
[  309.259135][ T9133]  ? __fget_files+0x2a/0x420
[  309.259161][ T9133]  ? __fget_files+0x3a0/0x420
[  309.259198][ T9133]  __x64_sys_sendmsg+0x1bd/0x2a0
[  309.259224][ T9133]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  309.259257][ T9133]  ? rcu_is_watching+0x15/0xb0
[  309.259293][ T9133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.259318][ T9133]  do_syscall_64+0x174/0x580
[  309.259340][ T9133]  ? trace_irq_disable+0x3b/0x140
[  309.259372][ T9133]  ? clear_bhb_loop+0x40/0x90
[  309.259399][ T9133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.259421][ T9133] RIP: 0033:0x7f3e65f9ce59
[  309.259442][ T9133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.259461][ T9133] RSP: 002b:00007f3e66f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.259483][ T9133] RAX: ffffffffffffffda RBX: 00007f3e66215fa0 RCX: 00007f3e65f9ce59
[  309.259499][ T9133] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003
[  309.259513][ T9133] RBP: 00007f3e66032d6f R08: 0000000000000000 R09: 0000000000000000
[  309.259525][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.259537][ T9133] R13: 00007f3e66216038 R14: 00007f3e66215fa0 R15: 00007f3e6633fa48
[  309.259572][ T9133]  </TASK>
[  310.085125][ T5755] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  310.215480][ T5755] usb 1-1: device descriptor read/64, error -71
[  310.296060][ T5638] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  310.354642][ T9125] Set syz1 is full, maxelem 65536 reached
[  310.467100][ T5638] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  310.475376][ T5755] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  310.490736][ T5638] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  310.508348][ T5638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.518434][ T5759] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  310.535216][ T5638] usb 3-1: Product: syz
[  310.547414][ T5638] usb 3-1: Manufacturer: syz
[  310.563067][ T5638] usb 3-1: SerialNumber: syz
[  310.588456][ T5638] usb 3-1: config 0 descriptor??
[  310.625529][ T5755] usb 1-1: device descriptor read/64, error -71
[  310.665090][   T44] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  310.690342][ T5759] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  310.699798][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.718205][ T5759] usb 5-1: Product: syz
[  310.728740][ T5759] usb 5-1: Manufacturer: syz
[  310.741273][ T5759] usb 5-1: SerialNumber: syz
[  310.747197][ T5755] usb usb1-port1: attempt power cycle
[  310.816689][ T5697] usb 3-1: USB disconnect, device number 62
[  310.825682][   T44] usb 4-1: Using ep0 maxpacket: 8
[  310.880323][   T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  310.908468][   T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  310.928733][   T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  310.955129][   T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.982147][   T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.002235][   T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  311.026412][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.105159][ T5755] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  311.138221][ T5755] usb 1-1: device descriptor read/8, error -71
[  311.180726][ T5759] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  311.264942][   T44] usb 4-1: usb_control_msg returned -32
[  311.282007][   T44] usbtmc 4-1:16.0: can't read capabilities
[  311.386725][ T5755] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  311.405817][ T5755] usb 1-1: device descriptor read/8, error -71
[  311.479726][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.506012][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.517335][ T5755] usb usb1-port1: unable to enumerate USB device
[  311.548585][ T9164] input: syz1 as /devices/virtual/input/input37
[  311.596589][ T5759] usb 4-1: USB disconnect, device number 63
[  311.695237][   T44] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  311.729446][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.739545][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.872900][   T44] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x6 has invalid wMaxPacketSize 0
[  311.895060][   T44] usb 3-1: config 0 interface 0 has no altsetting 0
[  311.904371][   T44] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  311.914579][   T44] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  311.924515][   T44] usb 3-1: Product: syz
[  311.928842][   T44] usb 3-1: Manufacturer: syz
[  311.933484][   T44] usb 3-1: SerialNumber: syz
[  311.945819][   T44] usb 3-1: config 0 descriptor??
[  311.960898][   T44] usb 3-1: selecting invalid altsetting 0
[  312.218744][    T9] usb 3-1: USB disconnect, device number 63
[  312.650573][ T9171] FAULT_INJECTION: forcing a failure.
[  312.650573][ T9171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.675125][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.3.1104 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  312.675159][ T9171] Tainted: [L]=SOFTLOCKUP
[  312.675167][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  312.675180][ T9171] Call Trace:
[  312.675188][ T9171]  <TASK>
[  312.675198][ T9171]  dump_stack_lvl+0xe8/0x150
[  312.675227][ T9171]  should_fail_ex+0x412/0x560
[  312.675256][ T9171]  _copy_to_user+0x31/0xb0
[  312.675298][ T9171]  simple_read_from_buffer+0xe1/0x170
[  312.675329][ T9171]  proc_fail_nth_read+0x1bb/0x230
[  312.675361][ T9171]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  312.675390][ T9171]  ? rw_verify_area+0x2a6/0x4d0
[  312.675418][ T9171]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  312.675445][ T9171]  vfs_read+0x20c/0xa70
[  312.675479][ T9171]  ? __pfx___mutex_lock+0x10/0x10
[  312.675504][ T9171]  ? __pfx_vfs_read+0x10/0x10
[  312.675535][ T9171]  ? __fget_files+0x2a/0x420
[  312.675565][ T9171]  ? __fget_files+0x3a0/0x420
[  312.675588][ T9171]  ? __fget_files+0x2a/0x420
[  312.675622][ T9171]  ksys_read+0x150/0x270
[  312.675653][ T9171]  ? __pfx_ksys_read+0x10/0x10
[  312.675691][ T9171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.675713][ T9171]  do_syscall_64+0x174/0x580
[  312.675734][ T9171]  ? trace_irq_disable+0x3b/0x140
[  312.675764][ T9171]  ? clear_bhb_loop+0x40/0x90
[  312.675789][ T9171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.675810][ T9171] RIP: 0033:0x7f2a8a15d68e
[  312.675830][ T9171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  312.675847][ T9171] RSP: 002b:00007f2a883f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  312.675868][ T9171] RAX: ffffffffffffffda RBX: 00007f2a883f66c0 RCX: 00007f2a8a15d68e
[  312.675883][ T9171] RDX: 000000000000000f RSI: 00007f2a883f60a0 RDI: 0000000000000004
[  312.675896][ T9171] RBP: 00007f2a883f6090 R08: 0000000000000000 R09: 0000000000000000
[  312.675908][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.675920][ T9171] R13: 00007f2a8a416128 R14: 00007f2a8a416090 R15: 00007f2a8a53fa48
[  312.675953][ T9171]  </TASK>
[  313.310940][ T5755] usb 5-1: USB disconnect, device number 62
[  313.335280][    T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  313.350485][ T5755] usblp0: removed
[  313.490548][    T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  313.510760][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.519093][    T9] usb 3-1: Product: syz
[  313.523473][    T9] usb 3-1: Manufacturer: syz
[  313.528517][    T9] usb 3-1: SerialNumber: syz
[  313.845130][   T44] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  313.947791][    T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:23:0c:90:26:17
[  313.975625][    T9] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[  314.017509][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.045359][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.065054][   T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  314.105234][   T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  314.126131][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.158272][   T44] usb 4-1: config 0 descriptor??
[  314.163132][    T9] usb 3-1: USB disconnect, device number 64
[  314.296921][ T9186] FAULT_INJECTION: forcing a failure.
[  314.296921][ T9186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.329229][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.0.1109 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.329263][ T9186] Tainted: [L]=SOFTLOCKUP
[  314.329271][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  314.329283][ T9186] Call Trace:
[  314.329292][ T9186]  <TASK>
[  314.329301][ T9186]  dump_stack_lvl+0xe8/0x150
[  314.329330][ T9186]  should_fail_ex+0x412/0x560
[  314.329358][ T9186]  _copy_to_user+0x31/0xb0
[  314.329389][ T9186]  simple_read_from_buffer+0xe1/0x170
[  314.329421][ T9186]  proc_fail_nth_read+0x1bb/0x230
[  314.329451][ T9186]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  314.329482][ T9186]  ? rw_verify_area+0x2a6/0x4d0
[  314.329510][ T9186]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  314.329539][ T9186]  vfs_read+0x20c/0xa70
[  314.329572][ T9186]  ? __pfx___mutex_lock+0x10/0x10
[  314.329598][ T9186]  ? __pfx_vfs_read+0x10/0x10
[  314.329628][ T9186]  ? __fget_files+0x2a/0x420
[  314.329657][ T9186]  ? __fget_files+0x3a0/0x420
[  314.329681][ T9186]  ? __fget_files+0x2a/0x420
[  314.329714][ T9186]  ksys_read+0x150/0x270
[  314.329743][ T9186]  ? __pfx_ksys_read+0x10/0x10
[  314.329780][ T9186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.329803][ T9186]  do_syscall_64+0x174/0x580
[  314.329825][ T9186]  ? trace_irq_disable+0x3b/0x140
[  314.329854][ T9186]  ? clear_bhb_loop+0x40/0x90
[  314.329880][ T9186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.329901][ T9186] RIP: 0033:0x7f3e65f5d68e
[  314.329920][ T9186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  314.329937][ T9186] RSP: 002b:00007f3e66f38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  314.329960][ T9186] RAX: ffffffffffffffda RBX: 00007f3e66f396c0 RCX: 00007f3e65f5d68e
[  314.329974][ T9186] RDX: 000000000000000f RSI: 00007f3e66f390a0 RDI: 0000000000000004
[  314.329986][ T9186] RBP: 00007f3e66f39090 R08: 0000000000000000 R09: 0000000000000000
[  314.329999][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.330011][ T9186] R13: 00007f3e66216038 R14: 00007f3e66215fa0 R15: 00007f3e6633fa48
[  314.330044][ T9186]  </TASK>
[  314.833498][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.847692][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.856377][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.863867][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.872554][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.883505][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.891366][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.901570][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.909433][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.919368][   T44] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  314.955972][   T44] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  314.999813][ T5364] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  315.025213][ T5759] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  315.119903][   T44] usb 4-1: USB disconnect, device number 64
[  315.176207][ T5364] usb 5-1: Using ep0 maxpacket: 16
[  315.191326][ T5759] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  315.203301][ T5364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[  315.215617][ T5759] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  315.230645][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.232923][ T5364] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  315.242745][ T5759] usb 1-1: Product: syz
[  315.253447][ T5759] usb 1-1: Manufacturer: syz
[  315.259429][ T5759] usb 1-1: SerialNumber: syz
[  315.271359][ T5364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  315.282054][ T5759] usb 1-1: config 0 descriptor??
