last executing test programs:

5.009969289s ago: executing program 3 (id=1152):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close(r0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2)

4.914711953s ago: executing program 3 (id=1154):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
getsockopt(r0, 0x1, 0x0, 0x0, &(0x7f0000000140)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) (async)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r3, {0x80000001, 0x9}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f00000006c0)={'gretap0\x00', <r5=>0x0, 0x10, 0x20, 0x1a1, 0x800, {{0x1f, 0x4, 0x2, 0x4, 0x7c, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast2, @empty, {[@generic={0x83, 0xb, "96c384240bf1b7187b"}, @timestamp_prespec={0x44, 0x1c, 0x68, 0x3, 0x1, [{@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7}, {@multicast2, 0xfffff76a}]}, @end, @timestamp_addr={0x44, 0xc, 0xfc, 0x1, 0x8, [{@empty, 0x5}]}, @cipso={0x86, 0x31, 0x1, [{0x2, 0xf, "53479c339a86839f398ee131a2"}, {0x2, 0x2}, {0x5, 0x10, "b9565ac27b96dde0dc59d60d87c6"}, {0x6, 0xa, "ab377357ae39369d"}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x3, 0x5, 0x1, 0x2, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}, 0x40, 0x8, 0x8, 0x8}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'vxcan1\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r9, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}}, 0x18) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) (async)
ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) (async)
sendmmsg$inet6(r4, &(0x7f0000001600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000180)="5d1c21ad9e9795f4530b2affb35aa9e96c6125eae4cf160a35", 0x19}, {&(0x7f0000000340)="6eb24bc035efe66316992566f3d28ead4a8f2a0dd356437baa60ec2c4e9a328afbdf530fb6f6e1968771286eedb3f2986866c85dbdc0f51264cf3936b58217bb88f7e647c4a990446eb7b39f0391d720fba1e1e72949d070cfc3987432663887329745cf8d05673bfc5689a89fe0d63156214313d88a2e00394640d5ded769da589f656811032963c7647e4d5fa3243c548cd466bbe0a360e77ea52d7be07a9707a3e186ed95e5d2720c2d9d336642ae0d3cc0491bc6cabebdf266a8bdf7c20054f31bed19e03b7ce7f34702719565d919aeee24caa9757c4fb37e0b68f36bb8b09d079ae9a1dfc2", 0xe8}, {&(0x7f00000001c0)="1759e816d0f8451b3d6cbda1e905383abf97a683a482b84d03be40c6a3aa9387af21d1cd340cfe7d01ae", 0x2a}, {&(0x7f0000000240)="b7787e6ab2a2ad0f158f72ad4dce1046adb0665c151187efd2f94438a6bd641738a2ae7a361ab3cdb06a3ce4efc6ff4810908510312e5d8e22163d3025605c60aa9bc0ff81b15b7c0ea4c71bfb99f88153f139646141446a557b2e46dd001f845bf293f0b63e88", 0x67}, {&(0x7f0000000440)="d39a8358a288967375f767a9279b30c787b0da07a0bfc036f94ce26efb82b6c4a1f6f0c2c8ed0bfc4eea56472999401289c542dee4e7e13a7bb8fc89a427bf36669c59c9ec20b04089fad49fc7ba56ba1bd849e49b0275b406aaa4766aa311535398d5c7d359b450d83b0ee0", 0x6c}], 0x5, &(0x7f0000000540)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x48}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x63e, @loopback, 0x10}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000005c0)="4ed14ef69cb68b62f7df26fbcbf26d4bc10f08da9330b9a49c6d74d896cf427c12a255c76b03aece970185611a66275a54a84515b0e317279aba5b6616cc416dd6731f0cc373facf01b3d20f5fa50b39b19a713e14a2e13f1d88fe94cc404aa88be43dbe96a7f5846080a4a8d7f14da2ca905a796b0658cfaa2b797f65af93170f4c596b4c0f7774d5fdddba8ff62398acca", 0x92}], 0x1, &(0x7f00000007c0)=[@rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0xb2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}, @hopopts={{0x28, 0x29, 0x36, {0x2b, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @pad1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x6c, 0x2, 0x1, 0xc, 0x0, [@private2]}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="9c4522b80234c986b2a75d188a8cf5de12b224b4de59e9f9cb9220ddc56135605ab3ae443754656b400dd8b780d99bef48006696775e8a8de04e1d283c43447c41bb99d63a76a276108decaba3a08b763df04036e6fc3eefed28dc845438dcbe1ccf4e77d26105f7d7ceeb61a4d7a1346697859eb51990bd7c7a00ffdde35860af21738dc0f78defd9fcb23d66efb5100c3155c61b4b3136f90da5849de1a584f8b6bf9ce2b032cccf073ed9a231973b426fa34ff49d4466407029c6c6adea46670edf42d74c8625e678db23c6a77406678fd643cc", 0xd5}, {&(0x7f00000009c0)="7dad9224fa34520042", 0x9}], 0x2, &(0x7f0000000f80)=[@rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x0, 0x1, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @empty]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x32, 0xa, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}, @mcast1, @mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hopopts={{0xf0, 0x29, 0x36, {0x2b, 0x1a, '\x00', [@pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x3, [0xa, 0x9, 0x80000001, 0x18eb7f8b, 0x80f, 0x9]}}, @generic={0xff, 0x2, "a6a3"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0xd9, 0x0, 0x77, 0x9, 0xfffffffffffffffa]}}, @generic={0xe, 0x4b, "efa86a3a2e6b62da0e8deb2e0fd2ae93e6ac537ddcc8f9cbed58b8b86e91bfeb0352087f66450f1f61390afd6f3e092cda7c337737e1f1c60d58d602db5ab5d6ff54ad8a6204dffc6a2b5e"}]}}}, @hopopts={{0x210, 