last executing test programs:

6.504537895s ago: executing program 2 (id=1050):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000006c0)={0x4, 0xfeffff7f, 0x8, 0x2, 0x100, &(0x7f0000000040)="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"})

6.459342829s ago: executing program 2 (id=1051):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x80, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {0x0, 0x7}, {0xfffffffc}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x1})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2}], 0x1, 0x40800)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.898960359s ago: executing program 3 (id=1056):
getpid()
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @private=0xa010102, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x0, 0x4}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@private=0xa010100, 0x4e26, 0x10000, 0x1cb, 0x12d61, 0x12d54}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x7ffffffe, 0x24, 0x3}}], 0x18}, 0x0)

5.840606884s ago: executing program 3 (id=1059):
syz_open_dev$media(0x0, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="68d9ea94ccf25b0a623693f5", 0xc}], 0x1}}], 0x1, 0x4001c00)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xffe)

5.670539316s ago: executing program 3 (id=1061):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.608966583s ago: executing program 2 (id=1063):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0xddddc000, 0xf000, 0x10, 0xb0, 0x0, 0x2, 0x82, 0x7f, 0x1, 0x7, 0x4, 0xe8}, {0x8000000, 0x1100, 0xf, 0x8, 0x0, 0x0, 0x3, 0x7f, 0x2f, 0xb6, 0x0, 0x5}, {0x8080000, 0x0, 0x3, 0x7, 0xb, 0x9, 0xa6, 0x40, 0x0, 0x1, 0x5, 0x4}, {0x1, 0xf000, 0x9, 0x0, 0x4, 0x7, 0x6, 0x3, 0x5, 0x2, 0x5, 0x40}, {0x10000, 0xf000, 0x0, 0x4, 0x4c, 0x81, 0x10, 0xe, 0xc, 0xbb, 0x6, 0xf}, {0xdddd1000, 0x4000, 0xa, 0x4, 0xb7, 0x40, 0x2, 0x8, 0x6, 0x4, 0x81, 0x8}, {0x10000, 0xd000, 0x0, 0x2, 0x1, 0x5, 0x1, 0x9, 0x5, 0x81, 0x1, 0xf}, {0xeeee8000, 0x6000, 0x8, 0x5, 0x5, 0xc, 0x16, 0xbf, 0x5, 0x1, 0xe, 0x7f}, {0x2000, 0x7}, {0x1000, 0x2}, 0x8, 0x0, 0x50000, 0x200, 0x4, 0x8000, 0x1000, [0x0, 0x8001, 0x5e, 0xfffffffffffffffc]})

4.367288873s ago: executing program 2 (id=1065):
r0 = syz_usb_connect$cdc_ncm(0x3, 0x11b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x2, 0x1, 0x3, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xb9, 0x8f, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x3ff, 0x20}, [@country_functional={0x12, 0x24, 0x7, 0x7, 0x8, [0x1, 0x4, 0x0, 0x4, 0x4, 0x4bb]}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm_detail={0x76, 0x24, 0x13, 0x7, "b603660c7ebe302d1bb44840193b018e17b75e0c5fb02dc47357792305e11a11d838f53f66bd60acb5a2e447add660cc52b293b5e43031097caf3393d48cdba5b5f058ef110d95e817b9d77a65b2e714e746bb7d31427bc6b6f317f65d421d5c6203fdd35d81dc52763f2f82ac20cb53a1a7"}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x80, 0x4, 0x2, 0x3ff, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8b, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x5e, 0xe}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xf, 0x5, 0x3, 0x8, 0x9}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0xd, 0x8, 0x8, 0xda}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "367cad115f57458dce847029a0cfde1b01bd6fb83a1d012f61e5cf59ebebaebe4681b8c9a58739c865b3ea9d13016333edcdb98c61e2a08dc284595b8fcc73e1bad7a56fc5e8e42f19894c10a35ebb469cfc4721e9c645b68fbf02d50f2907c2054081d970b4b353d7c32c1eabf4cfcaf6287c53966bf18fce871ce40e6885a37b7401759cbb5d3e557c64a8c704c78bffbdc70c9018c3de955f4fe975e68874777190190da943c1a3d5960817b510a3bfb44760fc772c6ff19bcaa9a4ca67f90ff10bf1ec79930afe16c68fe776f887d3b04948f16d7a172d45952f90a6dd7ce9ce801844f24bf7238e4fc46410"}}, {0xa1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a103b0e6309dba7cb5a1bb920c6b90d25a1b54cf9fbfdf941f89286383c00d08aa7a25f40a60d88dab3891dfcfb7d55f1e28102c79a6582797904c47c042e2724fc01b6b80a8ed454624e318b9c84aa34d28cf48a41840aded72b11ecfe74697e69bf2b748fddd2395d7eaf9c6454302f3725d14749c5afb9ac0f10b52bf5d9b97921b278f610da365e559143565cc4930a810913add266ec11103e29b027f7c00"]}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x40, 0x5, 0x90, {0x90, 0x21, "1bad38ffd1f02efc3defb06b5853357e3aea1740e32d9378275257082d33d841b295e7176235c05e18c54b2ee85961ee69e42dd6ff170fdb6d00cfb762daae01368a13e8650ae1210aee990c317b92d1feffc160470ebb63153089c2008a7837ab1aa0b092e41969e4ae9b9ba0151adb341a221a80a375e9df82223669c9f2a56ac97bcfbf3f227260affe489228"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x20, 0x8, 0x4a, "4ccc1690704a13f1f6ab30a666fde3e71d1342de31f5c9067a3f4cb58609a1427d1493ac510f8e8baca806018ac8a56144c0632a973175ccbbe06a1adcf6007ea41c4f5bc1aec8297256"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x56}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2a9, 0x3, 0x8, 0x7, 0x3, 0x8, 0x0, 0x4, 0x5c17, 0x7, 0x4, 0x150a}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x10001}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
r1 = fsopen(&(0x7f0000000380)='ntfs3\x00', 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001400)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001080)={0x31c, r5, 0x20b, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a, 0x0, 0x200, 0x7a, 0x800, 0xffff, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x50d, 0x6, 0x2, 0x1ff, 0x9, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x4, 0x7, 0xa, 0x2e73, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x2, 0x30, 0x48, 0x24, 0x24, 0x6, 0x60, 0x4, 0x30, 0x60, 0x12, 0x5, 0x3, 0x3, 0x9, 0xb, 0x5, 0x4, 0x1b, 0xc, 0x60, 0x9, 0x30, 0x48, 0x4, 0x6c, 0xc, 0x1, 0x9, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x9, 0xe, 0x1ff, 0x9, 0x3, 0xc]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x9, 0x7, 0x22, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x3}, {0x0, 0x7}, {0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x8}, {0x2, 0x1}, {0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x1}, {0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x401, 0x0, 0x2000, 0x7, 0x7, 0x6b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x6, 0x7fff, 0xfffb, 0x101, 0x7, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x65df, 0x3, 0x609d, 0x1, 0xfff7, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x7}, {0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x7}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x400, 0x6, 0x8c, 0x0, 0x40, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xffff, 0x3, 0x9, 0x1, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x3}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x24, 0x16, 0x5, 0x9, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x37df, 0x0, 0x7, 0x7, 0x6, 0x1ff, 0xb87]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa0e3, 0x1, 0x3, 0xcaf5, 0x9, 0x100, 0xf6]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x9]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x1}, {0x7, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {}, {0x0, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x4}, {0x2, 0x7}, {0x6, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x60, 0x3, 0x36, 0x12, 0x48, 0x1b, 0x1b, 0x5, 0x9, 0xc, 0x18, 0xb, 0x60, 0x48, 0x36, 0x3, 0x12, 0x36, 0x12, 0x48, 0x6c, 0x2, 0x6c, 0x24]}]}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x92}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000085}, 0x20004000)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000010)
r9 = syz_usb_connect$cdc_ecm(0x4, 0x63, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xef, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "da401f2b569c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x6, 0xc7}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x7, 0x5, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x8a, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x2, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x200, 0x7, 0x10, 0x16, 0x20, 0x8}, 0xb, &(0x7f0000000a80)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x280a}}, {0x25, &(0x7f0000000b00)=@string={0x25, 0x3, "6f01c7ef67efb9af2bde720603d431d6aaa61191d7a7bd67ca4e1fe1acc296bb485ccf"}}]})
syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x20, 0x21, 0x96, {0x96, 0x31, "f7856e1c3aaa44638bc7885addffef0c818aeff584ad442871d7059f0cdc84b81c4ac4aabfaa9ddf26df409c12bdf6c533a753db1f578fb23d5650b5199d9c3947281761be9774bf014b714f6d2ecb5c149c2ca00b523b9bec46315b7e8173df9da3523282a75b58579a94cf8b312dbb439d542c12d68dbe1273d1a3fe2540e3f5a706ef5b92b9a03da0641f1c7d4f28bf1828a3"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000cc0)={0x0, 0x11, 0x2d, "6d04dfd1886baa2faa53a39b9ca46e3ac52cdaf8cef46a5ef4574a68ae5a5e76ab67796e981f7f6c847f22a182"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xc}})
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x2)
getsockopt(r2, 0x9, 0xb7e, &(0x7f0000002500)=""/4096, &(0x7f0000000dc0)=0x1000)
ioctl$VT_WAITACTIVE(r10, 0x5607)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe0, 0xbe, "536e127b4c5e7160c523820ffa88e418c1ec68dc4bdacc24e9a5a0bd9bac06879c871a347b97c680ac30aa5aa0214abd92d60f5d5d64ad0ab0cedd3eca6db5bf34bde0b6b50b7e012a2063f072f3d55fb6b83a3d09fa3ab6322f5349735987a96cf2e6394a551f16b6c2517b72485822086c34127950c93e43fba6457dcdca17cde6153ae04775e805d286bba1e5bc07826a6eb66069cb79888e8ba0fadaf41d1061f30a9b244d605ad2d09a139d8b3abbfba4cf28dc48432d33d2079bc244c6d01d346661337632fcce783043d1a2447a2c52ec86e9eccb1782ca49"}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_emit_vhci(&(0x7f0000001a00)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}}}, 0xd)

3.575836851s ago: executing program 0 (id=1066):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0)
write$rfkill(r1, &(0x7f0000003340)={0x0, 0x0, 0x2}, 0x8)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000001000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.535744403s ago: executing program 0 (id=1067):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xff}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004091}, 0x20040000)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={<r3=>0x0, 0x2}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r3, 0xfff}, 0x8)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg0\x00', 0x4)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x108, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0xc1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={<r6=>r3, @in6={{0xa, 0x1000, 0x2, @private0, 0x9}}, [0xb, 0x9, 0x0, 0x0, 0xfff, 0x4, 0x2, 0x800, 0xf, 0x3ff, 0x6, 0xfffffffffffffffd, 0x800, 0xffffffffffffffff, 0x3]}, &(0x7f0000000540)=0x100)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000580)={0x4, 0x0, 0xc, 0x1, 0x9, 0x8, 0xa, 0xb, r6}, &(0x7f00000005c0)=0x20)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x80)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000740)=""/232, &(0x7f0000000840)=0xe8)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000980)={&(0x7f0000000880)=""/199, 0xc7, 0x4, 0xe3c8})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000b00), &(0x7f0000000b80)=0x68)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r0)
sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r9, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc020)
fstatfs(r0, &(0x7f0000000d00)=""/121)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r8)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r10, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4c8d4)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000f40)={'wpan1\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000f80)={'wpan1\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}}, 0x40060)
openat$mice(0xffffffffffffff9c, &(0x7f0000001080), 0x200880)

3.399239906s ago: executing program 0 (id=1068):
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="68d9ea94ccf25b0a623693f5", 0xc}], 0x1}}], 0x1, 0x4001c00)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700ac0f00004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xffe)

3.280637761s ago: executing program 0 (id=1069):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r2, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001d0040000000", 0x24)
ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]})
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="aad87ef6e805d969184e477cf2f5559e", 0x10)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f00000001c0)={&(0x7f0000000580)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}, 0x40000)

3.237273287s ago: executing program 0 (id=1071):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x80, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {0x0, 0x7}, {0xfffffffc}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x1})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2}], 0x1, 0x40800)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.183752725s ago: executing program 3 (id=1072):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]})
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x140, r0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x24044800}, 0x10)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000)
r4 = syz_open_dev$sg(&(0x7f0000000300), 0x7, 0x8000)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)

