last executing test programs:

2m10.940287792s ago: executing program 0 (id=357):
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000340))
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000280))
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x3, 0x43}}}}, 0x11)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r9=>r8}, './file0\x00'})
r10 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x6000)
quotactl_fd$Q_GETQUOTA(r10, 0xffffffff80000700, r11, &(0x7f0000000180))
ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f00000000c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r11})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x7}}, './file1\x00'})
syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00')

2m10.851818864s ago: executing program 0 (id=358):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
connect$netlink(r1, &(0x7f0000000cc0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab50200000000000a", @ANYRES32, @ANYRES8=r0], 0xfe33)

2m10.845772474s ago: executing program 0 (id=359):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec9", 0x3c}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412", 0x41}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c03488", 0xc46}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79b", 0x84}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m10.773947406s ago: executing program 0 (id=360):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x4}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)=ANY=[@ANYBLOB="000b00e4"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0xf, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = userfaultfd(0x80001)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110})
ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2m6.819769372s ago: executing program 0 (id=372):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10102)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
accept(r0, &(0x7f0000000180)=@alg, &(0x7f00000000c0)=0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x280030, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})

2m6.767095341s ago: executing program 0 (id=373):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x1000000)

1m51.63145485s ago: executing program 32 (id=373):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x1000000)

50.155924427s ago: executing program 1 (id=854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x400, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}]}, 0x24}}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x0)

50.067854415s ago: executing program 1 (id=855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x2, {0x0, 0x1}, {0x61, 0x2}, @cond=[{0x5, 0xffff, 0x8, 0x8003, 0x3ecb, 0x9}, {0x0, 0xd83c, 0x4, 0x4, 0x1ab1, 0xe00}]})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="000903000000826604"], 0x0, 0x0, 0x0, 0x0, 0x0})

48.460364077s ago: executing program 1 (id=866):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e31"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d38bed20d96e25004028ffffff060a02120001000000000904000078cafb1a00cc2f99a778519f2a72ffd7b52824235cad261b5b96fb5ae66debdb2da68e41303670e3b5f29b3253de9c89dc0c857f9c41c8535c3d0de285a8caee6f044e0bd6d373dcab03c6c3a9a02926aada09bcf33f3131c516a99d9d144d00"/136], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet(0xa, 0x801, 0x6)
listen(r3, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b40000001900010006ffffff00000000ac14142c0000000000e4caad7cfa33da4571cbafa1847a165b00000000000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101030000000000"], 0xb4}}, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0xd0, 0x4201, 0x0, 0x0}], 0x1})

46.557837253s ago: executing program 1 (id=879):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c050}, 0x8080)
msync(&(0x7f000085d000/0x3000)=nil, 0x3000, 0xc)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x45, &(0x7f0000000140)=0x8000000, 0x4)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES32], 0x0)
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000540)={'macvtap0', 0x32, 0x31}, 0xb)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x8000)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={<r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000380)={&(0x7f0000000480)=[r8, r9, r8, 0x0, r7, r6], 0x6})

43.446636701s ago: executing program 1 (id=899):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28981, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b10009"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
close(r0)

42.047684937s ago: executing program 1 (id=907):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="bb", 0x1}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000300001802c00018014000300fe800000000000aa45"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x6, 0x0, 0x9, 0x2b, 0x2, 0x3, 0x0, 0x5, '\x00', 0x7, 0xd})
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
close_range(r8, 0xffffffffffffffff, 0x400000000000000)

26.876118902s ago: executing program 33 (id=907):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="bb", 0x1}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000300001802c00018014000300fe800000000000aa45"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x6, 0x0, 0x9, 0x2b, 0x2, 0x3, 0x0, 0x5, '\x00', 0x7, 0xd})
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
close_range(r8, 0xffffffffffffffff, 0x400000000000000)

3.249077937s ago: executing program 2 (id=1113):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000080), 0x4)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x8500017e)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0605122004"], 0x9)

3.151604037s ago: executing program 2 (id=1114):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100002100000000000010000000300001801300030000000000000000000000ffffe0000801060002000000000006000100e7ff0200060004"], 0x44}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7fc}, 0xe)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0xc, 0x38, {0x38, 0x2, "7406d36f3e9fcc3797083025e6fb19012141143d487abe80be757ce186c397e073283d335c2fffbe8851c1aa57e00feebb00c19a242a"}}, &(0x7f0000000240)={0x0, 0x3, 0x44, @string={0x44, 0x3, "69f2c2a803e258afc41522846de0d1e8b8abf616611cd3796dd03bd361a62f1bb17e91741d787d55344e5dad331c1a4c94082f2044040447353deea246fb279c0987"}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x20, 0x30, 0x51, "dda2c07bc023a4317bf4a514aa9211a13ba6fb89c753ca36661e633df7409368ff1db90046528fc8bd559f3cba9bed03eb432cafe85068abfad00526aecfce4c0855468d26617143f71903a104a7f2be9a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0xefaa}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "f051bfbd597eb181a4d5a882491873a8fa649229d604343853fcba59cb41a98fbfbce63419419ec490e0486dfe88b4"}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000100)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42287dd7}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000401}, 0x44084)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.151421517s ago: executing program 4 (id=1115):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept$inet6(r0, 0x0, 0x0) (fail_nth: 7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10400, 0x120)

2.334920841s ago: executing program 2 (id=1119):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={<r1=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000280)={{<r2=>0x0, 0x665, 0x6, 0x7, 0x200, 0x2, 0x1, 0xb78f, 0x2f1e, 0x3, 0x0, 0x7c0, 0xfffffffffffffffe, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001440)={r1, r2, "381a229708e750b44343356bd01b4e7500a628793e244e44646e163bcdff4febc5bc312f5f35db26cdf47ed35b50dae860092c75728f29749a4cde2c1a2e7634aa249d0f253a7f8c3ee3b86ddca3ef1f6b72ef55273ea04edf211dde12749096a38ead7a79be078bd661369656e5b1724e39252f7a8a0e510b87306516647dddb7e64c102107fa70ad36415b0c0ef25b6695a86104d5b674f43bd9454bf06a9a32582c638435877751069f7adb97da29f4a9c2250adf3a89a6c77261d3afacd0b888ad1be02dfb68d0d97bf59e2bad6a1ad25a0f87b5928503971d41d282ed84a3b47781cfa9a32469c5f4eaf11a5dc1ecf6f4bebd33af430a2d6c3e0e7a85a1", "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"})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = userfaultfd(0x80001)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x13, 0x0, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x107003)
r6 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfef2, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffd}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {0x3, 0x0, 0x9}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8)
close(r6)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000200)=@urb_type_interrupt={0x1, {0xf}, 0x0, 0x3, &(0x7f0000000340)="1dd0e3fd0f0348340fd0fdbd530e1fc1f6281d606c99edcf43c2545128057ba27267f205025c42859c251963f49f830218443c60775a973b34bbc8ad26d8d0018069a2533674", 0x46, 0x4, 0x5, 0x0, 0xffffbd0d, 0x1, &(0x7f0000002440)="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"})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x8000, 0x20000, 0x0, 0x200009})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)
syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x82, 0x0, 0x419}}}, 0x7)

2.289841201s ago: executing program 4 (id=1120):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e3659902362b})
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)

2.212927396s ago: executing program 3 (id=1121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000582c00fe8000000000000000000000000000aaff02000000000000000000000000000167000000000000008902907800000000fc00000000000000000000000000000000000000000000000000ffffe00000010105a3da6f0a80f08715f2cee9a42f4cd4531247b8b602dbcf4c13af8328b24b93e843302863ca284e5b8de5"], 0x8e)

2.14361461s ago: executing program 4 (id=1122):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x6, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x91e1516366f54ac2)
accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x800)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xc987, 0x2, 0x688acb35, 0xfffffffc, 0x15, "47b3a3d0e1d263a71266fa65a4025f6b32c670"})

1.977734242s ago: executing program 3 (id=1123):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xeb9}, {0xa, 0x4e20, 0x9fa0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0xffffffffffffffff, 0x3ff}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x6, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r1, 0x8}}, 0x48)

1.911099256s ago: executing program 3 (id=1124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x2a, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, [{0x1}]}}}}}, 0x60)

1.727748181s ago: executing program 3 (id=1125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x1000000, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x20004000)

1.68892617s ago: executing program 3 (id=1126):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfc, 0x7}, {}, @raw32={[0x0, 0x0, 0x80000]}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f00000000c0)=0x400) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x1980, 0x0) (async)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x9, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) (async)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0)

1.588522168s ago: executing program 3 (id=1127):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100002100000000000010000000300001801300030000000000000000000000ffffe0000801060002000000000006000100e7ff0200060004"], 0x44}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7fc}, 0xe)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0xc, 0x38, {0x38, 0x2, "7406d36f3e9fcc3797083025e6fb19012141143d487abe80be757ce186c397e073283d335c2fffbe8851c1aa57e00feebb00c19a242a"}}, &(0x7f0000000240)={0x0, 0x3, 0x44, @string={0x44, 0x3, "69f2c2a803e258afc41522846de0d1e8b8abf616611cd3796dd03bd361a62f1bb17e91741d787d55344e5dad331c1a4c94082f2044040447353deea246fb279c0987"}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x20, 0x30, 0x51, "dda2c07bc023a4317bf4a514aa9211a13ba6fb89c753ca36661e633df7409368ff1db90046528fc8bd559f3cba9bed03eb432cafe85068abfad00526aecfce4c0855468d26617143f71903a104a7f2be9a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0xefaa}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "f051bfbd597eb181a4d5a882491873a8fa649229d604343853fcba59cb41a98fbfbce63419419ec490e0486dfe88b4"}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000100)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42287dd7}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000401}, 0x44084)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.36787751s ago: executing program 2 (id=1128):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="14", 0x1}], 0x1, 0xfffffffd, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000021733a9d6732f5f3af5c7aaa19978342a8ca4fd9cde25eeb693496fe963399aad9588ad3ed24749c531916231d50a07b2354900ea3b013da0881b2338c86280884dd6c41191138cf095cf82492bbe6745670fa686b2e796a3a6551706b21dc8691fee4b145e9361dce98b2a0bf42ad6ae8106ea166aa71889d6c0fa99b510ce2f15c9e265c"], 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x44)

1.356535172s ago: executing program 2 (id=1129):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept$inet6(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000002940)={0x18, 0x3}, 0x18)
socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10400, 0x120)

1.267587114s ago: executing program 4 (id=1130):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x2, 0x84, 0x0, 0x0, 0x5, 0x20000002, 0x1, 0xd3, 0x6, 0x0, [{0xbebdf07f, 0x40000008, 0x2016}]})

1.119179405s ago: executing program 4 (id=1131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880)

1.028952306s ago: executing program 5 (id=1132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0xf0ffffff, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0)

934.785159ms ago: executing program 5 (id=1133):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x1000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

779.880973ms ago: executing program 5 (id=1134):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) (fail_nth: 8)

496.773113ms ago: executing program 5 (id=1135):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x700)

379.984131ms ago: executing program 5 (id=1136):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x8}) (fail_nth: 4)