0x29, 0x36, {0xae, 0x3e, '\x00', [@pad1, @generic={0x5, 0xf4, "30d991f45062b757d9007880bcea6d56b6bd11920aa1ec6616330365426758dc3e426d3bc11cc68f34a62772ac79a304fd0d495f678add643a4a97e7768b6c81c9770ef77216f5414d7c604e83da6961fd84a5cf1a98ecdef0385f8133ef1afb12599e18a2ae4dc786e68d39d879a41db3cac321009eac9723fbdbeba76764c4b7ba092ed31949ea2c1cdb76263f17379ae9c4e9068c1bae53bbe97b48889f209f9bb1b3c8f9976110633913430c4ead24eb5aa8a01e2073e740e2b14a5a04e48df451d81abe6d7dc4a418549b1fc38cba0b90e22297dd4a62d1dc59f10c82706d4aa6f93de4cc372d1b3718da28e1dbbc7830d1"}, @generic={0x0, 0x1, "a1"}, @jumbo={0xc2, 0x4, 0x8}, @generic={0xe, 0x32, "c3759c46364e3a33a8f924936a19534fa9e642b31834be3749bc1079ff0b067b73736771037548421b8613eac45bf49f477b"}, @generic={0x1, 0x96, "e5e3d5316b1708f7049f9e237c035f2e95c64ddefce023506950dd5caa4087f5e57b9dd9d697ebf8f5fd655d1c021a63949a5d46aecc4090d21456c50a09faa7c00a86c6450a55930d6e2f6549b3d167bdeeb30c129c3669627b1cfd8f04b284833af63453a63e777b0bb6baaaa090011cbc133dc35473013c15eaaf8b849a4858cac2042c0f9c004dd61f2596113672324546ceba0b"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x14400000}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7fff}, @jumbo={0xc2, 0x4, 0xa20}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r6}}}], 0x470}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="ff866804ef099b513a5d56419b5f705624b160ed7a54f4b33d", 0x19}, {&(0x7f0000000b40)="c217525a0f4ae7eb0090a23c0a99dbb12fc0c2c9dad4e3f55a8ffc85ec3ce47dfa13a9829f1b27d5258b06c0aa6b25b2cd043fa8a4ca09dbc4aae2addab6ba07625647bc49f677592827eb88a8b43ae3dd511b65454b8f30fbd6e7", 0x5b}], 0x2}}, {{&(0x7f0000000c00)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000c40)="9f557038c8e158274598bcdecf547c5e26cbc75600716b78effcd4124da8aab8b41f5250578651cae8ec443125d5a51c7e159d2fb73e25a7bb4d3c57ebec6569396d289bf55777aff9047bfac71d8602d84a2889f48a9c29cf5438c4154a8114a22865dff90752c342cd87fe8e78126398f808a73fe5c06bf2f14ab10e297986730a6a7c0eb9ac60cb8ade7af66a0e75bce1199c6f63cd11ee8f8dad383de47c53020887a6dca8bc58b48eee578f27b2e0d57de066d5c9988fbd82098efd3cf5fe6c1184fbbd10c842b4e868d3430110", 0xd0}], 0x1, &(0x7f0000001f00)=[@rthdrdstopts={{0x10b8, 0x29, 0x37, {0x73, 0x213, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x6, 0x0, [0x41e, 0x80000001, 0x5670, 0x262, 0x8, 0x3, 0x922a, 0x101, 0x8, 0xffffffffffffff7d]}}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x38, {0x3, 0xc, 0xe4, 0x1, [0x4, 0x7, 0x7, 0xfffffffffffffd1b, 0x7fffffff, 0x3]}}, @generic={0x1, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@enc_lim, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0xc, 0x55, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0xfd, 0x7, [0x3ff, 0x7ff, 0x7, 0x1]}}]}}}, @dstopts={{0x258, 0x29, 0x37, {0x12, 0x47, '\x00', [@ra, @generic={0xe, 0xff, "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"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x4, 0xa, [0xffffffffffffffff, 0x5, 0x74cc, 0x3, 0x3, 0x8, 0x1ff, 0x8, 0xacb]}}, @generic={0x3, 0x8e, "236a68f47f52dd038e7249248679b6c18511ff6387eb068456a2817941cdc8ec4568194f40f531bb4d7f41ff291d84cff558b3858a08b9c100dcd75f242f87cce6adaf3f3461be0a5a6c87a8291f2f3ac7bdf61d1f9417ac02d86fd120196a474c1ba1c13a5a2591a2242daf18b93416b21e4dcb0fffb4c296fc9b361616a3a867c27dcb99b883bf5bdad87dedc6"}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x6, [0x786, 0x0, 0xffffffffffffff13, 0x8, 0xffffffffffff85b7, 0x3, 0x80, 0xfffffffffffffff7]}}]}}}], 0x13c8}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000dc0)="7e003976528ac010245809ff78b6c0818c59d6db126f5f80451a222b24e911a7c06a040f9973ba03d963f1b6a07162ea9b26a5dc4692cc0229e2d3a0264d41f16a53e0da1dab014ffb5a17a452ca3ed28705ecaf0c0466a3874b6b7f322bdfecc026f84e07854ca557fbf1a8196300ed7b49d6267a143d51eae275a4cc0e955f5f6b03e7973cf16e", 0x88}, {&(0x7f0000000e80)="dfa1baea08072b4db1dbd05c4510273074b49290ab58fcaae6a1561669ef889ce5420db2614c4a182ff8bdbdbfc3749583e7068beef641948a82af53804053181a7b1aa7eeb877741bed6e82f21505dc0aea4d2a5c4d0bb6d6002fa4688dd741c71ec3c0ead6a0a8242e817c61d747df06f38e579f59d0546603d32848a045645bb2f558be4d56e4c26edd8427665875f2c69cdccaca24b035", 0x99}], 0x2, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r10}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hopopts={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0xae}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x0, 0xfb, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private0]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x67, 0x12, 0x2, 0xb, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @mcast1]}}}], 0x1b8}}], 0x6, 0x4000081)
r13 = dup3(r3, r1, 0x0) (async)
r14 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f0000000040)=[{r14, 0x13}], 0x1, 0x0, 0x0, 0x0) (async)
fdatasync(r14) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async)
ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="d2ff"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001e40)="a02932f4"})