[  315.297427][ T5755] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  315.305141][ T5364] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  315.328073][ T5364] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  315.345069][ T5364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.367603][ T5364] usb 5-1: Product: syz
[  315.372797][ T5364] usb 5-1: Manufacturer: syz
[  315.377633][ T5364] usb 5-1: SerialNumber: syz
[  315.385886][ T5364] usb 5-1: config 0 descriptor??
[  315.392636][ T9193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  315.415590][ T5364] port100 5-1:0.0: NFC: Could not get supported command types
[  315.495605][ T5755] usb 3-1: Using ep0 maxpacket: 8
[  315.507241][ T5364] usb 1-1: USB disconnect, device number 62
[  315.514766][ T5755] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  315.539553][ T5755] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  315.554370][ T5755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  315.564709][ T5755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  315.576735][ T5755] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  315.591408][ T5755] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  315.601004][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.653458][ T9193] fuse: Unknown parameter 'group_i00000000000000000000'
[  315.832939][ T5755] usb 3-1: usb_control_msg returned -32
[  315.848101][ T5755] usbtmc 3-1:16.0: can't read capabilities
[  316.035108][   T44] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  316.053445][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.100274][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.174406][ T9235] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  316.211784][ T5755] usb 3-1: USB disconnect, device number 65
[  316.253165][   T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  316.310973][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.349276][   T44] usb 4-1: Product: syz
[  316.367483][   T44] usb 4-1: Manufacturer: syz
[  316.388885][   T44] usb 4-1: SerialNumber: syz
[  316.665725][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  316.678501][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  316.695396][ T5759] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  316.711006][   T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  316.724500][   T44] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  316.856973][ T5759] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  316.873866][ T5759] usb 1-1: config 0 has no interface number 0
[  316.895686][ T5759] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  316.919417][ T5759] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  316.942675][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.971034][ T5759] usb 1-1: Product: syz
[  316.987792][ T5759] usb 1-1: Manufacturer: syz
[  317.004020][ T5759] usb 1-1: SerialNumber: syz
[  317.040604][ T5759] usb 1-1: config 0 descriptor??
[  317.114715][ T5759] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  317.189763][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.196920][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  317.282474][ T5642] Bluetooth: hci4: unknown advertising packet type: 0x69
[  317.282514][ T5642] Bluetooth: hci4: unknown advertising packet type: 0x63
[  317.291736][ T5642] Bluetooth: hci4: Malformed LE Event: 0x02
[  317.409005][ T9242] trusted_key: encrypted_key: master key parameter '' is invalid
[  317.575981][    T9] usb 1-1: USB disconnect, device number 63
[  317.599443][    T9] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  317.735097][ T5755] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  317.793750][    T9] usb 5-1: USB disconnect, device number 63
[  317.905576][ T5755] usb 3-1: Using ep0 maxpacket: 32
[  317.916632][ T5755] usb 3-1: unable to get BOS descriptor or descriptor too short
[  317.925621][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.939383][ T5755] usb 3-1: config 2 has an invalid interface number: 57 but max is 0
[  317.949300][ T5755] usb 3-1: config 2 has an invalid interface descriptor of length 5, skipping
[  317.958586][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.974030][ T5755] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  317.988683][ T5755] usb 3-1: config 2 has no interface number 0
[  317.994888][ T5755] usb 3-1: config 2 interface 57 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  318.006676][ T5755] usb 3-1: config 2 interface 57 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 13
[  318.019891][ T5755] usb 3-1: config 2 interface 57 has no altsetting 0
[  318.031234][ T5755] usb 3-1: New USB device found, idVendor=0c52, idProduct=2882, bcdDevice=10.b5
[  318.041063][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.051722][ T5755] usb 3-1: Product: syz
[  318.057844][ T5755] usb 3-1: Manufacturer: syz
[  318.062581][ T5755] usb 3-1: SerialNumber: syz
[  318.314499][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  318.314518][   T29] audit: type=1326 audit(1781233194.576:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1121" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5af399ce59 code=0x0
[  318.435331][ T5364] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  318.537141][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  318.613884][ T5364] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  318.650889][ T5364] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  318.674141][ T5364] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  318.689639][ T5364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.709751][ T5364] usb 5-1: Product: syz
[  318.722067][ T5364] usb 5-1: Manufacturer: syz
[  318.740690][ T5364] usb 5-1: SerialNumber: syz
[  318.778560][ T5755] ftdi_sio 3-1:2.57: FTDI USB Serial Device converter detected
[  318.815564][ T5755] ftdi_sio ttyUSB0: unknown device type: 0x10b5
[  318.864472][ T5755] usb 3-1: USB disconnect, device number 66
[  318.912875][    T9] usb 4-1: USB disconnect, device number 65
[  318.989623][ T5755] ftdi_sio 3-1:2.57: device disconnected
[  319.010599][ T9274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  319.017195][ T9274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  319.045281][ T9276] FAULT_INJECTION: forcing a failure.
[  319.045281][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.087286][ T9274] vhci_hcd vhci_hcd.0: Device attached
[  319.097234][ T9276] CPU: 1 UID: 0 PID: 9276 Comm: syz.3.1129 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  319.097268][ T9276] Tainted: [L]=SOFTLOCKUP
[  319.097276][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  319.097289][ T9276] Call Trace:
[  319.097298][ T9276]  <TASK>
[  319.097307][ T9276]  dump_stack_lvl+0xe8/0x150
[  319.097340][ T9276]  should_fail_ex+0x412/0x560
[  319.097367][ T9276]  _copy_from_iter+0x1d3/0x1670
[  319.097389][ T9276]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  319.097424][ T9276]  ? __pfx_policy_nodemask+0x10/0x10
[  319.097448][ T9276]  ? __pfx__copy_from_iter+0x10/0x10
[  319.097475][ T9276]  ? alloc_pages_mpol+0x3c0/0x490
[  319.097505][ T9276]  copy_page_from_iter+0x220/0x2d0
[  319.097532][ T9276]  tun_get_user+0x1bf7/0x43e0
[  319.097556][ T9276]  ? tun_get_user+0x8aa/0x43e0
[  319.097594][ T9276]  ? aa_file_perm+0x50e/0x15e0
[  319.097614][ T9276]  ? __pfx_tun_get_user+0x10/0x10
[  319.097637][ T9276]  ? __lock_acquire+0x6b5/0x2cf0
[  319.097674][ T9276]  ? ref_tracker_alloc+0x35c/0x4c0
[  319.097701][ T9276]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  319.097727][ T9276]  ? tun_get+0x1c/0x2f0
[  319.097748][ T9276]  ? tun_get+0x1c/0x2f0
[  319.097773][ T9276]  ? tun_get+0x1c/0x2f0
[  319.097793][ T9276]  ? tun_get+0x1c/0x2f0
[  319.097818][ T9276]  tun_chr_write_iter+0x113/0x200
[  319.097842][ T9276]  vfs_write+0x61d/0xb90
[  319.097881][ T9276]  ? __pfx_vfs_write+0x10/0x10
[  319.097920][ T9276]  ? __fget_files+0x2a/0x420
[  319.097953][ T9276]  ksys_write+0x150/0x270
[  319.097985][ T9276]  ? __pfx_ksys_write+0x10/0x10
[  319.098023][ T9276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.098046][ T9276]  do_syscall_64+0x174/0x580
[  319.098068][ T9276]  ? trace_irq_disable+0x3b/0x140
[  319.098099][ T9276]  ? clear_bhb_loop+0x40/0x90
[  319.098125][ T9276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.098145][ T9276] RIP: 0033:0x7f2a8a15d68e
[  319.098163][ T9276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  319.098181][ T9276] RSP: 002b:00007f2a8af7bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.098211][ T9276] RAX: ffffffffffffffda RBX: 00007f2a8af7c6c0 RCX: 00007f2a8a15d68e
[  319.098226][ T9276] RDX: 000000000000005e RSI: 00002000000007c0 RDI: 00000000000000c8
[  319.098239][ T9276] RBP: 00007f2a8af7c090 R08: 0000000000000000 R09: 0000000000000000
[  319.098252][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.098264][ T9276] R13: 00007f2a8a416038 R14: 00007f2a8a415fa0 R15: 00007f2a8a53fa48
[  319.098297][ T9276]  </TASK>
[  319.380974][ T9277] vhci_hcd: connection closed
[  319.387201][ T1020] vhci_hcd vhci_hcd.1: stop threads
[  319.417130][ T1020] vhci_hcd vhci_hcd.1: release socket
[  319.434940][ T1020] vhci_hcd vhci_hcd.1: disconnect device
[  319.778027][    T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  319.955293][    T9] usb 4-1: Using ep0 maxpacket: 32
[  319.967702][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  319.983387][    T9] usb 4-1: config 244 has an invalid interface number: 68 but max is 0
[  319.996785][    T9] usb 4-1: config 244 has no interface number 0
[  320.010626][    T9] usb 4-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  320.038579][    T9] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  320.063748][    T9] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  320.088093][    T9] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  320.109446][    T9] usb 4-1: config 244 interface 68 has no altsetting 0
[  320.127071][    T9] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  320.152445][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.172693][    T9] usb 4-1: Product: syz
[  320.181225][    T9] usb 4-1: Manufacturer: syz
[  320.191524][    T9] usb 4-1: SerialNumber: syz
[  320.456541][    T9] comedi comedi5: Endpoint has wrong direction
[  320.472788][    T9] dt9812 4-1:244.68: driver 'dt9812' failed to auto-configure device.