3.056487898s ago: executing program 3 (id=1073):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x80, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {0x0, 0x7}, {0xfffffffc}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x1})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2}], 0x1, 0x40800)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.867846447s ago: executing program 2 (id=1075):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYRESDEC=r0], 0xe8}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="080043fed2000000000400"], 0x8)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000140))
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000085290005000301000000000500030080000000050003000100000008000200030000"], 0x50}}, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x92046, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'pcmda12\x00', [0x4f27, 0xf, 0xcd, 0x4, 0x80000041, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x8f, 0x1600, 0x3, 0x6, 0x5, 0xe1cb, 0x6, 0x2, 0x3, 0x2, 0x89, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0x6, 0x200003, 0x2000003c, 0x9, 0x9, 0x7fffffc, 0xdffffffa]})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x1, 0x10000, 0x824f, 0x0, [{0x1f696440, 0x80000008, 0x100}]})
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xb}}, 0x20)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="cebe8ba2084ace111620", 0xa, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x3, 0x3, 0x1, 0x2, 0xff}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)="454de2ce11c26a170aec56a2eb1a679e8ad8b6e75cd59516e100b25012e2722a10f88a57771c5fd8742f7313a55abe02d9053e6fb9434002765c1c9ddee6c915d1c097a5cd63a98b2316307c77237852eb6739996e16c46b3e1eff1003da386cce8527c2eb41489031e3c7748e0141f19fad39fb42e60d931083ef0c739084d3dc79d7834776db629535730945b77aa6c84af2813f6a5ce15ba4b3dc93006d5f534e99d4258d21c05122392186eef95fbc83491ddb91bd6ffb72352ced943428588119d595be6b27d4a3cd775db72df0ea692b01a77a48be7a9f8da58e63c014", 0xe0}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="88000000000000000600000001000080f74d1540d59f54070da91fd846c5b090735c439b6d8efeda5b90ea32bf657d52ba19d238fad4fd19d3e34032ca6cb2bdabc120107365fa33a10a5631e1995428c04171b1150dde877476cfadf1296562e519ad366f8c19f9bd171067469bac4123538a9667b6fe142841e984948c4b7e685c1a1d7d00000010100000000000001201000004000000e8d9304e8019724430ca13fa73a7e091b47c04c44f494e7da03a82eb10a6f4c00b78c5555685f3a8a29e71eb601f3f19c553d4373d1e80b0a244c74ce6f75a302b2298a329f6add30bee845f59c5dc4169da15325636846de0e0d5a7c94e77c6c72f75308bf9715edd1c057314ae2346702b57e2e0b8d4b5a5001995938f254858c9163af2dbbb536ed57aaf035c6e2dacea46194ce95510273a37b3d424105431d7aa978b706a3aa107c2cb581174458f9ec3a8abbcab04b1cc355a42aefe038d849aa7a62447fac81d5e799bffa5de99dcee289a4e6c693c42dc037787f88fb2f682459124c3078d04008f4fac8c86713658a82a20161f14978b70aef4ea084113017952b48dfff3c452dd47cd87c3fe7230a86ae0f1e773a3ddb85431aab997f3ebbd07904bc5d9bcd860d1dabbc681a31d92b8ff1017bfd31be80fd8722a81feed434d0289bfcfa155ca271f6428b652e584e47186deb7d36313619ab77beea3d5581864ca94f0cfec49374e2253409eb2bda6675b079351254a2a8f55ec9062ad974c3c99305959ddac9501ef7996f29d3cc7139c0d75a8f6009dfdbb2bb0f60721aa0a5951835c672548084d69d54bad4056f6983fde6e7f1f8385025eaebb9f6a23f47a26a33e71c3be03c302ee4f71284c5f3a61a54b5db90910f6f3f4d9b28e7da25b16881588a1b408fb6ad44e6311436b8054f1c0c4660da166a558aa302ca543f4f9604762f8226c9fac29528667748556985625a6eb326f8dc934b0883e87f25468b62195061db716c367cd6277d7014e63d54102730c12fd0f50170bd391cd2852014468a8348d41ce459e7b0cbb6cf59cc19b06b027da254c02e6a0659d57b6b7a8cacdd6ba412c6bf7f36725a167e26acf72bbfdef2c0e2ecc05f309429a10fea5053d866a69a91a3f6499eab5cded3b7421a5c3a4f0311a9c2f95c73275e7a8fcf90850c67a3e2406c6285e582f77393158033074bfcf14984b7b3939c854755be4e194cea7cb728a069d7f22f7a91f26bdd40553e44b1bcc048a630308b2a93620fb6016783ea3dd3af3ff78d3b28250c0c95cc6c45c2d427ee6ee81aea6215bb48c1c7781e6f5441b52dbe85148a6c595a2a4a7216f2d30c4f92d8bbb801eb6b49e42ead84e26a623d9228df35b91aa93240d8e2c48c9b9ea13f49c9a08dc67d6d0511f99986e45a9c035f4a7ec3dea8db5179d1f9683e14618cec0486ce96013794d7daf9d24bf338f0a458f3e2a5b8683220764fbc45ee2b16fb6ed2dbb27a7d38cd7abf28fd1ea98ab0853b2d0d1c1ee4c5fdd942a182da8e7ec3f8cbcddc9eccde30919e86c81b37a39b8539e7b5f0c6aeb7df52dc8dc1f41c222c468091ea13b7e96120fb34a0922a094cfe8c7812f0c2423935cd4379deabcbc270379036a6906425de10d694051779f1628522d21995ed2a3ef99e55c9e0ad12535dfb7e61165142d3278f0be3ce519ed8590dbd40fa179df95b0e38675d06377ebe4375861a86a235d7ca1ec458dc61d266a136ea853e1cb430059b257c5e909e4a63335d8158a971c181dfb57601ceefa9c2b3dddf3863ef11975d66679e9a04c854c85d8833dcbc0d568ad8c5417e1c20e07ffacbd0a79d2d5477216fd99f8f54bf08ca1da1e286392c15a8870045003fd2a1bdf9fd5ba43a7dcbe2a7931a6b3143a6a22d9a1abd9c994396353e2db4d58e37914a709561bce0ce651d2ef70fc694935c7ac18e8ed202f02c1a8a48d93dac41b91678dc4df15a6534bbcb09375ee04079a75cd3dd3c16e2252b8a9f89b251fc70e5a385cf910a33173c75f4712225a7de8139df7aab5c243b4cd820b568ee3e85ad03528c57df329f8043a8f4869716fa2b76dec6a9b4e63a96c79839ea8b93dac45f386ef620705ef4e3f6f5347667484209184a87ef4592a2a786c5aa56f8ffb9d72b7da9bfe0c7d06063d4aae2847b55fd97c820d6b51bfb8c18f66e227f12df9f36afb84cf953948d5369876ad49e9840c311ff5ae6aff0a592ba38870fe1bcd22e7e24da5b5f62379e0b7d9ce7b3b78384400ec6812b2d1656f9040ca51074270248d20e162faacbfcc3c61d130f7c4442d154e5e172ce11019cb82ec6c3d2ba8dc47d0d19eb9aed560b43bad51f33d591d95c9ae525c9f6e816536dc5067770af8550169550f914466d56511ecab187320c87ac41e6a2c1bfec3712ec4686509cabf87d50305d791ea1474301e66f1e344db108615ca8dd32256ca987e94c54ac9c0a238381f65937dfca2122244eea2d59459a3587d8f6467c28068ffd256c3801e8dda9263fb4fae4b128c80f50fcba42fca5a3bf197f38bcd268338e92f3f6e2c6693e0212330ad749e3a8899981d51e79d711522ff65fba0ace4559dcb4f4f3279a7062fe8143dd1d6bd4914a6643e00ff48fd151312737de317ab6ec1b7295d75c3ce8b9b72b2f4ddc6a2d4440d30f9f5ce6db6118e82da44607ded013d16035cc17414c6d90565bc0f8d465c540b6e082a5a0fbdfed85ede568df0c8f89cc47287d8cb8e4522969fa0ff2a0823e3c1e93acca9f26d92beb8df2593b46e8fefd56115f0599c17670ca7f671814ef6ebee8996acaa6425c5d990c285f3b5c25a8264d2d27b2048105ad232f361021e8a2fc48bf0c95d2fa21b6a217d7d4b9ce6378b1620dcd676891dfe51136f4d6e36e1d18e5fe506a63c2efae7512a38912223f4523f2b273cf43f9625ef561ba90a7bca3c4d9ba6ce562ddbe7ce8d1e0db4eea36063626fb842072069752e4ff8cd26d2d130a7546ee34166b9e7865d3edafe0bc6031c505c22a52acc0b483d3a36c8c782864d2ad9941bcef39cc7af09b5c98b07b68b4826f8888d4a01f9335d0cb2c6c07f6df17c8ed6ba2b5b6843365814be217d889eb6b22c5a9206290cf8892c8439aa31fdd66260f0a8419a2cb003a34c357969beaaf390e9d6ead8e183de4ded8df60073679a5479e522195d95c6bd8d4244810b1960732b8300df104b8b09d5c07241fc867fedab39aafd5a581ff484d41d352f3395b3081539f09e1416aa55f5423bda9ae8b8e267b61c3a0df50be5d766f1cf1b1b6d4c60d8346f14a2a838bedf134e7d068dbd2aea3a20dc4b42b4e9a1e118a371695020d57063b367574720f0c8ca3139ab07f3c039af6e86a7b835cd8055a08070c25bc9b22b8d093439fd5df7a71e83a5dd13fb4ab76aa1caa9e8a5b7fa9e77cfa4688cba1996a626deae071b87e8d3ddde2b15514866d7b3b8f6a993abc3534b20cfd1c0a74336a111d3348ffb1b9acad8c953be536a6e4dfb10d51de4f1b32902c5ed4ecb26a6d211024707eb99ee540dd6d827eee4df9fc20253cf06d824a9e2bf417624cb9ef1179c00435a69f8b7001c4cf87cd5be12e1a14eb863922520ecd542cde11b425ac12ec68ac8edec74d99bc9a7808de977c0464fdf5242a68faf53e8051226fc7ea19181ca1795f5ab2fd2548ef7ca97067b0b39005c5fd8d9c0b18ced58aa0b10cda5b3ff11babfdb8acd9d210d49eaf26e67fdc73e544e38fc1a630ea8e54f5736181bd42792ce7a57138501444db0fd86792884339c5d19cacd6a17f3c1e66b06f7834c8551cb53b672f6aac7cd844a87411177d4caf0f447545a6449168ca985e99dfe018f04b90507552ffe8142416715ef85ec1ec0c496e31191f88a3336cf825d00f6780c821d9e8d9c5881ef31d9c78e8f2ee4217c9e0fd00b85fb96a65f4170454c94afdfd53d2785ac7de05c1295249efa0d955249074559f10502424c8cd34b8ec6f216c92d706f7ee5bf8e8f3a978434bb7dd54ac373ab2b5edbd705b647c247ed961f74d16c459ad9e389c1e6138ce47808202f2fb165d982d36cc7ed4c3586dc4c83126aafe645789f90e4ebdae233a66ec7f1c4be3b3523f440e8b1a2d861260d319fb3379e1b9df1342e9c0aebf042ff1bdb2f48f516e6f6e9bc668d77023a2a1b43b5078af33f039a55a8d89beff6ba1b738ce3595d2f25cb6a7709dba80d76f7e7078e09d3cfbe45df5369f39e82ffc714ceba80bc08b57c3fc50c97a370c39ed8922dc9fc9a54dc1e7539589e6e48b1eba958a633ffa8cedfe1e2167801c2ffa7b36019715caf4f9c08d51c089fe0cfaea7fdcec9e21ef230472520ba94d76e1c9dc598c36052fd5321a9b73d42f0f4dbb67c3c9524b7d091d741831d220f8bab23eb628f0afd9ed959864d9b6b9779dfb647901139cafb25c12a6df6dc2f093c7b282d3a9795b40e15a6b0c7acfc38595538910288d260beab75a2d01f1a4763ba6c3ec91f9bb5863790f51a08b6bc8488b84ac4171c93c5b0672180e5ed2fee2fbd40bfadec72f4f566e9d6db14eacdcfa36035fe4fd13f08a8e956afd245e910aef0a348229333683f4830f74673124b1536ef2227f45efa2791866dfc57db9acffece6d053cf6684a403401898e6c42a9218ae2055ad4a2c2bfa96ac1ff23e1542073b7492f0ff158b7e068f509540118aa2ffe0634383a07d7ac0d59e5d703d6fc500b24860720cc123e7b596e512e2fbe22f6962280b021a0304ac50d936953d4bd855591971f676f683f9eae9a7c2e715d26b15de04a9ed3e24a4a6cb6073bf40df295dd914a60247b8c2f791081d419333cdae241e1613477bac3c666c9c4b676c116629a5630aa5e4ef4650ad765979ca4f6a06bcdfad8e2b1282b8ef0cd5323a8a0de79d93d4c9989051d5f9f9597c3921ab35f412bedc5225e26557cb6e9d8d48e34bc1aeadb8fc476c309a74be31498890b45d540a06f3d29e52649e930d3e157559168e617d38689d886248fe6e5c456c1a283df4c7b5e1ccd4374cd9c608e7c5a03ac3eb1b66386348c073bb2509883b4a719cc01c55760dd10e20beb79ed44e587a22da559abd46eb3918493040588644b14b77082021a31007ff72c5877d3b598b909c00e79fbb0b6ec0f86d3655335727a36df702a3f4662fb95a0ce0c754d66b566a673c31af913b4d604d72ce4c524b66b1ab952fa4b17d61a977a863a2e03eb999e7767af9f7ce3055ada2d91a73adbd94ecd6ed9a088f639f5a29a43d0f9f21b9543792a07e1d681df8ceea3c6a0a4473328c992429887cdcf2f584729c906f1f399c25bb77c8d0db871ab344de032bdbbfaaa0bd97d76e61502af4d1042d6ca5ba826faad6ddf93ae48f0741d06f98967fcc1b5770844644f93d1374bb7096db6278f49ea9de7d4029bb060bc62ab96956188a86f453af7dffb722cb71ce662fdf90bca72282618fa0ea1e2a2e0af33b3125603b008839053000a417ecc9555ec710b908674a9a1810f5ed2a7585a79b22bd0781f920b0c833e1d956326ca311648663493477aa5c49fd441ae876d8c12b3cca8f1fceab12610fbb2ebe5f1c8a99512c04c7947953d8e10a9bbdf258bc9e83c744308d0b8c3e030be29c7a14b428d6b1d741cb767971c53f7241a97c5fee08ee5e10e1dca8ed121cb341100c8c2bf5743a2c46ca1010c0a3a880a2b3a68ad5c88c28140438479870ecfa310dc1c09ef0f16b0e30d83baf950b9de3caeac0cd151899d3b32b756e9ceeef6434522f002de15179ddb27e1ae85978ce2f633d886b69e6753d0add729e51dd74d872659d74cb217911d0b78847d718c5d87d13b22f0f1bb1256ecdc66f6740ac7c706399c2e89d49869751856cce401ace2d14b8ed8d4fa414601108cb8d554960c2f16b1050426cdbd5c1cc2d13c7df3cbf66ea843457552661fb2e3bac950b512e6be883a5c82817db52b9860fe009d614aabb043c1cc7074eeb461c64000000000000000ff0000000600000017568c29346530a4fd80bc6dccb27f70b15835a492a15dda813e39c1fa87f995e421a1bab5e7f0eb7c1b8115baa35b00b8000000000000000000000006000000c9b2cf5cfb05a6879a1db20b2f48ab7d5ea98ae28f980cead9b01dfdca4aabf9d2f22537d8335f1e1bbea5faaf6e923d766eec8244769de46c0b8028d74e9d7dd58ff5343e322c750b41580c76c64f940881d165b1ca28fda620bbc594c04857b830f735cf5ed04fc19edd5183fc6e932ec4c7ef1336ce39e7fd464fa283ed6e620960947876bbcf44e1b270481b81ea2b6db8bf214b3e1dadb8cf4879ee23dff0c4023800000000980000000000000011010000ff03000069253cc13843e013d57dc06d172c945589d3563c36b86a6df2834c87081e9cee9b116bbb037f363c9b94a9be978cfbd514c922a160f9fa1676f709e54028cb6794f2056aeb84e3460a319d6da1cce1b326b193d6061ca20e1c922c31021764ff6db2ee439f03d55f4a7a4d7035f6e9f6bfec15a757ac4f7482f5031521e5e271f8b280000000000080000000000000003a000000ff0100005bff36c52f2509e33fe67915bab1e279d7e683ec7ef7bf736ff985c966db1ad62cb01171e07b62ad3680601a0b7f72fdf603c50149be6c9a02061888ab3f7a40b3b61ec6a6042ad3a960c9abcce62e66e3a23a901733dfc98c7c1b0a988d1f6908118544047138dc5c29253d4dba0500"], 0x12a8}, 0x20004084)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0205"]}, {0x5a, 0x0}]})

2.69359854s ago: executing program 0 (id=1079):
r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x8000)
ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000380))
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x355a80ad4125c70b, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xfffffffffffffffb})
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xd6d4})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c)
listen(r5, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r6}}, 0x20)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080))
ioctl$EVIOCGABS20(r8, 0x40044591, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{0xfffffffffffffff8, 0x1ac}, {0xffffffffffff7fff}, 0x8, 0x4})
ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000300))
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8=r2], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000e5005580cd0558a43016a44431d0c930fd4b4390d6e9689a0918d50dc1105a93cb7082c7a9f843ebef1e9bbfc0859035edfc5b0feeeab4317106199bf3d06067b2175cbd0ebc393b023aedd7252cb2bc0020c534700ae3c20906e7ae4547129c3c54e05cb98f8c2a5102d5cc7d4126d31246d2d53a13b86ef272b0d6039d8f5baac51dc865419e9510aabbabb581280f0534e22e79eb5160751a9f40b1ece0af484329a5d60680ad0ae90ca39e885650a0d94c61747ea81e39e7b930b3ae807c1d9c627c5cb65e7197b9a6dbdaf9baf05d73a1645f5a617a42", @ANYRES16=r10, @ANYBLOB="00012abd7000fcdbdf25350000000c009900060000000200000014005500004870d09e2e626b7e3acaf5c97f8aad0a00060050505050505000000600fd0007000000050020012100000008001f01ff7f00000a0034000101010101010000140055007f72c0d98f955d1ca5a324a7a90979e50a0006000802110000010000"], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x4000800)

2.584560131s ago: executing program 1 (id=1080):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfffffffffffffff0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x34}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

2.472367296s ago: executing program 1 (id=1081):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
lremovexattr(0x0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00')
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010028bd70be10e7d8388e95de0008000300", @ANYRES32=r1], 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x10)

2.454268129s ago: executing program 1 (id=1082):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
read(r1, &(0x7f0000000340)=""/18, 0x12)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000500)=0x73e2)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x19, 0x4)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x13})
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) (async)
read(r1, &(0x7f0000000340)=""/18, 0x12) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000500)=0x73e2) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x19, 0x4) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) (async)
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x13}) (async)

1.513109534s ago: executing program 2 (id=1083):
r0 = syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x8}}}}}]}}]}}, 0x0)
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000440)=@nullb, 0xffffffffffffffff, &(0x7f0000000680))
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xb, "5b62d1da"}, @local=@item_012={0x2, 0x2, 0x0, "b873"}, @main=@item_4={0x3, 0x0, 0xa, "58046822"}]}}, 0x0}, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = accept4$ax25(r3, &(0x7f0000000700)={{}, [@bcast, @netrom, @null, @null, @null, @null, @default]}, &(0x7f0000000100)=0x48, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x420e, r0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000780)={{r2}, "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"})
r5 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0xffdffff7, 0xffffffff, 0x5, "ff000000000000000000000000000200"})
r7 = syz_open_pts(r6, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_buf(r8, 0x29, 0x32, 0x0, 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x57)
ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0x10, 0x80, 0xe000, 0xb3, 0x14, "041000001000"})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x14)
syz_usb_control_io$rtl8150(r5, &(0x7f00000001c0)={0x14, &(0x7f00000002c0)={0x20, 0x3, 0xcf, {0xcf, 0x9, "2cecaf19696802e16201f40ad017abcfcbf37220bba223788ea95e8473b109f4de306b5dfcd994e02c6c9478fa30d7cee2ca542c0e366f5043f099ba8cd6381964f2b1e4c8869b19b6cd9f000d3b3cbf32ead32a21c556bb11a2ddc147609cc98f203a839839de3c6dfb5f0e71697956d0906de2e29726d518d2d06d7dcfca2e0c8c9d86e22976d951cf180c9accd26f9c943f5efe07c6eed40fdce60ac4f712ae4a938e4143047df6c2d7050efb8cf7353909ec68517955ceef81e61edf978661491bf060289e50253d598236"}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="a2f006413e053613c588a87e36f5734f0ba3e6381cdca58017ccebb74a39e8156c"]}, &(0x7f00000005c0)={0x2c, &(0x7f00000004c0)={0x40, 0x6, 0xbf, "69a7601bc44c453fcf8736bfd22d5732d0424a8b22699865fd8748032b8df2cb8f921a30adbeb1c3d5bcc27d2b0ec979c390c18e1614e0c52c6388467068b31029fa51a0d36b9f8608cc87a1c7a777991c0291b95020362aecdc0a154beee794b22891b57cbfc09aa2c11a19fdf55249455ae6a2a104d61be79ab0ff201beb56c7c759c90ed7d6dfd79b2bbaa8763d40a3deffe87ed074786ff8c76cf312dd2860df0f8a4cdf76edc1ed69baff28083ded34aa6a375f47966c293bc38e6b10"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0xc0, 0x5, 0x5, "7b04465131"}, &(0x7f0000000600)=ANY=[@ANYBLOB="4005ffff00001463de1d7908bf3e0aad4f19019662f46f593805ad85776a1476cbd4b5381faccd6dca199ed681f9ad2cb876412ac19e115b633ea1b8fee8865f64ba60e93e1818af9f278a128241cb"]})
utimes(&(0x7f0000000480)='./cgroup\x00', 0x0)

1.511567192s ago: executing program 1 (id=1091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYRESDEC=r0], 0xe8}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="080043fed2000000000400"], 0x8)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000140))
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000085290005000301000000000500030080000000050003000100000008000200030000"], 0x50}}, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x92046, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'pcmda12\x00', [0x4f27, 0xf, 0xcd, 0x4, 0x80000041, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x8f, 0x1600, 0x3, 0x6, 0x5, 0xe1cb, 0x6, 0x2, 0x3, 0x2, 0x89, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0x6, 0x200003, 0x2000003c, 0x9, 0x9, 0x7fffffc, 0xdffffffa]})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x1, 0x10000, 0x824f, 0x0, [{0x1f696440, 0x80000008, 0x100}]})
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xb}}, 0x20)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="cebe8ba2084ace111620", 0xa, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x3, 0x3, 0x1, 0x2, 0xff}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)="454de2ce11c26a170aec56a2eb1a679e8ad8b6e75cd59516e100b25012e2722a10f88a57771c5fd8742f7313a55abe02d9053e6fb9434002765c1c9ddee6c915d1c097a5cd63a98b2316307c77237852eb6739996e16c46b3e1eff1003da386cce8527c2eb41489031e3c7748e0141f19fad39fb42e60d931083ef0c739084d3dc79d7834776db629535730945b77aa6c84af2813f6a5ce15ba4b3dc93006d5f534e99d4258d21c05122392186eef95fbc83491ddb91bd6ffb72352ced943428588119d595be6b27d4a3cd775db72df0ea692b01a77a48be7a9f8da58e63c014", 0xe0}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x12a8}, 0x20004084)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0205"]}, {0x5a, 0x0}]})