302.249107ms ago: executing program 4 (id=1137):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r3, 0xb97534d5fe9704cf, 0x4, 0x200, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3ff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x602}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "4ac0"}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0xfffbff7f, 0xd968d5b908ac0cde, 0x0, {0xf73, 0x8, 0xfffffffc}, {0x350, 0x20002}, {0xf4ef}, {0x2000000, 0x0, 0x87fe}, 0x3, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
io_setup(0xfff, &(0x7f0000000000)=<r6=>0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x5332, 0x6, 0x6, 0x9, 0x2, 0xc, 0x6, 0x0, 0x10001, 0x5, 0x5, 0x3, 0x312, 0x3, 0x4, 0x3], 0xeeef0000, 0x240})
r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0)
preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
io_submit(r6, 0x4, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18da, r5, &(0x7f00000010c0)="ac7a3ae6f34dc7ede5a141ee9e5a0fd9ae8618d3414b0bdb4c4370a80887bd7c73b2fd42f65e537ebd1fd1c9bbdf1d5b1f50c71609fab8b870819049be346b3260bc1683aed60e7d129ded06fd1dece2fa1660454676549f92e8790d382911d357b65f93644d20b176411f7a6db9f349149533088c1d19fc4cb6212a1386951e14f01bdcdbd6f2cbe48f52ce5a8785b4ab4a51d5c3a05a7ae306728e331b67003ae7753d2ec1ae9bfacd2fe9ee4bc69389fe3510eca081653c37767ac9a21e53e811df0e149b038130e21946095ca0b26c955208a54d3467d3eccd5af85d9035862a510e616200ed938055564e285f6c4d430f21fe98fac95e46c3c0ecdf2b4728a0a649f64081d8577f18454c58e968e537c5d9b01aec9af22bae36320f8327f616ee21a655875c0c1ac8711c461645a1e0daf028b01aa76d41011eea78a78bb0b8d9c3f0d8701c6eb74c141bc537ff619990d1248298224e52d087021be9bb42a9b2674d5be03c3f8c3b670d12a1e2ba70aecd0c228f87a3e61cbd59e2e9517d4930df60f91d7cdbd1a8c42bd681de042aa847ad554803002500bc2a2e26e48cdf774522e3847d2a037fbaf3a8291c044b5c405cf393977c8f9c75abb1f228c5de8cb84d33ced7fa2d06cedeb0d5d6ae1c2bd82d6ef521a1b20061810b0534ca3213c5e31e8bb9355d3dc3455c7259759b0d0632fce25ec65e85894ee1ff918faa59736859624676bd0e03ba073d4dbc9f66a2f0712aa7e68fa6b8c8e795ca57f3f00ca68c4e9421ecf619e8b608cb18ac9f38d16dc199ecd78dc15275966f51e3c76bc65b36e163aa426ec200ec37962ec3c6dc31e9bfa610f640697bade3799b7f831eec6f7ec48f406ee211f497425b7df4b359372d80af3543eeca8e1595b7b2a52c5fa04da774b0d79c773d09a2445f39d919b28dfd6c1b66f99709e19b1aad561dbcd25ba0ed2cfdd9171121fbec24bebb77831666a411b7e3047b80d364dfc08d7da50ad99b0a0a2e9efb06bdf8e619d5662f1b8e1c57195474cfe9c7c9f806ae1f3adab1f4815be807c0b17f1b08d6663e996fc0a7eb70dead5dad41ead93cc8e197dd2bf54774d41574888fc5ba4514e9be9f7eed37d7a6d95a255f9cae7b3ef3f35b8affd6af146899015fa9fc965adbf42280ef47ee7778ec8ff669bb019bd25b5519422edceab2e2e4b36104c503c1259527266a2f4eed4815d73c78b9075e09403fbe56429852e4921a3f74309e0b8661a972c6737e6639eaae307c244a3bb643474821518a050f30f56fa8da5546060d8ea8929a504302eec17c0850124a3520454a80372c31966a7b2becd2d9b6de20ae71752e18c3d253caae5372199cb3c3a3a10b1eca85e636f08232ebe21c0548f1f65863ec18f07850eed84712f3e30bec36e182f0d652d4146f11a65bf7223a00b1b0ab890feb4c90f7612bbaeabbc3734061de1807ca61f89d2a35305c79136cc86af225c73d39671c7d0879e3c1b9cc84bb16887bb009418a74dbea3315940d8a6157bb1a9d6434736fe0b5e595297fbeb28d4be9d2612b0470eefd7d3121b39ecb7dbde943718e0cd56d1e66089c52352a25368b3b05b43ede692b3105efd0e5761f2a2e1d3b860b4b1bbced9fa84ea08cae2a873151974e684e920bd4a31bd50974c721746114bddb6f368c276ab8d117549b3d7b981d8443e581fc09db313b8be9b2d9140f06faae0abf4834a2b0efe057400d5a15af48a207cb50c93473d8e5fae9589a7ceea2275e4a8369acbda1cdf5da2a2193bdb028b160c480e177089ddb19f9b8edefc2c62f632e53c3272caf8ac39a30e739b4b51ca23e00226884f844e394879dc5d75eb7b2d56753af77d3999120cdfb324d35526ea8fe4fd6249e108a586577d33a9123fb240ec6888ee5495e7bcb1d7f3d4ad51e4e5556d16b2e903aa896134b044038cf945b5c17fa13a0923272d3374952e957dd0586898a0cd0ff91b19aa162b91d5d1f8d8fefa6958b88c4307de583a1a5f7b10f2097958e0327161728ba524f0321ee60ede549b1f326a90528c21982df305b214e9122006542e45252d4963e4a438b3c489a877d243c976c2f4e7b2a4c1545a9de1576625ebd79f809452c6dec428294117d952a6ffff98890eb977d7da45191f8544f3c1e38dd19e20fc6003bfb96e5c52bf73fc90cb0633318db949fe5414f01349d5bc74d96eefb968c26cfb95602a3c374a3c2c9c9cb7820f8c340d4b71d584908dabfb182991ee90a95484552b3eb86b7a68ee7dd2c79e6e4e1ed1b1e5f0e78393a6f594ac75b15e06904c0da12c896334a4798050a8fb07639709549a8c82582ed3867cf6cd9f0b451cbcd1897d20b45a0954caf9bf225163ea45172b39a1a50fe50a5252865f05563578b8dda8fde4a23daedf978422c2b404c815210138cb1c76fdd6a1b94349786a14538f77484bc4837f07de90691b3ff6a7c487b0c2d10a6a8525ad3f23b9a96e739b5eef87ea1258de6efca8f57ae7a00f81626b0e68609f290745a9c4dc706b309ccbc49c96ca4d85bb375376752ac823705721601b6e1f1a321bf6a2dc7e553e81ae400f114f59bd5a8ab9d443893f220828a757ca86f8c1a6445b91b47560ec43d63dafa16fdb5ead31557ce12bcf50cc6332af42393c0879fca1b3bad13441b6ee2863b27c4fd0a89310110cafd0b43c0fc7a4d8e772ddb1fa3d0670e2deb45fc9c583ff81b7f5935cb9f272507c073cc686df6a9562bedb2266e2db63a39c85f383c28009a5dcb7043a8a23a2b81a5e1e3acfa0ddb5d82840cc4466c6410e1ddaf280ea05159a2503e53de8681dd7e4abf81fe918d47c8a2178a694ad05c8909d86bb3c29b2e6d82d7b875dd408e9849d6868e0ca54ca3fd1885e1a7b29cee58040bf9987a309c969c1cb5cfa6370f2a1b4e6bc9d1e6bcad064acda69def0d734d0c9e7fda1e890f500ee55814fb9991f8fa775473b214cdb1f0cab125d575b494080aa7186f85a3f4315098c4fb5f5536b82a3734369203b6241ecf4db88cf28c5e2233ed9f70ebd2e3f6d04cf9856b70162496ef1293f884c88d379ab6624564c0eff15041f7a698c3c82a4f02a36355e56019b8cd01f253b5a9bc6e4d1226b8ee259c383d08192b0d530ea45558276eb076626ff4a793cc58880b3feb5cb7aa79df445473628d13bd3a7fddf9598aa5d5abfcd8b9290e292e072f514ff6151ccac69f26d9f664943da1a7ee21cf3da3f2bcb113405495e7c70dd934cc1b73d8b4d0b1e792451c4044b022f433efff6c91bdc108589bb82bd1b43c71eb6f079f9f0ab400c264a5b497fecd101a3889807b1d44272d785c018ca97c404eb1878a769b9ce15aa2df5c099e45b11eec9b647a8e1499a8e3e04042f8574ccdc71c9eff24cf0f90e9083a1d77ca5184bdfe088d15042590c1305500aadc2334146a6b622b1931c4ba3e96c9012129ba39edbbe0685e7e6ba63c60b30a1e381340063e4ffc5dcfa2a0164a22c766b27b134551ac12b85cbfdcd23467ba6652bfc43aaea9d83b5f797dd994dc23861783ab5932f80757723093055d7acb686b23f6f5e2e4cec77b31eef4ae51540eefc41b5e8312741cca138b1dd2c2f3dbe1b781087accf2560edeb1983d8902395bd9adfe20d3c2ab0e6a1652e086b11432d5119e277b310f1aaaa8da0b09573619f0352f889d3097fbc9647b301de2cf2a992410f4333eb87394af4f157769e90ad997870d188341e88558ba643eb050e1a077f0a75e130945363f80fdf5129f8e5bf8e26b09c8f5b6cb3df05308c415b95ff70b0aa60cf022ae9f123e3b59bed8bdc60c64e2b69fcc45916c2e607a26f79e6fcdf5c68881cd030e9b6eb14bcf19986976bf6986319361a6563b68f2141e3e6da0a474dfff58cdabaeb62a370760d82b3451d23fc74df37202a12213bd3d7ac9101921e9589969d72bc925a51b6a0f874bdb43fe86947c2442a9570ec35c02ebd34da8afac59d22cb72b25d1973039dfefb9f02e624bb6727df1c6954224b7915877ff18171f71f72a0f1a068f0e8b60b674d2770ac843b9d2091338a8850f0652f94e3c5671f22df9b9d1c5d1f1f9d7c803b0e551f9c82a961723509eb6264d6f3cdec96bd32ea198ff1560a484d09fe381641f1b61e0ee6a51b131838afe62988175bec9b81a70f28851d5d42ff2e9788627eb341d9b0aa19ee7b79a0c89455083007e97f96e25ee75cda62c45e439d44884db2229b1e44edd6709989de1b50775e33995c17d6ae174b3324498db3d752eb978048f19fd00af60075b3b744396977cec708b073109cba2443c78776784f1828067c33fa637ded444dd2fab16c69bd8a0ce2935936e6570bdc03e6f473d805f600c6c35a5611ee58c2457f4738d98912b8edbc88f0659144dadc5d010c3507f568a47b27754a4db8372b20481439b4299f23cb63768235d22286da16e89646e6b066afd1000bbacada68972015194f607f430aa6068201a5cac7864246d43fe8ad8d5ea80811eb129937a956fc75fb3733ac60abafa73a9e84b73c02dea35b20db9921c96a1106b20ff6e5303ddabc5e05fc9ccea1f1908d1c273a41153680741671c5129892c261d87ccbcd4e0325b8e20586932e144f00697f396c320113ed9ef61ff6ebde938c8eca390e6481c3ba99ab32f2b3b3b081fdf180281a7784d1cb8b61d74606a46c93cdbe7445d4a79034d6bd2db14e92aa35e769821d52f21093430d08bcfd75785dcffab10ebb15f5fb8d917e45b8c55ecedfd8229c560d75878814ecb31296cd28a278ee029e439d7eff31edd417a4af6ee813a4f5d869ac82e6f60f9e1bf31217e2a5975bb31131ac4d997b43b268d44dee06862ba41c35852aba228512fb65c806309bc9c6c5b16a94acc148f9c2540371fdb4ce499d6bd3b7d80dcc40dac516d5b7912273972097facc0164f73d53d12f8451b068e9116da27f36302426aa787e8c1144d3131721596bde9299e8dcba1586ca056455277f00147d3849376739096552e4595cf07910ad2f1f70fbf0cf8de8d086d70076fc735bdd1ca23f3a22b695e5205a7f7e41527db0bea2d10720e2015bb8de1259b2dff4f20b97bf2c2413f2b9f97b868b7cbb29ab10082099b1db83d213ea52964efd2d61793bc93b128624019c0414c48e480b35796d36da94a018e13d1ab64a19b2f9956bc15bf2826999700eb352768f26302cf5e527df25fee7296f51b921f86fa7ff8d320b2b19cd354f6fa4b6d52341b3ba881667c63225074cc0c1cc3e55d5bc121b96b2098f33ca11ee72633c9f9f2b5e8ff222fd5bf0ec9037796a479737cbcc0d2fc207cc684fa96b0fd95864785885b841c9f161feb0d2e574cbb0947ff163f08dac8214537c833ff0ab88c3efabc41462d7bc1e750c44064f7a3899aaea173026230bf7b4be26ab4325166389320ddead2f4b516d07ab1bb0ce95f0067516538104b973fcaf5f5eee86f46f396313165a9828ab6d7034bb1d5925819ca20589b394bf63fad9f853d794fc4171efd12539cdb73c92ae3e7920e5e04fe01f513c1dd9da9853146ec5e4aafb20d6d0aae3fe7b81d9ebfba6d2f0c3e5b98c2efd1a7b6d75af20afe5d47557a4bf99ddeda84290da0ae1ffc1957d2a4e6d482e66cd2ee38078bb1309eb146f4b2d97c39039b03610e192d8cfea582ef61385aec96a83143adff188384348ab069520a31f8e65f41fe5c2fe6b4d87355e832e9adda8a3a791f7928a7aa9bb26264541414a6db2e1b00402183accdd5c7f40abfd6804ff37e", 0x1000, 0x100}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5, r2, &(0x7f00000020c0)="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", 0x1000, 0x9eeb, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0xfffc, r0, &(0x7f00000001c0)="475834171d2fc530f949e0c0ec2c8d022f60266c0bb03cc617c3a154905074fd4556bff56555d4336766bb7c278f06818fa4d6df3fb3862a628fd0b5f9b295e947e4935a8d4d0006b67201865ae7e2ff34c8fd1333bfa5f32ff6f463a7d545e652cf92501872417b777e0caf56b5a0918ab1bdc57c2bf4f22a81d0942f3fea3f7d24c80500805fbb3e82ce2898f16c270de949151a6d772c331cd290d3686bcd5658e31166d8704782b1f66c357c44904aa5f4c9f1d11b6087f04cca14e671174af39cef7b", 0xc5, 0x400, 0x0, 0x2, r9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000000340)="99aca440ea9d849a63ed753ebc4c3b53eb30abddcaea4367c5859d757d4d26596878fe8e0d1062aaa68135bb2a37e55c055131988b", 0x35, 0x2, 0x0, 0x3}])

301.800751ms ago: executing program 2 (id=1138):
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x9}}}}, 0xf)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000ec0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(cbcmac(cast5-generic))\x00'}, 0x58)

0s ago: executing program 5 (id=1139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000040)="b80500000066ba4000ec0f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x10000001})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x5, 0x2, 0x1, 0x25, 0x9, 0x98, 0x96, 0x1, 0x3, 0x2, 0x6, 0xff, 0x3}, {0x8001, 0x7ff, 0x2, 0x3, 0x3, 0xff, 0x30, 0x9a, 0xa8, 0x4, 0x7, 0xc}, {0x400, 0x2, 0x1, 0x3, 0x86, 0x2, 0x3, 0xc9, 0x4, 0x6d, 0x5, 0x4}], 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x34, r6, 0x101, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b3"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x4850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000003797ed6b9488020000002400048020000180070001006374000014000280080001400000000908000240009da0240900010073797a30000000000900020073797a32000000f9f35f2a001100010000000000000000000000000a1d0f1a224c18385a5cfa39b2969f426de724769214024524"], 0x78}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200840, 0x0)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, 0x1c)

kernel console output (not intermixed with test programs):