4.873968703s ago: executing program 1 (id=1155):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x1ff}, 0x16, 0x1)
syz_usb_connect$uac2(0x2, 0x9e, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x5, 0x80, 0x9, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x10, 0x4, 0x1c, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x401, 0x2, 0x6, 0xe0, 0x25a, 0x9}, @processing_unit={0x7, 0x24, 0x8, 0x6, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x0, 0x2, 0x2, 0x9, 0x8, 0x3a}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x6, 0x2, {0x8, 0x25, 0x1, 0x0, 0x0, 0x1b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xf9, 0x6, 0x8, {0x8, 0x25, 0x1, 0x0, 0x33, 0x4, 0xe}}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})

4.751048442s ago: executing program 3 (id=1156):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="d8aeb7", 0x3, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000002c0)={r2})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001280004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)={0x198, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010108}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc}]}, 0x198}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00003008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000003fd8"], 0x0, 0x0}, 0x0)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x2)
connect(r10, &(0x7f00000002c0)=@nfc_llcp={0x25, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

4.241245138s ago: executing program 1 (id=1163):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x9201})
recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x290, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x26a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x25, "8a70254dad90829ddb18be62e84e877606f1bb15aaeda7b68c72bb816a45e603389a3d1c4f"}, {0xdd, 0xe3, "a9b8e8b2e8815dfdd27ddf0d9e1cb4fa1bbb67c1e564d75e01a3568e885b2ad15a99d00b7ffdeb02eebcc7545ca67fcad48c79ee89e03a97f892233201e08cb02c084d6cc9e65633c4f51e62e7d245088db7b2a0857ec4e5f911cb353d191498218794a9bd9095865f05de5722159704b56e4dd354369f3480578abd5a8f408dc04f90e5953feace89747961bbd24dac7393ae66ff9e5c5dd5e0b7cf50058a5b5f27dea29e01315b0b6d58d4a2f6b6f06eb7d71f09f0aae4848147d50a60273e11cfa79f5c1cdea51bfd799af914fcb2b635cabc24982a2645999206bdd136f149b323"}, {0xdd, 0x72, "d603975e745cf0818ddf6d630340422b5efe14e9cb1adb7c07146829be39ac24aa70b63265f5d01e584ea220662ae06b9f29b8c0db55b8973efcc8e2131746af14a7d9eec224a2ecee11fec779abcc890cc3efddbb5192105d5f3e94261bec464121a596e5a12dab164fdd7f9d86075b048c"}, {0xdd, 0x7f, "844485144ae31589b65f2b2495e4a044244c614b4546e50d85069c3aaede2f341775ec7e4c686a3910b4c4de14babb923cc2c888ce1c1bf2c37c73917ee9b073d0966153f3f38618f91c68279e45ea37ea7da95c8d10bfb68cbe7dbeaea77e1155e7ba64a002b943b33c2f80bcbb7bacac5c6b44c78c1a8c8b8edaba807abc"}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

4.041074951s ago: executing program 1 (id=1165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/113, 0x90}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000001840)=""/4100, 0x1004}], 0x6}, 0x100)
recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2000, 0x0)