1.353862799s ago: executing program 3 (id=1084):
r0 = syz_usb_connect$cdc_ncm(0x3, 0x11b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x2, 0x1, 0x3, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xb9, 0x8f, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x3ff, 0x20}, [@country_functional={0x12, 0x24, 0x7, 0x7, 0x8, [0x1, 0x4, 0x0, 0x4, 0x4, 0x4bb]}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm_detail={0x76, 0x24, 0x13, 0x7, "b603660c7ebe302d1bb44840193b018e17b75e0c5fb02dc47357792305e11a11d838f53f66bd60acb5a2e447add660cc52b293b5e43031097caf3393d48cdba5b5f058ef110d95e817b9d77a65b2e714e746bb7d31427bc6b6f317f65d421d5c6203fdd35d81dc52763f2f82ac20cb53a1a7"}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x80, 0x4, 0x2, 0x3ff, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8b, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x5e, 0xe}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xf, 0x5, 0x3, 0x8, 0x9}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0xd, 0x8, 0x8, 0xda}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "367cad115f57458dce847029a0cfde1b01bd6fb83a1d012f61e5cf59ebebaebe4681b8c9a58739c865b3ea9d13016333edcdb98c61e2a08dc284595b8fcc73e1bad7a56fc5e8e42f19894c10a35ebb469cfc4721e9c645b68fbf02d50f2907c2054081d970b4b353d7c32c1eabf4cfcaf6287c53966bf18fce871ce40e6885a37b7401759cbb5d3e557c64a8c704c78bffbdc70c9018c3de955f4fe975e68874777190190da943c1a3d5960817b510a3bfb44760fc772c6ff19bcaa9a4ca67f90ff10bf1ec79930afe16c68fe776f887d3b04948f16d7a172d45952f90a6dd7ce9ce801844f24bf7238e4fc46410"}}, {0xa1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a103b0e6309dba7cb5a1bb920c6b90d25a1b54cf9fbfdf941f89286383c00d08aa7a25f40a60d88dab3891dfcfb7d55f1e28102c79a6582797904c47c042e2724fc01b6b80a8ed454624e318b9c84aa34d28cf48a41840aded72b11ecfe74697e69bf2b748fddd2395d7eaf9c6454302f3725d14749c5afb9ac0f10b52bf5d9b97921b278f610da365e559143565cc4930a810913add266ec11103e29b027f7c00"]}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x40, 0x5, 0x90, {0x90, 0x21, "1bad38ffd1f02efc3defb06b5853357e3aea1740e32d9378275257082d33d841b295e7176235c05e18c54b2ee85961ee69e42dd6ff170fdb6d00cfb762daae01368a13e8650ae1210aee990c317b92d1feffc160470ebb63153089c2008a7837ab1aa0b092e41969e4ae9b9ba0151adb341a221a80a375e9df82223669c9f2a56ac97bcfbf3f227260affe489228"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x20, 0x8, 0x4a, "4ccc1690704a13f1f6ab30a666fde3e71d1342de31f5c9067a3f4cb58609a1427d1493ac510f8e8baca806018ac8a56144c0632a973175ccbbe06a1adcf6007ea41c4f5bc1aec8297256"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x56}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2a9, 0x3, 0x8, 0x7, 0x3, 0x8, 0x0, 0x4, 0x5c17, 0x7, 0x4, 0x150a}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x10001}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
r1 = fsopen(&(0x7f0000000380)='ntfs3\x00', 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001400)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001080)={0x31c, r5, 0x20b, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a, 0x0, 0x200, 0x7a, 0x800, 0xffff, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x50d, 0x6, 0x2, 0x1ff, 0x9, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x4, 0x7, 0xa, 0x2e73, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x2, 0x30, 0x48, 0x24, 0x24, 0x6, 0x60, 0x4, 0x30, 0x60, 0x12, 0x5, 0x3, 0x3, 0x9, 0xb, 0x5, 0x4, 0x1b, 0xc, 0x60, 0x9, 0x30, 0x48, 0x4, 0x6c, 0xc, 0x1, 0x9, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x9, 0xe, 0x1ff, 0x9, 0x3, 0xc]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x9, 0x7, 0x22, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x3}, {0x0, 0x7}, {0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x8}, {0x2, 0x1}, {0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x1}, {0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x401, 0x0, 0x2000, 0x7, 0x7, 0x6b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x6, 0x7fff, 0xfffb, 0x101, 0x7, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x65df, 0x3, 0x609d, 0x1, 0xfff7, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x7}, {0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x7}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x400, 0x6, 0x8c, 0x0, 0x40, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xffff, 0x3, 0x9, 0x1, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x3}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x24, 0x16, 0x5, 0x9, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x37df, 0x0, 0x7, 0x7, 0x6, 0x1ff, 0xb87]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa0e3, 0x1, 0x3, 0xcaf5, 0x9, 0x100, 0xf6]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x9]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x1}, {0x7, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {}, {0x0, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x4}, {0x2, 0x7}, {0x6, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x60, 0x3, 0x36, 0x12, 0x48, 0x1b, 0x1b, 0x5, 0x9, 0xc, 0x18, 0xb, 0x60, 0x48, 0x36, 0x3, 0x12, 0x36, 0x12, 0x48, 0x6c, 0x2, 0x6c, 0x24]}]}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x92}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000085}, 0x20004000)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000010)
r9 = syz_usb_connect$cdc_ecm(0x4, 0x63, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xef, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "da401f2b569c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x6, 0xc7}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x7, 0x5, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x8a, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x2, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x200, 0x7, 0x10, 0x16, 0x20, 0x8}, 0xb, &(0x7f0000000a80)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x280a}}, {0x25, &(0x7f0000000b00)=@string={0x25, 0x3, "6f01c7ef67efb9af2bde720603d431d6aaa61191d7a7bd67ca4e1fe1acc296bb485ccf"}}]})
syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x20, 0x21, 0x96, {0x96, 0x31, "f7856e1c3aaa44638bc7885addffef0c818aeff584ad442871d7059f0cdc84b81c4ac4aabfaa9ddf26df409c12bdf6c533a753db1f578fb23d5650b5199d9c3947281761be9774bf014b714f6d2ecb5c149c2ca00b523b9bec46315b7e8173df9da3523282a75b58579a94cf8b312dbb439d542c12d68dbe1273d1a3fe2540e3f5a706ef5b92b9a03da0641f1c7d4f28bf1828a3"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000cc0)={0x0, 0x11, 0x2d, "6d04dfd1886baa2faa53a39b9ca46e3ac52cdaf8cef46a5ef4574a68ae5a5e76ab67796e981f7f6c847f22a182"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xc}})
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x2)
getsockopt(r2, 0x9, 0xb7e, &(0x7f0000002500)=""/4096, &(0x7f0000000dc0)=0x1000)
ioctl$VT_WAITACTIVE(r10, 0x5607)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe0, 0xbe, "536e127b4c5e7160c523820ffa88e418c1ec68dc4bdacc24e9a5a0bd9bac06879c871a347b97c680ac30aa5aa0214abd92d60f5d5d64ad0ab0cedd3eca6db5bf34bde0b6b50b7e012a2063f072f3d55fb6b83a3d09fa3ab6322f5349735987a96cf2e6394a551f16b6c2517b72485822086c34127950c93e43fba6457dcdca17cde6153ae04775e805d286bba1e5bc07826a6eb66069cb79888e8ba0fadaf41d1061f30a9b244d605ad2d09a139d8b3abbfba4cf28dc48432d33d2079bc244c6d01d346661337632fcce783043d1a2447a2c52ec86e9eccb1782ca49"}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_emit_vhci(&(0x7f0000001a00)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}}}, 0xd)

125.207361ms ago: executing program 1 (id=1085):
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="68d9ea94ccf25b0a623693f5", 0xc}], 0x1}}], 0x1, 0x4001c00)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xffe)

0s ago: executing program 1 (id=1086):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000)
ioctl$NBD_DISCONNECT(r1, 0xab08)
syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x1)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)

kernel console output (not intermixed with test programs):