892] em28xx 3-1:0.132: board has no eeprom
[  195.427520][  T892] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  195.435432][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  195.441699][  T892] em28xx 3-1:0.132: analog set to bulk mode.
[  195.449257][ T5889] em28xx 3-1:0.132: Registering V4L2 extension
[  195.457493][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.472292][  T892] usb 3-1: USB disconnect, device number 55
[  195.485068][  T892] em28xx 3-1:0.132: Disconnecting em28xx
[  195.492820][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  195.514507][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  195.533718][ T5923] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  195.545055][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.561720][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  195.572329][ T5923] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  195.580009][ T5857] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  195.582031][ T5923] usb 2-1: Manufacturer: syz
[  195.594037][ T5857] em28xx 5-1:0.132: analog set to bulk mode.
[  195.608502][ T5923] usb 2-1: config 0 descriptor??
[  195.625151][ T5857] usb 5-1: USB disconnect, device number 9
[  195.642529][ T5857] em28xx 5-1:0.132: Disconnecting em28xx
[  195.649498][ T5889] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  195.662031][ T5889] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  195.672321][ T5889] em28xx 3-1:0.132: No AC97 audio processor
[  195.684264][ T5889] usb 3-1: Decoder not found
[  195.689035][ T5889] em28xx 3-1:0.132: failed to create media graph
[  195.695410][ T5889] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  195.705582][ T5889] em28xx 3-1:0.132: Remote control support is not available for this card.
[  195.714450][ T5876] em28xx 5-1:0.132: Registering V4L2 extension
[  195.827369][ T5876] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  195.836548][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.846407][ T5876] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  195.848473][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.862779][ T5876] em28xx 5-1:0.132: No AC97 audio processor
[  195.881760][ T5876] usb 5-1: Decoder not found
[  195.886388][ T5876] em28xx 5-1:0.132: failed to create media graph
[  195.910314][ T5876] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  195.931311][ T5876] em28xx 5-1:0.132: Remote control support is not available for this card.
[  195.943248][ T5857] em28xx 5-1:0.132: Closing input extension
[  195.957523][  T892] em28xx 3-1:0.132: Closing input extension
[  195.978410][ T5923] rc_core: IR keymap rc-hauppauge not found
[  195.984357][ T5923] Registered IR keymap rc-empty
[  195.991049][ T5857] em28xx 5-1:0.132: Freeing device
[  195.997989][ T5876] usb 4-1: USB disconnect, device number 63
[  196.008972][  T892] em28xx 3-1:0.132: Freeing device
[  196.021678][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.067620][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.130131][ T5923] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1
[  196.216356][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input46
[  196.229752][ T7733] 8021q: VLANs not supported on sit0
[  196.251625][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.297949][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.327675][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.363099][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.417592][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.444023][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.445176][ T7739] netlink: 360 bytes leftover after parsing attributes in process `syz.3.558'.
[  196.478213][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.498982][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.538697][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.565424][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.611162][ T5923] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  196.647306][ T5923] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  197.127899][  T892] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  197.247524][ T5876] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  197.287643][  T892] usb 5-1: Using ep0 maxpacket: 32
[  197.299793][  T892] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  197.315325][  T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.325572][  T892] usb 5-1: Product: syz
[  197.330028][  T892] usb 5-1: Manufacturer: syz
[  197.334730][  T892] usb 5-1: SerialNumber: syz
[  197.345501][  T892] usb 5-1: config 0 descriptor??
[  197.361052][  T892] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  197.418330][ T5876] usb 3-1: Using ep0 maxpacket: 8
[  197.425919][ T5876] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  197.434336][ T5876] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.445228][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.455165][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.465340][ T5876] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.478786][ T5876] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  197.487977][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.715007][ T5876] usb 3-1: GET_CAPABILITIES returned 0
[  197.737954][ T5876] usbtmc 3-1:16.0: can't read capabilities
[  197.764228][ T7789] netlink: 208 bytes leftover after parsing attributes in process `syz.3.567'.
[  197.864793][ T5876] usb 2-1: USB disconnect, device number 30
[  197.983453][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.992581][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.004817][  T793] usb 3-1: USB disconnect, device number 56
[  198.139115][ T5923] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  198.279656][ T5923] usb 4-1: device descriptor read/64, error -71
[  198.522894][ T5923] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  198.610525][ T7822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  198.622157][ T7822] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  198.667573][ T5923] usb 4-1: device descriptor read/64, error -71
[  198.777960][ T5923] usb usb4-port1: attempt power cycle
[  198.783127][ T7758] binder: 7757:7758 ioctl c0306201 0 returned -14
[  198.842486][ T7827] binder: 7757:7827 ioctl c0306201 0 returned -14
[  199.117519][ T5923] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  199.137591][ T5889] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  199.145666][ T5923] usb 4-1: device descriptor read/8, error -71
[  199.297512][ T5889] usb 2-1: Using ep0 maxpacket: 32
[  199.304753][ T5889] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  199.313366][ T5889] usb 2-1: config 0 has no interface number 0
[  199.320665][ T5889] usb 2-1: config 0 interface 131 has no altsetting 0
[  199.331661][ T5889] usb 2-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13
[  199.341979][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.350404][ T5889] usb 2-1: Product: syz
[  199.354841][ T5889] usb 2-1: Manufacturer: syz
[  199.359569][ T5889] usb 2-1: SerialNumber: syz
[  199.371676][ T5889] usb 2-1: config 0 descriptor??
[  199.380728][ T5889] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state.
[  199.392201][ T5923] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  199.402550][ T5889] dvb-usb: bulk message failed: -22 (2/0)
[  199.408635][ T5889] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  199.418524][ T5889] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U))
[  199.429811][ T5923] usb 4-1: device descriptor read/8, error -71
[  199.442238][ T5889] usb 2-1: media controller created
[  199.449268][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.461468][ T5889] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  199.470981][ T5889] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  199.537505][ T5889] rc_core: IR keymap rc-dtt200u not found
[  199.543337][ T5889] Registered IR keymap rc-empty
[  199.552621][ T5923] usb usb4-port1: unable to enumerate USB device
[  199.560444][ T5889] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  199.575020][ T5889] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input47
[  199.591979][ T5889] dvb-usb: schedule remote query interval to 300 msecs.
[  199.600669][ T5889] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected.
[  199.615335][ T5889] usb 2-1: USB disconnect, device number 31
[  199.666587][ T5889] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected.
[  199.678993][  T793] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  199.837525][  T793] usb 3-1: Using ep0 maxpacket: 8
[  199.844681][  T793] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  199.854898][  T793] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  199.864716][  T793] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  199.874746][  T793] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  199.887756][  T793] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  199.896788][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.977752][  T892] gspca_stk1135: reg_w 0x2ff err -110
[  199.984257][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  199.990688][  T892] gspca_stk1135: Sensor write failed
[  199.996004][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.003488][  T892] gspca_stk1135: Sensor write failed
[  200.008951][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.015288][  T892] gspca_stk1135: Sensor read failed
[  200.020560][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.026903][  T892] gspca_stk1135: Sensor read failed
[  200.032183][  T892] gspca_stk1135: Detected sensor type unknown (0x0)
[  200.038911][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.045271][  T892] gspca_stk1135: Sensor read failed
[  200.050619][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.056961][  T892] gspca_stk1135: Sensor read failed
[  200.062324][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.068724][  T892] gspca_stk1135: Sensor write failed
[  200.074036][  T892] gspca_stk1135: serial bus timeout: status=0x00
[  200.080409][  T892] gspca_stk1135: Sensor write failed
[  200.085778][  T892] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[  200.112867][  T793] usb 3-1: GET_CAPABILITIES returned 0
[  200.119067][  T793] usbtmc 3-1:16.0: can't read capabilities
[  200.321911][ T7836] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32
[  200.336601][  T892] usb 3-1: USB disconnect, device number 57
[  200.699022][  T793] usb 5-1: USB disconnect, device number 10
[  200.897327][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'.
[  201.258681][  T892] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  201.427597][  T892] usb 3-1: Using ep0 maxpacket: 8
[  201.437771][  T892] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.449041][ T5889] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  201.477492][  T892] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.507497][  T892] usb 3-1: config 0 interface 0 has no altsetting 0
[  201.514249][  T892] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  201.547530][  T892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.568385][  T892] usb 3-1: config 0 descriptor??
[  201.649805][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  201.667477][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 38, changing to 7
[  201.687450][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49734, setting to 1024
[  201.713387][ T5889] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  201.735777][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.757616][ T5889] usb 4-1: Product: syz
[  201.765402][ T5889] usb 4-1: Manufacturer: syz
[  201.779137][ T5889] usb 4-1: SerialNumber: syz
[  201.804900][ T5889] usb 4-1: config 0 descriptor??
[  201.845565][ T5889] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress f2
[  202.075143][ T5889] usb 4-1: USB disconnect, device number 68
[  202.207537][  T892] usb 3-1: string descriptor 0 read error: -71
[  202.215416][  T892] uclogic 0003:5543:0045.0008: failed retrieving string descriptor #200: -71
[  202.231254][  T892] uclogic 0003:5543:0045.0008: failed retrieving pen parameters: -71
[  202.249225][  T892] uclogic 0003:5543:0045.0008: failed probing pen v2 parameters: -71
[  202.273577][  T892] uclogic 0003:5543:0045.0008: failed probing parameters: -71
[  202.281305][  T892] uclogic 0003:5543:0045.0008: probe with driver uclogic failed with error -71
[  202.294854][  T892] usb 3-1: USB disconnect, device number 58
[  202.443740][ T7883] netlink: 'syz.4.594': attribute type 11 has an invalid length.
[  202.452711][ T7883] netlink: 224 bytes leftover after parsing attributes in process `syz.4.594'.
[  202.464060][ T7883] No control pipe specified
[  202.816563][ T7899] FAULT_INJECTION: forcing a failure.
[  202.816563][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.829779][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.2.600 Not tainted syzkaller #0 PREEMPT(full) 
[  202.829805][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  202.829816][ T7899] Call Trace:
[  202.829823][ T7899]  <TASK>
[  202.829829][ T7899]  dump_stack_lvl+0x189/0x250
[  202.829851][ T7899]  ? __pfx____ratelimit+0x10/0x10
[  202.829866][ T7899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.829881][ T7899]  ? __pfx__printk+0x10/0x10
[  202.829897][ T7899]  ? __might_fault+0xb0/0x130
[  202.829922][ T7899]  should_fail_ex+0x414/0x560
[  202.829946][ T7899]  _copy_from_user+0x2d/0xb0
[  202.829963][ T7899]  ___sys_recvmsg+0x12e/0x510
[  202.829980][ T7899]  ? __pfx____sys_recvmsg+0x10/0x10
[  202.830014][ T7899]  ? __might_fault+0xb0/0x130
[  202.830033][ T7899]  do_recvmmsg+0x307/0x770
[  202.830052][ T7899]  ? __pfx_do_recvmmsg+0x10/0x10
[  202.830073][ T7899]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  202.830106][ T7899]  __x64_sys_recvmmsg+0x190/0x240
[  202.830122][ T7899]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  202.830138][ T7899]  ? do_syscall_64+0xbe/0xfa0
[  202.830156][ T7899]  do_syscall_64+0xfa/0xfa0
[  202.830172][ T7899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.830185][ T7899]  ? clear_bhb_loop+0x60/0xb0
[  202.830201][ T7899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.830214][ T7899] RIP: 0033:0x7f97a0d8f6c9
[  202.830226][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.830237][ T7899] RSP: 002b:00007f97a1bfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  202.830252][ T7899] RAX: ffffffffffffffda RBX: 00007f97a0fe6090 RCX: 00007f97a0d8f6c9
[  202.830262][ T7899] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  202.830270][ T7899] RBP: 00007f97a1bfa090 R08: 0000000000000000 R09: 0000000000000000
[  202.830279][ T7899] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002
[  202.830288][ T7899] R13: 00007f97a0fe6128 R14: 00007f97a0fe6090 R15: 00007ffcc9fd9a98
[  202.830318][ T7899]  </TASK>
[  203.167536][  T793] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  203.297709][  T793] usb 4-1: device descriptor read/64, error -71
[  203.547528][  T793] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  203.677602][  T793] usb 4-1: device descriptor read/64, error -71
[  203.759231][ T5857] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  203.787769][  T793] usb usb4-port1: attempt power cycle
[  203.894294][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'.
[  203.923117][ T5857] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  204.258192][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.266462][ T5857] usb 2-1: Product: syz
[  204.271383][ T5857] usb 2-1: Manufacturer: syz
[  204.276092][ T5857] usb 2-1: SerialNumber: syz
[  204.317571][  T793] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  204.338238][  T793] usb 4-1: device descriptor read/8, error -71
[  204.577558][  T793] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  204.608703][  T793] usb 4-1: device descriptor read/8, error -71
[  204.718073][  T793] usb usb4-port1: unable to enumerate USB device
[  205.100905][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.112114][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.128604][ T5857] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:8d:13:ed:3a:a7
[  205.159668][ T5857] rtl8150 2-1:1.0: eth5: rtl8150 is detected
[  205.171059][ T5857] usb 2-1: USB disconnect, device number 32
[  205.723447][ T7931] bond0: (slave rose0): Enslaving as an active interface with an up link
[  205.747515][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  205.907636][ T5889] usb 5-1: Using ep0 maxpacket: 8
[  205.924241][ T5889] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  205.933597][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.953823][ T5889] usb 5-1: Product: syz
[  205.964212][ T5889] usb 5-1: Manufacturer: syz
[  205.968990][ T5889] usb 5-1: SerialNumber: syz
[  206.025725][ T7943] tipc: Started in network mode
[  206.031395][ T7943] tipc: Node identity 00000000004000000000000000000001, cluster identity 4711
[  206.040598][ T7943] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  206.157513][ T5857] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  206.209174][ T5889] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  206.232884][ T5889] mxuport 5-1:254.0: probe with driver mxuport failed with error -5
[  206.259414][ T5889] usb 5-1: USB disconnect, device number 11
[  206.274031][ T7950] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'.
[  206.283609][ T7950] netlink: 'syz.4.617': attribute type 8 has an invalid length.
[  206.318842][ T5857] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  206.333697][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.344665][ T5857] usb 4-1: Product: syz
[  206.349941][ T5857] usb 4-1: Manufacturer: syz
[  206.354569][ T5857] usb 4-1: SerialNumber: syz
[  206.366396][ T5857] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  206.378110][ T5923] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  206.382692][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  206.406681][  T793] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  206.537507][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  206.548828][ T5923] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  206.560630][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.571384][ T5923] usb 2-1: config 0 descriptor??
[  206.657537][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  206.786085][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  206.795203][ T5889] usb 5-1: device descriptor read/64, error -71
[  206.804548][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  206.826678][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  206.840071][ T5923] usb 2-1: media controller created
[  206.863307][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  206.899149][ T5912] usb 4-1: USB disconnect, device number 73
[  207.035420][ T7946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  207.052323][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.061010][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  207.073079][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.169448][ T5923] az6027: usb out operation failed. (-71)
[  207.183556][ T5923] az6027: usb out operation failed. (-71)
[  207.190339][ T5923] stb0899_attach: Driver disabled by Kconfig
[  207.196925][ T5923] az6027: no front-end attached
[  207.196925][ T5923] 
[  207.206543][ T5889] usb 5-1: device descriptor read/64, error -71
[  207.213447][ T5923] az6027: usb out operation failed. (-71)
[  207.219609][ T5923] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  207.237562][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48
[  207.260413][ T5923] dvb-usb: schedule remote query interval to 400 msecs.