[  320.511798][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.528823][    T9] usb 4-1: USB disconnect, device number 66
[  320.535501][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.607790][ T9287] fuse: Unknown parameter 'group_i00000000000000000000'
[  320.855878][   T44] usb 5-1: USB disconnect, device number 64
[  321.335085][   T44] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  321.497253][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.509795][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.523094][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.535784][   T44] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  321.546149][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.579048][   T44] usb 4-1: config 0 descriptor??
[  321.904751][ T9310] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  322.087821][   T44] hid_parser_main: 28 callbacks suppressed
[  322.087848][   T44] wacom 0003:056A:0000.0010: unknown main item tag 0x0
[  322.087882][   T44] wacom 0003:056A:0000.0010: unknown main item tag 0x0
[  322.090833][   T44] wacom 0003:056A:0000.0010: Unknown device_type for 'HID 056a:0000'. Assuming pen.
[  322.142177][   T44] wacom 0003:056A:0000.0010: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0
[  322.182440][   T44] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0010/input/input38
[  322.234264][ T9303] netlink: 'syz.3.1138': attribute type 1 has an invalid length.
[  322.501945][ T9303] 8021q: adding VLAN 0 to HW filter on device bond1
[  323.130915][ T9321] 8021q: adding VLAN 0 to HW filter on device batadv1
[  323.184634][ T9321] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  323.293797][ T9322] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  323.344297][ T9322] bond1 (unregistering): Released all slaves
[  323.576260][ T9328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1141'.
[  323.862439][ T9336] FAULT_INJECTION: forcing a failure.
[  323.862439][ T9336] name failslab, interval 1, probability 0, space 0, times 0
[  323.884594][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.898209][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.4.1144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  323.898242][ T9336] Tainted: [L]=SOFTLOCKUP
[  323.898251][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  323.898263][ T9336] Call Trace:
[  323.898273][ T9336]  <TASK>
[  323.898283][ T9336]  dump_stack_lvl+0xe8/0x150
[  323.898313][ T9336]  should_fail_ex+0x412/0x560
[  323.898342][ T9336]  should_failslab+0xa8/0x100
[  323.898365][ T9336]  __kmalloc_noprof+0xe8/0x760
[  323.898395][ T9336]  ? tomoyo_encode+0x28b/0x550
[  323.898420][ T9336]  tomoyo_encode+0x28b/0x550
[  323.898447][ T9336]  tomoyo_realpath_from_path+0x58d/0x5d0
[  323.898471][ T9336]  ? tomoyo_domain+0xd7/0x130
[  323.898499][ T9336]  ? tomoyo_path_number_perm+0x219/0x630
[  323.898527][ T9336]  tomoyo_path_number_perm+0x246/0x630
[  323.898560][ T9336]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  323.898587][ T9336]  ? __lock_acquire+0x6b5/0x2cf0
[  323.898624][ T9336]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  323.898670][ T9336]  ? __fget_files+0x2a/0x420
[  323.898700][ T9336]  ? __fget_files+0x2a/0x420
[  323.898724][ T9336]  ? __fget_files+0x3a0/0x420
[  323.898748][ T9336]  ? __fget_files+0x2a/0x420
[  323.898778][ T9336]  security_file_ioctl+0xc3/0x2a0
[  323.898807][ T9336]  __se_sys_ioctl+0x47/0x170
[  323.898839][ T9336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.898863][ T9336]  do_syscall_64+0x174/0x580
[  323.898885][ T9336]  ? trace_irq_disable+0x3b/0x140
[  323.898916][ T9336]  ? clear_bhb_loop+0x40/0x90
[  323.898946][ T9336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.898968][ T9336] RIP: 0033:0x7f752d59ce59
[  323.898988][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.899006][ T9336] RSP: 002b:00007f752e4e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  323.899030][ T9336] RAX: ffffffffffffffda RBX: 00007f752d815fa0 RCX: 00007f752d59ce59
[  323.899045][ T9336] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  323.899059][ T9336] RBP: 00007f752e4e8090 R08: 0000000000000000 R09: 0000000000000000
[  323.899072][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.899084][ T9336] R13: 00007f752d816038 R14: 00007f752d815fa0 R15: 00007f752d93fa48
[  323.899124][ T9336]  </TASK>
[  323.901458][ T9336] ERROR: Out of memory at tomoyo_realpath_from_path.
[  324.016774][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.384836][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'.
[  324.398442][ T9338] FAULT_INJECTION: forcing a failure.
[  324.398442][ T9338] name failslab, interval 1, probability 0, space 0, times 0
[  324.411500][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.2.1145 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.411531][ T9338] Tainted: [L]=SOFTLOCKUP
[  324.411538][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  324.411550][ T9338] Call Trace:
[  324.411559][ T9338]  <TASK>
[  324.411577][ T9338]  dump_stack_lvl+0xe8/0x150
[  324.411606][ T9338]  should_fail_ex+0x412/0x560
[  324.411633][ T9338]  should_failslab+0xa8/0x100
[  324.411656][ T9338]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  324.411685][ T9338]  ? __alloc_skb+0x186/0x7d0
[  324.411714][ T9338]  ? __alloc_skb+0x1d0/0x7d0
[  324.411740][ T9338]  ? __local_bh_enable_ip+0xd0/0x130
[  324.411768][ T9338]  __alloc_skb+0x1d0/0x7d0
[  324.411800][ T9338]  netlink_sendmsg+0x5d4/0xb40
[  324.411832][ T9338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.411855][ T9338]  ? aa_sock_msg_perm+0xf1/0x1b0
[  324.411888][ T9338]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  324.411911][ T9338]  ____sys_sendmsg+0x972/0x9f0
[  324.411927][ T9338]  ? __might_fault+0xaf/0x130
[  324.411950][ T9338]  ? __pfx_____sys_sendmsg+0x10/0x10
[  324.411972][ T9338]  ? import_iovec+0x73/0xa0
[  324.411993][ T9338]  ___sys_sendmsg+0x2a5/0x360
[  324.412007][ T9338]  ? __lock_acquire+0x6b5/0x2cf0
[  324.412026][ T9338]  ? __pfx____sys_sendmsg+0x10/0x10
[  324.412067][ T9338]  ? __fget_files+0x2a/0x420
[  324.412086][ T9338]  ? __fget_files+0x3a0/0x420
[  324.412112][ T9338]  __x64_sys_sendmsg+0x1bd/0x2a0
[  324.412130][ T9338]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  324.412152][ T9338]  ? __pfx_ksys_write+0x10/0x10
[  324.412180][ T9338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.412197][ T9338]  do_syscall_64+0x174/0x580
[  324.412212][ T9338]  ? trace_irq_disable+0x3b/0x140
[  324.412235][ T9338]  ? clear_bhb_loop+0x40/0x90
[  324.412253][ T9338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.412268][ T9338] RIP: 0033:0x7f5af399ce59
[  324.412282][ T9338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.412295][ T9338] RSP: 002b:00007f5af48f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.412311][ T9338] RAX: ffffffffffffffda RBX: 00007f5af3c15fa0 RCX: 00007f5af399ce59
[  324.412322][ T9338] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  324.412332][ T9338] RBP: 00007f5af48f2090 R08: 0000000000000000 R09: 0000000000000000
[  324.412341][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.412350][ T9338] R13: 00007f5af3c16038 R14: 00007f5af3c15fa0 R15: 00007f5af3d3fa48
[  324.412373][ T9338]  </TASK>
[  324.926845][ T5364] usb 4-1: USB disconnect, device number 67
[  324.983144][ T9346] Sensor A: =================  START STATUS  =================
[  325.011489][ T9346] Sensor A: Test Pattern: 75% Colorbar
[  325.025044][ T9346] Sensor A: Show Information: All
[  325.039410][ T9346] Sensor A: Vertical Flip: false
[  325.055076][ T9346] Sensor A: Horizontal Flip: false
[  325.055113][ T9346] Sensor A: Brightness: 128
[  325.055138][ T9346] Sensor A: Contrast: 128
[  325.055163][ T9346] Sensor A: Hue: 0
[  325.055185][ T9346] Sensor A: Saturation: 128
[  325.055210][ T9346] Sensor A: Pixel Rate: 160000000
[  325.055234][ T9346] Sensor A: Horizontal Blanking: 800
[  325.055259][ T9346] Sensor A: Vertical Blanking: 3223
[  325.055285][ T9346] Sensor A: ==================  END STATUS  ==================
[  325.055841][  T995] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  325.096175][    T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  325.178302][ T9349] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  325.205582][  T995] usb 3-1: Using ep0 maxpacket: 32
[  325.214421][ T9349] geneve2: entered promiscuous mode
[  325.218518][  T995] usb 3-1: too many configurations: 17, using maximum allowed: 8
[  325.233713][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.248934][  T995] usb 3-1: config 0 has no interface number 0
[  325.257282][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.272880][  T995] usb 3-1: config 0 has no interface number 0
[  325.276620][    T9] usb 5-1: Using ep0 maxpacket: 32
[  325.287806][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.297752][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  325.306723][  T995] usb 3-1: config 0 has no interface number 0
[  325.310116][    T9] usb 5-1: config 244 has an invalid interface number: 68 but max is 0
[  325.319907][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.331360][  T995] usb 3-1: config 0 has no interface number 0