xb0
[  184.726120][ T7509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.726140][ T7509] RIP: 0033:0x7f6a0d18f749
[  184.726158][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.726176][ T7509] RSP: 002b:00007f6a0e0c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  184.726206][ T7509] RAX: ffffffffffffffda RBX: 00007f6a0d3e5fa0 RCX: 00007f6a0d18f749
[  184.726219][ T7509] RDX: 000000000000004b RSI: 0000200000000340 RDI: 0000000000000007
[  184.726230][ T7509] RBP: 00007f6a0e0c9090 R08: 0000000000000000 R09: 0000000000000000
[  184.726242][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.726251][ T7509] R13: 00007f6a0d3e6038 R14: 00007f6a0d3e5fa0 R15: 00007ffd02e73ef8
[  184.726278][ T7509]  </TASK>
[  185.363571][  T108] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  185.405813][ T7522] overlayfs: failed to clone upperpath
[  185.453734][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.598'.
[  185.512869][  T108] usb 2-1: device descriptor read/64, error -71
[  185.542981][  T903] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  185.596362][ T7530] overlayfs: failed to clone upperpath
[  185.705588][  T903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  185.724385][  T903] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  185.733789][  T903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.745661][  T903] usb 4-1: config 0 descriptor??
[  185.762693][  T108] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  185.902686][  T108] usb 2-1: device descriptor read/64, error -71
[  186.045325][  T108] usb usb2-port1: attempt power cycle
[  186.312131][ T7546] overlayfs: failed to clone upperpath
[  186.353824][ T5937] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  186.393025][  T108] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  186.446968][  T108] usb 2-1: device descriptor read/8, error -71
[  186.504010][ T5937] usb 3-1: Using ep0 maxpacket: 8
[  186.514807][  T903] usb 4-1: string descriptor 0 read error: -71
[  186.518724][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.555269][ T5937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  186.558716][  T903] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  186.573652][ T5937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  186.582363][  T903] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -32
[  186.592633][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.592660][ T5937] usb 3-1: Product: syz
[  186.592679][ T5937] usb 3-1: Manufacturer: syz
[  186.592693][ T5937] usb 3-1: SerialNumber: syz
[  186.595303][ T5937] usb 3-1: config 0 descriptor??
[  186.654798][  T903] usb 4-1: USB disconnect, device number 51
[  186.714395][  T108] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  186.752992][  T108] usb 2-1: device descriptor read/8, error -71
[  186.873011][  T108] usb usb2-port1: unable to enumerate USB device
[  187.213553][ T7575] bridge0: port 3(syz_tun) entered blocking state
[  187.233145][ T7575] bridge0: port 3(syz_tun) entered disabled state
[  187.239989][ T7575] syz_tun: entered allmulticast mode
[  187.276837][ T7575] syz_tun: entered promiscuous mode
[  187.286990][ T7575] bridge0: port 3(syz_tun) entered blocking state
[  187.293919][ T7575] bridge0: port 3(syz_tun) entered forwarding state
[  187.799893][ T5829] Bluetooth: hci1: unexpected event 0x33 length: 6 < 10
[  187.907433][ T7601] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  187.920181][ T7601] block device autoloading is deprecated and will be removed.
[  187.963880][ T7607] FAULT_INJECTION: forcing a failure.
[  187.963880][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.978231][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.3.627 Not tainted syzkaller #0 PREEMPT(full) 
[  187.978257][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  187.978270][ T7607] Call Trace:
[  187.978278][ T7607]  <TASK>
[  187.978286][ T7607]  dump_stack_lvl+0x189/0x250
[  187.978314][ T7607]  ? __pfx____ratelimit+0x10/0x10
[  187.978338][ T7607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.978359][ T7607]  ? __pfx__printk+0x10/0x10
[  187.978387][ T7607]  should_fail_ex+0x414/0x560
[  187.978414][ T7607]  _copy_to_user+0x31/0xb0
[  187.978435][ T7607]  simple_read_from_buffer+0xe1/0x170
[  187.978462][ T7607]  proc_fail_nth_read+0x1b3/0x220
[  187.978487][ T7607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  187.978508][ T7607]  ? rw_verify_area+0x2a6/0x4d0
[  187.978525][ T7607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  187.978547][ T7607]  vfs_read+0x200/0xa30
[  187.978563][ T7607]  ? fdget_pos+0x247/0x320
[  187.978591][ T7607]  ? __pfx___mutex_lock+0x10/0x10
[  187.978616][ T7607]  ? __pfx_vfs_read+0x10/0x10
[  187.978634][ T7607]  ? __fget_files+0x2a/0x420
[  187.978662][ T7607]  ? __fget_files+0x3a0/0x420
[  187.978685][ T7607]  ? __fget_files+0x2a/0x420
[  187.978714][ T7607]  ksys_read+0x145/0x250
[  187.978735][ T7607]  ? __pfx_ksys_read+0x10/0x10
[  187.978755][ T7607]  ? do_syscall_64+0xbe/0xf80
[  187.978782][ T7607]  do_syscall_64+0xfa/0xf80
[  187.978808][ T7607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.978825][ T7607]  ? clear_bhb_loop+0x60/0xb0
[  187.978845][ T7607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.978863][ T7607] RIP: 0033:0x7f6a0d18e15c
[  187.978880][ T7607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  187.978897][ T7607] RSP: 002b:00007f6a0e0c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  187.978917][ T7607] RAX: ffffffffffffffda RBX: 00007f6a0d3e5fa0 RCX: 00007f6a0d18e15c
[  187.978931][ T7607] RDX: 000000000000000f RSI: 00007f6a0e0c90a0 RDI: 0000000000000005
[  187.978943][ T7607] RBP: 00007f6a0e0c9090 R08: 0000000000000000 R09: 0000000000000000
[  187.978956][ T7607] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  187.978966][ T7607] R13: 00007f6a0d3e6038 R14: 00007f6a0d3e5fa0 R15: 00007ffd02e73ef8
[  187.978996][ T7607]  </TASK>
[  188.892452][ T7632] binder: 7631:7632 ioctl c0306201 2000000001c0 returned -22
[  188.906714][ T7632] binder: 7631:7632 ioctl 1275 0 returned -22
[  189.164452][  T927] usb 3-1: USB disconnect, device number 39
[  189.183053][ T5923] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  189.332717][ T5923] usb 4-1: device descriptor read/64, error -71
[  189.432692][  T903] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  189.467821][ T7651] netlink: 1 bytes leftover after parsing attributes in process `syz.2.643'.
[  189.480052][ T7651] xt_policy: neither incoming nor outgoing policy selected
[  189.519029][ T7651] 9p: Bad value for 'wfdno'
[  189.592717][ T5923] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  189.606208][  T903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  189.620652][  T903] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  189.632304][  T903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.651863][  T903] usb 2-1: config 0 descriptor??
[  189.763954][ T5923] usb 4-1: device descriptor read/64, error -71
[  189.852723][  T927] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  189.872995][ T5923] usb usb4-port1: attempt power cycle
[  190.002740][  T927] usb 3-1: Using ep0 maxpacket: 16
[  190.011121][  T927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.022798][  T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  190.034131][  T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  190.044066][  T927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  190.053808][  T927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.068509][  T927] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  190.077845][  T927] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  190.086072][  T927] usb 3-1: Manufacturer: syz
[  190.093092][  T927] usb 3-1: config 0 descriptor??
[  190.212710][ T5923] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  190.233328][ T5923] usb 4-1: device descriptor read/8, error -71
[  190.364470][  T903] usb 2-1: string descriptor 0 read error: -71
[  190.372985][  T927] rc_core: IR keymap rc-hauppauge not found
[  190.382500][  T927] Registered IR keymap rc-empty
[  190.387614][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.399326][  T903] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  190.407695][  T903] letsketch 0003:6161:4D15.000D: probe with driver letsketch failed with error -32
[  190.413050][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.422374][  T903] usb 2-1: USB disconnect, device number 49
[  190.443924][  T927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  190.461651][  T927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26
[  190.477060][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.484319][ T5923] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  190.503222][ T5923] usb 4-1: device descriptor read/8, error -71
[  190.512896][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.532821][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.552748][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.572741][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.592791][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.612726][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.613616][ T5923] usb usb4-port1: unable to enumerate USB device
[  190.632764][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.652942][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.672757][  T927] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  190.694462][  T927] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  190.703789][  T927] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  190.772160][ T5923] usb 3-1: USB disconnect, device number 40
[  191.572722][ T5923] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  191.732648][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  191.739335][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.750011][ T5923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  191.762203][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  191.771899][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.780001][ T5923] usb 2-1: Product: syz
[  191.784715][ T5923] usb 2-1: Manufacturer: syz
[  191.789332][ T5923] usb 2-1: SerialNumber: syz
[  191.797069][ T5923] usb 2-1: config 0 descriptor??
[  191.987170][ T7682] netlink: 56 bytes leftover after parsing attributes in process `syz.0.652'.
[  192.000930][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'.
[  192.012675][  T927] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  192.016325][ T7682] netlink: 31 bytes leftover after parsing attributes in process `syz.0.652'.
[  192.029248][ T7682] netlink: 'syz.0.652': attribute type 2 has an invalid length.
[  192.038243][ T7682] netlink: 31 bytes leftover after parsing attributes in process `syz.0.652'.
[  192.184358][  T927] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  192.192640][  T927] usb 3-1: config 0 has no interface number 0
[  192.202387][  T927] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  192.203738][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'.
[  192.220495][  T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.220524][  T927] usb 3-1: Product: syz
[  192.242169][  T927] usb 3-1: Manufacturer: syz
[  192.252778][  T927] usb 3-1: SerialNumber: syz
[  192.264681][  T927] usb 3-1: config 0 descriptor??
[  192.274966][  T927] usb 3-1: Expected 3 endpoints, found: 0
[  192.483260][  T927] usb 3-1: USB disconnect, device number 41
[  192.801455][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'.
[  192.833496][  T927] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  192.994454][  T927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  193.016139][  T927] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  193.025727][  T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.040265][  T927] usb 4-1: config 0 descriptor??
[  193.652665][ T5923] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  193.765153][  T927] usb 4-1: string descriptor 0 read error: -71
[  193.801467][  T927] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  193.814432][ T5923] usb 3-1: config 0 has an invalid interface number: 182 but max is 0
[  193.818935][  T927] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -32
[  193.825623][ T5923] usb 3-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  193.840396][  T927] usb 4-1: USB disconnect, device number 56
[  193.849368][ T5923] usb 3-1: config 0 has no interface number 0
[  193.857600][ T5923] usb 3-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30
[  193.872039][ T5923] usb 3-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185
[  193.885910][ T5923] usb 3-1: config 0 interface 182 has no altsetting 0
[  193.896550][ T5923] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  193.907786][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.915828][ T5923] usb 3-1: Product: syz
[  193.920083][ T5923] usb 3-1: Manufacturer: syz
[  193.924745][ T5923] usb 3-1: SerialNumber: syz
[  193.931463][ T5923] usb 3-1: config 0 descriptor??
[  194.142309][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'.
[  194.162188][ T5923] imon 3-1:0.182: unable to register, err -19
[  194.171720][ T5923] usb 3-1: USB disconnect, device number 42
[  194.366570][ T5923] usb 2-1: USB disconnect, device number 50
[  194.398739][ T7736] could not allocate digest TFM handle hmac(sha1-avx2)
[  194.475342][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.481812][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.671320][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'.
[  195.102758][  T927] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  195.264384][  T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  195.277452][  T927] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  195.286674][  T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.297543][  T927] usb 3-1: config 0 descriptor??
[  195.872774][ T5923] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  196.032649][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  196.044358][  T927] usb 3-1: string descriptor 0 read error: -71
[  196.069010][ T5923] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  196.079395][  T927] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  196.087801][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.087862][  T927] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -32
[  196.097254][ T5923] usb 2-1: Product: syz
[  196.110299][ T5923] usb 2-1: Manufacturer: syz
[  196.120173][ T5923] usb 2-1: SerialNumber: syz
[  196.121275][  T927] usb 3-1: USB disconnect, device number 43
[  196.133313][ T5923] usb 2-1: config 0 descriptor??
[  196.144083][ T5923] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  196.552762][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.564427][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.608776][ T7784] orangefs_mount: mount request failed with -4
[  196.782733][  T903] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  196.953558][  T903] usb 4-1: Using ep0 maxpacket: 8
[  196.960206][  T903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  196.971759][  T903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  196.982236][  T903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.991487][  T903] usb 4-1: Product: syz
[  196.995989][  T903] usb 4-1: Manufacturer: syz
[  197.000636][  T903] usb 4-1: SerialNumber: syz
[  197.007700][  T903] usb 4-1: config 0 descriptor??
[  197.196696][ T5923] gspca_ov534_9: reg_w failed -71
[  197.461329][ T7798] orangefs_mount: mount request failed with -4
[  197.482708][ T5923] gspca_ov534_9: Unknown sensor 0000
[  197.482907][ T5923] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  197.501064][ T5923] usb 2-1: USB disconnect, device number 51
[  197.545522][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'.
[  197.655347][ T5829] Bluetooth: hci2: adv larger than maximum supported
[  197.655376][ T5829] Bluetooth: hci2: Malformed LE Event: 0x0d
[  198.254258][ T7820] kvm: user requested TSC rate below hardware speed
[  198.264423][ T7820] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns
[  198.809699][ T7827] raw_sendmsg: syz.2.700 forgot to set AF_INET. Fix it!
[  199.077949][ T7836] FAULT_INJECTION: forcing a failure.
[  199.077949][ T7836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.096487][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.2.704 Not tainted syzkaller #0 PREEMPT(full) 
[  199.096513][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  199.096525][ T7836] Call Trace:
[  199.096532][ T7836]  <TASK>
[  199.096540][ T7836]  dump_stack_lvl+0x189/0x250
[  199.096569][ T7836]  ? __pfx____ratelimit+0x10/0x10
[  199.096595][ T7836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.096618][ T7836]  ? __pfx__printk+0x10/0x10
[  199.096652][ T7836]  should_fail_ex+0x414/0x560
[  199.096681][ T7836]  _copy_to_user+0x31/0xb0
[  199.096704][ T7836]  simple_read_from_buffer+0xe1/0x170
[  199.096732][ T7836]  proc_fail_nth_read+0x1b3/0x220
[  199.096757][ T7836]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.096780][ T7836]  ? rw_verify_area+0x2a6/0x4d0
[  199.096797][ T7836]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.096818][ T7836]  vfs_read+0x200/0xa30
[  199.096834][ T7836]  ? fdget_pos+0x247/0x320
[  199.096862][ T7836]  ? __pfx___mutex_lock+0x10/0x10
[  199.096889][ T7836]  ? __pfx_vfs_read+0x10/0x10
[  199.096908][ T7836]  ? __fget_files+0x2a/0x420
[  199.096937][ T7836]  ? __fget_files+0x3a0/0x420
[  199.096959][ T7836]  ? __fget_files+0x2a/0x420
[  199.096992][ T7836]  ksys_read+0x145/0x250
[  199.097009][ T7836]  ? __fget_files+0x2a/0x420
[  199.097033][ T7836]  ? __pfx_ksys_read+0x10/0x10
[  199.097064][ T7836]  ? do_syscall_64+0xbe/0xf80
[  199.097093][ T7836]  do_syscall_64+0xfa/0xf80
[  199.097119][ T7836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.097136][ T7836]  ? clear_bhb_loop+0x60/0xb0
[  199.097157][ T7836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.097174][ T7836] RIP: 0033:0x7f83a198e15c
[  199.097189][ T7836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  199.097205][ T7836] RSP: 002b:00007f83a28d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  199.097224][ T7836] RAX: ffffffffffffffda RBX: 00007f83a1be6090 RCX: 00007f83a198e15c
[  199.097238][ T7836] RDX: 000000000000000f RSI: 00007f83a28d30a0 RDI: 0000000000000004
[  199.097250][ T7836] RBP: 00007f83a28d3090 R08: 0000000000000000 R09: 0000000000000000
[  199.097261][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.097270][ T7836] R13: 00007f83a1be6128 R14: 00007f83a1be6090 R15: 00007ffe90693b78
[  199.097299][ T7836]  </TASK>
[  199.642120][  T108] usb 4-1: USB disconnect, device number 57
[  199.934421][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'.
[  200.065521][ T7852] FAULT_INJECTION: forcing a failure.
[  200.065521][ T7852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.113438][ T7852] CPU: 1 UID: 0 PID: 7852 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT(full) 
[  200.113463][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.113475][ T7852] Call Trace:
[  200.113482][ T7852]  <TASK>
[  200.113489][ T7852]  dump_stack_lvl+0x189/0x250
[  200.113516][ T7852]  ? __pfx____ratelimit+0x10/0x10
[  200.113542][ T7852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.113566][ T7852]  ? __pfx__printk+0x10/0x10
[  200.113587][ T7852]  ? __might_fault+0xb0/0x130
[  200.113626][ T7852]  should_fail_ex+0x414/0x560
[  200.113654][ T7852]  _copy_from_user+0x2d/0xb0
[  200.113674][ T7852]  kvm_dev_ioctl_get_cpuid+0x161/0x7c0
[  200.113700][ T7852]  ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10
[  200.113730][ T7852]  kvm_arch_dev_ioctl+0x37f/0x8f0
[  200.113750][ T7852]  ? __pfx_kvm_arch_dev_ioctl+0x10/0x10
[  200.113770][ T7852]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  200.113805][ T7852]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  200.113846][ T7852]  kvm_dev_ioctl+0x597/0x1570
[  200.113873][ T7852]  ? __fget_files+0x2a/0x420
[  200.113908][ T7852]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  200.113930][ T7852]  ? __fget_files+0x3a0/0x420
[  200.113953][ T7852]  ? __fget_files+0x2a/0x420
[  200.113981][ T7852]  ? bpf_lsm_file_ioctl+0x9/0x20
[  200.114003][ T7852]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  200.114027][ T7852]  __se_sys_ioctl+0xfc/0x170
[  200.114049][ T7852]  do_syscall_64+0xfa/0xf80
[  200.114076][ T7852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.114094][ T7852]  ? clear_bhb_loop+0x60/0xb0
[  200.114116][ T7852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.114135][ T7852] RIP: 0033:0x7fc576f8f749
[  200.114150][ T7852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.114165][ T7852] RSP: 002b:00007fc577d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  200.114186][ T7852] RAX: ffffffffffffffda RBX: 00007fc5771e5fa0 RCX: 00007fc576f8f749
[  200.114201][ T7852] RDX: 0000200000000500 RSI: 00000000c008ae09 RDI: 0000000000000003
[  200.114214][ T7852] RBP: 00007fc577d43090 R08: 0000000000000000 R09: 0000000000000000
[  200.114226][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  200.114237][ T7852] R13: 00007fc5771e6038 R14: 00007fc5771e5fa0 R15: 00007ffe4a8f15c8
[  200.114267][ T7852]  </TASK>
[  200.160971][ T7857] netlink: 'syz.0.712': attribute type 1 has an invalid length.
[  200.385160][ T7857] netlink: 'syz.0.712': attribute type 3 has an invalid length.
[  200.412812][ T7857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.712'.
[  200.514611][ T7864] FAULT_INJECTION: forcing a failure.
[  200.514611][ T7864] name failslab, interval 1, probability 0, space 0, times 0
[  200.527444][ T7864] CPU: 0 UID: 0 PID: 7864 Comm: syz.2.715 Not tainted syzkaller #0 PREEMPT(full) 
[  200.527471][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.527483][ T7864] Call Trace:
[  200.527491][ T7864]  <TASK>
[  200.527499][ T7864]  dump_stack_lvl+0x189/0x250
[  200.527528][ T7864]  ? __pfx____ratelimit+0x10/0x10
[  200.527553][ T7864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.527576][ T7864]  ? __pfx__printk+0x10/0x10
[  200.527609][ T7864]  ? __pfx___might_resched+0x10/0x10
[  200.527631][ T7864]  ? fs_reclaim_acquire+0x7d/0x100
[  200.527657][ T7864]  should_fail_ex+0x414/0x560
[  200.527688][ T7864]  should_failslab+0xa8/0x100
[  200.527713][ T7864]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  200.527744][ T7864]  ? __alloc_skb+0x255/0x430
[  200.527770][ T7864]  ? napi_skb_cache_get+0x4a5/0x780
[  200.527796][ T7864]  ? napi_skb_cache_get+0x151/0x780
[  200.527827][ T7864]  __alloc_skb+0x255/0x430
[  200.527856][ T7864]  ? __pfx___alloc_skb+0x10/0x10
[  200.527885][ T7864]  ? netlink_autobind+0xdb/0x300
[  200.527905][ T7864]  ? netlink_autobind+0x2c2/0x300
[  200.527929][ T7864]  netlink_sendmsg+0x5c6/0xb30
[  200.527948][ T7864]  ? aa_sk_perm+0x15f/0x920
[  200.527980][ T7864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.528003][ T7864]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  200.528030][ T7864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.528047][ T7864]  sock_sendmsg_nosec+0x18f/0x1d0
[  200.528072][ T7864]  ____sys_sendmsg+0x577/0x880
[  200.528100][ T7864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.528129][ T7864]  ? import_iovec+0x74/0xa0
[  200.528149][ T7864]  ___sys_sendmsg+0x21f/0x2a0
[  200.528167][ T7864]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.528191][ T7864]  ? rcu_read_lock_any_held+0xb3/0x120
[  200.528240][ T7864]  ? __fget_files+0x2a/0x420
[  200.528264][ T7864]  ? __fget_files+0x3a0/0x420
[  200.528297][ T7864]  __x64_sys_sendmsg+0x19b/0x260
[  200.528320][ T7864]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  200.528348][ T7864]  ? __pfx_ksys_write+0x10/0x10
[  200.528372][ T7864]  ? do_syscall_64+0xbe/0xf80
[  200.528402][ T7864]  do_syscall_64+0xfa/0xf80
[  200.528428][ T7864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.528447][ T7864]  ? clear_bhb_loop+0x60/0xb0
[  200.528473][ T7864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.528492][ T7864] RIP: 0033:0x7f83a198f749
[  200.528509][ T7864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.528525][ T7864] RSP: 002b:00007f83a28f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.528546][ T7864] RAX: ffffffffffffffda RBX: 00007f83a1be5fa0 RCX: 00007f83a198f749
[  200.528560][ T7864] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003
[  200.528572][ T7864] RBP: 00007f83a28f4090 R08: 0000000000000000 R09: 0000000000000000
[  200.528590][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.528602][ T7864] R13: 00007f83a1be6038 R14: 00007f83a1be5fa0 R15: 00007ffe90693b78