[  207.276401][ T5923] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  207.304267][ T5923] usb 2-1: USB disconnect, device number 33
[  207.321879][ T5889] usb usb5-port1: attempt power cycle
[  207.362931][ T5923] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  207.411303][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'.
[  207.425826][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'.
[  207.497692][  T793] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  207.510385][  T793] ath9k_htc: Failed to initialize the device
[  207.528372][ T5912] usb 4-1: ath9k_htc: USB layer deinitialized
[  207.653136][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.626'.
[  207.668044][ T5889] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  207.727906][ T5889] usb 5-1: device descriptor read/8, error -71
[  207.962754][ T7995] netlink: 'syz.2.633': attribute type 4 has an invalid length.
[  207.967577][ T5889] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  207.998554][ T5889] usb 5-1: device descriptor read/8, error -71
[  208.024153][ T7997] overlayfs: failed to clone upperpath
[  208.103902][ T8002] netlink: 'syz.2.636': attribute type 10 has an invalid length.
[  208.107942][ T5889] usb usb5-port1: unable to enumerate USB device
[  208.112105][ T8002] netlink: 55 bytes leftover after parsing attributes in process `syz.2.636'.
[  208.367931][ T8012] netlink: 'syz.2.640': attribute type 10 has an invalid length.
[  208.376251][ T8012] lo: entered promiscuous mode
[  208.384840][ T8012] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  208.471263][ T7978] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  208.477836][ T7978] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  208.489195][ T7978] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  208.495465][ T7978] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  208.504763][ T7978] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  208.847565][ T5889] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  208.857613][ T5857] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  208.972392][ T8020] overlayfs: failed to clone upperpath
[  208.999564][ T5889] usb 4-1: Using ep0 maxpacket: 32
[  209.006259][ T5889] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  209.016358][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.017590][ T5857] usb 2-1: Using ep0 maxpacket: 16
[  209.027715][ T5889] usb 4-1: config 0 descriptor??
[  209.041275][ T5857] usb 2-1: config 8 has an invalid interface number: 49 but max is 2
[  209.049485][ T5857] usb 2-1: config 8 has an invalid interface number: 136 but max is 2
[  209.058187][ T5857] usb 2-1: config 8 has an invalid interface number: 55 but max is 2
[  209.066298][ T5857] usb 2-1: config 8 has no interface number 0
[  209.072723][ T5857] usb 2-1: config 8 has no interface number 1
[  209.079797][ T5857] usb 2-1: config 8 has no interface number 2
[  209.086344][ T5857] usb 2-1: config 8 interface 136 altsetting 16 endpoint 0x9 has invalid maxpacket 959, setting to 64
[  209.097510][ T5857] usb 2-1: config 8 interface 136 altsetting 16 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  209.108899][ T5857] usb 2-1: config 8 interface 136 altsetting 16 endpoint 0xF has an invalid bInterval 124, changing to 7
[  209.120601][ T5857] usb 2-1: config 8 interface 136 altsetting 16 has an endpoint descriptor with address 0xB1, changing to 0x81
[  209.132431][ T5857] usb 2-1: config 8 interface 136 altsetting 16 endpoint 0x81 has invalid maxpacket 50689, setting to 1024
[  209.144001][ T5857] usb 2-1: config 8 interface 136 altsetting 16 bulk endpoint 0x81 has invalid maxpacket 1024
[  209.154359][ T5857] usb 2-1: config 8 interface 136 altsetting 16 has a duplicate endpoint with address 0x4, skipping
[  209.165167][ T5857] usb 2-1: config 8 interface 136 altsetting 16 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  209.178360][ T5857] usb 2-1: config 8 interface 55 altsetting 129 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  209.191237][ T5857] usb 2-1: config 8 interface 55 altsetting 129 has an invalid descriptor for endpoint zero, skipping
[  209.202320][ T5857] usb 2-1: config 8 interface 49 has no altsetting 0
[  209.209038][ T5857] usb 2-1: config 8 interface 136 has no altsetting 0
[  209.215899][ T5857] usb 2-1: config 8 interface 55 has no altsetting 0
[  209.225023][ T5857] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0900, bcdDevice=a7.0e
[  209.234215][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.242243][ T5857] usb 2-1: Product: â Š
[  209.244996][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  209.246474][ T5857] usb 2-1: Manufacturer: à°‰
[  209.260626][ T5857] usb 2-1: SerialNumber: 봳�㧷䔱嘈掚ᣧ�㢤촗�뢸매ⅇㅟ㫿ꊯ齂㮘ꤘ⠓ং�빵隌�ǽᬇ΄㺎댬㦔�㓥玿��َ�엸㤑�ꯀ剡䋈ㄗ蔔륄栲繚�倌�쫊㶤躾엻䷱︋꯼傜垴갛瓢ࡸ잎�
[  209.269580][ T5889] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  209.292415][ T5889] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  209.383267][ T8022] tmpfs: Cannot change global quota limit on remount
[  209.497024][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.519741][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.549626][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.562878][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.596105][ T5857] option 2-1:8.49: GSM modem (1-port) converter detected
[  209.646612][ T5857] usb 2-1: USB disconnect, device number 34
[  209.655100][ T5857] option 2-1:8.49: device disconnected
[  209.737533][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  209.767522][ T5923] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  209.927555][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  209.935636][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short
[  209.944771][ T5923] usb 5-1: config index 0 descriptor too short (expected 51, got 18)
[  209.953126][ T5923] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  209.961350][ T5923] usb 5-1: config 4 has no interface number 0
[  209.967883][ T5923] usb 5-1: config 4 interface 30 has no altsetting 0
[  209.989950][ T5923] usb 5-1: string descriptor 0 read error: -22
[  209.996352][ T5923] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  210.012749][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.019682][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'.
[  210.046743][ T5923] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  210.053951][ T5923] dw2102: su3000_power_ctrl: 1, initialized 0
[  210.061092][ T5923] dvb-usb: bulk message failed: -22 (2/0)
[  210.073108][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  210.085481][ T5923] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  210.095029][ T5923] usb 5-1: media controller created
[  210.100653][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  210.107975][ T5923] dw2102: i2c transfer failed.
[  210.127596][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  210.133435][ T5923] dw2102: i2c transfer failed.
[  210.143587][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  210.150932][ T5923] dw2102: i2c transfer failed.
[  210.155807][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  210.161948][ T5923] dw2102: i2c transfer failed.
[  210.166826][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  210.173814][ T5923] dw2102: i2c transfer failed.
[  210.181217][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  210.186966][ T5923] dw2102: i2c transfer failed.
[  210.193242][ T5923] dvb-usb: MAC address: 02:02:02:02:02:02
[  210.226262][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  210.245430][ T8022] dvb-usb: bulk message failed: -22 (1/0)
[  210.256723][ T8022] dw2102: i2c transfer failed.
[  210.276280][ T5923] dvb-usb: bulk message failed: -22 (3/0)
[  210.286980][ T5923] dw2102: command 0x0e transfer failed.
[  210.293347][ T5923] dvb-usb: bulk message failed: -22 (3/0)
[  210.299695][ T5923] dw2102: command 0x0e transfer failed.
[  210.410577][ T8042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.651'.
[  210.537623][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  210.607565][ T5923] dvb-usb: bulk message failed: -22 (3/0)
[  210.613365][ T5923] dw2102: command 0x0e transfer failed.
[  210.619675][ T5923] dvb-usb: bulk message failed: -22 (3/0)
[  210.625425][ T5923] dw2102: command 0x0e transfer failed.
[  210.631189][ T5923] dvb-usb: bulk message failed: -22 (1/0)
[  210.636923][ T5923] dw2102: command 0x51 transfer failed.
[  210.642647][ T5923] dvb-usb: bulk message failed: -22 (5/0)
[  210.648522][ T5923] dw2102: i2c probe for address 0x68 failed.
[  210.655735][ T5923] dvb-usb: bulk message failed: -22 (5/0)
[  210.661508][ T5923] dw2102: i2c probe for address 0x69 failed.
[  210.667541][ T5923] dvb-usb: bulk message failed: -22 (5/0)
[  210.673248][ T5923] dw2102: i2c probe for address 0x6a failed.
[  210.679338][  T892] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  210.686977][ T5923] dw2102: probing for demodulator failed. Is the external power switched on?
[  210.695987][ T5923] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  210.760423][ T5923] rc_core: IR keymap rc-tt-1500 not found
[  210.766169][ T5923] Registered IR keymap rc-empty
[  210.772339][ T5923] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  210.788930][ T5923] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input49
[  210.811706][ T5923] dvb-usb: schedule remote query interval to 250 msecs.
[  210.832431][ T5923] dw2102: su3000_power_ctrl: 0, initialized 1
[  210.849456][ T5923] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  210.861046][  T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.876736][ T5923] usb 5-1: USB disconnect, device number 16
[  210.882985][  T892] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  210.895330][  T892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.917702][  T892] usb 2-1: config 0 descriptor??
[  210.941277][ T5923] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  211.263560][ T5923] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  211.331393][  T892] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  211.353889][  T892] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input50
[  211.445364][ T5923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  211.456109][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.464353][ T5923] usb 5-1: Product: syz
[  211.476380][  T892] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  211.489139][ T5923] usb 5-1: Manufacturer: syz
[  211.493794][ T5923] usb 5-1: SerialNumber: syz
[  211.510033][ T5923] usb 5-1: config 0 descriptor??
[  211.725495][ T5923] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  211.817862][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  211.884850][ T8044] netlink: 'syz.1.652': attribute type 10 has an invalid length.
[  211.893069][ T8044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.652'.
[  211.928663][ T8044] team0: Port device geneve0 added
[  211.945998][  T892] usb 2-1: USB disconnect, device number 35
[  212.022962][ T8059] IPVS: Unknown mcast interface: pimreg0
[  212.619903][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  212.757502][  T892] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  212.907506][  T892] usb 2-1: Using ep0 maxpacket: 16
[  212.914024][  T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.925199][  T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.935089][  T892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  212.948031][  T892] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  212.957292][  T892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.970014][  T892] usb 2-1: config 0 descriptor??
[  213.410644][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.422214][  T892] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  213.435302][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.442823][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.453039][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.460478][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.468071][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.475358][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.482987][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.492695][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.500457][  T892] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.581448][ T5923] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  213.595828][ T5923] usb 5-1: USB disconnect, device number 17
[  213.616721][  T892] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  213.641269][  T892] microsoft 0003:045E:07DA.000A: no inputs found
[  213.648867][  T892] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  213.819587][ T5923] usb 2-1: USB disconnect, device number 36
[  214.120743][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.157949][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.164202][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.173627][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.185648][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.192632][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.200319][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.206663][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.215137][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.221911][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.232470][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.240206][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.246598][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.259203][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.265473][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.271900][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.278244][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.284598][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.292006][ T8080] tmpfs: Unknown parameter 'quoe_hardlimit'
[  214.310731][ T8083] pimreg: entered allmulticast mode
[  214.319768][ T8083] pimreg: left allmulticast mode
[  214.631972][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[  214.662330][ T8095] netlink: 'syz.3.671': attribute type 40 has an invalid length.
[  214.707812][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  214.715503][ T8099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.672'.
[  214.728186][ T8099] netlink: 'syz.2.672': attribute type 25 has an invalid length.
[  214.896893][ T8107] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.675'.
[  215.013880][ T8114] pimreg: entered allmulticast mode
[  215.021916][ T8114] pimreg: left allmulticast mode
[  215.142831][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.679'.
[  215.151949][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'.
[  215.213845][ T8122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'.
[  215.286206][ T8124] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:1000:00bb
[  215.300846][ T8124] tipc: Enabled bearer <udp:syz1>, priority 10
[  215.437165][ T8134] __vm_enough_memory: pid: 8134, comm: syz.2.685, bytes: 4503599627366400 not enough memory for the allocation
[  215.627529][ T5923] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  215.690879][ T8139] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.687'.
[  215.738071][ T5914] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  215.778993][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  215.788657][ T5923] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  215.799891][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.810391][ T5923] usb 2-1: Product: syz
[  215.814702][ T5923] usb 2-1: Manufacturer: syz
[  215.820701][ T5923] usb 2-1: SerialNumber: syz
[  215.831632][ T5923] r8152-cfgselector 2-1: Unknown version 0x0000
[  215.842234][ T5923] r8152-cfgselector 2-1: config 0 descriptor??
[  215.904823][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  215.927060][ T5914] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  215.941012][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.957853][ T5914] usb 5-1: config 0 descriptor??
[  215.963879][ T8136] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  216.256134][  T793] r8152-cfgselector 2-1: USB disconnect, device number 37
[  216.386512][ T5914] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.000B/input/input51
[  216.427916][ T5923] tipc: Node number set to 4194305
[  216.464569][ T5914] uclogic 0003:28BD:0909.000B: input,hidraw0: USB HID v1.01 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0
[  216.581079][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.590448][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.600700][ T5923] usb 5-1: USB disconnect, device number 18
[  216.924884][ T8163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.694'.
[  217.087555][ T5923] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  217.217696][ T5923] usb 2-1: device descriptor read/64, error -71
[  217.377648][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  217.457506][ T5923] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  217.529207][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.539645][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.553684][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.565065][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.573293][ T5914] usb 5-1: Product: syz
[  217.577511][ T5914] usb 5-1: Manufacturer: syz
[  217.582119][ T5914] usb 5-1: SerialNumber: syz
[  217.587514][ T5923] usb 2-1: device descriptor read/64, error -71
[  217.598567][ T5914] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  217.606807][ T5914] cdc_ncm 5-1:1.0: bind() failure
[  217.708848][ T5923] usb usb2-port1: attempt power cycle
[  217.801021][ T5914] usb 5-1: USB disconnect, device number 19
[  218.067521][ T5923] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  218.088304][ T5923] usb 2-1: device descriptor read/8, error -71
[  218.337926][ T5923] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  218.369178][ T5923] usb 2-1: device descriptor read/8, error -71
[  218.487652][ T5923] usb usb2-port1: unable to enumerate USB device
[  218.627524][ T5923] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  218.778790][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  218.786920][ T5923] usb 5-1: config 0 has no interface number 0
[  218.793098][ T5923] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  218.802188][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.813108][ T5923] usb 5-1: config 0 descriptor??
[  218.822515][ T5923] usb 5-1: selecting invalid altsetting 1
[  218.830032][ T5923] dvb_ttusb_budget: ttusb_init_controller: error
[  218.836367][ T5923] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  218.884163][ T5923] DVB: Unable to find symbol cx22700_attach()
[  218.912997][ T5923] DVB: Unable to find symbol tda10046_attach()
[  218.919626][ T5923] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  219.024508][ T5876] usb 5-1: USB disconnect, device number 20
[  219.987559][  T892] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  220.162406][  T892] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  220.180673][  T892] usb 5-1: config 0 has no interface number 1
[  220.186944][  T892] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  220.197111][  T892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.207657][  T892] usb 5-1: config 0 descriptor??
[  220.411221][ T8221] af_packet: tpacket_rcv: packet too big, clamped from 65256 to 3974. macoff=74
[  220.420597][ T8205] netlink: 124 bytes leftover after parsing attributes in process `syz.4.705'.
[  220.435334][ T8205] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  220.443875][ T8205] overlayfs: missing 'lowerdir'
[  220.451646][  T892] usb 5-1: Could not set interface, error -71