[  325.341487][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.347018][    T9] usb 5-1: config 244 has no interface number 0
[  325.351853][  T995] usb 3-1: config 0 has no interface number 0
[  325.372458][    T9] usb 5-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  325.385811][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.396449][  T995] usb 3-1: config 0 has no interface number 0
[  325.404274][    T9] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  325.417477][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.426098][    T9] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  325.443864][    T9] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  325.455703][  T995] usb 3-1: config 0 has no interface number 0
[  325.493343][    T9] usb 5-1: config 244 interface 68 has no altsetting 0
[  325.500220][  T995] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  325.500287][  T995] usb 3-1: config 0 has no interface number 0
[  325.508686][  T995] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  325.508720][  T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.508741][  T995] usb 3-1: Product: syz
[  325.508758][  T995] usb 3-1: Manufacturer: syz
[  325.508774][  T995] usb 3-1: SerialNumber: syz
[  325.602959][  T995] usb 3-1: config 0 descriptor??
[  325.609310][    T9] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  325.623762][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.637915][    T9] usb 5-1: Product: syz
[  325.642385][    T9] usb 5-1: Manufacturer: syz
[  325.647344][    T9] usb 5-1: SerialNumber: syz
[  325.657785][  T995] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz)
[  325.690783][ T9362] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1152'.
[  325.712374][ T9356] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  325.906626][  T995] etas_es58x 3-1:0.2: could not retrieve the product info string
[  325.931105][ T9364] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  326.054358][    T9] comedi comedi5: Endpoint has wrong direction
[  326.097363][    T9] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device.
[  326.278221][    T9] usb 5-1: USB disconnect, device number 65
[  327.479453][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1157'.
[  327.573412][ T9383] tipc: Enabled bearer <udp:syz2>, priority 10
[  327.707271][  T995] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  327.865384][  T995] usb 4-1: Using ep0 maxpacket: 32
[  327.888021][  T995] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  327.910731][  T995] usb 4-1: config 0 has no interface number 0
[  327.922443][ T5364] usb 3-1: USB disconnect, device number 67
[  327.957644][  T995] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  327.997351][ T5364] etas_es58x 3-1:0.2: Disconnecting syz syz
[  328.012881][  T995] usb 4-1: config 0 interface 1 has no altsetting 0
[  328.047726][  T995] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  328.081744][  T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.109320][  T995] usb 4-1: Product: syz
[  328.119689][  T995] usb 4-1: Manufacturer: syz
[  328.139806][  T995] usb 4-1: SerialNumber: syz
[  328.195380][  T995] usb 4-1: config 0 descriptor??
[  328.318043][ T9397] netlink: 'syz.2.1159': attribute type 32 has an invalid length.
[  328.439901][  T995] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  328.441958][  T995] cx231xx 4-1:0.1: Failed to read PCB config
[  328.447202][  T995] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[  328.473268][  T995] usb 4-1: USB disconnect, device number 68
[  328.483119][ T9400] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!'
[  328.483184][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.1160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.483216][ T9400] Tainted: [L]=SOFTLOCKUP
[  328.483224][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  328.483238][ T9400] Call Trace:
[  328.483247][ T9400]  <TASK>
[  328.483257][ T9400]  dump_stack_lvl+0xe8/0x150
[  328.483288][ T9400]  sysfs_warn_dup+0x8e/0xa0
[  328.483316][ T9400]  sysfs_do_create_link_sd+0xc0/0x110
[  328.483347][ T9400]  device_add_class_symlinks+0x1cf/0x240
[  328.483375][ T9400]  device_add+0x475/0xbb0
[  328.483400][ T9400]  wiphy_register+0x1dc5/0x2dc0
[  328.483443][ T9400]  ? __pfx_wiphy_register+0x10/0x10
[  328.483467][ T9400]  ? __pfx_netdev_run_todo+0x10/0x10
[  328.483492][ T9400]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  328.483527][ T9400]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  328.483556][ T9400]  ieee80211_register_hw+0x3d82/0x4a70
[  328.483598][ T9400]  ? ieee80211_register_hw+0x18f1/0x4a70
[  328.483656][ T9400]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  328.483687][ T9400]  ? __asan_memset+0x22/0x50
[  328.483716][ T9400]  ? __hrtimer_setup+0x1b7/0x260
[  328.483743][ T9400]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  328.483770][ T9400]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  328.483835][ T9400]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  328.483865][ T9400]  ? kstrndup+0xbf/0x160
[  328.483897][ T9400]  hwsim_new_radio_nl+0xf6a/0x1c00
[  328.483954][ T9400]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  328.483996][ T9400]  ? rcu_is_watching+0x15/0xb0
[  328.484030][ T9400]  ? trace_kmalloc+0x2a/0xf0
[  328.484068][ T9400]  ? __nla_parse+0x40/0x60
[  328.484100][ T9400]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  328.484129][ T9400]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  328.484165][ T9400]  genl_family_rcv_msg_doit+0x22a/0x330
[  328.484200][ T9400]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  328.484240][ T9400]  ? bpf_lsm_capable+0x9/0x20
[  328.484261][ T9400]  ? security_capable+0x7e/0x2c0
[  328.484298][ T9400]  genl_rcv_msg+0x61c/0x7a0
[  328.484332][ T9400]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.484358][ T9400]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  328.484392][ T9400]  ? __pfx_ref_tracker_free+0x10/0x10
[  328.484430][ T9400]  netlink_rcv_skb+0x232/0x4b0
[  328.484463][ T9400]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.484492][ T9400]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  328.484542][ T9400]  ? down_read+0x270/0x2e0
[  328.484565][ T9400]  ? genl_rcv+0xd/0x40
[  328.484593][ T9400]  genl_rcv+0x28/0x40
[  328.484615][ T9400]  netlink_unicast+0x75c/0x8e0
[  328.484655][ T9400]  netlink_sendmsg+0x813/0xb40
[  328.484687][ T9400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.484713][ T9400]  ? aa_sock_msg_perm+0xf1/0x1b0
[  328.484747][ T9400]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.484780][ T9400]  ____sys_sendmsg+0x972/0x9f0
[  328.484803][ T9400]  ? __might_fault+0xaf/0x130
[  328.484835][ T9400]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.484866][ T9400]  ? import_iovec+0x73/0xa0
[  328.484896][ T9400]  ___sys_sendmsg+0x2a5/0x360
[  328.484917][ T9400]  ? __lock_acquire+0x6b5/0x2cf0
[  328.484945][ T9400]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.484973][ T9400]  ? futex_wait+0x2a2/0x390
[  328.485040][ T9400]  ? __fget_files+0x2a/0x420
[  328.485067][ T9400]  ? __fget_files+0x3a0/0x420
[  328.485103][ T9400]  __x64_sys_sendmsg+0x1bd/0x2a0
[  328.485128][ T9400]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  328.485159][ T9400]  ? rcu_is_watching+0x15/0xb0
[  328.485197][ T9400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.485221][ T9400]  do_syscall_64+0x174/0x580
[  328.485244][ T9400]  ? trace_irq_disable+0x3b/0x140
[  328.485276][ T9400]  ? clear_bhb_loop+0x40/0x90
[  328.485302][ T9400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.485324][ T9400] RIP: 0033:0x7f3e65f9ce59
[  328.485345][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.485364][ T9400] RSP: 002b:00007f3e66f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.485387][ T9400] RAX: ffffffffffffffda RBX: 00007f3e66215fa0 RCX: 00007f3e65f9ce59
[  328.485402][ T9400] RDX: 0000000004004004 RSI: 0000200000000100 RDI: 0000000000000003
[  328.485416][ T9400] RBP: 00007f3e66032d6f R08: 0000000000000000 R09: 0000000000000000
[  328.485429][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.485441][ T9400] R13: 00007f3e66216038 R14: 00007f3e66215fa0 R15: 00007f3e6633fa48
[  328.485478][ T9400]  </TASK>
[  328.579890][ T9405] Sensor A: =================  START STATUS  =================
[  328.579915][ T9405] Sensor A: Test Pattern: 75% Colorbar
[  328.579945][ T9405] Sensor A: Show Information: All
[  328.579971][ T9405] Sensor A: Vertical Flip: false
[  328.579995][ T9405] Sensor A: Horizontal Flip: false
[  328.580019][ T9405] Sensor A: Brightness: 128
[  328.580043][ T9405] Sensor A: Contrast: 128
[  328.580067][ T9405] Sensor A: Hue: 0
[  328.580091][ T9405] Sensor A: Saturation: 128
[  328.580114][ T9405] Sensor A: Pixel Rate: 160000000
[  328.580149][ T9405] Sensor A: Horizontal Blanking: 800
[  328.580174][ T9405] Sensor A: Vertical Blanking: 3223
[  328.580199][ T9405] Sensor A: ==================  END STATUS  ==================
[  328.642978][ T9400] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!'