[  200.528632][ T7864]  </TASK>
[  200.825850][ T5892] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  200.986835][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  201.000101][ T5892] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  201.038524][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.071423][ T5892] usb 2-1: config 0 descriptor??
[  201.272721][  T903] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  201.432977][  T903] usb 3-1: Using ep0 maxpacket: 8
[  201.440326][  T903] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  201.474881][  T903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  201.507033][  T903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.542684][  T903] usb 3-1: Product: syz
[  201.546901][  T903] usb 3-1: Manufacturer: syz
[  201.564984][  T903] usb 3-1: SerialNumber: syz
[  201.581689][  T903] usb 3-1: config 0 descriptor??
[  202.005194][ T5892] usb 2-1: string descriptor 0 read error: -71
[  202.049970][ T5892] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  202.070963][ T5892] letsketch 0003:6161:4D15.0010: probe with driver letsketch failed with error -32
[  202.121292][ T5892] usb 2-1: USB disconnect, device number 52
[  202.471668][ T7904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  202.511069][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  202.520035][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  202.588857][ T7909] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.731'.
[  202.674516][ T7916] netlink: 68 bytes leftover after parsing attributes in process `syz.3.733'.
[  202.882665][ T5872] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  203.095218][ T5872] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  203.124520][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.143015][ T5872] usb 2-1: Product: syz
[  203.148861][ T5872] usb 2-1: Manufacturer: syz
[  203.155365][ T5872] usb 2-1: SerialNumber: syz
[  203.166653][ T5872] hub 2-1:24.0: bad descriptor, ignoring hub
[  203.178811][ T5872] hub 2-1:24.0: probe with driver hub failed with error -5
[  203.366499][ T5872] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  203.377024][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  203.386975][ T5872] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  203.395527][ T5872] usb 2-1: media controller created
[  203.409593][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  203.451550][ T5872] DVB: Unable to find symbol dib7000p_attach()
[  203.458035][ T5872] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  203.472684][  T108] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  203.522714][ T5872] rc_core: IR keymap rc-dib0700-rc5 not found
[  203.528926][ T5872] Registered IR keymap rc-empty
[  203.535325][ T5872] dvb-usb: could not initialize remote control.
[  203.541686][ T5872] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  203.579593][ T5872] usb 2-1: USB disconnect, device number 53
[  203.627103][  T108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  203.627112][ T5872] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  203.627150][  T108] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  203.704830][  T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.715589][  T108] usb 4-1: config 0 descriptor??
[  203.964998][  T903] usb 3-1: USB disconnect, device number 44
[  204.088081][ T7948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.742'.
[  204.392716][  T903] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  204.467449][  T108] usb 4-1: string descriptor 0 read error: -71
[  204.517883][  T108] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  204.526490][  T108] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -32
[  204.551823][  T108] usb 4-1: USB disconnect, device number 58
[  204.565021][  T903] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  204.575162][  T903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.596402][  T903] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  204.606335][  T903] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  204.615020][  T903] usb 3-1: Manufacturer: syz
[  204.621639][  T903] usb 3-1: config 0 descriptor??
[  204.693440][  T903] rc_core: IR keymap rc-hauppauge not found
[  204.699385][  T903] Registered IR keymap rc-empty
[  204.727279][  T903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  204.740060][  T903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28
[  204.835592][  T927] usb 3-1: USB disconnect, device number 45
[  204.922692][  T903] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  205.001818][ T7975] FAULT_INJECTION: forcing a failure.
[  205.001818][ T7975] name failslab, interval 1, probability 0, space 0, times 0
[  205.014865][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.3.752 Not tainted syzkaller #0 PREEMPT(full) 
[  205.014891][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  205.014905][ T7975] Call Trace:
[  205.014912][ T7975]  <TASK>
[  205.014920][ T7975]  dump_stack_lvl+0x189/0x250
[  205.014949][ T7975]  ? __pfx____ratelimit+0x10/0x10
[  205.014974][ T7975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.014998][ T7975]  ? __pfx__printk+0x10/0x10
[  205.015023][ T7975]  ? __pfx___might_resched+0x10/0x10
[  205.015044][ T7975]  ? fs_reclaim_acquire+0x7d/0x100
[  205.015070][ T7975]  should_fail_ex+0x414/0x560
[  205.015099][ T7975]  should_failslab+0xa8/0x100
[  205.015124][ T7975]  __kmalloc_cache_noprof+0x84/0x6f0
[  205.015142][ T7975]  ? rdma_resolve_addr+0x810/0x2030
[  205.015178][ T7975]  rdma_resolve_addr+0x810/0x2030
[  205.015194][ T7975]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  205.015212][ T7975]  ? __pfx_rdma_resolve_addr+0x10/0x10
[  205.015231][ T7975]  ? __raw_spin_lock_init+0x45/0x100
[  205.015254][ T7975]  ? in_aton+0x3a4/0x440
[  205.015268][ T7975]  rdma_create_trans+0x9eb/0x1440
[  205.015290][ T7975]  ? __pfx_rdma_create_trans+0x10/0x10
[  205.015320][ T7975]  p9_client_create+0x3f0/0xc30
[  205.015334][ T7975]  ? __pfx_p9_client_create+0x10/0x10
[  205.015354][ T7975]  v9fs_session_init+0x46/0xdf0
[  205.015367][ T7975]  ? __kmalloc_cache_noprof+0x3e2/0x6f0
[  205.015377][ T7975]  ? vfs_parse_monolithic_sep+0x26a/0x320
[  205.015392][ T7975]  ? kfree+0x1c0/0x660
[  205.015408][ T7975]  ? v9fs_get_tree+0xa4/0xa60
[  205.015425][ T7975]  v9fs_get_tree+0xb7/0xa60
[  205.015440][ T7975]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  205.015456][ T7975]  ? __pfx_v9fs_get_tree+0x10/0x10
[  205.015475][ T7975]  vfs_get_tree+0x92/0x2a0
[  205.015487][ T7975]  do_new_mount+0x302/0xa10
[  205.015499][ T7975]  ? apparmor_capable+0x137/0x1a0
[  205.015514][ T7975]  ? __pfx_do_new_mount+0x10/0x10
[  205.015526][ T7975]  ? ns_capable+0x8a/0xf0
[  205.015539][ T7975]  ? kmem_cache_free+0x197/0x620
[  205.015554][ T7975]  __se_sys_mount+0x313/0x410
[  205.015570][ T7975]  ? __pfx___se_sys_mount+0x10/0x10
[  205.015585][ T7975]  ? do_syscall_64+0xbe/0xf80
[  205.015599][ T7975]  ? __x64_sys_mount+0x20/0xc0
[  205.015613][ T7975]  do_syscall_64+0xfa/0xf80
[  205.015628][ T7975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.015638][ T7975]  ? clear_bhb_loop+0x60/0xb0
[  205.015650][ T7975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.015660][ T7975] RIP: 0033:0x7f6a0d18f749
[  205.015672][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.015680][ T7975] RSP: 002b:00007f6a0e0c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  205.015692][ T7975] RAX: ffffffffffffffda RBX: 00007f6a0d3e5fa0 RCX: 00007f6a0d18f749
[  205.015699][ T7975] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000200000000180
[  205.015707][ T7975] RBP: 00007f6a0e0c9090 R08: 0000200000000800 R09: 0000000000000000
[  205.015713][ T7975] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002
[  205.015719][ T7975] R13: 00007f6a0d3e6038 R14: 00007f6a0d3e5fa0 R15: 00007ffd02e73ef8
[  205.015735][ T7975]  </TASK>
[  205.342688][  T903] usb 2-1: Using ep0 maxpacket: 32
[  205.350847][  T903] usb 2-1: config 2 has an invalid interface number: 255 but max is 2
[  205.359427][  T903] usb 2-1: config 2 has an invalid interface number: 245 but max is 2
[  205.367749][  T903] usb 2-1: config 2 has an invalid interface number: 75 but max is 2
[  205.377953][  T903] usb 2-1: config 2 has no interface number 0
[  205.386526][  T903] usb 2-1: config 2 has no interface number 1
[  205.392863][  T903] usb 2-1: config 2 has no interface number 2
[  205.399027][  T903] usb 2-1: config 2 interface 255 altsetting 170 has an endpoint descriptor with address 0xF7, changing to 0x87
[  205.411034][  T903] usb 2-1: config 2 interface 255 altsetting 170 has a duplicate endpoint with address 0x87, skipping
[  205.422139][  T903] usb 2-1: config 2 interface 255 altsetting 170 has a duplicate endpoint with address 0x7, skipping
[  205.461079][  T903] usb 2-1: config 2 interface 255 altsetting 170 endpoint 0xD has an invalid bInterval 148, changing to 11
[  205.474198][  T903] usb 2-1: config 2 interface 255 altsetting 170 endpoint 0xD has invalid wMaxPacketSize 0
[  205.514443][  T903] usb 2-1: config 2 interface 255 altsetting 170 has a duplicate endpoint with address 0x7, skipping
[  205.532740][  T903] usb 2-1: config 2 interface 255 altsetting 170 bulk endpoint 0xB has invalid maxpacket 8
[  205.555637][  T903] usb 2-1: config 2 interface 255 altsetting 170 has a duplicate endpoint with address 0x7, skipping
[  205.571582][  T903] usb 2-1: config 2 interface 255 altsetting 170 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  205.583771][  T903] usb 2-1: config 2 interface 255 altsetting 170 endpoint 0xE has an invalid bInterval 255, changing to 7
[  205.595765][  T903] usb 2-1: config 2 interface 255 altsetting 170 has an invalid descriptor for endpoint zero, skipping
[  205.606969][  T903] usb 2-1: config 2 interface 255 altsetting 170 has an invalid descriptor for endpoint zero, skipping
[  205.621327][  T903] usb 2-1: config 2 interface 255 altsetting 170 bulk endpoint 0xC has invalid maxpacket 16
[  205.632328][  T903] usb 2-1: config 2 interface 255 altsetting 170 has a duplicate endpoint with address 0xB, skipping
[  205.644014][  T903] usb 2-1: config 2 interface 255 altsetting 170 has an invalid descriptor for endpoint zero, skipping
[  205.662877][  T903] usb 2-1: config 2 interface 255 altsetting 170 has 16 endpoint descriptors, different from the interface descriptor's value: 15
[  205.700423][  T903] usb 2-1: config 2 interface 245 altsetting 40 has a duplicate endpoint with address 0x2, skipping
[  205.718073][ T7988] FAULT_INJECTION: forcing a failure.
[  205.718073][ T7988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.733240][  T903] usb 2-1: config 2 interface 245 altsetting 40 has a duplicate endpoint with address 0xC, skipping
[  205.744249][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.2.758 Not tainted syzkaller #0 PREEMPT(full) 
[  205.744273][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  205.744284][ T7988] Call Trace:
[  205.744291][ T7988]  <TASK>
[  205.744299][ T7988]  dump_stack_lvl+0x189/0x250
[  205.744327][ T7988]  ? __pfx____ratelimit+0x10/0x10
[  205.744352][ T7988]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.744373][ T7988]  ? __pfx__printk+0x10/0x10
[  205.744407][ T7988]  should_fail_ex+0x414/0x560
[  205.744436][ T7988]  _copy_to_user+0x31/0xb0
[  205.744457][ T7988]  vt_ioctl+0x1bde/0x1f20
[  205.744485][ T7988]  ? __pfx_vt_ioctl+0x10/0x10
[  205.744520][ T7988]  ? __fget_files+0x2a/0x420
[  205.744547][ T7988]  ? tty_jobctrl_ioctl+0x369/0xb70
[  205.744567][ T7988]  ? __fget_files+0x3a0/0x420
[  205.744589][ T7988]  ? __fget_files+0x2a/0x420
[  205.744613][ T7988]  tty_ioctl+0x929/0xde0
[  205.744637][ T7988]  ? __pfx_tty_ioctl+0x10/0x10
[  205.744659][ T7988]  __se_sys_ioctl+0xfc/0x170
[  205.744680][ T7988]  do_syscall_64+0xfa/0xf80
[  205.744707][ T7988]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.744726][ T7988]  ? clear_bhb_loop+0x60/0xb0
[  205.744748][ T7988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.744767][ T7988] RIP: 0033:0x7f83a198f749
[  205.744784][ T7988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.744803][ T7988] RSP: 002b:00007f83a28f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.744824][ T7988] RAX: ffffffffffffffda RBX: 00007f83a1be5fa0 RCX: 00007f83a198f749
[  205.744839][ T7988] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003
[  205.744852][ T7988] RBP: 00007f83a28f4090 R08: 0000000000000000 R09: 0000000000000000
[  205.744865][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.744877][ T7988] R13: 00007f83a1be6038 R14: 00007f83a1be5fa0 R15: 00007ffe90693b78
[  205.744909][ T7988]  </TASK>
[  205.945172][  T903] usb 2-1: config 2 interface 75 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  205.956580][  T903] usb 2-1: config 2 interface 75 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  205.967556][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  205.978302][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  205.989664][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  206.000811][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  206.011579][  T903] usb 2-1: config 2 interface 75 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  206.022504][  T903] usb 2-1: config 2 interface 75 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  206.033529][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  206.044647][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  206.055565][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  206.067100][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  206.077974][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  206.078004][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x89, skipping
[  206.078028][  T903] usb 2-1: config 2 interface 75 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  206.078050][  T903] usb 2-1: config 2 interface 255 has no altsetting 0
[  206.078068][  T903] usb 2-1: config 2 interface 245 has no altsetting 0
[  206.101718][  T903] usb 2-1: New USB device found, idVendor=04ca, idProduct=3004, bcdDevice=7f.a5
[  206.101752][  T903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.101772][  T903] usb 2-1: Product: ᠊
[  206.101786][  T903] usb 2-1: Manufacturer: ꒕茯
[  206.101801][  T903] usb 2-1: SerialNumber: syz
[  206.106996][ T7971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  206.107714][ T7971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  206.107976][ T7971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  206.292840][ T5991] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  206.340242][  T903] usb 2-1: USB disconnect, device number 54
[  206.468283][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  206.481696][ T5991] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  206.506558][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.523881][ T5991] usb 3-1: config 0 descriptor??
[  206.785244][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  206.785588][ T5149] Bluetooth: hci1: command 0x0406 tx timeout
[  206.791432][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  206.852228][ T8011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  206.892891][  T927] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  206.913436][ T8014] netlink: 256 bytes leftover after parsing attributes in process `syz.1.770'.
[  207.026972][ T8021] comedi comedi3: comedi_config --init_data is deprecated
[  207.065754][  T927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.082337][  T927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  207.117213][  T927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  207.127774][  T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  207.140218][  T927] usb 4-1: SerialNumber: syz
[  207.266615][ T5991] usb 3-1: string descriptor 0 read error: -71
[  207.300224][ T5991] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  207.313143][ T5991] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -32
[  207.341282][ T5991] usb 3-1: USB disconnect, device number 46
[  207.353474][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.362396][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.396714][  T927] usb 4-1: 0:2 : does not exist
[  207.424356][  T927] usb 4-1: USB disconnect, device number 59
[  207.464452][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.542695][  T903] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  207.712724][  T903] usb 2-1: Using ep0 maxpacket: 16
[  207.719399][  T903] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  207.728528][  T903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.739293][  T903] usb 2-1: config 0 descriptor??
[  207.836094][ T8041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  208.361372][  T903] usbhid 2-1:0.0: can't add hid device: -71
[  208.382684][  T903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  208.402423][  T903] usb 2-1: USB disconnect, device number 55
[  208.752673][ T5928] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  208.943892][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  208.957047][ T5928] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  208.967476][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.978127][ T5928] usb 3-1: config 0 descriptor??
[  209.492698][  T903] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  209.652706][  T903] usb 2-1: Using ep0 maxpacket: 8
[  209.664607][  T903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  209.694280][  T903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.708950][  T903] usb 2-1: Product: syz
[  209.714669][  T903] usb 2-1: Manufacturer: syz
[  209.719359][  T903] usb 2-1: SerialNumber: syz
[  209.730806][  T903] usb 2-1: config 0 descriptor??
[  209.774463][ T5928] usb 3-1: string descriptor 0 read error: -71
[  209.805540][ T5928] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  209.816425][ T5928] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -32
[  209.873764][ T5928] usb 3-1: USB disconnect, device number 47
[  209.963093][  T903] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  210.166028][  T903] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  210.742651][ T5892] usb 3-1: new low-speed USB device number 48 using dummy_hcd
[  210.915203][ T5892] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  210.927613][ T5892] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  210.948985][ T5892] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  210.961137][ T5892] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  210.969016][ T5892] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  210.980764][ T5892] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  210.993533][ T5892] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  211.001195][ T5892] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  211.014612][ T5892] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  211.029362][ T5892] usb 3-1: string descriptor 0 read error: -22
[  211.036093][ T5892] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  211.049867][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.074600][ T5892] adutux 3-1:168.0: interrupt endpoints not found
[  211.285399][ T5892] usb 3-1: USB disconnect, device number 48
[  211.672795][ T5892] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  211.824932][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  211.840104][ T5892] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  211.849358][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.858984][ T5892] usb 4-1: config 0 descriptor??
[  212.279912][ T5937] usb 2-1: USB disconnect, device number 56
[  212.548064][ T8136] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  212.554810][ T8136] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  212.566183][ T8136] vhci_hcd vhci_hcd.0: Device attached
[  212.582651][ T8081] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  212.591223][ T5892] usb 4-1: string descriptor 0 read error: -71
[  212.627016][ T5892] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  212.635505][ T5892] letsketch 0003:6161:4D15.0014: probe with driver letsketch failed with error -32
[  212.651424][ T5892] usb 4-1: USB disconnect, device number 60
[  212.712689][ T8081] usb 3-1: device descriptor read/64, error -71
[  212.743211][ T5937] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  212.802673][ T5937] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  212.842716][ T5872] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  212.849110][ T8141] overlayfs: missing 'lowerdir'
[  212.973139][ T8081] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  213.002656][ T5872] usb 2-1: Using ep0 maxpacket: 32
[  213.009913][ T5872] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  213.019800][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.030263][ T5872] usb 2-1: config 0 descriptor??
[  213.040793][ T5872] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  213.112743][ T8081] usb 3-1: device descriptor read/64, error -71
[  213.233023][ T8081] usb usb3-port1: attempt power cycle
[  213.240659][ T5872] gspca_vc032x: reg_r err -71
[  213.247893][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.253804][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.268420][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.274351][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.280089][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.286126][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.291439][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.298190][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.305262][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.310648][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.317213][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.322873][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.328179][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.333659][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.338974][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.344993][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.350302][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.356057][ T5872] gspca_vc032x: I2c Bus Busy Wait 00
[  213.363120][ T5872] gspca_vc032x: Unknown sensor...
[  213.368295][ T5872] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  213.378931][ T5872] usb 2-1: USB disconnect, device number 57
[  213.517521][ T8163] FAULT_INJECTION: forcing a failure.
[  213.517521][ T8163] name failslab, interval 1, probability 0, space 0, times 0
[  213.530501][ T8163] CPU: 1 UID: 0 PID: 8163 Comm: syz.3.819 Not tainted syzkaller #0 PREEMPT(full) 
[  213.530527][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  213.530539][ T8163] Call Trace:
[  213.530547][ T8163]  <TASK>
[  213.530555][ T8163]  dump_stack_lvl+0x189/0x250
[  213.530584][ T8163]  ? __pfx____ratelimit+0x10/0x10
[  213.530618][ T8163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.530642][ T8163]  ? __pfx__printk+0x10/0x10
[  213.530668][ T8163]  ? __pfx___might_resched+0x10/0x10
[  213.530689][ T8163]  ? fs_reclaim_acquire+0x7d/0x100
[  213.530716][ T8163]  should_fail_ex+0x414/0x560
[  213.530747][ T8163]  should_failslab+0xa8/0x100
[  213.530771][ T8163]  kmem_cache_alloc_noprof+0x88/0x6f0
[  213.530800][ T8163]  ? __kvm_mmu_topup_memory_cache+0x463/0x610
[  213.530824][ T8163]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  213.530851][ T8163]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  213.530886][ T8163]  mmu_topup_memory_caches+0x21/0x170
[  213.530912][ T8163]  kvm_mmu_load+0x9d/0x22d0
[  213.530935][ T8163]  ? kvm_msr_allowed+0x9a/0x490
[  213.530962][ T8163]  ? kvm_msr_allowed+0x9a/0x490
[  213.530987][ T8163]  ? kvm_msr_allowed+0x9a/0x490
[  213.531014][ T8163]  ? kvm_msr_allowed+0x9a/0x490
[  213.531037][ T8163]  ? kvm_apic_has_interrupt+0x744/0x770
[  213.531078][ T8163]  vcpu_run+0x54d7/0x76b0
[  213.531115][ T8163]  ? __lock_acquire+0x6b6/0x2cf0
[  213.531191][ T8163]  ? __pfx_vcpu_run+0x10/0x10
[  213.531218][ T8163]  ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90
[  213.531245][ T8163]  ? rcu_is_watching+0x15/0xb0
[  213.531273][ T8163]  kvm_arch_vcpu_ioctl_run+0x1148/0x1c90
[  213.531306][ T8163]  ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90
[  213.531325][ T8163]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  213.531346][ T8163]  ? __lock_acquire+0x6b6/0x2cf0
[  213.531369][ T8163]  ? __mutex_lock+0x335/0x1350