[  220.469673][  T892] usb 5-1: USB disconnect, device number 21
[  220.667618][ T5876] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  220.817505][ T5876] usb 2-1: device descriptor read/64, error -71
[  221.058305][ T5876] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  221.217578][ T5876] usb 2-1: device descriptor read/64, error -71
[  221.327596][ T5923] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  221.329041][ T5876] usb usb2-port1: attempt power cycle
[  221.479333][ T5923] usb 5-1: config 0 has no interfaces?
[  221.485836][ T5923] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  221.495007][ T5923] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  221.503572][ T5923] usb 5-1: Manufacturer: syz
[  221.511243][ T5923] usb 5-1: config 0 descriptor??
[  221.677607][ T5876] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  221.706846][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'.
[  221.717023][ T5876] usb 2-1: device descriptor read/8, error -71
[  221.727019][ T5923] usb 5-1: USB disconnect, device number 22
[  221.977652][ T5876] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  222.007503][ T5876] usb 2-1: device descriptor read/8, error -71
[  222.127761][ T5876] usb usb2-port1: unable to enumerate USB device
[  224.500260][ T8282] kvm: pic: non byte read
[  224.505852][ T8282] kvm: pic: non byte read
[  224.510659][ T8282] kvm: pic: non byte read
[  224.516394][ T8282] kvm: pic: non byte read
[  224.522992][ T8282] kvm: pic: non byte read
[  224.527440][ T8282] kvm: pic: non byte read
[  224.531949][ T8282] kvm: pic: non byte read
[  224.536337][ T8282] kvm: pic: non byte read
[  224.543058][ T8282] kvm: pic: non byte read
[  224.547568][ T8282] kvm: pic: non byte read
[  224.877534][ T5923] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  225.027499][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  225.034351][ T5923] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.047688][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.054371][ T5923] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  225.082538][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.085405][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[  225.095570][ T5923] usb 2-1: config 0 descriptor??
[  225.209912][ T8290] syzkaller0: entered allmulticast mode
[  225.348565][ T8286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  225.355290][ T8286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  225.373994][ T8286] vhci_hcd vhci_hcd.0: Device attached
[  225.567633][ T5837] Bluetooth: hci1: unexpected event for opcode 0x1003
[  225.617521][ T5914] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  225.637527][  T793] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  225.787563][  T793] usb 5-1: Using ep0 maxpacket: 8
[  225.992299][  T793] usb 5-1: unable to get BOS descriptor or descriptor too short
[  226.000231][  T793] usb 5-1: too many configurations: 80, using maximum allowed: 8
[  226.009295][  T793] usb 5-1: unable to read config index 0 descriptor/start: -71
[  226.017336][  T793] usb 5-1: can't read configurations, error -71
[  226.815419][ T8310] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  226.823181][ T8310] binder: 8309:8310 ioctl 4018620d 200000000100 returned -1
[  226.836783][ T8310] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  226.843685][ T8310] binder: 8309:8310 ioctl 4018620d 200000004a80 returned -1
[  226.851259][  T793] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  227.007498][  T793] usb 5-1: Using ep0 maxpacket: 16
[  227.016398][  T793] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  227.027544][  T793] usb 5-1: config 0 has no interface number 0
[  227.034457][  T793] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  227.045698][  T793] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  227.058212][  T793] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  227.067279][  T793] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  227.075758][  T793] usb 5-1: Product: syz
[  227.080105][  T793] usb 5-1: SerialNumber: syz
[  227.087050][  T793] usb 5-1: config 0 descriptor??
[  227.096146][  T793] cm109 5-1:0.8: invalid payload size 0, expected 4
[  227.106083][  T793] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input52
[  227.324942][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  227.325296][    T9] usb 5-1: USB disconnect, device number 24
[  227.331947][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  227.354323][    T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  227.762285][ T8294] vhci_hcd: connection reset by peer
[  227.780766][ T5923] usbhid 2-1:0.0: can't add hid device: -71
[  227.786802][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  227.804627][   T13] vhci_hcd vhci_hcd.1: stop threads
[  227.815588][ T5923] usb 2-1: USB disconnect, device number 46
[  227.817925][   T13] vhci_hcd vhci_hcd.1: release socket
[  227.846994][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  228.032161][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.041105][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.157558][ T5923] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  228.327573][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  228.334837][ T5923] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  228.342987][ T5923] usb 2-1: config 0 has no interface number 0
[  228.349164][ T5923] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  228.360164][ T5923] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  228.372128][ T5923] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  228.381294][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  228.389439][ T5923] usb 2-1: Product: syz
[  228.393641][ T5923] usb 2-1: SerialNumber: syz
[  228.400558][ T5923] usb 2-1: config 0 descriptor??
[  228.408609][ T5923] cm109 2-1:0.8: invalid payload size 0, expected 4
[  228.416557][ T5923] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input53
[  228.612340][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  228.759932][ T8347] overlayfs: failed to clone upperpath
[  228.935324][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  228.944316][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  228.950680][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'.
[  228.953450][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  228.967531][ T5923] usb 2-1: USB disconnect, device number 47
[  228.974793][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  228.981766][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  229.006365][ T5923] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  229.307518][ T5912] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  229.460964][ T5912] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  229.470426][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.480334][ T5912] usb 5-1: Product: syz
[  229.484707][ T5912] usb 5-1: Manufacturer: syz
[  229.489692][ T5912] usb 5-1: SerialNumber: syz
[  229.500604][ T5912] usb 5-1: config 0 descriptor??
[  229.509941][ T5912] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  229.525821][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  229.536350][ T5912] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  229.554689][ T5912] usb 5-1: media controller created
[  229.573034][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  229.630164][ T5912] DVB: Unable to find symbol mt352_attach()
[  229.693621][ T5912] DVB: Unable to find symbol nxt6000_attach()
[  229.708260][ T5912] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  229.726839][ T5923] hid_parser_main: 1 callbacks suppressed
[  229.726858][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.759699][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54
[  229.773188][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.782382][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.790807][ T5912] dvb-usb: schedule remote query interval to 1000 msecs.
[  229.799685][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  229.808373][ T8369] netlink: 'syz.2.768': attribute type 27 has an invalid length.
[  229.810692][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.825975][ T8370] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  229.825975][ T5912] dvb-usb: bulk message failed: -22 (7/0)
[  229.834475][ T5912] dvb-usb: bulk message failed: -22 (7/0)
[  229.846417][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.859895][ T8370] dvb-usb: bulk message failed: -22 (7/0)
[  229.863820][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.885099][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.893106][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.908201][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.930618][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  229.954935][ T5923] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  229.986000][ T5923] usb 5-1: USB disconnect, device number 25
[  230.040857][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  230.072247][ T8372] fido_id[8372]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  230.767609][ T5914] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  231.047787][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  231.166495][ T8406] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.780'.
[  231.238154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  231.247829][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  231.401032][ T8419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  231.699494][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  231.827904][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  231.920514][ T8436] binder: 8435:8436 ioctl 400c620e 0 returned -14
[  232.490776][ T8451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.799'.
[  232.521881][ T8451] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.799'.
[  233.085320][ T8477] tmpfs: Bad value for 'mpol'
[  233.197495][ T5923] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  233.369029][ T5923] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  233.377604][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.389943][ T5923] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  233.399143][ T5923] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  233.407156][ T5923] usb 5-1: Manufacturer: syz
[  233.415584][ T5923] usb 5-1: config 0 descriptor??
[  233.423487][ T5923] igorplugusb 5-1:0.0: incorrect number of endpoints
[  233.625754][ T5923] usb 5-1: USB disconnect, device number 26
[  233.834801][   T30] audit: type=1326 audit(1763029185.155:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  233.863935][   T30] audit: type=1326 audit(1763029185.155:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  233.886642][   T30] audit: type=1326 audit(1763029185.155:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  233.909732][   T30] audit: type=1326 audit(1763029185.155:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  233.932376][   T30] audit: type=1326 audit(1763029185.155:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  233.955009][   T30] audit: type=1326 audit(1763029185.155:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  233.978059][   T30] audit: type=1326 audit(1763029185.155:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  234.000959][   T30] audit: type=1326 audit(1763029185.155:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  234.023019][   T30] audit: type=1326 audit(1763029185.155:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  234.045209][   T30] audit: type=1326 audit(1763029185.155:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fcb9dd8f6c9 code=0x7ffc0000
[  234.332237][ T5923] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  234.511424][ T5923] usb 2-1: config 2 has an invalid interface number: 49 but max is 0
[  234.520955][ T5923] usb 2-1: config 2 has no interface number 0
[  234.527210][ T5923] usb 2-1: config 2 interface 49 altsetting 0 has an endpoint descriptor with address 0x46, changing to 0x6
[  234.547461][ T5923] usb 2-1: config 2 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 4
[  234.575696][ T5923] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  234.585647][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.607105][ T5923] usb 2-1: Product: syz
[  234.612672][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  234.629683][ T5923] usb 2-1: Manufacturer: syz
[  234.635373][ T5923] usb 2-1: SerialNumber: syz
[  234.788372][    T9] usb 5-1: Using ep0 maxpacket: 32
[  234.795139][    T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  234.814144][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.835675][    T9] usb 5-1: config 0 has no interface number 0
[  234.860009][    T9] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  234.877714][    T9] usb 5-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  234.911531][ T5923] usb 2-1: USB disconnect, device number 48
[  234.917544][    T9] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  234.944482][    T9] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  234.959100][    T9] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  234.982632][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  234.992415][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.001625][    T9] usb 5-1: Product: syz
[  235.005887][    T9] usb 5-1: Manufacturer: syz
[  235.010562][    T9] usb 5-1: SerialNumber: syz
[  235.017906][    T9] usb 5-1: config 0 descriptor??
[  235.025046][ T8498] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  235.573574][ T8520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.823'.
[  235.582793][ T8520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.823'.
[  235.591852][ T8520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.823'.
[  235.817099][ T8527] input: syz0 as /devices/virtual/input/input56
[  236.415346][ T8544] overlay: filesystem on ./file0 not supported as upperdir
[  236.431252][ T8543] evm: overlay not supported
[  236.677582][ T5914] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  236.854591][ T8546] overlayfs: failed to clone upperpath
[  236.927478][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  236.934884][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short
[  236.945156][ T5914] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  236.954243][ T5914] usb 2-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config
[  236.970576][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  236.979789][ T5914] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  236.991181][ T5914] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  237.007056][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.016422][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.030367][ T5914] usb 2-1: Product: syz
[  237.034647][ T5914] usb 2-1: Manufacturer: �
[  237.039577][ T5914] usb 2-1: SerialNumber: syz
[  237.063895][ T6540] tipc: Subscription rejected, illegal request
[  237.163795][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'.
[  237.270245][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  237.383682][    T9] usb 5-1: probing VID:PID(0424:012C)   
[  237.393260][    T9] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B
[  237.407978][    T9] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02
[  237.423874][    T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  237.433498][    T9] vub300 5-1:0.133: probe with driver vub300 failed with error -22
[  237.449024][    T9] usb 5-1: USB disconnect, device number 27
[  237.779693][ T5914] usb 2-1: 0:2 : does not exist
[  237.803201][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  237.816570][ T5914] usb 2-1: USB disconnect, device number 49
[  237.860083][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.898640][ T8573] netlink: 'syz.1.844': attribute type 30 has an invalid length.
[  237.962722][ T8576] FAULT_INJECTION: forcing a failure.
[  237.962722][ T8576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.987059][    T9] usb 5-1: Using ep0 maxpacket: 16
[  237.987636][ T8576] CPU: 1 UID: 0 PID: 8576 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT(full) 
[  237.987665][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.987678][ T8576] Call Trace:
[  237.987688][ T8576]  <TASK>
[  237.987698][ T8576]  dump_stack_lvl+0x189/0x250
[  237.987731][ T8576]  ? __pfx____ratelimit+0x10/0x10
[  237.987755][ T8576]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.987781][ T8576]  ? __pfx__printk+0x10/0x10
[  237.987820][ T8576]  should_fail_ex+0x414/0x560
[  237.987857][ T8576]  _copy_to_user+0x31/0xb0
[  237.987886][ T8576]  simple_read_from_buffer+0xe1/0x170
[  237.987924][ T8576]  proc_fail_nth_read+0x1b3/0x220
[  237.987958][ T8576]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.987992][ T8576]  ? rw_verify_area+0x2a6/0x4d0
[  237.988020][ T8576]  ? __lock_acquire+0xab9/0xd20
[  237.988040][ T8576]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.988071][ T8576]  vfs_read+0x200/0xa30
[  237.988100][ T8576]  ? fdget_pos+0x247/0x320
[  237.988125][ T8576]  ? __pfx___mutex_lock+0x10/0x10
[  237.988150][ T8576]  ? __pfx_vfs_read+0x10/0x10
[  237.988182][ T8576]  ? __fget_files+0x2a/0x420
[  237.988207][ T8576]  ? __fget_files+0x3a0/0x420
[  237.988229][ T8576]  ? __fget_files+0x2a/0x420
[  237.988259][ T8576]  ksys_read+0x145/0x250
[  237.988300][ T8576]  ? __pfx_ksys_read+0x10/0x10
[  237.988333][ T8576]  ? do_syscall_64+0xbe/0xfa0
[  237.988361][ T8576]  do_syscall_64+0xfa/0xfa0
[  237.988386][ T8576]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.988405][ T8576]  ? clear_bhb_loop+0x60/0xb0
[  237.988431][ T8576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.988452][ T8576] RIP: 0033:0x7fcb9dd8e0dc
[  237.988471][ T8576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  237.988489][ T8576] RSP: 002b:00007fcb9eb99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.988511][ T8576] RAX: ffffffffffffffda RBX: 00007fcb9dfe5fa0 RCX: 00007fcb9dd8e0dc
[  237.988543][ T8576] RDX: 000000000000000f RSI: 00007fcb9eb990a0 RDI: 0000000000000004
[  237.988557][ T8576] RBP: 00007fcb9eb99090 R08: 0000000000000000 R09: 0000000000000000
[  237.988570][ T8576] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001
[  237.988584][ T8576] R13: 00007fcb9dfe6038 R14: 00007fcb9dfe5fa0 R15: 00007ffd4cd9df38
[  237.988623][ T8576]  </TASK>
[  238.246208][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.246262][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  238.246297][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.249149][    T9] usb 5-1: config 0 descriptor??
[  238.478995][ T8590] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  238.676548][ T8597] 
@0Ù: renamed from bond_slave_1 (while UP)
[  239.679912][  T793] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  239.840742][  T793] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  239.850049][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.858168][  T793] usb 2-1: Product: syz
[  239.862412][  T793] usb 2-1: Manufacturer: syz
[  239.867006][  T793] usb 2-1: SerialNumber: syz
[  239.873954][  T793] usb 2-1: config 0 descriptor??
[  240.225202][ T8612] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.292385][  T793] usb 2-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4)
[  240.325911][ T8617] pim6reg: entered allmulticast mode
[  240.333204][ T8617] pim6reg: left allmulticast mode
[  240.493742][  T793] usb 2-1: failed to fetch extended address, random address set
[  240.512963][    T9] usb 5-1: USB disconnect, device number 28
[  240.652571][  T793] usb 2-1: USB disconnect, device number 50