[  328.643006][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.1160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.643040][ T9400] Tainted: [L]=SOFTLOCKUP
[  328.643049][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  328.643061][ T9400] Call Trace:
[  328.643071][ T9400]  <TASK>
[  328.643080][ T9400]  dump_stack_lvl+0xe8/0x150
[  328.643111][ T9400]  sysfs_warn_dup+0x8e/0xa0
[  328.643140][ T9400]  sysfs_do_create_link_sd+0xc0/0x110
[  328.643171][ T9400]  device_add_class_symlinks+0x1cf/0x240
[  328.643198][ T9400]  device_add+0x475/0xbb0
[  328.643225][ T9400]  wiphy_register+0x1dc5/0x2dc0
[  328.643269][ T9400]  ? __pfx_wiphy_register+0x10/0x10
[  328.643293][ T9400]  ? __pfx_netdev_run_todo+0x10/0x10
[  328.643317][ T9400]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  328.643355][ T9400]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  328.643385][ T9400]  ieee80211_register_hw+0x3d82/0x4a70
[  328.643427][ T9400]  ? ieee80211_register_hw+0x18f1/0x4a70
[  328.643478][ T9400]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  328.643508][ T9400]  ? __asan_memset+0x22/0x50
[  328.643535][ T9400]  ? __hrtimer_setup+0x1b7/0x260
[  328.643560][ T9400]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  328.643586][ T9400]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  328.643660][ T9400]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  328.643691][ T9400]  ? kstrndup+0xbf/0x160
[  328.643724][ T9400]  hwsim_new_radio_nl+0xf6a/0x1c00
[  328.643781][ T9400]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  328.643823][ T9400]  ? rcu_is_watching+0x15/0xb0
[  328.643850][ T9400]  ? trace_kmalloc+0x2a/0xf0
[  328.643887][ T9400]  ? __nla_parse+0x40/0x60
[  328.643918][ T9400]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  328.643945][ T9400]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  328.643982][ T9400]  genl_family_rcv_msg_doit+0x22a/0x330
[  328.644017][ T9400]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  328.644060][ T9400]  ? bpf_lsm_capable+0x9/0x20
[  328.644080][ T9400]  ? security_capable+0x7e/0x2c0
[  328.644119][ T9400]  genl_rcv_msg+0x61c/0x7a0
[  328.644153][ T9400]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.644178][ T9400]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  328.644210][ T9400]  ? __pfx_ref_tracker_free+0x10/0x10
[  328.644247][ T9400]  netlink_rcv_skb+0x232/0x4b0
[  328.644281][ T9400]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.644309][ T9400]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  328.644359][ T9400]  ? down_read+0x270/0x2e0
[  328.644382][ T9400]  ? genl_rcv+0xd/0x40
[  328.644408][ T9400]  genl_rcv+0x28/0x40
[  328.644430][ T9400]  netlink_unicast+0x75c/0x8e0
[  328.644471][ T9400]  netlink_sendmsg+0x813/0xb40
[  328.644502][ T9400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.644528][ T9400]  ? aa_sock_msg_perm+0xf1/0x1b0
[  328.644562][ T9400]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.644592][ T9400]  ____sys_sendmsg+0x972/0x9f0
[  328.644613][ T9400]  ? __might_fault+0xaf/0x130
[  328.644659][ T9400]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.644692][ T9400]  ? import_iovec+0x73/0xa0
[  328.644724][ T9400]  ___sys_sendmsg+0x2a5/0x360
[  328.644744][ T9400]  ? __lock_acquire+0x6b5/0x2cf0
[  328.644772][ T9400]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.644802][ T9400]  ? futex_wait+0x2a2/0x390
[  328.644861][ T9400]  ? __fget_files+0x2a/0x420
[  328.644886][ T9400]  ? __fget_files+0x3a0/0x420
[  328.644924][ T9400]  __x64_sys_sendmsg+0x1bd/0x2a0
[  328.644949][ T9400]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  328.644979][ T9400]  ? rcu_is_watching+0x15/0xb0
[  328.645014][ T9400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.645038][ T9400]  do_syscall_64+0x174/0x580
[  328.645060][ T9400]  ? trace_irq_disable+0x3b/0x140
[  328.645091][ T9400]  ? clear_bhb_loop+0x40/0x90
[  328.645117][ T9400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.645138][ T9400] RIP: 0033:0x7f3e65f9ce59
[  328.645158][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.645176][ T9400] RSP: 002b:00007f3e66f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.645198][ T9400] RAX: ffffffffffffffda RBX: 00007f3e66215fa0 RCX: 00007f3e65f9ce59
[  328.645214][ T9400] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003
[  328.645229][ T9400] RBP: 00007f3e66032d6f R08: 0000000000000000 R09: 0000000000000000
[  328.645243][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.645256][ T9400] R13: 00007f3e66216038 R14: 00007f3e66215fa0 R15: 00007f3e6633fa48
[  328.645291][ T9400]  </TASK>
[  328.654316][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.654767][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.703025][   T44] tipc: Node number set to 1248071791
[  328.985720][  T995] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  330.026518][  T995] usb 4-1: Using ep0 maxpacket: 32
[  330.052808][  T995] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  330.052838][  T995] usb 4-1: config 0 has no interface number 0
[  330.052889][  T995] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  330.052913][  T995] usb 4-1: config 0 interface 1 has no altsetting 0
[  330.067506][  T995] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  330.067541][  T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.067562][  T995] usb 4-1: Product: syz
[  330.067579][  T995] usb 4-1: Manufacturer: syz
[  330.067595][  T995] usb 4-1: SerialNumber: syz
[  330.070718][  T995] usb 4-1: config 0 descriptor??
[  330.300287][  T995] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  330.310420][  T995] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  330.335124][ T5638] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  330.415840][  T995] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  330.416218][  T995] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  330.416614][  T995] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  330.417442][  T995] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  330.463971][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'.
[  330.498128][ T5638] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[  330.511604][  T995] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  330.521505][ T5638] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  330.542406][  T995] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -32
[  330.555124][ T5638] usb 5-1: config 8 has no interface number 0
[  330.571939][ T5638] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  330.613265][ T5638] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  330.638928][ T5638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.660069][  T995] i2c i2c-2: Added multiplexed i2c bus 4
[  330.670315][ T5638] usb 5-1: Product: syz
[  330.686058][ T5638] usb 5-1: Manufacturer: syz
[  330.699782][  T995] i2c i2c-2: Added multiplexed i2c bus 5
[  330.709750][ T5638] usb 5-1: SerialNumber: syz
[  330.728133][  T995] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[  330.749862][  T995] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[  330.912139][  T995] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[  330.949991][  T995] usb 4-1: USB disconnect, device number 69
[  331.111857][ T9447] FAULT_INJECTION: forcing a failure.