3.470657635s ago: executing program 0 (id=1173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/110, 0x6e}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/169, 0xa9}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f0000001200)=""/45, 0x2d}, {&(0x7f0000001240)=""/177, 0xb1}], 0x7, 0x10001, 0xd)
clock_gettime(0x0, &(0x7f00000013c0)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0x10, &(0x7f0000001480)={&(0x7f0000001400)={0x6, 0x230, 0x7, {r2, r3/1000+60000}, {0x77359400}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "b7827a8fd2e77f59"}}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0xc854)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9d75, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x24004000)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000001680)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r7 = signalfd4(r0, &(0x7f00000016c0)={[0xc]}, 0x8, 0x800)
rt_sigprocmask(0x2, &(0x7f0000001700)={[0x8]}, &(0x7f0000001740), 0x8)
r8 = gettid()
ptrace$PTRACE_GETSIGMASK(0x420a, r8, 0x8, &(0x7f0000001780))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r6)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000001800)={<r11=>0x0, 0x64, "d160f344a4b864f466292b953912468868a3239a283058272cca954112ff4dd41c4b03b1253c474815a649f47c0877b6e8912274b705c34d5dbf18d418d02d0005d52438388f2a39b537fb2d7ce0694f2a84e1c7e4d5c1cf755327ef2ed13c9c347ecbe7"}, &(0x7f0000001880)=0x6c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f00000018c0)={r11, 0xdd, "153c3260db18e9753da5eb7aef434c5ccb471f22e71e98321887502dffb8c3bee222cfb83e1622f9dcdf6aca3c0659206d02bdc9e5a92ce7027ad87e5930b1ea6b3090ee5a6aff4229033de0b5036cf4e8ba8d59e3d14372b1d3ee6d562ed04948f70409fadb9ea2daa7182548a75bd871b8ea3ec3e25bd35c91dbe92083c9338c2ff2049459f1006c8935c7815d47fe47ca092c46bd4f05f142f5be1d81287f4abf5cff44b37492b12889e26ed477a0e44dc9aae61ff3baaf1d6492ba9de8ec30b1c5abb4c877530249d62467a7cf0b754ce866392d79ab742ca9aa21"}, &(0x7f00000019c0)=0xe5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x9b452, 0xffffffffffffffff, 0x94760000)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r12, &(0x7f0000001a40)='syz0\x00', 0x1ff)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001a80)={0x4, [0x80, 0x4, 0x18, 0x7]}, 0xc)
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, r9, 0x411, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40884)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r13, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20004084}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x9c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x11c, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x78, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "51a5278f6534b683ff60d8e208"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "8ed5bc1f9058f8e7"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "556e0be85b"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2}, 0x40049c4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000001f40)={{0x1, 0x1, 0x18, <r14=>r5, {0x8}}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000001f80)={0x2, [0x401, 0xf]}, &(0x7f0000001fc0)=0x8)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), r7)
sendmsg$TIPC_NL_BEARER_ADD(r14, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x54, r15, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2008000}, 0x0)
write$cgroup_int(r7, &(0x7f0000002180)=0xf985, 0x12)

3.366062067s ago: executing program 0 (id=1174):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x1fd})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401})
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="66ba2100b897c80000ef650f20c6c4c179e5f08fc9b8958caec40000000f230c66baf80cb8369ca688ef66bafc0cec26360f35c7442400ccc3e73ec744240209850000c7442406000000000f011c240f231864650f549884b50000", 0x5b}], 0x1, 0x74, 0x0, 0x0)
r6 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x8}, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x8, 0x0, 0x5b)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000340)="2c385a9b48a25e9f6190f90bbd60d830", 0x10)
r12 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80), 0x0, 0x4, 0xfffffe00)
sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})

3.139605981s ago: executing program 1 (id=1176):
syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0xb9, &(0x7f0000000a40)=@string={0xb9, 0x3, "a71c80fcfe91139f104ff4f6fcef1d154696995746f8f71b02233c0f58b9fb09b06dcdb580daa01bf413918a2259e3fa845a17701cecea9edd57b4d1717b3db97ee8dae6d3f3de74ccf132093a23a7f325c4f99ce0c1414c4c711923d5c8cd1068ec6e0c0883fa4228a63b5dd2a84cc73a888e750c7c20220349b0c9c64a97dcf97efcff00a976b6beb76f7b12b757b3814238022cfa56b86666e6ac5809b7e78838b690f658469a53cf894b5072ba2d99243d4595e494aa57437622349546"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x2, 0x3, 0x343d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x40d}}, {0xae, &(0x7f0000000900)=@string={0xae, 0x3, "88cc9b53a95b8fcc423a5370b6a31f7f7dd4d5a78aed74158ef9103b9e6d58d519325dc3242c283728fa0463a4505f817f20290cb9120facff794feabc70b71aff1a79e093bf33abcc776770b6f2e9f07acc796c4ef0c2da1989e76af04f397e99f9a216ceca4fe99146f8acf7691b8e9a8a0699d6a06910db286aba2db8a66de68a8fbf83ff17dc7ff13240db12f2abce3d712572c397a3e0583b6b1a09fd8352446b3cda59fd89dc192dc2"}}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
landlock_restrict_self(r0, 0x1)
r3 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0)
read$FUSE(r3, 0x0, 0x0)
syz_clone3(&(0x7f00000004c0)={0x80, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r4=>0x0, {0xd}, &(0x7f0000000300)=""/63, 0x3f, &(0x7f0000000740)=""/169, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58)
write$cgroup_pid(r1, &(0x7f0000000540)=r4, 0x12)
getsockopt$sock_int(r2, 0x1, 0x7, 0x0, &(0x7f0000000080))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x221a03a, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x3)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40040)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2.460132049s ago: executing program 3 (id=1178):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r1 = getpgrp(0xffffffffffffffff)
r2 = gettid()
kcmp(r2, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003600), 0x802, 0x0)
ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000003640))
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000200)={0x30, r7, 0x0, 0x0, 0x4000000000000000, 0x10000, 0x4000000000, 0x0})
ptrace(0xffffffffffffffff, r4)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
close(r8)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x7fffffff, 0x0, 'syz0\x00', 0x355})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x6a, 0x3, 0x9, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8080, 0x20, 0x9, 0x8}})
socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)

2.006479688s ago: executing program 3 (id=1180):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x81, 0x6, 0x100, 0xe, 0x5, 0x47, 0x1, [0x3, 0x2d5]}})
msgctl$IPC_RMID(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x4d)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0x203f, 0x4)
r3 = msgget(0x3, 0x5f812d5580bea1be)
msgsnd(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xcb, 0x800)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b)
r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3ffd, 0x2}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0xfff})
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)