[  213.531404][ T8163]  ? kasan_quarantine_put+0xdd/0x220
[  213.531427][ T8163]  ? lockdep_hardirqs_on+0x98/0x140
[  213.531481][ T8163]  kvm_vcpu_ioctl+0x99a/0xed0
[  213.531514][ T8163]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  213.531541][ T8163]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  213.531587][ T8163]  ? __fget_files+0x2a/0x420
[  213.531621][ T8163]  ? __fget_files+0x3a0/0x420
[  213.531643][ T8163]  ? __fget_files+0x2a/0x420
[  213.531671][ T8163]  ? bpf_lsm_file_ioctl+0x9/0x20
[  213.531693][ T8163]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  213.531719][ T8163]  __se_sys_ioctl+0xfc/0x170
[  213.531741][ T8163]  do_syscall_64+0xfa/0xf80
[  213.531767][ T8163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.531786][ T8163]  ? clear_bhb_loop+0x60/0xb0
[  213.531809][ T8163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.531827][ T8163] RIP: 0033:0x7f6a0d18f749
[  213.531843][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.531860][ T8163] RSP: 002b:00007f6a0e0a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  213.531880][ T8163] RAX: ffffffffffffffda RBX: 00007f6a0d3e6090 RCX: 00007f6a0d18f749
[  213.531894][ T8163] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  213.531906][ T8163] RBP: 00007f6a0e0a8090 R08: 0000000000000000 R09: 0000000000000000
[  213.531918][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  213.531929][ T8163] R13: 00007f6a0d3e6128 R14: 00007f6a0d3e6090 R15: 00007ffd02e73ef8
[  213.531961][ T8163]  </TASK>
[  213.582776][ T8081] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  213.895595][ T8081] usb 3-1: device descriptor read/8, error -71
[  214.134968][ T5925] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  214.152823][ T8081] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  214.174112][ T8081] usb 3-1: device descriptor read/8, error -71
[  214.260920][   T30] audit: type=1326 audit(1764093173.932:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.3.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a0d18f749 code=0x0
[  214.306627][ T8081] usb usb3-port1: unable to enumerate USB device
[  214.309815][ T5925] usb 2-1: Using ep0 maxpacket: 8
[  214.321142][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  214.330340][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.338454][ T5925] usb 2-1: Product: syz
[  214.342728][ T5925] usb 2-1: Manufacturer: syz
[  214.347312][ T5925] usb 2-1: SerialNumber: syz
[  214.355199][ T5925] usb 2-1: config 0 descriptor??
[  214.564195][ T5925] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  214.632736][ T8081] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  214.765768][ T5925] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  214.786084][ T8081] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  214.804998][ T8081] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  214.814620][ T8081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.824948][ T8081] usb 4-1: config 0 descriptor??
[  215.554417][ T8081] usb 4-1: string descriptor 0 read error: -71
[  215.588714][ T8081] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  215.599443][ T8081] letsketch 0003:6161:4D15.0015: probe with driver letsketch failed with error -32
[  215.620923][ T8081] usb 4-1: USB disconnect, device number 61
[  216.341519][ T8203] orangefs_devreq_write_iter: userspace claims version42, minimum version required: 20903.
[  216.515536][ T8208] orangefs_devreq_write_iter: userspace claims version42, minimum version required: 20903.
[  216.526749][ T8208] FAULT_INJECTION: forcing a failure.
[  216.526749][ T8208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.541291][ T8208] CPU: 1 UID: 0 PID: 8208 Comm: syz.3.833 Not tainted syzkaller #0 PREEMPT(full) 
[  216.541320][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  216.541333][ T8208] Call Trace:
[  216.541339][ T8208]  <TASK>
[  216.541347][ T8208]  dump_stack_lvl+0x189/0x250
[  216.541376][ T8208]  ? __pfx____ratelimit+0x10/0x10
[  216.541401][ T8208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.541424][ T8208]  ? __pfx__printk+0x10/0x10
[  216.541455][ T8208]  should_fail_ex+0x414/0x560
[  216.541484][ T8208]  _copy_to_user+0x31/0xb0
[  216.541505][ T8208]  simple_read_from_buffer+0xe1/0x170
[  216.541535][ T8208]  proc_fail_nth_read+0x1b3/0x220
[  216.541558][ T8208]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.541581][ T8208]  ? rw_verify_area+0x2a6/0x4d0
[  216.541598][ T8208]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.541619][ T8208]  vfs_read+0x200/0xa30
[  216.541635][ T8208]  ? fdget_pos+0x247/0x320
[  216.541662][ T8208]  ? __pfx___mutex_lock+0x10/0x10
[  216.541691][ T8208]  ? __pfx_vfs_read+0x10/0x10
[  216.541712][ T8208]  ? __fget_files+0x2a/0x420
[  216.541741][ T8208]  ? __fget_files+0x3a0/0x420
[  216.541764][ T8208]  ? __fget_files+0x2a/0x420
[  216.541798][ T8208]  ksys_read+0x145/0x250
[  216.541819][ T8208]  ? __pfx_ksys_read+0x10/0x10
[  216.541841][ T8208]  ? do_syscall_64+0xbe/0xf80
[  216.541870][ T8208]  do_syscall_64+0xfa/0xf80
[  216.541897][ T8208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.541915][ T8208]  ? clear_bhb_loop+0x60/0xb0
[  216.541937][ T8208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.541955][ T8208] RIP: 0033:0x7f6a0d18e15c
[  216.541973][ T8208] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  216.541990][ T8208] RSP: 002b:00007f6a0e0c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  216.542010][ T8208] RAX: ffffffffffffffda RBX: 00007f6a0d3e5fa0 RCX: 00007f6a0d18e15c
[  216.542023][ T8208] RDX: 000000000000000f RSI: 00007f6a0e0c90a0 RDI: 0000000000000005
[  216.542044][ T8208] RBP: 00007f6a0e0c9090 R08: 0000000000000000 R09: 0000000000000010
[  216.542056][ T8208] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  216.542067][ T8208] R13: 00007f6a0d3e6038 R14: 00007f6a0d3e5fa0 R15: 00007ffd02e73ef8
[  216.542098][ T8208]  </TASK>
[  216.892732][ T8081] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  216.938246][  T903] usb 2-1: USB disconnect, device number 58
[  217.052790][ T8081] usb 3-1: Using ep0 maxpacket: 16
[  217.059938][ T8081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.090794][ T8081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.114914][ T8081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  217.129013][ T8081] usb 3-1: New USB device found, idVendor=145e, idProduct=07da, bcdDevice= 0.00
[  217.138487][ T8081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.148868][ T8081] usb 3-1: config 0 descriptor??
[  217.322890][ T8082] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  217.452793][  T903] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  217.485752][ T8082] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  217.495054][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.503193][ T8082] usb 4-1: Product: syz
[  217.507506][ T8082] usb 4-1: Manufacturer: syz
[  217.512191][ T8082] usb 4-1: SerialNumber: syz
[  217.518901][ T8082] usb 4-1: config 0 descriptor??
[  217.528563][ T8082] gspca_main: sq905c-2.14.0 probing 2770:9052
[  217.567464][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.575398][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.583186][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.590881][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.598961][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.607003][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.614988][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.623017][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.632335][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.640200][ T8081] hid-multitouch 0003:145E:07DA.0016: unknown main item tag 0x0
[  217.651324][  T903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  217.665163][ T8081] hid-multitouch 0003:145E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 145e:07da] on usb-dummy_hcd.2-1/input0
[  217.679478][  T903] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  217.693960][  T903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.713433][  T903] usb 2-1: config 0 descriptor??
[  217.770673][ T8081] usb 3-1: USB disconnect, device number 53
[  218.416487][  T903] usb 2-1: string descriptor 0 read error: -71
[  218.443054][ T8082] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  218.450981][ T8082] sq905c 4-1:0.0: probe with driver sq905c failed with error -110
[  218.466175][  T903] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  218.477324][  T903] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -32
[  218.512801][  T903] usb 2-1: USB disconnect, device number 59
[  218.549792][ T8233] program syz.2.842 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.560552][ T8233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.842'.
[  219.044770][ T8243] FAULT_INJECTION: forcing a failure.
[  219.044770][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.058253][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT(full) 
[  219.058281][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  219.058294][ T8243] Call Trace:
[  219.058305][ T8243]  <TASK>
[  219.058314][ T8243]  dump_stack_lvl+0x189/0x250
[  219.058346][ T8243]  ? __pfx____ratelimit+0x10/0x10
[  219.058374][ T8243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.058400][ T8243]  ? __pfx__printk+0x10/0x10
[  219.058437][ T8243]  should_fail_ex+0x414/0x560
[  219.058469][ T8243]  _copy_to_user+0x31/0xb0
[  219.058492][ T8243]  simple_read_from_buffer+0xe1/0x170
[  219.058523][ T8243]  proc_fail_nth_read+0x1b3/0x220
[  219.058549][ T8243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  219.058575][ T8243]  ? rw_verify_area+0x2a6/0x4d0
[  219.058595][ T8243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  219.058619][ T8243]  vfs_read+0x200/0xa30
[  219.058638][ T8243]  ? fdget_pos+0x247/0x320
[  219.058668][ T8243]  ? __pfx___mutex_lock+0x10/0x10
[  219.058698][ T8243]  ? __pfx_vfs_read+0x10/0x10
[  219.058719][ T8243]  ? __fget_files+0x2a/0x420
[  219.058750][ T8243]  ? __fget_files+0x3a0/0x420
[  219.058775][ T8243]  ? __fget_files+0x2a/0x420
[  219.058807][ T8243]  ksys_read+0x145/0x250
[  219.058830][ T8243]  ? __pfx_ksys_read+0x10/0x10
[  219.058854][ T8243]  ? do_syscall_64+0xbe/0xf80
[  219.058886][ T8243]  do_syscall_64+0xfa/0xf80
[  219.058916][ T8243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.058937][ T8243]  ? clear_bhb_loop+0x60/0xb0
[  219.058961][ T8243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.058981][ T8243] RIP: 0033:0x7fc576f8e15c
[  219.058999][ T8243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  219.059018][ T8243] RSP: 002b:00007fc577d43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  219.059047][ T8243] RAX: ffffffffffffffda RBX: 00007fc5771e5fa0 RCX: 00007fc576f8e15c
[  219.059063][ T8243] RDX: 000000000000000f RSI: 00007fc577d430a0 RDI: 0000000000000006
[  219.059077][ T8243] RBP: 00007fc577d43090 R08: 0000000000000000 R09: 0000000000000000
[  219.059089][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.059102][ T8243] R13: 00007fc5771e6038 R14: 00007fc5771e5fa0 R15: 00007ffe4a8f15c8
[  219.059139][ T8243]  </TASK>
[  219.932690][ T8082] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  220.052684][ T5872] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  220.086573][ T8082] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  220.096845][ T8082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.105390][ T8082] usb 2-1: Product: syz
[  220.109575][ T8082] usb 2-1: Manufacturer: syz
[  220.114292][ T8082] usb 2-1: SerialNumber: syz
[  220.127781][ T8082] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  220.158990][  T903] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  220.182739][ T5872] usb 3-1: device descriptor read/64, error -71
[  220.208239][ T8082] usb 4-1: USB disconnect, device number 62
[  220.422680][ T5872] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  220.562698][ T5872] usb 3-1: device descriptor read/64, error -71
[  220.672928][ T5872] usb usb3-port1: attempt power cycle
[  220.996406][ T8082] usb 2-1: USB disconnect, device number 60
[  221.012717][ T5872] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  221.043506][ T5872] usb 3-1: device descriptor read/8, error -71
[  221.182919][  T903] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  221.198396][  T903] ath9k_htc: Failed to initialize the device
[  221.210194][ T8082] usb 2-1: ath9k_htc: USB layer deinitialized
[  221.221368][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.860'.
[  221.293166][ T5872] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  221.321738][ T5872] usb 3-1: device descriptor read/8, error -71
[  221.443515][ T5872] usb usb3-port1: unable to enumerate USB device
[  221.722728][ T5872] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  221.812742][ T8082] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  221.872775][ T5872] usb 4-1: Using ep0 maxpacket: 32
[  221.879175][ T5872] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  221.887526][ T5872] usb 4-1: config 0 has no interface number 0
[  221.895647][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  221.905210][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.913276][ T5872] usb 4-1: Product: syz
[  221.917520][ T5872] usb 4-1: Manufacturer: syz
[  221.922121][ T5872] usb 4-1: SerialNumber: syz
[  221.929816][ T5872] usb 4-1: config 0 descriptor??
[  221.939135][ T5872] smsc95xx v2.0.0
[  221.962780][ T8082] usb 2-1: Using ep0 maxpacket: 8
[  221.972080][ T8082] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  221.981589][ T8082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.989764][ T8082] usb 2-1: Product: syz
[  221.993993][ T8082] usb 2-1: Manufacturer: syz
[  221.998614][ T8082] usb 2-1: SerialNumber: syz
[  222.005988][ T8082] usb 2-1: config 0 descriptor??
[  222.106861][ T8301] netlink: 750 bytes leftover after parsing attributes in process `syz.0.868'.
[  222.221307][ T8082] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  222.312498][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'.
[  222.749095][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  222.773364][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  222.790071][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  222.803344][ T5872] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  222.821759][ T5872] usb 4-1: USB disconnect, device number 63
[  222.829056][ T8082] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  222.940224][ T8322] netlink: 208 bytes leftover after parsing attributes in process `syz.2.877'.
[  223.232669][ T8081] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  223.317621][ T8341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.881'.
[  223.405320][ T8081] usb 3-1: config 0 has an invalid interface number: 82 but max is 0
[  223.422809][ T8081] usb 3-1: config 0 has no interface number 0
[  223.440823][ T8081] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c0.6f
[  223.456748][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'.
[  223.460344][ T8081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.478127][ T8081] usb 3-1: Product: syz
[  223.482317][ T8081] usb 3-1: Manufacturer: syz
[  223.492638][ T8081] usb 3-1: SerialNumber: syz
[  223.511140][ T8081] usb 3-1: config 0 descriptor??
[  223.522488][ T8081] usb 3-1: invalid MIDI EP
[  223.534228][ T8081] usb 3-1: snd-bcd2000: error during probing
[  223.542699][ T8081] snd-bcd2000 3-1:0.82: probe with driver snd-bcd2000 failed with error -22
[  223.702717][ T5925] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  223.721343][ T5872] usb 3-1: USB disconnect, device number 58
[  223.864375][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  223.876163][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  223.887342][ T5925] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  223.896776][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.907564][ T5925] usb 4-1: config 0 descriptor??
[  223.915003][ T8347] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  224.326898][ T5925] hid-rmi 0003:0461:4E72.0018: unknown main item tag 0x0
[  224.334082][ T5925] hid-rmi 0003:0461:4E72.0018: unknown main item tag 0x0
[  224.341227][ T5925] hid-rmi 0003:0461:4E72.0018: item fetching failed at offset 4/5
[  224.349753][ T5925] hid-rmi 0003:0461:4E72.0018: parse failed
[  224.355767][ T5925] hid-rmi 0003:0461:4E72.0018: probe with driver hid-rmi failed with error -22
[  224.529489][ T8081] usb 4-1: USB disconnect, device number 64
[  224.590084][  T903] usb 2-1: USB disconnect, device number 61
[  224.982770][ T8081] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  225.042690][  T903] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  225.156081][ T8081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  225.179597][ T8081] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  225.202953][  T903] usb 2-1: device descriptor read/64, error -71
[  225.219968][ T8081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.234779][ T8081] usb 3-1: config 0 descriptor??
[  225.442683][  T903] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  225.540847][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'.
[  225.592976][  T903] usb 2-1: device descriptor read/64, error -71
[  225.607530][ T8378] openvswitch: netlink: Message has 1 unknown bytes.
[  225.615255][ T8378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.713153][  T903] usb usb2-port1: attempt power cycle
[  225.975553][ T8081] usb 3-1: string descriptor 0 read error: -71
[  226.009840][ T8081] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  226.018547][ T8081] letsketch 0003:6161:4D15.0019: probe with driver letsketch failed with error -32
[  226.041580][ T8081] usb 3-1: USB disconnect, device number 59
[  226.052677][  T903] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  226.093928][  T903] usb 2-1: device descriptor read/8, error -71
[  226.332666][  T903] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  226.353180][  T903] usb 2-1: device descriptor read/8, error -71
[  226.404203][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  226.465254][  T903] usb usb2-port1: unable to enumerate USB device
[  226.547195][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'.
[  226.563375][ T8400] TCP: TCP_TX_DELAY enabled
[  226.863680][  T903] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  226.918106][   T60] Bluetooth: hci4: Frame reassembly failed (-84)
[  226.925786][   T60] Bluetooth: hci4: Frame reassembly failed (-84)
[  227.002707][  T903] usb 3-1: device descriptor read/64, error -71
[  227.242675][  T903] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  227.373213][  T903] usb 3-1: device descriptor read/64, error -71
[  227.494655][  T903] usb usb3-port1: attempt power cycle
[  227.796809][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'.
[  227.850024][  T903] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  227.873298][  T903] usb 3-1: device descriptor read/8, error -71
[  227.970571][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  227.980334][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  228.112699][  T903] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  228.133150][  T903] usb 3-1: device descriptor read/8, error -71
[  228.212774][ T8081] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  228.243040][  T903] usb usb3-port1: unable to enumerate USB device
[  228.366191][ T8081] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  228.375438][ T8081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.383486][ T8081] usb 2-1: Product: syz
[  228.387680][ T8081] usb 2-1: Manufacturer: syz
[  228.392276][ T8081] usb 2-1: SerialNumber: syz
[  228.807081][ T8081] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  228.818952][ T8081] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  228.942680][   T52] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  228.943587][ T5831] Bluetooth: hci4: command 0x1003 tx timeout
[  229.300945][ T8448] netlink: 'syz.3.922': attribute type 29 has an invalid length.
[  229.836904][ T8457] syzkaller1: entered promiscuous mode
[  229.842404][ T8457] syzkaller1: entered allmulticast mode
[  229.857099][ T8458] netlink: zone id is out of range
[  229.862418][ T8458] netlink: zone id is out of range
[  229.867923][ T8457] netlink: zone id is out of range
[  229.873380][ T8457] netlink: zone id is out of range
[  229.878619][ T8457] netlink: get zone limit has 4 unknown bytes
[  229.885268][ T8458] netlink: get zone limit has 4 unknown bytes
[  230.093856][ T8081] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  230.134676][ T8081] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  230.146529][ T8081] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  230.159464][ T8081] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  230.173037][ T8081] usb 2-1: USB disconnect, device number 66
[  230.184714][ T6066] udevd[6066]: setting mode of /dev/bus/usb/002/066 to 020664 failed: No such file or directory
[  230.195483][ T6066] udevd[6066]: setting owner of /dev/bus/usb/002/066 to uid=0, gid=0 failed: No such file or directory
[  230.765349][ T8468] FAULT_INJECTION: forcing a failure.
[  230.765349][ T8468] name failslab, interval 1, probability 0, space 0, times 0
[  230.779938][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.2.931 Not tainted syzkaller #0 PREEMPT(full) 
[  230.779964][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  230.779975][ T8468] Call Trace:
[  230.779983][ T8468]  <TASK>
[  230.779992][ T8468]  dump_stack_lvl+0x189/0x250
[  230.780020][ T8468]  ? __pfx____ratelimit+0x10/0x10
[  230.780046][ T8468]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.780071][ T8468]  ? __pfx__printk+0x10/0x10
[  230.780097][ T8468]  ? __pfx___might_resched+0x10/0x10
[  230.780119][ T8468]  ? fs_reclaim_acquire+0x7d/0x100
[  230.780146][ T8468]  should_fail_ex+0x414/0x560
[  230.780177][ T8468]  should_failslab+0xa8/0x100
[  230.780203][ T8468]  __kmalloc_cache_noprof+0x84/0x6f0
[  230.780224][ T8468]  ? init_srcu_struct_fields+0x7f/0xa20
[  230.780254][ T8468]  init_srcu_struct_fields+0x7f/0xa20
[  230.780287][ T8468]  hci_alloc_dev_priv+0x4a/0x2060
[  230.780320][ T8468]  hci_uart_tty_ioctl+0x3ca/0xa60
[  230.780354][ T8468]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  230.780382][ T8468]  tty_ioctl+0x9c6/0xde0
[  230.780410][ T8468]  ? __pfx_tty_ioctl+0x10/0x10
[  230.780436][ T8468]  __se_sys_ioctl+0xfc/0x170
[  230.780458][ T8468]  do_syscall_64+0xfa/0xf80
[  230.780487][ T8468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.780506][ T8468]  ? clear_bhb_loop+0x60/0xb0
[  230.780529][ T8468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.780548][ T8468] RIP: 0033:0x7f83a198f749
[  230.780566][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.780583][ T8468] RSP: 002b:00007f83a28f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.780605][ T8468] RAX: ffffffffffffffda RBX: 00007f83a1be5fa0 RCX: 00007f83a198f749
[  230.780620][ T8468] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003
[  230.780632][ T8468] RBP: 00007f83a28f4090 R08: 0000000000000000 R09: 0000000000000000
[  230.780644][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.780655][ T8468] R13: 00007f83a1be6038 R14: 00007f83a1be5fa0 R15: 00007ffe90693b78
[  230.780685][ T8468]  </TASK>
[  230.780719][ T8468] Bluetooth: Can't allocate HCI device
[  231.166035][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'.
[  231.312739][ T5925] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  231.382806][  T903] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  231.465119][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  231.478220][ T5925] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  231.488611][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.500338][ T5925] usb 3-1: config 0 descriptor??
[  231.532740][  T903] usb 2-1: Using ep0 maxpacket: 8
[  231.541649][  T903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  231.551447][  T903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.559599][  T903] usb 2-1: Product: syz
[  231.563940][  T903] usb 2-1: Manufacturer: syz
[  231.568546][  T903] usb 2-1: SerialNumber: syz
[  231.576719][  T903] usb 2-1: config 0 descriptor??
[  231.787853][  T903] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  232.214069][ T5925] usb 3-1: string descriptor 0 read error: -71
[  232.246511][ T5925] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  232.255083][ T5925] letsketch 0003:6161:4D15.001A: probe with driver letsketch failed with error -32