[  331.111857][ T9447] name failslab, interval 1, probability 0, space 0, times 0
[  331.155100][ T9447] CPU: 1 UID: 0 PID: 9447 Comm: syz.0.1171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.155135][ T9447] Tainted: [L]=SOFTLOCKUP
[  331.155148][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  331.155160][ T9447] Call Trace:
[  331.155170][ T9447]  <TASK>
[  331.155179][ T9447]  dump_stack_lvl+0xe8/0x150
[  331.155209][ T9447]  should_fail_ex+0x412/0x560
[  331.155247][ T9447]  should_failslab+0xa8/0x100
[  331.155270][ T9447]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  331.155300][ T9447]  ? __alloc_skb+0x186/0x7d0
[  331.155330][ T9447]  ? __alloc_skb+0x1d0/0x7d0
[  331.155356][ T9447]  ? __local_bh_enable_ip+0xd0/0x130
[  331.155384][ T9447]  __alloc_skb+0x1d0/0x7d0
[  331.155418][ T9447]  netlink_sendmsg+0x5d4/0xb40
[  331.155449][ T9447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.155474][ T9447]  ? aa_sock_msg_perm+0xf1/0x1b0
[  331.155506][ T9447]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  331.155538][ T9447]  ____sys_sendmsg+0x972/0x9f0
[  331.155560][ T9447]  ? __might_fault+0xaf/0x130
[  331.155593][ T9447]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.155624][ T9447]  ? import_iovec+0x73/0xa0
[  331.155653][ T9447]  ___sys_sendmsg+0x2a5/0x360
[  331.155672][ T9447]  ? __lock_acquire+0x6b5/0x2cf0
[  331.155698][ T9447]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.155752][ T9447]  ? __fget_files+0x2a/0x420
[  331.155777][ T9447]  ? __fget_files+0x3a0/0x420
[  331.155811][ T9447]  __x64_sys_sendmsg+0x1bd/0x2a0
[  331.155834][ T9447]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  331.155865][ T9447]  ? __pfx_ksys_write+0x10/0x10
[  331.155891][ T9447]  ? handle_softirqs+0x715/0x840
[  331.155921][ T9447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.155945][ T9447]  do_syscall_64+0x174/0x580
[  331.155970][ T9447]  ? clear_bhb_loop+0x40/0x90
[  331.155997][ T9447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.156018][ T9447] RIP: 0033:0x7f3e65f9ce59
[  331.156039][ T9447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.156057][ T9447] RSP: 002b:00007f3e66f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.156080][ T9447] RAX: ffffffffffffffda RBX: 00007f3e66215fa0 RCX: 00007f3e65f9ce59
[  331.156096][ T9447] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[  331.156110][ T9447] RBP: 00007f3e66f39090 R08: 0000000000000000 R09: 0000000000000000
[  331.156123][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.156135][ T9447] R13: 00007f3e66216038 R14: 00007f3e66215fa0 R15: 00007f3e6633fa48
[  331.156168][ T9447]  </TASK>
[  331.945504][ T9466] syz.1.1177(9466): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  331.975602][ T9465] Sensor A: =================  START STATUS  =================
[  332.010138][ T9465] Sensor A: Test Pattern: 75% Colorbar
[  332.042193][ T9465] Sensor A: Show Information: All
[  332.055549][ T5364] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  332.062650][ T9465] Sensor A: Vertical Flip: false
[  332.103714][ T9465] Sensor A: Horizontal Flip: false
[  332.103749][ T9465] Sensor A: Brightness: 128
[  332.103774][ T9465] Sensor A: Contrast: 128
[  332.103796][ T9465] Sensor A: Hue: 0
[  332.103816][ T9465] Sensor A: Saturation: 128
[  332.103858][ T9465] Sensor A: Pixel Rate: 160000000
[  332.103878][ T9465] Sensor A: Horizontal Blanking: 800
[  332.103900][ T9465] Sensor A: Vertical Blanking: 3223
[  332.103924][ T9465] Sensor A: ==================  END STATUS  ==================
[  332.147069][ T9466] dlm: no locking on control device
[  332.227014][ T5364] usb 1-1: Using ep0 maxpacket: 8
[  332.238528][ T5364] usb 1-1: no configurations
[  332.238551][ T5364] usb 1-1: can't read configurations, error -22
[  332.365433][ T5364] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  332.436657][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.438493][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.441648][ T9471] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  332.516127][ T5364] usb 1-1: Using ep0 maxpacket: 8
[  332.517062][ T5364] usb 1-1: no configurations
[  332.517082][ T5364] usb 1-1: can't read configurations, error -22
[  332.517395][ T5364] usb usb1-port1: attempt power cycle
[  332.663966][ T5638] usb 5-1: USB disconnect, device number 66
[  332.680769][ T9471] 8021q: adding VLAN 0 to HW filter on device bond2
[  332.801812][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv1
[  332.853928][ T9473] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  332.865090][ T5364] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  332.914543][ T9474] bond2 (unregistering): (slave batadv1): Releasing backup interface
[  332.968971][ T9474] bond2 (unregistering): Released all slaves
[  332.990405][ T5364] usb 1-1: Using ep0 maxpacket: 8
[  333.023928][ T5364] usb 1-1: no configurations
[  333.060118][ T5364] usb 1-1: can't read configurations, error -22
[  333.235165][ T5364] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  333.307172][ T5364] usb 1-1: Using ep0 maxpacket: 8
[  333.344790][ T5364] usb 1-1: no configurations
[  333.370656][ T5364] usb 1-1: can't read configurations, error -22
[  333.424172][ T5364] usb usb1-port1: unable to enumerate USB device
[  334.396695][ T9492] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  334.417873][ T9495] FAULT_INJECTION: forcing a failure.
[  334.417873][ T9495] name failslab, interval 1, probability 0, space 0, times 0
[  334.459345][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.3.1184 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.459378][ T9495] Tainted: [L]=SOFTLOCKUP
[  334.459387][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  334.459400][ T9495] Call Trace:
[  334.459409][ T9495]  <TASK>
[  334.459419][ T9495]  dump_stack_lvl+0xe8/0x150
[  334.459448][ T9495]  should_fail_ex+0x412/0x560
[  334.459480][ T9495]  should_failslab+0xa8/0x100
[  334.459502][ T9495]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  334.459530][ T9495]  ? __alloc_skb+0x186/0x7d0
[  334.459557][ T9495]  ? __alloc_skb+0x1d0/0x7d0
[  334.459581][ T9495]  ? __local_bh_enable_ip+0xd0/0x130
[  334.459606][ T9495]  __alloc_skb+0x1d0/0x7d0
[  334.459638][ T9495]  netlink_sendmsg+0x5d4/0xb40
[  334.459666][ T9495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.459688][ T9495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  334.459721][ T9495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  334.459752][ T9495]  ____sys_sendmsg+0x972/0x9f0
[  334.459773][ T9495]  ? __might_fault+0xaf/0x130
[  334.459806][ T9495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.459837][ T9495]  ? import_iovec+0x73/0xa0
[  334.459866][ T9495]  ___sys_sendmsg+0x2a5/0x360
[  334.459892][ T9495]  ? __lock_acquire+0x6b5/0x2cf0
[  334.459918][ T9495]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.459982][ T9495]  ? __fget_files+0x2a/0x420
[  334.460005][ T9495]  ? __fget_files+0x3a0/0x420
[  334.460036][ T9495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  334.460058][ T9495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.460086][ T9495]  ? __pfx_ksys_write+0x10/0x10
[  334.460120][ T9495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.460140][ T9495]  do_syscall_64+0x174/0x580
[  334.460161][ T9495]  ? trace_irq_disable+0x3b/0x140
[  334.460189][ T9495]  ? clear_bhb_loop+0x40/0x90
[  334.460213][ T9495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.460231][ T9495] RIP: 0033:0x7f2a8a19ce59
[  334.460249][ T9495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.460266][ T9495] RSP: 002b:00007f2a8af7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.460289][ T9495] RAX: ffffffffffffffda RBX: 00007f2a8a415fa0 RCX: 00007f2a8a19ce59
[  334.460302][ T9495] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  334.460314][ T9495] RBP: 00007f2a8af7c090 R08: 0000000000000000 R09: 0000000000000000
[  334.460326][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.460337][ T9495] R13: 00007f2a8a416038 R14: 00007f2a8a415fa0 R15: 00007f2a8a53fa48
[  334.460367][ T9495]  </TASK>
[  335.261814][ T9502] syzkaller0: entered promiscuous mode
[  335.287581][ T9502] syzkaller0: entered allmulticast mode
[  335.349746][ T9503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.403171][ T9502] tipc: Resetting bearer <eth:syzkaller0>
[  335.463408][ T9501] tipc: Resetting bearer <eth:syzkaller0>
[  335.588738][ T9501] tipc: Disabling bearer <eth:syzkaller0>
[  335.824627][ T9468] Set syz1 is full, maxelem 65536 reached
[  336.057611][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.095833][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.263101][ T9517] FAULT_INJECTION: forcing a failure.