1.848408679s ago: executing program 0 (id=1182):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
tee(r3, 0xffffffffffffffff, 0xb5, 0x0)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x5, 0x5, 0xfffffe3f, 0x0, 0x0, "57ea000000000000000000c20000ffff00", 0x0, 0xb6})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40))
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000780)={0x3, 0x6, 0x8, 0x2, 0x9, "1d0dc5678a464bad2354c71e3585b76e4d7dc8"})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1)

1.436456772s ago: executing program 0 (id=1184):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000400014002020c600e41b0000900ac00ac0701000000160012000a00ff15", 0x3c}], 0x1}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2544000000080003", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

1.423769367s ago: executing program 0 (id=1185):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
fchmod(r1, 0x0)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000080)={0x60, 0xcc72e483b8abfc87, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x40, &(0x7f0000000040)=[{0x3, 0x8000, 0x9}, {0x8, 0x6, 0xfd}], 0x2, 0x2, 0x8, 0x26, 0x6, 0x21})

1.38030592s ago: executing program 0 (id=1186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
unshare(0x2a020400)
syz_open_dev$sg(&(0x7f0000000e80), 0x5, 0x2)
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2})
fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(r0, 0x26, &(0x7f0000000080))
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
syz_usb_connect(0x1, 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ce0ab50801222c01e03f0000000109021b00014000000109041300016172d100090502"], 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
r2 = timerfd_create(0x9, 0x80800)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000e40))
syz_usb_connect(0x1, 0x9d2, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xe0, 0x82, 0xcd, 0x10, 0x12d1, 0xeb70, 0x5c32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c0, 0x4, 0x0, 0x8, 0x0, 0x0, "", [{{0x9, 0x4, 0x15, 0x6, 0x4, 0xff, 0x4, 0x73, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "5549b4b7"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x98e, 0x5, 0xa}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@mdlm_detail={0xd6, 0x24, 0x13, 0xe, "ab259db66c88a446a88153d003e69aff12a20baaad0496c898bbea1b2770f3af3cca73e800f81e04ad843ffa96f4dc032e6ce5d8fa83e74f5d7b9e173f04e60d5a9312c946611ea963326ccfa54c438442198e09a7482c56b0e01b9e71ea4a20dc4c4802c4ccbd82df1379b9aa7ea1eb6a7fa951cde69d8c4a35ff7f4e4b1ad17ca29ddcaafcac572b68c7cfa3d600c33185c9a73a3563600eec3313d6eeb2ef61995bba5561de3d38d3025691728557e3d99779d92538dc9c1730f6ff9012f8b672de4050bdd016a9c722598d2557d1146a"}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x4, 0x4, 0xa}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8}]}, @hid_hid={0x9, 0x21, 0x2625, 0x9, 0x1, {0x22, 0x598}}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x4, 0x6, 0xa}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x5}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x5, 0x3, 0xf9}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x1, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0xf7, 0x5, 0xd, 0x15, 0xcc, 0xcf, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7f, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x51, 0x8e02}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0xe, 0x6a, 0x4, [@generic={0x7f, 0x23, "9a7a5ba3b8fbe10068ba8622b9de351f84a956571f3ce1f58781b5c74eba20ab922c87486318b80b76595225fc1dd76a46443823571e2ae27bf04904aa22b4abc747d7a9a9f63f500623ea5b6ecffb1cd6d38e03c636fa431584343db22b6bf756b1563efbac1f343e99f4aca469d02dbc05792bcf5400aee2a7a89a83"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x101}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x10, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4, 0x8, 0x2, [@generic={0xa1, 0x6, "457ce8853200f92d49067c904b2bc43fab00c9d3b0196b506679e27a2c63c600cd34abed03874f47f59b21e49515320c417105cd5a3e6876838e13f0d8c3325e6a773f4dff619cb530de52b314d2abd04bdc1ff46a835c31471eda4c0f83b933a5cfcef0accd1c90142a1a47d1d9d5d0c5a92a7f6bd41c18c70642b5f4cf1dd1b4cefe49a0a0bd746eae96de168b1972cc14724f29783bca8baf7ac81cf69a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x3d, 0x37}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x7, 0x69, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xfff7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x59}, @generic={0xe4, 0x0, "190f485e5db39a987ed77f5d07cb32fef7f9adac437636be7f4c2ca713e761d1e9a4b755fb8b01569a833e9d31442ca1dc55e16440219db66851b8eb581a19bf28930912e8d740eb2498c3fc43766f4faefe989cadd2500134f6f87fcf5b066da5014ad2bde9c8e9693a4b84f2a8fa00added86f73da073b53c05449cd619810e29215e1f5b39b0c89938241bed0ca526dee73f141fd018b193a19eb67ef05234c85d2b0c3fe5fb212a5f3ae041ab3f8fa3d8b89c5547ed535af8e7b511f17af568362e92193c58c5ce7c851699d8846d83c0202aea4002cdf788016f4e788c46ba9"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x2, 0x0, 0x7c}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0xd, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xf, 0x9, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x608, 0x8, 0xce, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x458}, @generic={0x68, 0x30, "dbc6d76132b3a98299552a3440b62c7f613183798c630d1273da42b255b5f29f7feb697c6dbe8cbd07d20f4f38904cbd1b77178b6973293df8e5465898f6381e2ed4ee746b63797191c7c7fdf0257dbb7196df2291343ea164723cdca8e61df1f813e72f3e4e"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x724ae6ef3302cfaf, 