[  232.273045][ T5925] usb 3-1: USB disconnect, device number 64
[  232.535586][ T8499] netlink: 76 bytes leftover after parsing attributes in process `syz.0.944'.
[  232.546383][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'.
[  233.003585][   T52] Bluetooth: hci3: unexpected event for opcode 0x1005
[  233.122690][ T5892] usb 4-1: new low-speed USB device number 65 using dummy_hcd
[  233.220404][  T903] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  233.239616][  T903] usb 2-1: USB disconnect, device number 67
[  233.294509][ T5892] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  233.302108][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  233.313146][ T5892] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  233.324874][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  233.337220][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  233.349427][ T5892] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  233.357117][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  233.368123][ T5892] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  233.379846][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  233.400137][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  233.412663][ T8081] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  233.413273][ T5892] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  233.428879][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  233.443326][ T5892] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  233.455070][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  233.466285][ T5892] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  233.480672][ T5892] usb 4-1: string descriptor 0 read error: -22
[  233.487180][ T5892] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  233.496378][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.520987][ T5892] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  233.583403][ T8081] usb 3-1: too many configurations: 114, using maximum allowed: 8
[  233.601142][ T8081] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  233.610408][ T8081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.618875][ T8081] usb 3-1: Product: syz
[  233.623639][ T8081] usb 3-1: Manufacturer: syz
[  233.628292][ T8081] usb 3-1: SerialNumber: syz
[  233.647197][ T8081] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  233.666206][  T108] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  233.770044][ T5892] usb 4-1: USB disconnect, device number 65
[  234.072651][ T5991] usb 2-1: new low-speed USB device number 68 using dummy_hcd
[  234.205759][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.216179][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.225810][ T5991] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  234.233449][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  234.244686][ T5991] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.258326][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  234.269640][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  234.282115][ T5991] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  234.289652][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  234.300455][ T5991] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.322749][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  234.334006][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  234.346458][ T5991] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  234.355664][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  234.366448][ T5991] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.378197][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  234.389401][ T5991] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  234.403477][ T5991] usb 2-1: string descriptor 0 read error: -22
[  234.409781][ T5991] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  234.419494][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.428753][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.444594][ T5991] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  234.463107][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.508915][  T903] usb 3-1: USB disconnect, device number 65
[  234.703069][  T108] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  234.710141][  T108] ath9k_htc: Failed to initialize the device
[  234.721064][ T8081] usb 2-1: USB disconnect, device number 68
[  234.758070][  T903] usb 3-1: ath9k_htc: USB layer deinitialized
[  235.174255][   T45] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  235.335625][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  235.363055][   T45] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  235.372227][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.385931][   T45] usb 4-1: config 0 descriptor??
[  235.656378][ T8593] binder: 8592:8593 ioctl c0306201 200000000540 returned -22
[  235.902772][ T8081] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  236.052647][ T8081] usb 3-1: Using ep0 maxpacket: 8
[  236.060719][ T8081] usb 3-1: unable to get BOS descriptor or descriptor too short
[  236.070477][ T8081] usb 3-1: config 8 has an invalid interface number: 103 but max is 1
[  236.087769][ T8081] usb 3-1: config 8 has an invalid interface number: 179 but max is 1
[  236.116245][ T8081] usb 3-1: config 8 has no interface number 0
[  236.122364][ T8081] usb 3-1: config 8 has no interface number 1
[  236.129140][ T8081] usb 3-1: config 8 interface 103 has no altsetting 0
[  236.136826][ T8081] usb 3-1: config 8 interface 179 has no altsetting 0
[  236.151254][ T8081] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12
[  236.163764][   T45] usb 4-1: string descriptor 0 read error: -71
[  236.169102][ T8081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.179065][ T8081] usb 3-1: Product: syz
[  236.183430][ T8081] usb 3-1: Manufacturer: syz
[  236.188024][ T8081] usb 3-1: SerialNumber: syz
[  236.199644][   T45] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  236.210387][   T45] letsketch 0003:6161:4D15.001B: probe with driver letsketch failed with error -32
[  236.227636][   T45] usb 4-1: USB disconnect, device number 66
[  236.404688][ T8593] binder: 8592:8593 ioctl 400c620e 200000000000 returned -22
[  236.489678][ T8081] msi2500 3-1:8.103: Registered as swradio24
[  236.495865][ T8081] msi2500 3-1:8.103: SDR API is still slightly experimental and functionality changes may follow
[  236.566621][ T8081] videodev: could not get a free minor
[  236.572135][ T8081] msi2500 3-1:8.179: Failed to register as video device (-23)
[  236.589743][ T8081] msi2500 3-1:8.179: probe with driver msi2500 failed with error -23
[  236.602327][ T8081] usb 3-1: USB disconnect, device number 66
[  237.037352][ T8627] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  237.044019][ T8640] FAULT_INJECTION: forcing a failure.
[  237.044019][ T8640] name failslab, interval 1, probability 0, space 0, times 0
[  237.045541][ T8639] FAULT_INJECTION: forcing a failure.
[  237.045541][ T8639] name failslab, interval 1, probability 0, space 0, times 0
[  237.058625][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.1.986 Not tainted syzkaller #0 PREEMPT(full) 
[  237.058651][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.058664][ T8640] Call Trace:
[  237.058672][ T8640]  <TASK>
[  237.058679][ T8640]  dump_stack_lvl+0x189/0x250
[  237.058707][ T8640]  ? __pfx____ratelimit+0x10/0x10
[  237.058733][ T8640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.058758][ T8640]  ? __pfx__printk+0x10/0x10
[  237.058784][ T8640]  ? __pfx___might_resched+0x10/0x10
[  237.058806][ T8640]  ? fs_reclaim_acquire+0x7d/0x100
[  237.058834][ T8640]  should_fail_ex+0x414/0x560
[  237.058865][ T8640]  should_failslab+0xa8/0x100
[  237.058890][ T8640]  kmem_cache_alloc_noprof+0x88/0x6f0
[  237.058920][ T8640]  ? security_inode_alloc+0x39/0x330
[  237.058944][ T8640]  security_inode_alloc+0x39/0x330
[  237.058964][ T8640]  inode_init_always_gfp+0x9ed/0xdc0
[  237.058996][ T8640]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  237.059024][ T8640]  alloc_inode+0x82/0x1b0
[  237.059048][ T8640]  new_inode+0x22/0x170
[  237.059077][ T8640]  debugfs_create_dir+0x68/0x350
[  237.059116][ T8640]  ieee80211_debugfs_key_add+0x154/0x530
[  237.059148][ T8640]  ? __pfx_ieee80211_debugfs_key_add+0x10/0x10
[  237.059173][ T8640]  ? ieee80211_key_enable_hw_accel+0x784/0xbc0
[  237.059220][ T8640]  ieee80211_key_link+0x119b/0x16c0
[  237.059244][ T8640]  ? ieee80211_key_link+0x501/0x16c0
[  237.059276][ T8640]  ? __pfx_ieee80211_key_link+0x10/0x10
[  237.059296][ T8640]  ? sta_info_get_bss+0x58/0x390
[  237.059323][ T8640]  ? sta_info_get_bss+0x58/0x390
[  237.059344][ T8640]  ? sta_info_get_bss+0x58/0x390
[  237.059362][ T8640]  ? sta_info_get_bss+0x58/0x390
[  237.059384][ T8640]  ? sta_info_get_bss+0x36c/0x390
[  237.059403][ T8640]  ? sta_info_get_bss+0x58/0x390
[  237.059427][ T8640]  ieee80211_add_key+0x8f4/0xbd0
[  237.059454][ T8640]  rdev_add_key+0x134/0x2e0
[  237.059481][ T8640]  nl80211_new_key+0x754/0x890
[  237.059507][ T8640]  ? __pfx_nl80211_new_key+0x10/0x10
[  237.059533][ T8640]  ? nl80211_pre_doit+0x4d5/0x8e0
[  237.059569][ T8640]  genl_family_rcv_msg_doit+0x215/0x300
[  237.059603][ T8640]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  237.059646][ T8640]  ? bpf_lsm_capable+0x9/0x20
[  237.059669][ T8640]  ? security_capable+0x7e/0x2e0
[  237.059702][ T8640]  genl_rcv_msg+0x60e/0x790
[  237.059734][ T8640]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.059758][ T8640]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  237.059784][ T8640]  ? __pfx_nl80211_new_key+0x10/0x10
[  237.059801][ T8640]  ? __pfx_nl80211_post_doit+0x10/0x10
[  237.059843][ T8640]  netlink_rcv_skb+0x208/0x470
[  237.059864][ T8640]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.059891][ T8640]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  237.059928][ T8640]  ? down_read+0x274/0x2e0
[  237.059945][ T8640]  ? genl_rcv+0xd/0x40
[  237.059971][ T8640]  genl_rcv+0x28/0x40
[  237.059993][ T8640]  netlink_unicast+0x82f/0x9e0
[  237.060031][ T8640]  ? __pfx_netlink_unicast+0x10/0x10
[  237.060062][ T8640]  ? netlink_sendmsg+0x642/0xb30
[  237.060081][ T8640]  ? skb_put+0x11b/0x210
[  237.060108][ T8640]  netlink_sendmsg+0x805/0xb30
[  237.060128][ T8640]  ? aa_sk_perm+0x15f/0x920
[  237.060162][ T8640]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.060185][ T8640]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  237.060213][ T8640]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.060234][ T8640]  sock_sendmsg_nosec+0x18f/0x1d0
[  237.060262][ T8640]  ____sys_sendmsg+0x577/0x880
[  237.060303][ T8640]  ? __pfx_____sys_sendmsg+0x10/0x10
[  237.060339][ T8640]  ? import_iovec+0x74/0xa0
[  237.060363][ T8640]  ___sys_sendmsg+0x21f/0x2a0
[  237.060385][ T8640]  ? __pfx____sys_sendmsg+0x10/0x10
[  237.060412][ T8640]  ? rcu_read_lock_any_held+0xb3/0x120
[  237.060466][ T8640]  ? __fget_files+0x2a/0x420
[  237.060489][ T8640]  ? __fget_files+0x3a0/0x420
[  237.060524][ T8640]  __x64_sys_sendmsg+0x19b/0x260
[  237.060547][ T8640]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  237.060578][ T8640]  ? __pfx_ksys_write+0x10/0x10
[  237.060601][ T8640]  ? do_syscall_64+0xbe/0xf80
[  237.060630][ T8640]  do_syscall_64+0xfa/0xf80
[  237.060658][ T8640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.060676][ T8640]  ? clear_bhb_loop+0x60/0xb0
[  237.060699][ T8640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.060717][ T8640] RIP: 0033:0x7fc576f8f749
[  237.060734][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.060752][ T8640] RSP: 002b:00007fc577d43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.060772][ T8640] RAX: ffffffffffffffda RBX: 00007fc5771e5fa0 RCX: 00007fc576f8f749
[  237.060786][ T8640] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  237.060797][ T8640] RBP: 00007fc577d43090 R08: 0000000000000000 R09: 0000000000000000
[  237.060809][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  237.060819][ T8640] R13: 00007fc5771e6038 R14: 00007fc5771e5fa0 R15: 00007ffe4a8f15c8
[  237.060851][ T8640]  </TASK>
[  237.061000][ T8640] debugfs: out of free dentries, can not create directory '1'
[  237.071536][ T8627] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  237.113451][ T8639] CPU: 1 UID: 0 PID: 8639 Comm: syz.2.987 Not tainted syzkaller #0 PREEMPT(full) 
[  237.113478][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.113490][ T8639] Call Trace:
[  237.113498][ T8639]  <TASK>
[  237.113506][ T8639]  dump_stack_lvl+0x189/0x250
[  237.113535][ T8639]  ? __pfx____ratelimit+0x10/0x10
[  237.113560][ T8639]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.113583][ T8639]  ? __pfx__printk+0x10/0x10
[  237.113610][ T8639]  ? __pfx___might_resched+0x10/0x10
[  237.113635][ T8639]  should_fail_ex+0x414/0x560
[  237.113666][ T8639]  should_failslab+0xa8/0x100
[  237.113691][ T8639]  __kmalloc_cache_noprof+0x84/0x6f0
[  237.113712][ T8639]  ? irqentry_exit+0x5dd/0x660
[  237.113734][ T8639]  ? xfrm_policy_alloc+0x78/0x2b0
[  237.113761][ T8639]  xfrm_policy_alloc+0x78/0x2b0
[  237.113785][ T8639]  xfrm_policy_construct+0x39/0x6b0
[  237.113820][ T8639]  xfrm_add_policy+0x267/0x800
[  237.113850][ T8639]  ? __pfx_xfrm_add_policy+0x10/0x10
[  237.113872][ T8639]  ? apparmor_capable+0x137/0x1a0
[  237.113899][ T8639]  ? __nla_parse+0x40/0x60
[  237.113921][ T8639]  xfrm_user_rcv_msg+0x7a3/0xab0
[  237.113951][ T8639]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  237.114008][ T8639]  ? __pfx___mutex_trylock_common+0x10/0x10
[  237.114038][ T8639]  ? rcu_is_watching+0x15/0xb0
[  237.114061][ T8639]  ? trace_contention_end+0x39/0x100
[  237.114086][ T8639]  ? __mutex_lock+0x335/0x1350
[  237.114125][ T8639]  netlink_rcv_skb+0x208/0x470
[  237.114146][ T8639]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  237.114172][ T8639]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  237.114205][ T8639]  ? netlink_deliver_tap+0x2e/0x1b0
[  237.114230][ T8639]  xfrm_netlink_rcv+0x79/0x90
[  237.114254][ T8639]  netlink_unicast+0x82f/0x9e0
[  237.114290][ T8639]  ? __pfx_netlink_unicast+0x10/0x10
[  237.114319][ T8639]  ? netlink_sendmsg+0x642/0xb30
[  237.114337][ T8639]  ? skb_put+0x11b/0x210
[  237.114358][ T8639]  netlink_sendmsg+0x805/0xb30
[  237.114376][ T8639]  ? aa_sk_perm+0x15f/0x920
[  237.114409][ T8639]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.114434][ T8639]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  237.114461][ T8639]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.114481][ T8639]  sock_sendmsg_nosec+0x18f/0x1d0
[  237.114507][ T8639]  ____sys_sendmsg+0x577/0x880
[  237.114535][ T8639]  ? __pfx_____sys_sendmsg+0x10/0x10
[  237.114562][ T8639]  ? import_iovec+0x74/0xa0
[  237.114585][ T8639]  ___sys_sendmsg+0x21f/0x2a0
[  237.114607][ T8639]  ? __pfx____sys_sendmsg+0x10/0x10
[  237.114632][ T8639]  ? rcu_read_lock_any_held+0xb3/0x120
[  237.114682][ T8639]  ? __fget_files+0x2a/0x420
[  237.114705][ T8639]  ? __fget_files+0x3a0/0x420
[  237.114738][ T8639]  __x64_sys_sendmsg+0x19b/0x260
[  237.114760][ T8639]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  237.114789][ T8639]  ? __pfx_ksys_write+0x10/0x10
[  237.114812][ T8639]  ? do_syscall_64+0xbe/0xf80
[  237.114840][ T8639]  do_syscall_64+0xfa/0xf80
[  237.114866][ T8639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.114885][ T8639]  ? clear_bhb_loop+0x60/0xb0
[  237.114907][ T8639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.114924][ T8639] RIP: 0033:0x7f83a198f749
[  237.114941][ T8639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.114957][ T8639] RSP: 002b:00007f83a28f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.114977][ T8639] RAX: ffffffffffffffda RBX: 00007f83a1be5fa0 RCX: 00007f83a198f749
[  237.114991][ T8639] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  237.115002][ T8639] RBP: 00007f83a28f4090 R08: 0000000000000000 R09: 0000000000000000
[  237.115014][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.115024][ T8639] R13: 00007f83a1be6038 R14: 00007f83a1be5fa0 R15: 00007ffe90693b78
[  237.115055][ T8639]  </TASK>
[  237.951775][ T8627] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  237.959002][ T8627] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  237.966545][ T8627] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  237.972685][ T8627] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  237.980197][ T8627] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  237.992800][ T8627] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  238.011580][ T8627] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  238.228382][ T8668] netlink: 88 bytes leftover after parsing attributes in process `syz.0.995'.
[  238.256603][  T927] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  238.276763][ T8671] binder: 8669:8671 ioctl c0306201 200000000540 returned -22
[  238.425235][  T927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  238.438564][  T927] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  238.448632][  T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.461316][  T927] usb 2-1: config 0 descriptor??
[  238.522676][  T903] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  238.539859][ T8683] Bluetooth: MGMT ver 1.23
[  238.672790][  T903] usb 4-1: Using ep0 maxpacket: 8
[  238.680911][  T903] usb 4-1: unable to get BOS descriptor or descriptor too short
[  238.691312][  T903] usb 4-1: config 8 has an invalid interface number: 103 but max is 1
[  238.703391][  T903] usb 4-1: config 8 has an invalid interface number: 179 but max is 1
[  238.711690][  T903] usb 4-1: config 8 has no interface number 0
[  238.718190][  T903] usb 4-1: config 8 has no interface number 1
[  238.724487][  T903] usb 4-1: config 8 interface 103 has no altsetting 0
[  238.731578][  T903] usb 4-1: config 8 interface 179 has no altsetting 0
[  238.740699][  T903] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12
[  238.750186][  T903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.760777][  T903] usb 4-1: Product: syz
[  238.772268][  T903] usb 4-1: Manufacturer: syz
[  238.782906][  T903] usb 4-1: SerialNumber: syz
[  238.943828][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  239.006383][ T8671] binder: 8669:8671 ioctl 400c620e 200000000000 returned -22
[  239.052917][ T8081] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  239.127447][  T903] msi2500 4-1:8.103: Registered as swradio24
[  239.141633][  T903] msi2500 4-1:8.103: SDR API is still slightly experimental and functionality changes may follow
[  239.202820][ T8081] usb 3-1: Using ep0 maxpacket: 8
[  239.211542][  T927] usb 2-1: string descriptor 0 read error: -71
[  239.214310][ T8081] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  239.231794][  T903] videodev: could not get a free minor
[  239.239813][ T8081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.248499][  T903] msi2500 4-1:8.179: Failed to register as video device (-23)
[  239.254312][  T927] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  239.259938][  T903] msi2500 4-1:8.179: probe with driver msi2500 failed with error -23
[  239.265252][  T927] letsketch 0003:6161:4D15.001C: probe with driver letsketch failed with error -32
[  239.277867][ T8081] usb 3-1: Product: syz
[  239.287684][ T8081] usb 3-1: Manufacturer: syz
[  239.292470][ T8081] usb 3-1: SerialNumber: syz
[  239.298507][  T927] usb 2-1: USB disconnect, device number 69
[  239.305537][ T8081] usb 3-1: config 0 descriptor??
[  239.311312][  T903] usb 4-1: USB disconnect, device number 67
[  239.524557][ T8081] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  239.948851][ T8727] delete_channel: no stack
[  239.953896][ T8727] delete_channel: no stack
[  239.982815][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  239.982827][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  239.996206][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  240.132671][  T927] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  240.282712][  T927] usb 4-1: Using ep0 maxpacket: 32
[  240.289798][  T927] usb 4-1: unable to get BOS descriptor or descriptor too short
[  240.299907][  T927] usb 4-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  240.310245][  T927] usb 4-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  240.323319][  T927] usb 4-1: config 1 interface 2 has no altsetting 1
[  240.332065][  T927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.341384][  T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.349544][  T927] usb 4-1: Product: syz
[  240.353759][  T927] usb 4-1: Manufacturer: syz
[  240.358358][  T927] usb 4-1: SerialNumber: syz
[  240.625486][ T8742] dlm: no locking on control device
[  240.652731][ T5892] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  240.751000][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[  240.758716][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[  240.766369][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[  240.773975][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[  240.782435][ T8081] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  240.800869][ T8081] usb 3-1: USB disconnect, device number 67
[  240.814584][ T5892] usb 2-1: config 0 has an invalid interface number: 82 but max is 0
[  240.825325][ T5892] usb 2-1: config 0 has no interface number 0
[  240.834731][ T5892] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c0.6f
[  240.844260][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.852327][ T5892] usb 2-1: Product: syz
[  240.856793][ T5892] usb 2-1: Manufacturer: syz
[  240.861463][ T5892] usb 2-1: SerialNumber: syz
[  240.868865][ T5892] usb 2-1: config 0 descriptor??
[  240.877803][ T5892] usb 2-1: invalid MIDI EP
[  240.882255][ T5892] usb 2-1: snd-bcd2000: error during probing
[  240.892522][ T5892] snd-bcd2000 2-1:0.82: probe with driver snd-bcd2000 failed with error -22
[  241.018628][  T927] usb 4-1: USB disconnect, device number 68
[  241.024655][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  241.079236][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.088720][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.098083][ T8081] usb 2-1: USB disconnect, device number 70
[  241.412819][ T8081] IPVS: starting estimator thread 0...
[  241.512787][ T8753] IPVS: using max 32 ests per chain, 76800 per kthread
[  241.942744][  T927] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  242.003097][ T8081] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  242.014375][  T108] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  242.057535][ T8786] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1034'.
[  242.066968][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  242.072784][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  242.080112][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  242.102726][  T927] usb 4-1: Using ep0 maxpacket: 8
[  242.109353][  T927] usb 4-1: unable to get BOS descriptor or descriptor too short
[  242.117975][  T927] usb 4-1: config index 0 descriptor too short (expected 64072, got 73)
[  242.126416][  T927] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x7 has invalid wMaxPacketSize 0
[  242.137558][  T927] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  242.156224][  T927] usb 4-1: config 1 interface 0 has no altsetting 0
[  242.164808][  T927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  242.172760][  T108] usb 2-1: Using ep0 maxpacket: 8
[  242.174091][  T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.183039][ T8081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  242.186972][  T927] usb 4-1: Product: syz
[  242.201322][ T8081] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  242.204290][  T927] usb 4-1: Manufacturer: syz
[  242.213997][ T8081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.217782][  T927] usb 4-1: SerialNumber: syz
[  242.234264][  T108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  242.247092][  T108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.257682][  T108] usb 2-1: Product: syz
[  242.262868][  T108] usb 2-1: Manufacturer: syz
[  242.272968][ T8081] usb 3-1: config 0 descriptor??
[  242.278153][  T108] usb 2-1: SerialNumber: syz
[  242.289084][  T108] usb 2-1: config 0 descriptor??
[  242.433393][ T8768] FAULT_INJECTION: forcing a failure.
[  242.433393][ T8768] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.447872][ T8768] CPU: 1 UID: 0 PID: 8768 Comm: syz.3.1027 Not tainted syzkaller #0 PREEMPT(full) 