[  336.263101][ T9517] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  336.303875][ T9517] CPU: 0 UID: 0 PID: 9517 Comm: syz.2.1191 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  336.303910][ T9517] Tainted: [L]=SOFTLOCKUP
[  336.303918][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  336.303931][ T9517] Call Trace:
[  336.303939][ T9517]  <TASK>
[  336.303948][ T9517]  dump_stack_lvl+0xe8/0x150
[  336.303977][ T9517]  should_fail_ex+0x412/0x560
[  336.304025][ T9517]  _copy_to_user+0x31/0xb0
[  336.304054][ T9517]  simple_read_from_buffer+0xe1/0x170
[  336.304086][ T9517]  proc_fail_nth_read+0x1bb/0x230
[  336.304116][ T9517]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  336.304148][ T9517]  ? rw_verify_area+0x2a6/0x4d0
[  336.304176][ T9517]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  336.304205][ T9517]  vfs_read+0x20c/0xa70
[  336.304238][ T9517]  ? __pfx___mutex_lock+0x10/0x10
[  336.304264][ T9517]  ? __pfx_vfs_read+0x10/0x10
[  336.304294][ T9517]  ? __fget_files+0x2a/0x420
[  336.304324][ T9517]  ? __fget_files+0x3a0/0x420
[  336.304348][ T9517]  ? __fget_files+0x2a/0x420
[  336.304382][ T9517]  ksys_read+0x150/0x270
[  336.304414][ T9517]  ? __pfx_ksys_read+0x10/0x10
[  336.304453][ T9517]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.304475][ T9517]  do_syscall_64+0x174/0x580
[  336.304496][ T9517]  ? trace_irq_disable+0x3b/0x140
[  336.304527][ T9517]  ? clear_bhb_loop+0x40/0x90
[  336.304554][ T9517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.304575][ T9517] RIP: 0033:0x7f5af395d68e
[  336.304595][ T9517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  336.304614][ T9517] RSP: 002b:00007f5af48f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  336.304637][ T9517] RAX: ffffffffffffffda RBX: 00007f5af48f26c0 RCX: 00007f5af395d68e
[  336.304653][ T9517] RDX: 000000000000000f RSI: 00007f5af48f20a0 RDI: 0000000000000006
[  336.304665][ T9517] RBP: 00007f5af48f2090 R08: 0000000000000000 R09: 0000000000000000
[  336.304678][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.304690][ T9517] R13: 00007f5af3c16038 R14: 00007f5af3c15fa0 R15: 00007f5af3d3fa48
[  336.304723][ T9517]  </TASK>
[  336.822884][ T9527] FAULT_INJECTION: forcing a failure.
[  336.822884][ T9527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  336.836322][ T9527] CPU: 1 UID: 0 PID: 9527 Comm: syz.3.1197 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  336.836354][ T9527] Tainted: [L]=SOFTLOCKUP
[  336.836363][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  336.836375][ T9527] Call Trace:
[  336.836384][ T9527]  <TASK>
[  336.836392][ T9527]  dump_stack_lvl+0xe8/0x150
[  336.836422][ T9527]  should_fail_ex+0x412/0x560
[  336.836451][ T9527]  _copy_from_user+0x2d/0xb0
[  336.836480][ T9527]  ___sys_recvmsg+0x175/0x590
[  336.836502][ T9527]  ? ktime_get_ts64+0xa9/0x410
[  336.836536][ T9527]  ? __pfx____sys_recvmsg+0x10/0x10
[  336.836563][ T9527]  ? __fget_files+0x2a/0x420
[  336.836607][ T9527]  ? __fget_files+0x3a0/0x420
[  336.836641][ T9527]  do_recvmmsg+0x334/0x800
[  336.836671][ T9527]  ? __pfx_do_recvmmsg+0x10/0x10
[  336.836705][ T9527]  ? _copy_from_user+0x94/0xb0
[  336.836747][ T9527]  __x64_sys_recvmmsg+0x1b7/0x250
[  336.836773][ T9527]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  336.836805][ T9527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.836829][ T9527]  do_syscall_64+0x174/0x580
[  336.836851][ T9527]  ? trace_irq_disable+0x3b/0x140
[  336.836882][ T9527]  ? clear_bhb_loop+0x40/0x90
[  336.836908][ T9527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.836928][ T9527] RIP: 0033:0x7f2a8a19ce59
[  336.836949][ T9527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.836968][ T9527] RSP: 002b:00007f2a8af7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  336.836990][ T9527] RAX: ffffffffffffffda RBX: 00007f2a8a415fa0 RCX: 00007f2a8a19ce59
[  336.837005][ T9527] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  336.837018][ T9527] RBP: 00007f2a8af7c090 R08: 0000200000003700 R09: 0000000000000000
[  336.837031][ T9527] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  336.837044][ T9527] R13: 00007f2a8a416038 R14: 00007f2a8a415fa0 R15: 00007f2a8a53fa48
[  336.837075][ T9527]  </TASK>
[  337.165270][ T5364] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  337.269912][ T9523] batadv0: entered promiscuous mode
[  337.278478][ T9523] macvtap1: entered promiscuous mode
[  337.286041][ T9523] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  337.305293][ T5364] usb 5-1: device descriptor read/64, error -71
[  337.322863][ T9523] batadv0: left promiscuous mode
[  337.375614][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1194'.
[  337.385248][ T5755] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  337.448956][ T9530] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  337.470477][ T9530] bond1 (unregistering): Released all slaves
[  337.545111][ T5364] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  337.556329][ T5755] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  337.577973][ T5755] usb 1-1: config 0 interface 0 has no altsetting 0
[  337.589359][ T5755] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  337.598777][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  337.607078][ T5755] usb 1-1: Product: syz
[  337.611461][ T5755] usb 1-1: Manufacturer: syz
[  337.619195][ T5755] usb 1-1: SerialNumber: syz
[  337.628900][ T5755] usb 1-1: config 0 descriptor??
[  337.639762][ T5755] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  337.648731][ T5755] pctv452e: pctv452e_power_ctrl: 1
[  337.648731][ T5755] 
[  337.706145][ T5364] usb 5-1: device descriptor read/64, error -71
[  337.816232][ T5364] usb usb5-port1: attempt power cycle
[  337.839346][ T5755] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71
[  337.839346][ T5755] 
[  337.851820][ T5755] dvb-usb: bulk message failed: -22 (5/0)
[  337.864296][ T5755] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  337.888003][ T5755] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  337.908848][ T5755] usb 1-1: USB disconnect, device number 68
[  337.965241][ T5759] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  338.051001][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.061795][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.125064][ T5759] usb 3-1: Using ep0 maxpacket: 16
[  338.132274][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.143376][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.154197][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  338.169017][ T5759] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  338.175506][ T5364] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  338.180957][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.196330][ T5759] usb 3-1: config 0 descriptor??
[  338.206038][ T5364] usb 5-1: device descriptor read/8, error -71
[  338.276160][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.287748][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.455071][ T5364] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  338.487287][ T5364] usb 5-1: device descriptor read/8, error -71
[  338.498191][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'.
[  338.606805][ T5364] usb usb5-port1: unable to enumerate USB device
[  338.647847][ T9539] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  338.755081][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.763050][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.770473][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.778361][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.786010][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.793345][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.801080][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.808990][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.816425][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.823787][ T5759] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0
[  338.836520][ T5759] waterforce 0003:1044:7A4D.0011: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0
[  338.865239][  T995] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  338.915753][ T5759] waterforce 0003:1044:7A4D.0011: fw version request failed with -38
[  338.976291][ T9557] syzkaller0: entered promiscuous mode
[  338.989348][ T9557] syzkaller0: entered allmulticast mode
[  339.001810][ T9557] FAULT_INJECTION: forcing a failure.
[  339.001810][ T9557] name failslab, interval 1, probability 0, space 0, times 0
[  339.015082][  T995] usb 1-1: device descriptor read/64, error -71
[  339.030035][ T5364] usb 3-1: USB disconnect, device number 68
[  339.047886][ T9557] CPU: 1 UID: 0 PID: 9557 Comm: syz.1.1207 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  339.047918][ T9557] Tainted: [L]=SOFTLOCKUP
[  339.047927][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  339.047940][ T9557] Call Trace:
[  339.047949][ T9557]  <TASK>
[  339.047958][ T9557]  dump_stack_lvl+0xe8/0x150
[  339.047988][ T9557]  should_fail_ex+0x412/0x560
[  339.048017][ T9557]  should_failslab+0xa8/0x100
[  339.048041][ T9557]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  339.048071][ T9557]  ? __alloc_skb+0x186/0x7d0
[  339.048100][ T9557]  ? __alloc_skb+0x1d0/0x7d0
[  339.048128][ T9557]  ? __local_bh_enable_ip+0xd0/0x130
[  339.048155][ T9557]  __alloc_skb+0x1d0/0x7d0
[  339.048184][ T9557]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  339.048219][ T9557]  netlink_sendmsg+0x5d4/0xb40
[  339.048250][ T9557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.048274][ T9557]  ? aa_sock_msg_perm+0xf1/0x1b0
[  339.048306][ T9557]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.048336][ T9557]  ____sys_sendmsg+0x972/0x9f0
[  339.048358][ T9557]  ? __might_fault+0xaf/0x130
[  339.048391][ T9557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  339.048422][ T9557]  ? import_iovec+0x73/0xa0
[  339.048452][ T9557]  ___sys_sendmsg+0x2a5/0x360
[  339.048471][ T9557]  ? __lock_acquire+0x6b5/0x2cf0
[  339.048493][ T9557]  ? __pfx____sys_sendmsg+0x10/0x10
[  339.048538][ T9557]  ? __fget_files+0x2a/0x420
[  339.048559][ T9557]  ? __fget_files+0x3a0/0x420
[  339.048602][ T9557]  __x64_sys_sendmsg+0x1bd/0x2a0
[  339.048627][ T9557]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  339.048659][ T9557]  ? __pfx_ksys_write+0x10/0x10
[  339.048698][ T9557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.048721][ T9557]  do_syscall_64+0x174/0x580
[  339.048743][ T9557]  ? trace_irq_disable+0x3b/0x140
[  339.048774][ T9557]  ? clear_bhb_loop+0x40/0x90
[  339.048800][ T9557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.048822][ T9557] RIP: 0033:0x7f26fc59ce59
[  339.048842][ T9557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.048860][ T9557] RSP: 002b:00007f26fd3e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  339.048883][ T9557] RAX: ffffffffffffffda RBX: 00007f26fc815fa0 RCX: 00007f26fc59ce59
[  339.048898][ T9557] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  339.048916][ T9557] RBP: 00007f26fd3e3090 R08: 0000000000000000 R09: 0000000000000000
[  339.048928][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.048942][ T9557] R13: 00007f26fc816038 R14: 00007f26fc815fa0 R15: 00007f26fc93fa48
[  339.048975][ T9557]  </TASK>
[  339.445348][  T995] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  339.575419][  T995] usb 1-1: device descriptor read/64, error -71
[  339.680296][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  339.690005][  T995] usb usb1-port1: attempt power cycle
[  339.927330][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.947773][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.958892][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'.