0x5, 0x4, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @generic={0x2f, 0x21, "61789cb5ddf993e369885a9cf7957e4a30683314ee4f1722d554e42093855b9fdc095c1b71e54b0cb0d5770027"}]}}]}}, {{0x9, 0x4, 0x6a, 0x9c, 0x10, 0xa0, 0x75, 0xc0, 0x5, [@hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x168}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6d, 0x81, 0x9, 0x3, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfff7, 0x5, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x8, 0x7f}]}], [{{0x9, 0x5, 0x7, 0x1, 0x680, 0xff, 0x20, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xb954fda859745cf7, 0x2, 0x7c86}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x0, 0x19, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xff49}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x6}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x4, 0x0, 0x9, [@generic={0xe6, 0xa, "24bb3f079f56347a8cef614a4eb4fdf025a59a5f8c8e2f20d53d5679638072b014950cc933a70491c60b5a9d5874cecb2c79daec0be87ff1300f8d200f2506e6e32973982c9c1afa0638429d0f1e4f3d4885a949b3a094eab2fdc537c9ad1f514daaf0ba626b0fd7221c8314a298db26598abfe8405102acd9963370a2a8a4fe51e2dc36366b2ba8fa53567ffab5f29ae11ac6a97623b40146340351ec048de0bd0050ee554291c6442f98ddc6d089b17e5565d142a7c0ac9d5f7f84706c967ccdc5b2eed214bbbb618a058b6907e5e55450b59f6712ad4bffea253447d3cb96ab3953dd"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x7, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}]}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x7f, 0x6}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x5, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x40, 0x7, 0x3, [@generic={0xb, 0x7, "967bed60e434abdcf5"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x10, 0x2, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xf, 0xf7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7cf, 0x3, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xff, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x2, 0xe4, 0x5, [@generic={0xdb, 0x6, "dc5a20050c86cff5a1346bc035b175f39826d2bafa445f3e96d96dadf18accd0014d7c422cd5cf0b715f9d5d4b462d25961ac3f22f3ee7505d792256a7a418e061b071905ef32a5c058047940a5ab98df5a9d3c1689e8e7ae1e05c7fe0915214acde7886376ac1f434414fc5ab2bdc5709d2120541d03eb149c1deab01e536ef86124352b2d276560c3f1cddf5534d17c65930d0c38278eada7446537b7e6e8fb512a43a3cbe754a6dc210072a70cec4181c1ef03aefb7475dd0e88e552fdf50de71278bb11d5200267f4d3e2642fc6df9f2617d96ad7fe879"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x4, 0x5d}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0x8}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x74, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x50, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x9}]}}]}}, {{0x9, 0x4, 0x63, 0x6, 0x7, 0x3, 0xe5, 0x2, 0x7, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "06596875"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0xf, 0x1}}], [{{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x6, 0x5, 0x0, [@generic={0x8f, 0x3, "a756720fc0b763853a64de2e3161e5d0dd7d501260aefe102c373e906522a0778ae3f688b22f5bd60d42dbe932e78eba14ad3b626af0f33281247a2d208f253334c14384ee00762649b5bac0a8b43a7b8af5667d71a4621bdef69569de0e99a25b05b9e24c766d7e7091badea0883d8192dc44c2a1fd133960a592d5490eddc1d3c5100c9c3b7ee551f1a25ddf"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xff, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x40}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x4, 0x10, 0x7, [@generic={0x5f, 0x24, "a915ea4a3f4f737a53d62b74f96211b4f75da3272ed67cecdd6925a6fba2d5d6fa9352da0d5ecf37bb202ed431722bf24f96dd8553136a35fb91711e4b0f56391df543a943307281891711b3d6b89d1fe51a99092dec6b194c58b09ef9"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xdb, 0x0, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x70, 0x1, [@generic={0xbe, 0xe, "36e5b517b544fc8c9d7fe663f5cdfa9f952845cd16db87aaa6ce0166b434be78b4b9945d0e5b6a9a2026c84a64177760e76da045495b22dc91f33965f91e368791e8e5a99ed1957c189514c869fc548096f1934995b48e0de06146d88bd10732d229117407a64bc30f49d1b6c8845cdb711e0e4155c781be847c6c99ab43832506dab30c8eecb18934a20386524ee591282b15f9dbfc96ffdf2ebe61d1b51ff5ceca1db4f4e4fa5de6162fd1e84eaf08e00ab1048ec9a4574d4892d3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x5, 0x8, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x0, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x65, 0x8}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x1, 0x58, 0x8, 0x40, 0xc}, 0x2b, &(0x7f0000000100)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x2, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x83, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0x0, 0xc2, 0x35, 0x0, 0x9, 0x5}]}, 0x2, [{0xcb, &(0x7f0000000d40)=@string={0xcb, 0x3, "f7d24ebaa0161622890ce873d743fb7d6a75c41df22cd5ae3e724e7f795f897f598d2e8e0ff790ae2eac2b631ac0674b6f650966b1a1d5972e6740bec82c543862cce4c4179f2d2533ca7749a99ace75c9da82a746fcf00e813e42c3d640b145fc0de7de2e26d57b700630f8101e2810402d868e4054be88f417e02351e5b96083a29b75c40bb5f838fbd53115d4018f9a418784159a8188b7d821c56637f50eca158e6b99abec95326a3e2a5f07ce0acc7c05e92bea4fb829440f0390f5cd50b70bfbd9bec44240bd"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}]})
read(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r3, 0xbd5e4000)