[  241.057498][  T892] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  241.131728][ T8640] netlink: 892 bytes leftover after parsing attributes in process `syz.2.868'.
[  241.196721][ T8641] netlink: 892 bytes leftover after parsing attributes in process `syz.2.868'.
[  241.230017][  T892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  241.239827][  T892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 41, changing to 7
[  241.250813][  T892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9496, setting to 1024
[  241.264892][  T892] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  241.274847][  T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.283400][  T892] usb 5-1: Product: syz
[  241.287680][  T892] usb 5-1: Manufacturer: syz
[  241.292288][  T892] usb 5-1: SerialNumber: syz
[  241.299776][  T892] usb 5-1: config 0 descriptor??
[  241.308565][  T892] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 72
[  241.337729][    T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  241.497479][    T9] usb 2-1: Using ep0 maxpacket: 8
[  241.504776][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  241.516391][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  241.526710][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  241.543436][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  241.554652][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  241.566026][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.586031][  T892] usb 5-1: USB disconnect, device number 29
[  241.593306][    T9] usb 2-1: config 0 descriptor??
[  241.599729][ T8638] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  241.855260][ T8646] binder: 8644:8646 ioctl c0306201 0 returned -14
[  241.862574][ T8646] binder: 8644:8646 ioctl c0306201 0 returned -14
[  242.011972][ T8650] xt_nfacct: accounting object `\�$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist
[  242.068920][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.093584][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.406534][ T5914] usb 2-1: USB disconnect, device number 51
[  242.414336][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -19
[  242.609341][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  242.779868][    T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.790958][    T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.800754][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.808231][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  242.817579][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.827662][    T9] usb 5-1: config 0 descriptor??
[  242.860008][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'.
[  243.197526][  T892] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  243.252331][    T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.000E/input/input57
[  243.328094][  T892] usb 2-1: device descriptor read/64, error -71
[  243.343034][    T9] sony 0003:054C:03D5.000E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0
[  243.479446][   T30] kauditd_printk_skb: 89 callbacks suppressed
[  243.479464][   T30] audit: type=1326 audit(1763029194.805:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.486545][ T5914] usb 5-1: USB disconnect, device number 30
[  243.514197][   T30] audit: type=1326 audit(1763029194.835:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.538604][   T30] audit: type=1326 audit(1763029194.835:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.565058][   T30] audit: type=1326 audit(1763029194.835:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.587682][   T30] audit: type=1326 audit(1763029194.835:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.610309][   T30] audit: type=1326 audit(1763029194.835:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.614494][  T892] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  243.649462][   T30] audit: type=1326 audit(1763029194.835:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.676203][   T30] audit: type=1326 audit(1763029194.835:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.699782][   T30] audit: type=1326 audit(1763029194.835:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.722204][   T30] audit: type=1326 audit(1763029194.835:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97a0d8f6c9 code=0x7ffc0000
[  243.777831][ T8677] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  243.797586][  T892] usb 2-1: device descriptor read/64, error -71
[  243.942979][ T8680] 
@0Ù: renamed from bond_slave_1 (while UP)
[  244.008104][  T892] usb usb2-port1: attempt power cycle
[  244.347849][  T892] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  244.368417][  T892] usb 2-1: device descriptor read/8, error -71
[  244.607586][  T892] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  244.620879][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  244.629609][  T892] usb 2-1: device descriptor read/8, error -71
[  244.696478][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'.
[  244.708755][ T8690] netlink: 'syz.2.887': attribute type 12 has an invalid length.
[  244.738071][  T892] usb usb2-port1: unable to enumerate USB device
[  244.777593][    T9] usb 5-1: Using ep0 maxpacket: 8
[  244.786287][    T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  244.796303][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.804480][    T9] usb 5-1: Product: syz
[  244.809102][    T9] usb 5-1: Manufacturer: syz
[  244.813954][    T9] usb 5-1: SerialNumber: syz
[  244.821308][    T9] usb 5-1: config 0 descriptor??
[  244.830604][    T9] gspca_main: sq905-2.14.0 probing 2770:9120
[  245.244108][ T8686] binder: 8685:8686 ioctl 8933 200000000200 returned -22
[  245.299472][    T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  245.308704][    T9] sq905 5-1:0.0: probe with driver sq905 failed with error -71
[  245.321568][    T9] usb 5-1: USB disconnect, device number 31
[  245.792326][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'.
[  246.459813][  T892] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  246.612854][ T8731] netlink: 128 bytes leftover after parsing attributes in process `syz.4.903'.
[  246.632616][  T892] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  246.645650][  T892] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  246.666546][  T892] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  246.687495][  T892] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  246.699754][  T892] usb 2-1: Manufacturer: syz
[  246.707326][  T892] usb 2-1: config 0 descriptor??
[  246.718538][  T892] igorplugusb 2-1:0.0: incorrect number of endpoints
[  246.921127][    T9] usb 2-1: USB disconnect, device number 56
[  246.937761][  T892] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  247.087521][  T892] usb 5-1: Using ep0 maxpacket: 16
[  247.094076][  T892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  247.106957][  T892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  247.120155][  T892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  247.129296][  T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.137343][  T892] usb 5-1: Product: syz
[  247.141619][  T892] usb 5-1: Manufacturer: syz
[  247.146285][  T892] usb 5-1: SerialNumber: syz
[  247.152857][  T892] usb 5-1: config 0 descriptor??
[  247.161561][  T892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  247.170871][  T892] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  247.471374][ T8740] random: crng reseeded on system resumption
[  247.563956][ T8745] sctp: [Deprecated]: syz.2.909 (pid 8745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.563956][ T8745] Use struct sctp_sack_info instead
[  247.764600][  T892] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  247.768895][ T8734] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  247.780190][  T892] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  248.171180][ T8750] fuse: Unknown parameter 'mask'
[  248.391382][  T892] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  248.399895][  T892] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  248.406752][  T892] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  248.414005][  T892] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  248.420948][  T892] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  248.430438][  T892] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  248.442326][  T892] usb 5-1: USB disconnect, device number 32
[  248.821024][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'.
[  248.831846][ T8759] netlink: 'syz.3.915': attribute type 8 has an invalid length.
[  249.037780][ T8765] kvm: user requested TSC rate below hardware speed
[  249.045697][ T8765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  249.688856][ T8776] netlink: 168 bytes leftover after parsing attributes in process `syz.4.922'.
[  249.837339][ T8780] loop9: detected capacity change from 0 to 6
[  249.848716][    C1] blk_print_req_error: 21 callbacks suppressed
[  249.848734][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.864106][    C1] buffer_io_error: 21 callbacks suppressed
[  249.864120][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  249.878003][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.887211][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  249.895389][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.904551][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  249.913842][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.923025][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  249.932098][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.941288][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  249.949643][ T8780] ldm_validate_partition_table(): Disk read failed.
[  249.959635][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.966538][ T8782] Bluetooth: Invalid byte 07 after esc byte
[  249.968853][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  249.969694][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  249.991960][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  250.000281][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  250.009550][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  250.018484][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  250.027703][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  250.035554][ T8780] Dev loop9: unable to read RDB block 0
[  250.042435][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  250.051666][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  250.060331][ T8780]  loop9: unable to read partition table
[  250.066213][ T8780] loop9: partition table beyond EOD, truncated
[  250.072601][ T8780] loop_reread_partitions: partition scan of loop9 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  250.478252][   T50] Bluetooth: Error in BCSP hdr checksum
[  251.978606][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  251.979223][ T5835] Bluetooth: hci0: command 0x1003 tx timeout
[  252.427553][ T5857] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  252.579137][ T5857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.589348][ T5857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.600426][ T5857] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.609585][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.617770][ T5857] usb 5-1: Product: syz
[  252.622246][ T5857] usb 5-1: Manufacturer: syz
[  252.632372][ T5857] usb 5-1: SerialNumber: syz
[  253.504459][ T8816] xt_socket: unknown flags 0xe4
[  253.512920][ T8816] tipc: Started in network mode
[  253.518000][ T8816] tipc: Node identity 4, cluster identity 4711
[  253.524188][ T8816] tipc: Node number set to 4
[  255.015257][ T8827] FAULT_INJECTION: forcing a failure.
[  255.015257][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.029023][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.3.940 Not tainted syzkaller #0 PREEMPT(full) 
[  255.029050][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  255.029072][ T8827] Call Trace:
[  255.029080][ T8827]  <TASK>
[  255.029088][ T8827]  dump_stack_lvl+0x189/0x250
[  255.029116][ T8827]  ? __pfx____ratelimit+0x10/0x10
[  255.029137][ T8827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.029159][ T8827]  ? __pfx__printk+0x10/0x10
[  255.029181][ T8827]  ? __might_fault+0xb0/0x130
[  255.029217][ T8827]  should_fail_ex+0x414/0x560
[  255.029249][ T8827]  _copy_from_user+0x2d/0xb0
[  255.029272][ T8827]  __se_sys_mount+0x18b/0x410
[  255.029298][ T8827]  ? __pfx___se_sys_mount+0x10/0x10
[  255.029321][ T8827]  ? do_syscall_64+0xbe/0xfa0
[  255.029340][ T8827]  ? __x64_sys_mount+0x20/0xc0
[  255.029360][ T8827]  do_syscall_64+0xfa/0xfa0
[  255.029381][ T8827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.029400][ T8827]  ? clear_bhb_loop+0x60/0xb0
[  255.029422][ T8827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.029440][ T8827] RIP: 0033:0x7f094e18f6c9
[  255.029456][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.029471][ T8827] RSP: 002b:00007f094ef7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  255.029492][ T8827] RAX: ffffffffffffffda RBX: 00007f094e3e5fa0 RCX: 00007f094e18f6c9
[  255.029505][ T8827] RDX: 0000200000000380 RSI: 00002000000002c0 RDI: 0000200000000240
[  255.029518][ T8827] RBP: 00007f094ef7c090 R08: 00002000000003c0 R09: 0000000000000000
[  255.029530][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.029541][ T8827] R13: 00007f094e3e6038 R14: 00007f094e3e5fa0 R15: 00007ffcfcf67058
[  255.029571][ T8827]  </TASK>
[  255.255176][ T5857] usb 5-1: 0:2 : does not exist
[  255.266755][ T5857] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  255.347747][ T5857] usb 5-1: USB disconnect, device number 33
[  255.392571][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.467175][ T8836] FAULT_INJECTION: forcing a failure.
[  255.467175][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.483599][ T8836] CPU: 1 UID: 0 PID: 8836 Comm: syz.3.944 Not tainted syzkaller #0 PREEMPT(full) 
[  255.483623][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  255.483634][ T8836] Call Trace:
[  255.483641][ T8836]  <TASK>
[  255.483648][ T8836]  dump_stack_lvl+0x189/0x250
[  255.483675][ T8836]  ? __pfx____ratelimit+0x10/0x10
[  255.483695][ T8836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.483717][ T8836]  ? __pfx__printk+0x10/0x10
[  255.483737][ T8836]  ? __might_fault+0xb0/0x130
[  255.483771][ T8836]  should_fail_ex+0x414/0x560
[  255.483802][ T8836]  _copy_from_user+0x2d/0xb0
[  255.483824][ T8836]  ___sys_recvmsg+0x12e/0x510
[  255.483848][ T8836]  ? __pfx____sys_recvmsg+0x10/0x10
[  255.483888][ T8836]  ? __pfx_set_normalized_timespec64+0x10/0x10
[  255.483920][ T8836]  do_recvmmsg+0x307/0x770
[  255.483946][ T8836]  ? __pfx_do_recvmmsg+0x10/0x10
[  255.483976][ T8836]  ? _copy_from_user+0x94/0xb0
[  255.484011][ T8836]  __x64_sys_recvmmsg+0x1af/0x240
[  255.484031][ T8836]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  255.484054][ T8836]  ? do_syscall_64+0xbe/0xfa0
[  255.484077][ T8836]  do_syscall_64+0xfa/0xfa0
[  255.484098][ T8836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.484115][ T8836]  ? clear_bhb_loop+0x60/0xb0
[  255.484136][ T8836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.484152][ T8836] RIP: 0033:0x7f094e18f6c9
[  255.484168][ T8836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.484188][ T8836] RSP: 002b:00007f094ef7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  255.484206][ T8836] RAX: ffffffffffffffda RBX: 00007f094e3e5fa0 RCX: 00007f094e18f6c9
[  255.484219][ T8836] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  255.484232][ T8836] RBP: 00007f094ef7c090 R08: 0000200000003700 R09: 0000000000000000
[  255.484244][ T8836] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002
[  255.484254][ T8836] R13: 00007f094e3e6038 R14: 00007f094e3e5fa0 R15: 00007ffcfcf67058
[  255.484283][ T8836]  </TASK>
[  255.539111][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  255.987574][ T5857] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  256.140810][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.152012][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  256.161293][ T5857] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  256.170405][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.180392][ T5857] usb 5-1: config 0 descriptor??
[  257.218829][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.950'.
[  257.228653][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.950'.
[  257.285292][ T8855] overlayfs: failed to clone upperpath
[  258.063369][ T8869] bpf: Bad value for 'gid'
[  258.070552][ T8869] netlink: 'syz.2.955': attribute type 11 has an invalid length.
[  258.267476][ T8871] cgroup: No subsys list or none specified
[  258.280245][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  258.280259][   T30] audit: type=1800 audit(1763029209.605:123): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.956" name="bus" dev="overlay" ino=460 res=0 errno=0
[  258.381981][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.391188][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.182150][ T8894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.109871][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'.
[  261.667838][ T5857] Bluetooth: Can't get version to change to load ram patch err
[  261.675431][ T5857] Bluetooth: Loading sysconfig file failed
[  261.681599][ T5857] ath3k 5-1:0.0: probe with driver ath3k failed with error -110
[  262.759806][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.769385][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.780708][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.793741][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.807505][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.999343][ T8910] chnl_net:caif_netlink_parms(): no params data found
[  263.075294][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.083328][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.090723][ T8910] bridge_slave_0: entered allmulticast mode
[  263.098903][ T8910] bridge_slave_0: entered promiscuous mode
[  263.106729][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.114334][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.121820][ T8910] bridge_slave_1: entered allmulticast mode
[  263.129435][ T8910] bridge_slave_1: entered promiscuous mode
[  263.161216][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.173924][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.208258][ T8910] team0: Port device team_slave_0 added
[  263.216086][ T8910] team0: Port device team_slave_1 added
[  263.243238][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.250747][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.276689][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.289329][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.296327][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.322416][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.365817][ T8910] hsr_slave_0: entered promiscuous mode
[  263.372798][ T8910] hsr_slave_1: entered promiscuous mode
[  263.379240][ T8910] debugfs: 'hsr0' already exists in 'hsr'
[  263.384984][ T8910] Cannot create hsr debugfs directory
[  263.723420][ T8910] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  263.734818][ T8910] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  263.744957][ T8910] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  263.754917][ T8910] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  263.782256][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.789573][ T8910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.797895][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.805041][ T8910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.867114][ T8910] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.885276][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.893444][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.912091][ T8910] 8021q: adding VLAN 0 to HW filter on device team0