[  340.045992][  T995] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  340.086609][  T995] usb 1-1: device descriptor read/8, error -71
[  340.315075][ T5759] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  340.345343][  T995] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  340.365982][  T995] usb 1-1: device descriptor read/8, error -71
[  340.466307][ T5759] usb 5-1: Using ep0 maxpacket: 32
[  340.476322][  T995] usb usb1-port1: unable to enumerate USB device
[  340.484432][ T5759] usb 5-1: config 0 interface 0 has no altsetting 0
[  340.498693][ T5759] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  340.516520][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.533006][ T5759] usb 5-1: config 0 descriptor??
[  340.561281][ T5759] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  340.593608][ T5759] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  340.613279][ T5759] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  340.621298][ T5759] usb 5-1: media controller created
[  340.660325][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.682632][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.690738][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  340.710778][ T9587] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI
[  340.722741][ T9587] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7]
[  340.731250][ T9587] CPU: 1 UID: 0 PID: 9587 Comm: syz.1.1221 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.742153][ T9587] Tainted: [L]=SOFTLOCKUP
[  340.746514][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  340.756628][ T9587] RIP: 0010:__mutex_lock+0x14e/0x1550
[  340.762053][ T9587] Code: e0 63 43 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d 70 67 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 12 88 f6 4d 39 64 24 58 0f 85 6c 11 00
[  340.781706][ T9587] RSP: 0018:ffffc9000322f420 EFLAGS: 00010206
[  340.787827][ T9587] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a436303
[  340.795858][ T9587] RDX: 0000000000000000 RSI: ffffffff8e217397 RDI: 00000000000000c0
[  340.803882][ T9587] RBP: ffffc9000322f5d8 R08: ffffc9000322f547 R09: 0000000000000000
[  340.811901][ T9587] R10: ffffc9000322f520 R11: fffff52000645ea9 R12: 0000000000000068
[  340.819930][ T9587] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000645e9c
[  340.827932][ T9587] FS:  00007f26fd3e36c0(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000
[  340.836883][ T9587] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.843486][ T9587] CR2: 00002000000012c0 CR3: 00000000778e6000 CR4: 00000000003526f0
[  340.851486][ T9587] Call Trace:
[  340.854791][ T9587]  <TASK>
[  340.857740][ T9587]  ? __mutex_lock+0x319/0x1550
[  340.862538][ T9587]  ? __mutex_trylock_common+0x158/0x260
[  340.868109][ T9587]  ? dvb_usbv2_generic_write+0x26/0x60
[  340.873599][ T9587]  ? __pfx___mutex_lock+0x10/0x10
[  340.878645][ T9587]  ? __pfx___mutex_lock+0x10/0x10
[  340.883693][ T9587]  ? __mutex_lock+0x319/0x1550
[  340.888489][ T9587]  dvb_usbv2_generic_write+0x26/0x60
[  340.893800][ T9587]  mxl111sf_ctrl_msg+0x160/0x2f0
[  340.898765][ T9587]  mxl111sf_write_reg+0xa9/0x1b0
[  340.903730][ T9587]  ? __pfx_mxl111sf_write_reg+0x10/0x10
[  340.909341][ T9587]  mxl111sf_i2c_xfer+0x496/0x5100
[  340.914389][ T9587]  ? unwind_next_frame+0xa6/0x2550
[  340.919523][ T9587]  ? is_bpf_text_address+0x26/0x2b0
[  340.924751][ T9587]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[  340.930229][ T9587]  ? is_bpf_text_address+0x26/0x2b0
[  340.935447][ T9587]  ? kernel_text_address+0xa5/0xe0
[  340.940583][ T9587]  ? __kernel_text_address+0xd/0x30
[  340.945801][ T9587]  ? unwind_get_return_address+0x4d/0x90
[  340.951454][ T9587]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  340.957629][ T9587]  ? arch_stack_walk+0xfb/0x150
[  340.962512][ T9587]  ? stack_trace_save+0xa9/0x100
[  340.967488][ T9587]  ? __pfx_stack_trace_save+0x10/0x10
[  340.972896][ T9587]  ? stack_trace_save+0xa9/0x100
[  340.977881][ T9587]  ? stack_depot_save_flags+0x33/0x810
[  340.983371][ T9587]  ? stack_depot_save_flags+0x33/0x810
[  340.988845][ T9587]  ? look_up_lock_class+0x57/0x110
[  340.993985][ T9587]  ? register_lock_class+0x31/0x2e0
[  340.999212][ T9587]  ? __lock_acquire+0x6b5/0x2cf0
[  341.004183][ T9587]  __i2c_transfer+0x79a/0x1f70
[  341.008971][ T9587]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  341.014812][ T9587]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  341.020658][ T9587]  ? i2c_transfer+0xc8/0x2d0
[  341.025266][ T9587]  i2c_transfer+0x1cc/0x2d0
[  341.029786][ T9587]  i2cdev_ioctl_rdwr+0x460/0x740
[  341.034749][ T9587]  i2cdev_ioctl+0x6a5/0x880
[  341.039271][ T9587]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  341.044333][ T9587]  ? __fget_files+0x3a0/0x420
[  341.049034][ T9587]  ? __fget_files+0x2a/0x420
[  341.053650][ T9587]  ? bpf_lsm_file_ioctl+0x9/0x20
[  341.058612][ T9587]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  341.063738][ T9587]  __se_sys_ioctl+0xfc/0x170
[  341.068353][ T9587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.074523][ T9587]  do_syscall_64+0x174/0x580
[  341.079126][ T9587]  ? trace_irq_disable+0x3b/0x140
[  341.084197][ T9587]  ? clear_bhb_loop+0x40/0x90
[  341.088892][ T9587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.094799][ T9587] RIP: 0033:0x7f26fc59ce59
[  341.099233][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.118862][ T9587] RSP: 002b:00007f26fd3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  341.127296][ T9587] RAX: ffffffffffffffda RBX: 00007f26fc815fa0 RCX: 00007f26fc59ce59
[  341.135285][ T9587] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006
[  341.143281][ T9587] RBP: 00007f26fc632d6f R08: 0000000000000000 R09: 0000000000000000
[  341.151274][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.159261][ T9587] R13: 00007f26fc816038 R14: 00007f26fc815fa0 R15: 00007f26fc93fa48
[  341.167258][ T9587]  </TASK>
[  341.170306][ T9587] Modules linked in:
[  341.175401][ T9587] ---[ end trace 0000000000000000 ]---
[  341.227046][ T9587] RIP: 0010:__mutex_lock+0x14e/0x1550
[  341.232509][ T9587] Code: e0 63 43 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d 70 67 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 12 88 f6 4d 39 64 24 58 0f 85 6c 11 00
[  341.254381][ T9587] RSP: 0018:ffffc9000322f420 EFLAGS: 00010206
[  341.260817][ T9587] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a436303
[  341.271716][ T9592] xt_hashlimit: size too large, truncated to 1048576
[  341.293555][ T9587] RDX: 0000000000000000 RSI: ffffffff8e217397 RDI: 00000000000000c0
[  341.314534][ T9587] RBP: ffffc9000322f5d8 R08: ffffc9000322f547 R09: 0000000000000000
[  341.329001][ T5759] set interface failed
[  341.361880][ T9587] R10: ffffc9000322f520 R11: fffff52000645ea9 R12: 0000000000000068
[  341.382035][ T9587] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000645e9c
[  341.399301][ T9587] FS:  00007f26fd3e36c0(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000
[  341.418037][ T9587] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  341.433645][ T9587] CR2: 00007fae0e14e440 CR3: 00000000778e6000 CR4: 00000000003526f0
[  341.448798][ T9587] Kernel panic - not syncing: Fatal exception
[  341.455541][ T9587] Kernel Offset: disabled
[  341.459883][ T9587] Rebooting in 86400 seconds..