1.267908911s ago: executing program 3 (id=1187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x9201})
write$tun(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x5, 0x0, 0xac}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={"fb0400", 0x0, 0x5, 0x2, 0x0, 0xb, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfe61c9fffbffffffffff80", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})
ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0xfff})
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x1034, 0x40, 0x1, 0x70bd2a, 0x4, {0x9}, [@nested={0x4, 0x44}, @nested={0x4, 0x1}, @nested={0x1018, 0xe2, 0x0, 0x1, [@generic="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", @typed={0xc, 0x115, 0x0, 0x0, @u64=0x6}, @nested={0x8, 0x94, 0x0, 0x1, [@nested={0x4, 0x92}]}]}]}, 0x1034}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r9, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
close_range(r1, r3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000b40)={<r10=>0x0, 0x6, 0x1, [0x2, 0x5, 0xce], [0x0, 0x3, 0x0, 0x1, 0x524f46b9, 0x8, 0x8000000000000000, 0x1, 0x7fffffff, 0x9, 0xff, 0x5, 0x2, 0x4, 0x4, 0x9, 0x4, 0x1, 0x9, 0xfffffffffffffffa, 0x8, 0x1, 0x8, 0x100000000, 0x80, 0x7fffffffffffffff, 0x3, 0xd94, 0x6, 0x8000000000000000, 0xa, 0xe, 0x80000000, 0xfffffffffffffff6, 0x4, 0x9, 0x0, 0x6c48, 0x5, 0x40, 0x7cae, 0x8, 0x2, 0x3cff, 0x81, 0x0, 0xd96, 0xfffffffffffffffb, 0xf08, 0x7, 0x81, 0x9, 0x9, 0x6f7, 0x6, 0x4, 0x3a, 0x2, 0x760d, 0x1ff, 0x7fffffff, 0xa, 0x3, 0x1, 0x9, 0xc, 0x7, 0xffffffffffffdfb5, 0x0, 0x5, 0x800, 0x5, 0xfffffffffffff602, 0xf, 0x3, 0x2, 0x759, 0x1d, 0x0, 0x1, 0x101, 0x5, 0x401, 0x0, 0x7f, 0xffffffffffffffff, 0x8, 0x7, 0x0, 0x1000, 0x5, 0x3ff, 0xcc53, 0x3, 0x1, 0xfffffffffffffff7, 0x6, 0x1a34, 0x7, 0xffffffff, 0x1, 0xffffffffffffff7f, 0x4, 0x9, 0x4, 0x7fff, 0xc6f9, 0x9, 0x2, 0x1000, 0x5, 0x6, 0xc1, 0x4, 0xb, 0xfffffffffffffffb, 0x7fff, 0x4, 0x2, 0x3, 0x1]})
ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000f80)={0x0, 0x3, @start={r10, 0x0, "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", "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"}, [0xb9b, 0xff, 0xffffffffffffffff, 0x8, 0x8, 0x5, 0x2, 0x40, 0xfffffffffffff447, 0x5, 0xf, 0xd70, 0x200, 0x2, 0x8001, 0x200, 0x2, 0x7afd, 0x100000000, 0x0, 0x9, 0x4, 0x6, 0x0, 0xfffffffffffffffb, 0x3, 0xfffffffffffffffc, 0x8, 0x7, 0x0, 0x7, 0x1ff, 0x7fffffff, 0x3, 0x8e7, 0x3, 0x200, 0x7, 0x9, 0xffffffffffffffff, 0x1, 0x4, 0xe0fc, 0x8, 0x5, 0x0, 0x8000, 0x167e, 0x0, 0x1, 0x40, 0x7ff, 0x1, 0x8, 0x5, 0x2, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0xfffffffffffffff7, 0x1, 0x5, 0x7]})

838.356461ms ago: executing program 2 (id=1190):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0)
r1 = socket(0x11, 0x2, 0x1)
setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r2, 0xd)
sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f1", 0x1}], 0x1}}], 0x1, 0xc88c5)
setsockopt(r1, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10)
mount(0x0, 0x0, 0x0, 0x208002, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x7f, 0x21a9, 0x33524742, 0xb, 0x5, 0x10000, 0x8, 0x0, 0x0, 0xd, 0x1}})
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000280)={<r5=>0x0, <r6=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f00000002c0)={&(0x7f0000000340)={0x6, 0x40, 0x5f428e9f, {r5, r6/1000+60000}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x1}, 0xa, 0x3, 0x0, 0x0, "540d479242f6279f52819243876d599f3cbc869c52f574b16ee505078b2e467576d6ad4109f0e43ab1713dd6497916fc0231f57d37e8e611b059c51aebb09502"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

641.544044ms ago: executing program 2 (id=1191):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xf6}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000033c0)=""/4105, 0x1009}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/233, 0xe9}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000100)=""/162, 0xa2}], 0x9}, 0x1fd}], 0x3, 0x40000000, 0x0)

589.856262ms ago: executing program 2 (id=1192):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)='B', 0x5ea}], 0x100000000000004b)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x410502, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200802, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x823}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9000}, 0x54)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0)

488.831723ms ago: executing program 2 (id=1193):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x8c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffcb91}}, 0x0, 0x0, 0xc, 0x0, "3f114438efdaca16d374b49a08003535d5bd9db3c8572560f4d1be5cd41f771666fd81baadb27900"}, 0xd8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x3, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x20000000000000)