[  263.924789][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.932123][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.945032][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.952238][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.125173][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.325395][ T8910] veth0_vlan: entered promiscuous mode
[  264.337422][ T8910] veth1_vlan: entered promiscuous mode
[  264.369190][ T8910] veth0_macvtap: entered promiscuous mode
[  264.379316][ T8910] veth1_macvtap: entered promiscuous mode
[  264.400168][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.416857][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.432815][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.442022][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.452855][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.462120][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.532380][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.546827][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.584847][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.593205][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.867660][ T5837] Bluetooth: hci0: command tx timeout
[  264.918070][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  265.068946][ T5914] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  265.077447][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  265.091803][ T5914] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  265.106521][ T5914] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  265.114716][ T5914] usb 6-1: Manufacturer: syz
[  265.122739][ T5914] usb 6-1: config 0 descriptor??
[  265.131393][ T5914] igorplugusb 6-1:0.0: incorrect number of endpoints
[  265.333373][   T10] usb 6-1: USB disconnect, device number 2
[  265.881160][ T8958] Invalid source name
[  265.885300][ T8958] UBIFS error (pid: 8958): cannot open "./file0", error -22
[  266.127504][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  266.291321][   T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  266.301945][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.310057][   T10] usb 6-1: Product: syz
[  266.314225][   T10] usb 6-1: Manufacturer: syz
[  266.318982][   T10] usb 6-1: SerialNumber: syz
[  266.791522][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  266.804609][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  266.848968][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.858260][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.937671][ T5835] Bluetooth: hci0: command tx timeout
[  267.221361][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  267.233420][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  267.243418][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  267.254660][   T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  267.310229][   T30] audit: type=1326 audit(1763029218.635:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz.2.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a0d8f6c9 code=0x0
[  267.537840][ T8990] syzkaller1: entered promiscuous mode
[  267.543404][ T8990] syzkaller1: entered allmulticast mode
[  267.654315][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'.
[  268.917975][ T5914] usb 6-1: USB disconnect, device number 3
[  269.019442][ T5835] Bluetooth: hci0: command 0x040f tx timeout
[  269.297543][ T5914] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  269.447483][ T5914] usb 6-1: device descriptor read/64, error -71
[  269.687537][ T5914] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  269.784406][ T9033] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32
[  269.829961][ T5914] usb 6-1: device descriptor read/64, error -71
[  269.948750][ T5914] usb usb6-port1: attempt power cycle
[  270.270495][ T9044] IPVS: set_ctl: invalid protocol: 128 0.32.0.0:16382
[  270.303496][ T5914] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  270.339448][ T5914] usb 6-1: device descriptor read/8, error -71
[  270.587523][ T5914] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  270.607942][ T5914] usb 6-1: device descriptor read/8, error -71
[  270.718061][ T5914] usb usb6-port1: unable to enumerate USB device
[  270.859222][ T5889] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  270.885020][ T5889] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  270.900564][ T8740] Unrecognized hibernate image header format!
[  270.914130][ T5889] usb 4-1: USB disconnect, device number 74
[  270.927181][ T8740] PM: hibernation: Image mismatch: architecture specific data
[  271.095226][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.103725][ T5837] Bluetooth: hci0: command 0x040f tx timeout
[  271.114562][ T6540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.128068][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.238323][ T5889] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  271.282757][ T6540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.391401][ T5889] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  271.393756][ T6540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.404286][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.441135][ T5889] usb 4-1: Product: syz
[  271.445599][ T5889] usb 4-1: Manufacturer: syz
[  271.452507][ T5889] usb 4-1: SerialNumber: syz
[  271.513645][ T6540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.708405][ T6540] bridge_slave_1: left allmulticast mode
[  271.714222][ T6540] bridge_slave_1: left promiscuous mode
[  271.727864][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.755842][ T6540] bridge_slave_0: left allmulticast mode
[  271.767438][ T6540] bridge_slave_0: left promiscuous mode
[  271.773259][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.997144][ T5889] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  272.019297][ T5889] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  272.233137][ T6540] team0: Port device geneve0 removed
[  272.427967][ T6540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.441589][ T6540] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  272.467752][ T6540] bond0 (unregistering): Released all slaves
[  272.471503][ T5889] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  272.498005][ T5889] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  272.542261][ T5889] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  272.591918][ T5889] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  272.976492][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'.
[  272.986252][ T9118] bridge_slave_1: left allmulticast mode
[  272.992440][ T9118] bridge_slave_1: left promiscuous mode
[  273.015978][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.039824][ T9118] bridge_slave_0: left allmulticast mode
[  273.046488][ T9118] bridge_slave_0: left promiscuous mode
[  273.053274][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.177610][ T5835] Bluetooth: hci0: command 0x040f tx timeout
[  273.256032][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.276527][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.580125][  T892] usb 4-1: USB disconnect, device number 75
[  273.903014][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.925930][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.962735][ T6540] tipc: Disabling bearer <udp:syz1>
[  273.970923][ T6540] tipc: Left network mode
[  274.217041][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1030'.
[  274.400831][ T6540] hsr_slave_0: left promiscuous mode
[  274.415261][ T6540] hsr_slave_1: left promiscuous mode
[  274.433736][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.461149][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.493791][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.514116][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.590647][ T6540] veth1_macvtap: left promiscuous mode
[  274.605472][ T6540] veth0_macvtap: left promiscuous mode
[  274.617973][ T6540] veth1_vlan: left promiscuous mode
[  274.630695][ T6540] veth0_vlan: left promiscuous mode
[  275.164711][ T6540] team0 (unregistering): Port device team_slave_1 removed
[  275.238363][ T6540] team0 (unregistering): Port device team_slave_0 removed
[  275.258651][ T5835] Bluetooth: hci0: command 0x040f tx timeout
[  275.448291][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  275.620483][ T5914] usb 6-1: Using ep0 maxpacket: 8
[  275.634357][ T5914] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  275.643647][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.651720][ T5914] usb 6-1: Product: syz
[  275.655912][ T5914] usb 6-1: Manufacturer: syz
[  275.660825][ T5914] usb 6-1: SerialNumber: syz
[  275.676507][ T5914] usb 6-1: config 0 descriptor??
[  275.932438][ T5914] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  276.073919][ T6540] IPVS: stop unused estimator thread 0...
[  276.187529][    T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  276.337462][    T9] usb 4-1: Using ep0 maxpacket: 16
[  276.344107][    T9] usb 4-1: config 0 has an invalid interface number: 42 but max is 0
[  276.352393][    T9] usb 4-1: config 0 has no interface number 0
[  276.358579][    T9] usb 4-1: config 0 interface 42 has no altsetting 0
[  276.367594][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=cb.fd
[  276.376669][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.384782][    T9] usb 4-1: Product: syz
[  276.389078][    T9] usb 4-1: Manufacturer: syz
[  276.394800][    T9] usb 4-1: SerialNumber: syz
[  276.406434][    T9] usb 4-1: config 0 descriptor??
[  276.615869][ T9193] CIFS: iocharset name too long
[  276.820957][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.831944][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.049050][ T5914] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  277.061126][ T5914] usb 6-1: USB disconnect, device number 8
[  277.445575][   T30] audit: type=1326 audit(1763029228.765:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.4.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e78f6c9 code=0x0
[  278.107669][ T5914] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  278.259012][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  278.268797][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  278.282117][ T5914] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  278.293571][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.301900][ T5914] usb 6-1: Product: syz
[  278.306080][ T5914] usb 6-1: Manufacturer: syz
[  278.311399][ T5914] usb 6-1: SerialNumber: syz
[  278.330222][ T5914] usb 6-1: config 0 descriptor??
[  278.345009][ T5914] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress 0d
[  278.422465][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1060'.
[  278.496674][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.507339][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.562975][ T5914] usb 6-1: USB disconnect, device number 9
[  278.578657][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.601515][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.702624][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'.
[  278.766696][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'.
[  278.936321][  T892] usb 4-1: USB disconnect, device number 76
[  279.687487][  T892] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  279.827573][  T892] usb 6-1: device descriptor read/64, error -71
[  280.060690][ T9275] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[  280.069686][  T892] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  280.217587][  T892] usb 6-1: device descriptor read/64, error -71
[  280.327921][  T892] usb usb6-port1: attempt power cycle
[  280.367468][ T5914] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  280.517454][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  280.524227][ T5914] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  280.533369][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.547521][ T5914] pvrusb2: Hardware description: Terratec Grabster AV400
[  280.555554][ T5914] pvrusb2: **********
[  280.559830][ T5914] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  280.570064][ T5914] pvrusb2: Important functionality might not be entirely working.
[  280.578034][ T5914] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  280.590229][ T5914] pvrusb2: **********
[  280.677518][  T892] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  280.698275][  T892] usb 6-1: device descriptor read/8, error -71
[  280.746232][ T2342] pvrusb2: Invalid write control endpoint
[  280.784291][ T2342] pvrusb2: Invalid write control endpoint
[  280.791321][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  280.801651][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  280.809286][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  280.820068][ T2342] pvrusb2: Device being rendered inoperable
[  280.826145][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  280.833251][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  280.841556][ T2342] pvrusb2: Attached sub-driver cx25840
[  280.847046][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  280.857171][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  280.952943][ T5889] usb 4-1: USB disconnect, device number 77
[  280.959484][  T892] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  280.991190][  T892] usb 6-1: device descriptor read/8, error -71
[  281.107668][  T892] usb usb6-port1: unable to enumerate USB device
[  281.877070][   T30] audit: type=1326 audit(1763029233.195:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f094e18f6c9 code=0x0
[  282.575667][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.606456][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.949343][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'.
[  283.217486][ T5876] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  283.379407][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  283.388233][ T5876] usb 4-1: config 14 has an invalid interface number: 21 but max is 0
[  283.396421][ T5876] usb 4-1: config 14 has no interface number 0
[  283.402719][ T5876] usb 4-1: config 14 interface 21 has no altsetting 0
[  283.411578][ T5876] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[  283.421650][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.430442][ T5876] usb 4-1: Product: syz
[  283.434602][ T5876] usb 4-1: Manufacturer: syz
[  283.439238][ T5876] usb 4-1: SerialNumber: syz
[  283.656773][ T5876] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  283.665463][ T5876] usb 4-1: MIDIStreaming interface descriptor not found
[  283.694707][ T5876] usb 4-1: USB disconnect, device number 78
[  283.759703][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.254603][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.281934][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.295928][ T9347] binder: 9346:9347 ioctl c018620c 200000000580 returned -22
[  284.515610][ T9356] overlayfs: failed to clone upperpath
[  284.537852][    T9] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  284.647485][  T892] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  284.708893][    T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  284.717091][    T9] usb 4-1: config 0 has no interface number 0
[  284.724507][    T9] usb 4-1: config 0 interface 18 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0
[  284.735110][    T9] usb 4-1: config 0 interface 18 has no altsetting 0
[  284.744283][    T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  284.752795][    T9] usb 4-1: config 0 has no interface number 0
[  284.760276][    T9] usb 4-1: config 0 interface 18 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0
[  284.770603][    T9] usb 4-1: config 0 interface 18 has no altsetting 0
[  284.780321][    T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  284.789700][    T9] usb 4-1: config 0 has no interface number 0
[  284.795851][    T9] usb 4-1: config 0 interface 18 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0
[  284.806352][    T9] usb 4-1: config 0 interface 18 has no altsetting 0
[  284.815824][    T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  284.824659][    T9] usb 4-1: config 0 has no interface number 0
[  284.831146][  T892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  284.841053][    T9] usb 4-1: config 0 interface 18 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0
[  284.852413][  T892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 115, changing to 7
[  284.863580][    T9] usb 4-1: config 0 interface 18 has no altsetting 0
[  284.870863][  T892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59064, setting to 1024
[  284.884024][    T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  284.894115][    T9] usb 4-1: config 0 has no interface number 0
[  284.901347][  T892] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  284.910597][  T892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.918767][    T9] usb 4-1: config 0 interface 18 altsetting 128 endpoint 0x3 has invalid wMaxPacketSize 0
[  284.929326][  T892] usb 6-1: Product: syz
[  284.933511][  T892] usb 6-1: Manufacturer: syz
[  284.938647][    T9] usb 4-1: config 0 interface 18 has no altsetting 0
[  284.945469][  T892] usb 6-1: SerialNumber: syz
[  284.954852][    T9] usb 4-1: New USB device found, idVendor=06e0, idProduct=f110, bcdDevice=bf.25
[  284.965254][  T892] usb 6-1: config 0 descriptor??
[  284.970667][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.979548][    T9] usb 4-1: Product: syz
[  284.982842][  T892] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 72
[  284.999251][    T9] usb 4-1: Manufacturer: syz
[  285.003873][    T9] usb 4-1: SerialNumber: syz
[  285.010851][    T9] usb 4-1: config 0 descriptor??
[  285.020154][    T9] ti_usb_3410_5052 4-1:0.18: TI USB 3410 1 port adapter converter detected
[  285.029281][    T9] ti_usb_3410_5052 4-1:0.18: missing endpoints
[  285.223709][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.230425][  T892] usb 6-1: USB disconnect, device number 14
[  285.270459][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.444947][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'.
[  285.552765][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.569222][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.609095][ T9373] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1094'.
[  285.821039][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1094'.
[  285.832016][  T892] usb 4-1: USB disconnect, device number 79
[  285.963085][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1108'.
[  286.551614][ T9406] FAULT_INJECTION: forcing a failure.
[  286.551614][ T9406] name failslab, interval 1, probability 0, space 0, times 0
[  286.615197][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.4.1115 Not tainted syzkaller #0 PREEMPT(full) 
[  286.615221][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  286.615232][ T9406] Call Trace:
[  286.615239][ T9406]  <TASK>
[  286.615247][ T9406]  dump_stack_lvl+0x189/0x250
[  286.615275][ T9406]  ? __pfx____ratelimit+0x10/0x10
[  286.615295][ T9406]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.615316][ T9406]  ? __pfx__printk+0x10/0x10
[  286.615340][ T9406]  ? __pfx___might_resched+0x10/0x10
[  286.615361][ T9406]  ? fs_reclaim_acquire+0x7d/0x100
[  286.615400][ T9406]  should_fail_ex+0x414/0x560
[  286.615431][ T9406]  should_failslab+0xa8/0x100
[  286.615451][ T9406]  __kmalloc_noprof+0xdf/0x800
[  286.615475][ T9406]  ? rcu_is_watching+0x15/0xb0
[  286.615496][ T9406]  ? security_sk_alloc+0x52/0x390