[  242.447888][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  242.447895][ T8768] Call Trace:
[  242.447900][ T8768]  <TASK>
[  242.447905][ T8768]  dump_stack_lvl+0x189/0x250
[  242.447929][ T8768]  ? __pfx____ratelimit+0x10/0x10
[  242.447954][ T8768]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.447978][ T8768]  ? __pfx__printk+0x10/0x10
[  242.448002][ T8768]  ? __might_fault+0xb0/0x130
[  242.448032][ T8768]  should_fail_ex+0x414/0x560
[  242.448048][ T8768]  _copy_from_user+0x2d/0xb0
[  242.448060][ T8768]  raw_ioctl+0x81f/0x40d0
[  242.448079][ T8768]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  242.448110][ T8768]  ? do_vfs_ioctl+0xbe8/0x1430
[  242.448128][ T8768]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  242.448154][ T8768]  ? __pfx_raw_ioctl+0x10/0x10
[  242.448181][ T8768]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  242.448206][ T8768]  ? __fget_files+0x2a/0x420
[  242.448222][ T8768]  ? __fget_files+0x3a0/0x420
[  242.448245][ T8768]  ? __fget_files+0x2a/0x420
[  242.448272][ T8768]  ? bpf_lsm_file_ioctl+0x9/0x20
[  242.448294][ T8768]  ? __pfx_raw_ioctl+0x10/0x10
[  242.448315][ T8768]  __se_sys_ioctl+0xfc/0x170
[  242.448335][ T8768]  do_syscall_64+0xfa/0xf80
[  242.448351][ T8768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.448361][ T8768]  ? clear_bhb_loop+0x60/0xb0
[  242.448377][ T8768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.448395][ T8768] RIP: 0033:0x7f6a0d18f34b
[  242.448413][ T8768] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  242.448430][ T8768] RSP: 002b:00007f6a0e0c7f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  242.448451][ T8768] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a0d18f34b
[  242.448465][ T8768] RDX: 00007f6a0e0c7ff0 RSI: 0000000040085507 RDI: 0000000000000003
[  242.448473][ T8768] RBP: 0000000000000003 R08: 00007f6a0d510320 R09: 0000000000000000
[  242.448480][ T8768] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  242.448486][ T8768] R13: 0000000000000000 R14: 00007f6a0d3e5fa0 R15: 00007ffd02e73ef8
[  242.448501][ T8768]  </TASK>
[  242.500273][  T108] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  242.513227][  T927] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  242.695027][  T927] usb 4-1: USB disconnect, device number 69
[  243.007281][ T8081] usb 3-1: string descriptor 0 read error: -71
[  243.048005][ T8081] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  243.060481][ T8081] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -32
[  243.084933][ T8081] usb 3-1: USB disconnect, device number 68
[  243.215877][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'.
[  243.472796][ T5892] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  243.627369][ T8811] netlink: 'syz.2.1043': attribute type 10 has an invalid length.
[  243.638527][ T5892] usb 4-1: Using ep0 maxpacket: 32
[  243.647255][ T5892] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  243.657256][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.665371][ T5892] usb 4-1: Product: syz
[  243.679959][ T5892] usb 4-1: Manufacturer: syz
[  243.684718][ T5892] usb 4-1: SerialNumber: syz
[  243.692190][ T5892] usb 4-1: config 0 descriptor??
[  243.708065][ T5892] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  243.717813][ T8815] net_ratelimit: 2 callbacks suppressed
[  243.717830][ T8815] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  243.718320][ T5892] dvb-usb: bulk message failed: -22 (2/0)
[  243.741465][  T108] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  243.748593][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  243.761453][ T5892] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  243.769883][ T5892] usb 4-1: media controller created
[  243.775676][  T108] usb 2-1: USB disconnect, device number 71
[  243.800903][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  243.825556][ T5892] usb 4-1: selecting invalid altsetting 7
[  243.831506][ T5892] cxusb: set interface failed
[  243.837165][ T5892] dvb-usb: bulk message failed: -22 (1/0)
[  243.882265][ T5892] DVB: Unable to find symbol lgdt330x_attach()
[  243.889285][ T5892] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  243.975022][ T5892] rc_core: IR keymap rc-dvico-portable not found
[  243.983738][ T5892] Registered IR keymap rc-empty
[  243.990398][ T5892] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  244.007465][ T5892] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input30
[  244.020672][ T5892] dvb-usb: schedule remote query interval to 100 msecs.
[  244.027763][ T5892] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  244.048907][ T5892] usb 4-1: USB disconnect, device number 70
[  244.146298][ T5892] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  244.157266][ T5831] Bluetooth: hci3: command 0x0405 tx timeout
[  244.552703][ T5892] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  244.552703][  T108] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  244.633759][ T8836] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  244.639938][ T8836] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  244.646241][ T8836] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  244.652469][ T8836] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  244.707172][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  244.722085][ T5892] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  244.723618][  T108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  244.734866][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.756514][ T5892] usb 2-1: config 0 descriptor??
[  244.782787][  T108] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  244.791960][  T108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.825780][  T108] usb 3-1: config 0 descriptor??
[  244.854097][  T927] IPVS: starting estimator thread 0...
[  244.943133][ T8846] IPVS: using max 28 ests per chain, 67200 per kthread
[  245.352695][  T927] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  245.484288][ T5892] usb 2-1: string descriptor 0 read error: -71
[  245.502814][  T927] usb 4-1: Using ep0 maxpacket: 8
[  245.511528][  T927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  245.528111][  T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.537043][ T5892] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  245.545312][  T927] usb 4-1: Product: syz
[  245.549496][  T927] usb 4-1: Manufacturer: syz
[  245.554508][ T5892] letsketch 0003:6161:4D15.001E: probe with driver letsketch failed with error -32
[  245.564445][  T927] usb 4-1: SerialNumber: syz
[  245.576382][  T927] usb 4-1: config 0 descriptor??
[  245.585843][ T5892] usb 2-1: USB disconnect, device number 72
[  245.593373][  T108] usb 3-1: string descriptor 0 read error: -71
[  245.637890][  T108] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  245.646021][  T108] letsketch 0003:6161:4D15.001F: probe with driver letsketch failed with error -32
[  245.660226][  T108] usb 3-1: USB disconnect, device number 69
[  245.785603][  T927] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  246.382738][ T5892] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  246.542996][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  246.554374][ T5892] usb 2-1: Using ep0 maxpacket: 8
[  246.562728][ T5892] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  246.571935][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.583229][ T5892] usb 2-1: config 0 descriptor??
[  246.612746][ T5925] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  246.702700][ T5831] Bluetooth: hci3: command 0x0405 tx timeout
[  246.702749][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  246.708794][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  246.782744][ T5925] usb 3-1: Using ep0 maxpacket: 8
[  246.792379][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  246.804111][ T5925] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  246.814640][ T5925] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  246.826862][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  246.836568][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.844648][ T5925] usb 3-1: Product: 鴰粺ꆵ銻欌튐᭚코뾟铟褟挨삃ࠍ窪怊跘㢫럏忕⠞Ⱀꙹ❘邗䝌䋀狢쁏欛ꢀ䗭⑆ᣣ좹ꍊ⡍䣏ᢤ굀狭ằ靆鯦럲﵈⏝힕離䗆Ƀ狳ᑝ鱴ﭚ삚௱뽒魝銗✛憏ꌍᑙ攵䧌꠰鄐渦ᇁʛ籿
[  246.869549][ T5925] usb 3-1: Manufacturer: 簶ᆭ坟赅蓎⥰쾠ᯞ봁롯ᴺ⼁姏뺮腆즸螥젹덥鷪ē㍣췭貹趠蓂孙첏ힺ澥⿤褙၌庣䚻ﲜⅇ웩뙅뾏픂⤏숇䀅둰厳쏗Ḭ쫏⣶卼殖迱蟎栎ꎅ瑻甁뮜㹝籕ꡤӇ诇뷿ೇᢐ徕璈煷ᦐꤍ셃햣࢖딗ꌐ뒿恇矼漬鯱꧊쪤不秬ઓ᛾迆盧蟸냓䡉深᝺䔭⾕Ꚑ糝컩ᢀ踣쑏ၤ
[  246.904459][ T5925] usb 3-1: SerialNumber: syz
[  247.019257][ T5892] a4tech 0003:09DA:001A.0020: hidraw0: USB HID v0.05 Device [HID 09da:001a] on usb-dummy_hcd.1-1/input0
[  247.032166][    C1] raw-gadget.2 gadget.3: ignoring, device is not running
[  247.046587][  T927] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  247.074160][  T927] usb 4-1: USB disconnect, device number 71
[  247.223250][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.235792][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.250939][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.263835][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.277744][  T108] usb 2-1: USB disconnect, device number 73
[  247.356856][ T5925] cdc_ncm 3-1:1.0: bind() failure
[  247.377606][ T5925] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  247.385242][ T5925] cdc_ncm 3-1:1.1: bind() failure
[  247.400399][ T5925] usb 3-1: USB disconnect, device number 70
[  247.486870][ T8890] overlayfs: failed to resolve './file0': -2
[  247.897228][ T8900] usb usb1: usbfs: process 8900 (syz.2.1075) did not claim interface 0 before use
[  247.907195][ T5925] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  247.917238][ T8900] trusted_key: encrypted_key: master key parameter '' is invalid
[  248.066446][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  248.102782][ T5925] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  248.111866][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.132420][ T5925] usb 4-1: config 0 descriptor??
[  248.182685][ T5892] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  248.198326][ T8914] binder: 8913:8914 unknown command 0
[  248.204154][ T8914] binder: 8913:8914 ioctl c0306201 2000000001c0 returned -22
[  248.258537][ T8917] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1081'.
[  248.343533][ T5892] usb 3-1: Using ep0 maxpacket: 8
[  248.351938][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short
[  248.368206][ T5892] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  248.376854][ T5892] usb 3-1: config 0 has no interface number 0
[  248.396214][ T5892] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 255, changing to 11
[  248.409781][ T5892] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 59389, setting to 1024
[  248.421428][ T5892] usb 3-1: config 0 interface 88 has no altsetting 0
[  248.432272][ T5892] usb 3-1: language id specifier not provided by device, defaulting to English
[  248.445454][ T5892] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  248.455053][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  248.464897][ T5892] usb 3-1: Product: syz
[  248.469158][ T5892] usb 3-1: SerialNumber: syz
[  248.477100][ T5892] usb 3-1: config 0 descriptor??
[  248.483203][ T8900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  248.699335][ T5892] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input31
[  248.727235][ T5892] usb 3-1: USB disconnect, device number 71
[  248.734415][    C0] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19
[  248.875438][ T5925] usb 4-1: string descriptor 0 read error: -71
[  248.909878][ T5925] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  248.918060][ T5925] letsketch 0003:6161:4D15.0021: probe with driver letsketch failed with error -32
[  248.932172][ T5925] usb 4-1: USB disconnect, device number 72
[  249.259819][ T8927] usb usb1: usbfs: process 8927 (syz.1.1091) did not claim interface 0 before use
[  249.271639][ T8927] trusted_key: encrypted_key: master key parameter '' is invalid
[  249.522831][ T5925] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  249.552684][ T5892] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  249.642716][   T45] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  249.682652][ T5925] usb 2-1: Using ep0 maxpacket: 8
[  249.689692][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short
[  249.698755][ T5925] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  249.706971][ T5892] usb 3-1: Using ep0 maxpacket: 8
[  249.712148][ T5925] usb 2-1: config 0 has no interface number 0
[  249.720676][ T5925] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 255, changing to 11
[  249.732170][ T5925] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 59389, setting to 1024
[  249.744409][ T5925] usb 2-1: config 0 interface 88 has no altsetting 0
[  249.751337][ T5892] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  249.760556][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.771529][ T5925] usb 2-1: language id specifier not provided by device, defaulting to English
[  249.781302][ T5892] usb 3-1: config 0 descriptor??
[  249.791406][ T5925] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  249.802355][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  249.811461][   T45] usb 4-1: Using ep0 maxpacket: 8
[  249.817922][ T5925] usb 2-1: Product: syz
[  249.822154][ T5925] usb 2-1: SerialNumber: syz
[  249.829193][   T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  249.841256][   T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  249.852448][ T5925] usb 2-1: config 0 descriptor??
[  249.857602][   T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  249.867962][ T8927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  249.877768][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.886878][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.894924][   T45] usb 4-1: Product: 鴰粺ꆵ銻欌튐᭚코뾟铟褟挨삃ࠍ窪怊跘㢫럏忕⠞Ⱀꙹ❘邗䝌䋀狢쁏欛ꢀ䗭⑆ᣣ좹ꍊ⡍䣏ᢤ굀狭ằ靆鯦럲﵈⏝힕離䗆Ƀ狳ᑝ鱴ﭚ삚௱뽒魝銗✛憏ꌍᑙ攵䧌꠰鄐渦ᇁʛ籿
[  249.920154][   T45] usb 4-1: Manufacturer: 簶ᆭ坟赅蓎⥰쾠ᯞ봁롯ᴺ⼁姏뺮腆즸螥젹덥鷪ē㍣췭貹趠蓂孙첏ힺ澥⿤褙၌庣䚻ﲜⅇ웩뙅뾏픂⤏숇䀅둰厳쏗Ḭ쫏⣶卼殖迱蟎栎ꎅ瑻甁뮜㹝籕ꡤӇ诇뷿ೇᢐ徕璈煷ᦐꤍ셃햣࢖딗ꌐ뒿恇矼漬鯱꧊쪤不秬ઓ᛾迆盧蟸냓䡉深᝺䔭⾕Ꚑ糝컩ᢀ踣쑏ၤ
[  249.955072][   T45] usb 4-1: SerialNumber: syz
[  250.089215][ T5925] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input32
[  250.108375][ T5925] usb 2-1: USB disconnect, device number 74
[  250.210747][ T5892] a4tech 0003:09DA:001A.0022: hidraw0: USB HID v0.05 Device [HID 09da:001a] on usb-dummy_hcd.2-1/input0
[  250.382322][   T45] cdc_ncm 4-1:1.0: bind() failure
[  250.394876][   T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  250.401882][   T45] cdc_ncm 4-1:1.1: bind() failure
[  250.412166][   T45] usb 4-1: USB disconnect, device number 73
[  250.436277][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.445406][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.459342][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.476024][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.497705][ T5925] usb 3-1: USB disconnect, device number 72
[  250.718922][ T8941] block nbd1: NBD_DISCONNECT
[  250.764209][ T8941] 
[  250.766553][ T8941] ======================================================
[  250.773555][ T8941] WARNING: possible circular locking dependency detected
[  250.780573][ T8941] syzkaller #0 Not tainted
[  250.784971][ T8941] ------------------------------------------------------
[  250.792060][ T8941] syz.1.1086/8941 is trying to acquire lock:
[  250.798022][ T8941] ffff888141b1d998 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x82/0x390
[  250.806898][ T8941] 
[  250.806898][ T8941] but task is already holding lock:
[  250.814258][ T8941] ffff888141f01e18 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410
[  250.824429][ T8941] 
[  250.824429][ T8941] which lock already depends on the new lock.
[  250.824429][ T8941] 
[  250.834826][ T8941] 
[  250.834826][ T8941] the existing dependency chain (in reverse order) is:
[  250.843867][ T8941] 
[  250.843867][ T8941] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}:
[  250.852465][ T8941]        blk_alloc_queue+0x538/0x620
[  250.857749][ T8941]        __blk_mq_alloc_disk+0x15c/0x340
[  250.863373][ T8941]        loop_add+0x411/0xad0
[  250.868043][ T8941]        loop_init+0xd9/0x170
[  250.872708][ T8941]        do_one_initcall+0x1fb/0x820
[  250.877995][ T8941]        do_initcall_level+0x104/0x190
[  250.883467][ T8941]        do_initcalls+0x59/0xa0
[  250.888323][ T8941]        kernel_init_freeable+0x334/0x4b0
[  250.894031][ T8941]        kernel_init+0x1d/0x1d0
[  250.898870][ T8941]        ret_from_fork+0x599/0xb30
[  250.903971][ T8941]        ret_from_fork_asm+0x1a/0x30
[  250.909265][ T8941] 
[  250.909265][ T8941] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  250.916475][ T8941]        fs_reclaim_acquire+0x72/0x100
[  250.921935][ T8941]        mempool_alloc_noprof+0xab/0x2f0
[  250.927563][ T8941]        bio_alloc_bioset+0x241/0x12a0
[  250.933017][ T8941]        blkdev_direct_IO+0x9c0/0x17e0
[  250.938467][ T8941]        blkdev_read_iter+0x23d/0x440
[  250.943830][ T8941]        lo_submit_rw_aio+0x488/0x620
[  250.949203][ T8941]        loop_queue_rq+0x6c5/0x8d0
[  250.954312][ T8941]        blk_mq_request_issue_directly+0x3c1/0x710
[  250.960808][ T8941]        blk_mq_issue_direct+0x2a0/0x660
[  250.966436][ T8941]        blk_mq_dispatch_queue_requests+0x621/0x800
[  250.973017][ T8941]        blk_mq_flush_plug_list+0x432/0x550
[  250.978911][ T8941]        __blk_flush_plug+0x3d3/0x4b0
[  250.984280][ T8941]        __submit_bio+0x2d3/0x5a0
[  250.989317][ T8941]        submit_bio_noacct_nocheck+0x2eb/0xa30
[  250.995468][ T8941]        block_read_full_folio+0x7b7/0x830
[  251.001264][ T8941]        filemap_read_folio+0x117/0x380
[  251.006800][ T8941]        do_read_cache_folio+0x358/0x590
[  251.012424][ T8941]        read_part_sector+0xb6/0x2b0
[  251.017714][ T8941]        adfspart_check_ICS+0xa4/0xa50
[  251.023159][ T8941]        bdev_disk_changed+0x75f/0x14b0
[  251.028714][ T8941]        loop_reread_partitions+0x5f/0xf0
[  251.034436][ T8941]        loop_configure+0xbd6/0xe50
[  251.039626][ T8941]        lo_ioctl+0x806/0x1c50
[  251.044384][ T8941]        blkdev_ioctl+0x60e/0x710
[  251.049401][ T8941]        __se_sys_ioctl+0xfc/0x170
[  251.054506][ T8941]        do_syscall_64+0xfa/0xf80
[  251.059527][ T8941]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.065929][ T8941] 
[  251.065929][ T8941] -> #0 (set->srcu){.+.+}-{0:0}:
[  251.073049][ T8941]        __lock_acquire+0x15a6/0x2cf0
[  251.078414][ T8941]        lock_sync+0xba/0x160
[  251.083081][ T8941]        __synchronize_srcu+0x96/0x390
[  251.088532][ T8941]        blk_throtl_init+0x298/0x410
[  251.093807][ T8941]        tg_set_conf+0x1c6/0x4b0
[  251.098738][ T8941]        cgroup_file_write+0x3a1/0x740
[  251.104237][ T8941]        kernfs_fop_write_iter+0x3af/0x540
[  251.110060][ T8941]        vfs_write+0x5c9/0xb30
[  251.114913][ T8941]        ksys_write+0x145/0x250
[  251.119844][ T8941]        do_syscall_64+0xfa/0xf80
[  251.124868][ T8941]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.131273][ T8941] 
[  251.131273][ T8941] other info that might help us debug this:
[  251.131273][ T8941] 
[  251.141488][ T8941] Chain exists of:
[  251.141488][ T8941]   set->srcu --> fs_reclaim --> &q->q_usage_counter(io)#17
[  251.141488][ T8941] 
[  251.154533][ T8941]  Possible unsafe locking scenario:
[  251.154533][ T8941] 
[  251.161983][ T8941]        CPU0                    CPU1
[  251.167334][ T8941]        ----                    ----
[  251.172685][ T8941]   lock(&q->q_usage_counter(io)#17);
[  251.178058][ T8941]                                lock(fs_reclaim);
[  251.184569][ T8941]                                lock(&q->q_usage_counter(io)#17);
[  251.192465][ T8941]   sync(set->srcu);
[  251.196351][ T8941] 
[  251.196351][ T8941]  *** DEADLOCK ***
[  251.196351][ T8941] 
[  251.204564][ T8941] 7 locks held by syz.1.1086/8941:
[  251.209658][ T8941]  #0: ffff888033638ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320
[  251.218805][ T8941]  #1: ffff8880325f4420 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x211/0xb30
[  251.227769][ T8941]  #2: ffff888028ef5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  251.237517][ T8941]  #3: ffff88814cff1b48 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
[  251.247533][ T8941]  #4: ffff888141f02020 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a2/0x3d0
[  251.257633][ T8941]  #5: ffff888141f01e18 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410
[  251.268264][ T8941]  #6: ffff888141f01e50 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x27a/0x410
[  251.278881][ T8941] 
[  251.278881][ T8941] stack backtrace:
[  251.284763][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.1.1086 Not tainted syzkaller #0 PREEMPT(full) 
[  251.284784][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  251.284795][ T8941] Call Trace:
[  251.284803][ T8941]  <TASK>
[  251.284810][ T8941]  dump_stack_lvl+0x189/0x250
[  251.284833][ T8941]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.284852][ T8941]  ? __pfx__printk+0x10/0x10
[  251.284875][ T8941]  print_circular_bug+0x2e2/0x300
[  251.284898][ T8941]  check_noncircular+0x12e/0x150
[  251.284920][ T8941]  __lock_acquire+0x15a6/0x2cf0
[  251.284944][ T8941]  ? __synchronize_srcu+0x82/0x390
[  251.284962][ T8941]  lock_sync+0xba/0x160
[  251.284977][ T8941]  ? __synchronize_srcu+0x82/0x390
[  251.284996][ T8941]  __synchronize_srcu+0x96/0x390
[  251.285013][ T8941]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  251.285034][ T8941]  ? __pfx___synchronize_srcu+0x10/0x10
[  251.285052][ T8941]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  251.285072][ T8941]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.285092][ T8941]  ? __pfx_autoremove_wake_function+0x10/0x10
[  251.285114][ T8941]  ? read_tsc+0x9/0x20
[  251.285138][ T8941]  ? ktime_get_mono_fast_ns+0x2af/0x2d0
[  251.285163][ T8941]  ? synchronize_srcu+0x295/0x2c0
[  251.285181][ T8941]  blk_throtl_init+0x298/0x410
[  251.285202][ T8941]  tg_set_conf+0x1c6/0x4b0
[  251.285223][ T8941]  ? __pfx_tg_set_conf+0x10/0x10
[  251.285242][ T8941]  ? kernfs_root+0x1c/0x230
[  251.285260][ T8941]  ? kernfs_root+0x1c/0x230
[  251.285275][ T8941]  ? kernfs_root+0x1c/0x230
[  251.285291][ T8941]  ? kernfs_root+0x1ea/0x230
[  251.285307][ T8941]  ? __pfx_tg_set_conf_uint+0x10/0x10
[  251.285333][ T8941]  cgroup_file_write+0x3a1/0x740
[  251.285356][ T8941]  ? __pfx_cgroup_file_write+0x10/0x10
[  251.285375][ T8941]  ? rcu_is_watching+0x15/0xb0
[  251.285398][ T8941]  ? __pfx_cgroup_file_write+0x10/0x10
[  251.285417][ T8941]  kernfs_fop_write_iter+0x3af/0x540
[  251.285442][ T8941]  vfs_write+0x5c9/0xb30
[  251.285459][ T8941]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  251.285481][ T8941]  ? __pfx_vfs_write+0x10/0x10
[  251.285499][ T8941]  ? __fget_files+0x2a/0x420
[  251.285522][ T8941]  ksys_write+0x145/0x250
[  251.285538][ T8941]  ? __pfx_ksys_write+0x10/0x10
[  251.285554][ T8941]  ? do_syscall_64+0xbe/0xf80
[  251.285577][ T8941]  do_syscall_64+0xfa/0xf80
[  251.285598][ T8941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.285614][ T8941]  ? clear_bhb_loop+0x60/0xb0
[  251.285631][ T8941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.285646][ T8941] RIP: 0033:0x7fc576f8f749
[  251.285663][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.285678][ T8941] RSP: 002b:00007fc577d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  251.285694][ T8941] RAX: ffffffffffffffda RBX: 00007fc5771e5fa0 RCX: 00007fc576f8f749
[  251.285707][ T8941] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000007
[  251.285722][ T8941] RBP: 00007fc577013f91 R08: 0000000000000000 R09: 0000000000000000
[  251.285733][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.285743][ T8941] R13: 00007fc5771e6038 R14: 00007fc5771e5fa0 R15: 00007ffe4a8f15c8
[  251.285759][ T8941]  </TASK>
[  251.862658][   T45] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  252.023838][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  252.037608][   T45] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  252.047477][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.057416][   T45] usb 4-1: config 0 descriptor??
[  252.745701][   T45] usb 4-1: string descriptor 0 read error: -71
[  252.779833][   T45] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  252.789127][   T45] letsketch 0003:6161:4D15.0023: probe with driver letsketch failed with error -32
[  252.800283][   T45] usb 4-1: USB disconnect, device number 74
[  255.906130][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.912503][ T1301] ieee802154 phy1 wpan1: encryption failed: -22