[  286.615527][ T9406]  security_sk_alloc+0x52/0x390
[  286.615554][ T9406]  sk_prot_alloc+0x101/0x220
[  286.615584][ T9406]  sk_clone+0x7f/0x1000
[  286.615603][ T9406]  ? __local_bh_enable_ip+0x12d/0x1c0
[  286.615626][ T9406]  sctp_clone_sock+0x31/0x1690
[  286.615648][ T9406]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  286.615678][ T9406]  sctp_accept+0x555/0x710
[  286.615694][ T9406]  ? __asan_memcpy+0x40/0x70
[  286.615716][ T9406]  ? errseq_sample+0x40/0x70
[  286.615747][ T9406]  ? __pfx_sctp_accept+0x10/0x10
[  286.615763][ T9406]  ? aa_sk_perm+0x81c/0x950
[  286.615783][ T9406]  ? __pfx_autoremove_wake_function+0x10/0x10
[  286.615812][ T9406]  ? __pfx_aa_sk_perm+0x10/0x10
[  286.615837][ T9406]  inet_accept+0xb2/0x150
[  286.615859][ T9406]  do_accept+0x48f/0x680
[  286.615889][ T9406]  ? __pfx_do_accept+0x10/0x10
[  286.615934][ T9406]  __sys_accept4+0x11c/0x1c0
[  286.615967][ T9406]  ? __pfx___sys_accept4+0x10/0x10
[  286.615991][ T9406]  ? __pfx_ksys_write+0x10/0x10
[  286.616022][ T9406]  __x64_sys_accept+0x7d/0x90
[  286.616047][ T9406]  do_syscall_64+0xfa/0xfa0
[  286.616068][ T9406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.616086][ T9406]  ? clear_bhb_loop+0x60/0xb0
[  286.616107][ T9406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.616123][ T9406] RIP: 0033:0x7f2f6e78f6c9
[  286.616139][ T9406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.616154][ T9406] RSP: 002b:00007f2f6f688038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  286.616173][ T9406] RAX: ffffffffffffffda RBX: 00007f2f6e9e6090 RCX: 00007f2f6e78f6c9
[  286.616185][ T9406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  286.616195][ T9406] RBP: 00007f2f6f688090 R08: 0000000000000000 R09: 0000000000000000
[  286.616205][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.616215][ T9406] R13: 00007f2f6e9e6128 R14: 00007f2f6e9e6090 R15: 00007ffd1629d198
[  286.616244][ T9406]  </TASK>
[  286.953419][ T9410] /dev/nullb0: Can't open blockdev
[  287.407557][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  287.569523][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  287.607863][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  287.641583][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  287.651271][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.667514][    T9] usb 6-1: Product: syz
[  287.671861][    T9] usb 6-1: Manufacturer: syz
[  287.681168][    T9] usb 6-1: SerialNumber: syz
[  287.691022][    T9] usb 6-1: config 0 descriptor??
[  287.711984][    T9] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress 0d
[  287.961485][    T9] usb 6-1: USB disconnect, device number 15
[  288.018595][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  288.177696][ T5857] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  288.271089][ T9477] usb usb8: usbfs: process 9477 (syz.4.1130) did not claim interface 0 before use
[  288.369731][ T5857] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  288.384935][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.405389][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.414355][ T5857] usb 4-1: Product: syz
[  288.416273][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.418818][ T5857] usb 4-1: Manufacturer: syz
[  288.453106][ T5857] usb 4-1: SerialNumber: syz
[  288.743876][ T9495] FAULT_INJECTION: forcing a failure.
[  288.743876][ T9495] name failslab, interval 1, probability 0, space 0, times 0
[  288.757495][ T9495] CPU: 1 UID: 0 PID: 9495 Comm: syz.5.1134 Not tainted syzkaller #0 PREEMPT(full) 
[  288.757520][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  288.757531][ T9495] Call Trace:
[  288.757538][ T9495]  <TASK>
[  288.757546][ T9495]  dump_stack_lvl+0x189/0x250
[  288.757576][ T9495]  ? __pfx____ratelimit+0x10/0x10
[  288.757596][ T9495]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.757618][ T9495]  ? __pfx__printk+0x10/0x10
[  288.757640][ T9495]  ? __pfx___might_resched+0x10/0x10
[  288.757662][ T9495]  ? fs_reclaim_acquire+0x7d/0x100
[  288.757694][ T9495]  should_fail_ex+0x414/0x560
[  288.757725][ T9495]  should_failslab+0xa8/0x100
[  288.757744][ T9495]  kmem_cache_alloc_noprof+0x88/0x700
[  288.757773][ T9495]  ? alloc_empty_file+0x55/0x1d0
[  288.757797][ T9495]  alloc_empty_file+0x55/0x1d0
[  288.757818][ T9495]  alloc_file_pseudo+0x13d/0x210
[  288.757841][ T9495]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  288.757862][ T9495]  ? __pfx_hugetlb_reserve_pages+0x10/0x10
[  288.757891][ T9495]  hugetlb_file_setup+0x3ee/0x630
[  288.757915][ T9495]  ksys_mmap_pgoff+0x22f/0x760
[  288.757944][ T9495]  do_syscall_64+0xfa/0xfa0
[  288.757964][ T9495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.757981][ T9495]  ? clear_bhb_loop+0x60/0xb0
[  288.758003][ T9495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.758019][ T9495] RIP: 0033:0x7fe59ef8f6c9
[  288.758053][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.758068][ T9495] RSP: 002b:00007fe59fdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  288.758088][ T9495] RAX: ffffffffffffffda RBX: 00007fe59f1e5fa0 RCX: 00007fe59ef8f6c9
[  288.758101][ T9495] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000200000000000
[  288.758112][ T9495] RBP: 00007fe59fdd5090 R08: ffffffffffffffff R09: 0000000000000000
[  288.758124][ T9495] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001
[  288.758136][ T9495] R13: 00007fe59f1e6038 R14: 00007fe59f1e5fa0 R15: 00007ffd6113ac48
[  288.758166][ T9495]  </TASK>
[  289.034847][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  289.048944][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  289.232557][ T9505] FAULT_INJECTION: forcing a failure.
[  289.232557][ T9505] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.268134][ T9508] ------------[ cut here ]------------
[  289.274014][ T9508] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7)
[  289.286908][ T9505] CPU: 0 UID: 60928 PID: 9505 Comm: syz.5.1136 Not tainted syzkaller #0 PREEMPT(full) 
[  289.286933][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.286943][ T9505] Call Trace:
[  289.286950][ T9505]  <TASK>
[  289.286957][ T9505]  dump_stack_lvl+0x189/0x250
[  289.286984][ T9505]  ? __pfx____ratelimit+0x10/0x10
[  289.287004][ T9505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.287024][ T9505]  ? __pfx__printk+0x10/0x10
[  289.287045][ T9505]  ? __might_fault+0xb0/0x130
[  289.287082][ T9505]  should_fail_ex+0x414/0x560
[  289.287111][ T9505]  _copy_from_user+0x2d/0xb0
[  289.287133][ T9505]  binder_ioctl+0x43a/0x19c0
[  289.287161][ T9505]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  289.287184][ T9505]  ? do_vfs_ioctl+0xbe8/0x1430
[  289.287215][ T9505]  ? __pfx_binder_ioctl+0x10/0x10
[  289.287239][ T9505]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  289.287296][ T9505]  ? __fget_files+0x2a/0x420
[  289.287319][ T9505]  ? __fget_files+0x3a0/0x420
[  289.287336][ T9505]  ? __fget_files+0x2a/0x420
[  289.287357][ T9505]  ? bpf_lsm_file_ioctl+0x9/0x20
[  289.287374][ T9505]  ? __pfx_binder_ioctl+0x10/0x10
[  289.287398][ T9505]  __se_sys_ioctl+0xfc/0x170
[  289.287424][ T9505]  do_syscall_64+0xfa/0xfa0
[  289.287445][ T9505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.287463][ T9505]  ? clear_bhb_loop+0x60/0xb0
[  289.287484][ T9505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.287501][ T9505] RIP: 0033:0x7fe59ef8f6c9
[  289.287516][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.287531][ T9505] RSP: 002b:00007fe59fdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  289.287551][ T9505] RAX: ffffffffffffffda RBX: 00007fe59f1e5fa0 RCX: 00007fe59ef8f6c9
[  289.287564][ T9505] RDX: 0000200000004a80 RSI: 000000004018620d RDI: 0000000000000003
[  289.287575][ T9505] RBP: 00007fe59fdd5090 R08: 0000000000000000 R09: 0000000000000000
[  289.287586][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.287596][ T9505] R13: 00007fe59f1e6038 R14: 00007fe59f1e5fa0 R15: 00007ffd6113ac48
[  289.287624][ T9505]  </TASK>
[  289.394462][ T9508] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at mac80211_hwsim_sta_rc_update+0x6f5/0x860, CPU#1: syz.4.1137/9508
[  289.403534][ T9505] binder: 9503:9505 ioctl 4018620d 200000004a80 returned -22
[  289.406160][ T9508] Modules linked in:
[  289.524819][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.4.1137 Not tainted syzkaller #0 PREEMPT(full) 
[  289.534192][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.544334][ T9508] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  289.551162][ T9508] Code: b1 20 00 00 48 c7 c7 e0 7d 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 f8 aa fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 0d c2 e8 fa 90 0f 0b 90 e9 fe fe ff
[  289.573570][ T9508] RSP: 0018:ffffc9000bbf6e40 EFLAGS: 00010282
[  289.573600][ T9508] RAX: f154298e4d0e2900 RBX: 0000000000000014 RCX: 0000000000080000
[  289.573617][ T9508] RDX: ffffc9001a868000 RSI: 0000000000005487 RDI: 0000000000005488
[  289.573630][ T9508] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  289.573642][ T9508] R10: dffffc0000000000 R11: fffffbfff1c3a6ec R12: 0000000000000000
[  289.573656][ T9508] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  289.573669][ T9508] FS:  00007f2f6f6a96c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000
[  289.573685][ T9508] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.573699][ T9508] CR2: 00007fe7d5808e9c CR3: 0000000077ae6000 CR4: 00000000003526f0
[  289.573718][ T9508] Call Trace:
[  289.573728][ T9508]  <TASK>
[  289.573743][ T9508]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  289.573779][ T9508]  mac80211_hwsim_sta_add+0xa3/0x310
[  289.573807][ T9508]  drv_sta_state+0x7fd/0x18a0
[  289.573842][ T9508]  sta_info_insert_rcu+0x1a30/0x2840
[  289.573867][ T9508]  ? sta_info_insert_rcu+0x349/0x2840
[  289.573906][ T9508]  ? __pfx_sta_info_insert_rcu+0x10/0x10
[  289.573927][ T9508]  ? rate_control_rate_init_all_links+0x186/0x1a0
[  289.573955][ T9508]  ? ieee80211_add_station+0x4f1/0x6a0
[  289.573985][ T9508]  sta_info_insert+0x16/0xc0
[  289.574003][ T9508]  rdev_add_station+0xfc/0x290
[  289.574025][ T9508]  nl80211_new_station+0x1755/0x1b70
[  289.574066][ T9508]  ? __pfx_nl80211_new_station+0x10/0x10
[  289.574092][ T9508]  ? netlink_rcv_skb+0x208/0x470
[  289.574135][ T9508]  ? nl80211_pre_doit+0x4d5/0x8e0
[  289.574166][ T9508]  genl_family_rcv_msg_doit+0x215/0x300
[  289.574200][ T9508]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  289.574238][ T9508]  ? bpf_lsm_capable+0x9/0x20
[  289.574261][ T9508]  ? security_capable+0x7e/0x2e0
[  289.574291][ T9508]  genl_rcv_msg+0x60e/0x790
[  289.574321][ T9508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.574344][ T9508]  ? ref_tracker_free+0x63a/0x7d0
[  289.574362][ T9508]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  289.574386][ T9508]  ? __pfx_nl80211_new_station+0x10/0x10
[  289.574411][ T9508]  ? __pfx_nl80211_post_doit+0x10/0x10
[  289.574448][ T9508]  ? ____sys_sendmsg+0x505/0x870
[  289.574465][ T9508]  ? ___sys_sendmsg+0x21f/0x2a0
[  289.574481][ T9508]  ? __x64_sys_sendmsg+0x19b/0x260
[  289.574498][ T9508]  ? do_syscall_64+0xfa/0xfa0
[  289.574519][ T9508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.574548][ T9508]  netlink_rcv_skb+0x208/0x470
[  289.574565][ T9508]  ? __lock_acquire+0xab9/0xd20
[  289.574587][ T9508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.574614][ T9508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.574652][ T9508]  ? down_read+0x1ad/0x2e0
[  289.574681][ T9508]  genl_rcv+0x28/0x40
[  289.574703][ T9508]  netlink_unicast+0x82f/0x9e0
[  289.574740][ T9508]  ? __pfx_netlink_unicast+0x10/0x10
[  289.574770][ T9508]  ? netlink_sendmsg+0x642/0xb30
[  289.574805][ T9508]  ? skb_put+0x11b/0x210
[  289.574839][ T9508]  netlink_sendmsg+0x805/0xb30
[  289.574870][ T9508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.574895][ T9508]  ? aa_sock_msg_perm+0xf1/0x1d0
[  289.574922][ T9508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.574952][ T9508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.574973][ T9508]  __sock_sendmsg+0x21c/0x270
[  289.575004][ T9508]  ____sys_sendmsg+0x505/0x870
[  289.575030][ T9508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.575061][ T9508]  ? import_iovec+0x74/0xa0
[  289.575088][ T9508]  ___sys_sendmsg+0x21f/0x2a0
[  289.575111][ T9508]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.575170][ T9508]  ? __fget_files+0x2a/0x420
[  289.575191][ T9508]  ? __fget_files+0x3a0/0x420
[  289.575222][ T9508]  __x64_sys_sendmsg+0x19b/0x260
[  289.575248][ T9508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.575288][ T9508]  ? do_syscall_64+0xbe/0xfa0
[  289.575315][ T9508]  do_syscall_64+0xfa/0xfa0
[  289.575342][ T9508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.575363][ T9508]  ? clear_bhb_loop+0x60/0xb0
[  289.575389][ T9508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.575410][ T9508] RIP: 0033:0x7f2f6e78f6c9
[  289.575437][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.575456][ T9508] RSP: 002b:00007f2f6f6a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.575481][ T9508] RAX: ffffffffffffffda RBX: 00007f2f6e9e5fa0 RCX: 00007f2f6e78f6c9
[  289.575497][ T9508] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  289.575512][ T9508] RBP: 00007f2f6e811f91 R08: 0000000000000000 R09: 0000000000000000
[  289.575526][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.575539][ T9508] R13: 00007f2f6e9e6038 R14: 00007f2f6e9e5fa0 R15: 00007ffd1629d198
[  289.575573][ T9508]  </TASK>
[  289.575595][ T9508] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  289.575611][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.4.1137 Not tainted syzkaller #0 PREEMPT(full) 
[  289.575634][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.575648][ T9508] Call Trace:
[  289.575656][ T9508]  <TASK>
[  289.575665][ T9508]  dump_stack_lvl+0x99/0x250
[  289.575692][ T9508]  ? __asan_memcpy+0x40/0x70
[  289.575720][ T9508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.575745][ T9508]  ? __pfx__printk+0x10/0x10
[  289.575782][ T9508]  vpanic+0x237/0x6d0
[  289.575802][ T9508]  ? __pfx_vpanic+0x10/0x10
[  289.575829][ T9508]  ? is_bpf_text_address+0x292/0x2b0
[  289.575857][ T9508]  ? is_bpf_text_address+0x26/0x2b0
[  289.575894][ T9508]  panic+0xb9/0xc0
[  289.575910][ T9508]  ? __pfx_panic+0x10/0x10
[  289.575944][ T9508]  __warn+0x318/0x4d0
[  289.575960][ T9508]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  289.575987][ T9508]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  289.576010][ T9508]  report_bug+0x2be/0x4f0
[  289.576030][ T9508]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  289.576055][ T9508]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  289.576079][ T9508]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[  289.576102][ T9508]  handle_bug+0x84/0x160
[  289.576128][ T9508]  exc_invalid_op+0x1a/0x50
[  289.576152][ T9508]  asm_exc_invalid_op+0x1a/0x20
[  289.576169][ T9508] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  289.576193][ T9508] Code: b1 20 00 00 48 c7 c7 e0 7d 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 f8 aa fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 0d c2 e8 fa 90 0f 0b 90 e9 fe fe ff
[  289.576209][ T9508] RSP: 0018:ffffc9000bbf6e40 EFLAGS: 00010282
[  289.576226][ T9508] RAX: f154298e4d0e2900 RBX: 0000000000000014 RCX: 0000000000080000
[  289.576240][ T9508] RDX: ffffc9001a868000 RSI: 0000000000005487 RDI: 0000000000005488
[  289.576253][ T9508] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  289.576265][ T9508] R10: dffffc0000000000 R11: fffffbfff1c3a6ec R12: 0000000000000000
[  289.576278][ T9508] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  289.576311][ T9508]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  289.576341][ T9508]  mac80211_hwsim_sta_add+0xa3/0x310
[  289.576367][ T9508]  drv_sta_state+0x7fd/0x18a0
[  289.576400][ T9508]  sta_info_insert_rcu+0x1a30/0x2840
[  289.576446][ T9508]  ? sta_info_insert_rcu+0x349/0x2840
[  289.576485][ T9508]  ? __pfx_sta_info_insert_rcu+0x10/0x10
[  289.576506][ T9508]  ? rate_control_rate_init_all_links+0x186/0x1a0
[  289.576534][ T9508]  ? ieee80211_add_station+0x4f1/0x6a0
[  289.576567][ T9508]  sta_info_insert+0x16/0xc0
[  289.576585][ T9508]  rdev_add_station+0xfc/0x290
[  289.576608][ T9508]  nl80211_new_station+0x1755/0x1b70
[  289.576651][ T9508]  ? __pfx_nl80211_new_station+0x10/0x10
[  289.576678][ T9508]  ? netlink_rcv_skb+0x208/0x470
[  289.576722][ T9508]  ? nl80211_pre_doit+0x4d5/0x8e0
[  289.576757][ T9508]  genl_family_rcv_msg_doit+0x215/0x300
[  289.576790][ T9508]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  289.576829][ T9508]  ? bpf_lsm_capable+0x9/0x20
[  289.576851][ T9508]  ? security_capable+0x7e/0x2e0
[  289.576880][ T9508]  genl_rcv_msg+0x60e/0x790
[  289.576911][ T9508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.576932][ T9508]  ? ref_tracker_free+0x63a/0x7d0
[  289.576955][ T9508]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  289.576978][ T9508]  ? __pfx_nl80211_new_station+0x10/0x10
[  289.577004][ T9508]  ? __pfx_nl80211_post_doit+0x10/0x10
[  289.577028][ T9508]  ? ____sys_sendmsg+0x505/0x870
[  289.577043][ T9508]  ? ___sys_sendmsg+0x21f/0x2a0
[  289.577059][ T9508]  ? __x64_sys_sendmsg+0x19b/0x260
[  289.577075][ T9508]  ? do_syscall_64+0xfa/0xfa0
[  289.577095][ T9508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.577123][ T9508]  netlink_rcv_skb+0x208/0x470
[  289.577139][ T9508]  ? __lock_acquire+0xab9/0xd20
[  289.577160][ T9508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.577188][ T9508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.577226][ T9508]  ? down_read+0x1ad/0x2e0
[  289.577255][ T9508]  genl_rcv+0x28/0x40
[  289.577277][ T9508]  netlink_unicast+0x82f/0x9e0
[  289.577314][ T9508]  ? __pfx_netlink_unicast+0x10/0x10
[  289.577353][ T9508]  ? netlink_sendmsg+0x642/0xb30
[  289.577370][ T9508]  ? skb_put+0x11b/0x210
[  289.577401][ T9508]  netlink_sendmsg+0x805/0xb30
[  289.577436][ T9508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.577458][ T9508]  ? aa_sock_msg_perm+0xf1/0x1d0
[  289.577483][ T9508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.577510][ T9508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.577529][ T9508]  __sock_sendmsg+0x21c/0x270
[  289.577555][ T9508]  ____sys_sendmsg+0x505/0x870
[  289.577579][ T9508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.577607][ T9508]  ? import_iovec+0x74/0xa0
[  289.577634][ T9508]  ___sys_sendmsg+0x21f/0x2a0
[  289.577657][ T9508]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.577707][ T9508]  ? __fget_files+0x2a/0x420
[  289.577727][ T9508]  ? __fget_files+0x3a0/0x420
[  289.577757][ T9508]  __x64_sys_sendmsg+0x19b/0x260
[  289.577780][ T9508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.577814][ T9508]  ? do_syscall_64+0xbe/0xfa0
[  289.577838][ T9508]  do_syscall_64+0xfa/0xfa0
[  289.577856][ T9508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.577870][ T9508]  ? clear_bhb_loop+0x60/0xb0
[  289.577888][ T9508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.577903][ T9508] RIP: 0033:0x7f2f6e78f6c9
[  289.577916][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.577929][ T9508] RSP: 002b:00007f2f6f6a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.577945][ T9508] RAX: ffffffffffffffda RBX: 00007f2f6e9e5fa0 RCX: 00007f2f6e78f6c9
[  289.577957][ T9508] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  289.577966][ T9508] RBP: 00007f2f6e811f91 R08: 0000000000000000 R09: 0000000000000000
[  289.577976][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.577984][ T9508] R13: 00007f2f6e9e6038 R14: 00007f2f6e9e5fa0 R15: 00007ffd1629d198
[  289.578008][ T9508]  </TASK>
[  289.578354][ T9508] Kernel Offset: disabled