369.908843ms ago: executing program 2 (id=1194):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000400014002020c600e41b0000900ac00ac0701000000160012000a00ff15", 0x3c}], 0x1}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2544000000080003", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

301.65212ms ago: executing program 2 (id=1195):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)={0x40, 0x8, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
clock_settime(0xfffffffb, &(0x7f0000000140))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0, <r3=>0x0})
syz_usb_connect(0x1, 0x43c, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0xdf, 0x48, 0x74, 0x20, 0x19d2, 0x1259, 0x7efe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42a, 0x2, 0x7f, 0xf1, 0x0, 0x2e, "", [{{0x9, 0x4, 0xf0, 0x71, 0x2, 0xff, 0xff, 0xff, 0xa, [], [{{0x9, 0x5, 0x0, 0x4b7fb436176c6248, 0x400, 0xfb, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x8}, @generic={0x65, 0x18, "585f043ab2b6873d01f55d720d67d8c78f1e5c7a9f4d2972200e96a7c52bac467931a5644d9f526c4cdad85e7221450825bdb057d6df0ff818d213f4500d5790733b914ba76f798f827dd3291f955f4104e367d5589b840b5f4b90ab49d812b5717aed"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x9, 0x4, [@generic={0x26, 0x0, "0265252c984000d91c53e18117f21bcb29d4081496963999e31f4fb2e0a565d253e1df47"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x27, 0xfff}]}}]}}, {{0x9, 0x4, 0xa8, 0x6a, 0xe, 0x84, 0xb6, 0x36, 0x7, [], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x47, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xb3f}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x86, 0x54, 0xff, [@generic={0x5, 0x22, "1be436"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x3}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0xb, 0x6, 0x8, [@generic={0xc9, 0xb, "b66ffa466c2eeb44115733559265b8db50ce88dc68f13bc10a7730fe2787d25da769fa0ee32903bc7e513c93ceb471bdf92cf4b762da98614c66a0bb335f45a9dcba767f4076a977a2ecc5d496eda235b191313325cf8b31f27573611ec13bf667140745e5364292bdaf8e99d524135efe71a04098401acf6ffbc264fd09a61db3e9698162ceda8f28e08f9625c2651df8a4b4cff8071a3dba1be4148a04b96560a28e27c98c300b2e9ce78a0bb8d30409a68febff382f36c2a64bdc7de6123ac737819bd37a0f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x3}]}}, {{0x9, 0x5, 0x4, 0xb, 0x200, 0x40, 0xf8, 0xe7, [@generic={0xa2, 0x4, "1feddb1abd12fe548274ec2a0844a80de4508f7149cddb83641951e4c239fcd5506530e4db0b023035bd3f5ed25428e3c93ac9dac8be87adc0224bd7dcfbb5d7ed7c711e6eff58a62b7ff8fb4cad06d36a4778c62de929abac965b85a3f038d1edffa1e41e374cdf886953f89ba53ffc083bc23d1a5c879fcbdb844d8ba2e2a4bf76c92f09e2b4d0d8491aa24be9fa858542d96467d4abac8b991923b3e629bf"}]}}, {{0x9, 0x5, 0x8e, 0x2, 0x200, 0x8, 0x8, 0x2}}, {{0x9, 0x5, 0x4, 0x4, 0x3bf, 0x8, 0x3, 0xff, [@generic={0x61, 0x22, "c378894c2d439702e81423b05a3d0af42dfd2a27ee7e9af435e45616e69d096950cfd53d93a4043df1358964e785118688238434cc5316b44c6dbc228a6763c93ce57a78236e444d9e989919d9169f031c0b9c2a7f75a2503eaa3974f6a807"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x7f7, 0x1, 0x63}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x6, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xab, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xcc, 0x97e}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x3f, 0x91, 0x5}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x6, 0x3, 0xc5}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7b, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x800}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x0, 0xc}}, {{0x9, 0x5, 0x27b920f7800da737, 0x10, 0x400, 0x92, 0x3, 0x4, [@generic={0xdd, 0x35, "e4bec5fa07bb97335046b671ad8e83c909e8550f5523409e1790d8ef6ed1b4f8feba63a6d31853be2ac6c1d42e8537154d941db6b08a9fc6dcb12ddbea9752bb54dd69d9e133cda7885b79274b8b4236aaec05342acc4d416c7c7e73de6672d68b1d1df15604df7dfed9614a06a5005217cc840ae1853713979588b04c343735cc1b324f97771a94c12a55559f26a9ecef4690d19eca7133a9aae13bed17fa99f57611af813291921f33197ee7de34dbb3ec92a964b829a8e4e79028af6c25a229d7532a6dbc1d0fb42a3038d893564dbc24e421a3557562ac6eb2"}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0x5, 0x7, 0x0, 0x8, 0x5}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x1b, &(0x7f0000000740)=@string={0x1b, 0x3, "88c6065112c6ade43ec84eb254af25714619145bafa2cf94de"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1809}}, {0x1b, &(0x7f00000007c0)=@string={0x1b, 0x3, "d1fa2fd464144564c78930f6b148715663df39b2a88ee59546"}}, {0x5d, &(0x7f0000000800)=@string={0x5d, 0x3, "e50056e9d8c30fb0a9178142dac1ebe87ef65ebd84849012f11bba0630f18b85a4d0ddf89aa0d5339d0310cacc259452c99349308207c5bd2acaa950162052b83b558c5b1a34457aefcb0f1179c22b240a570a4ea839b577fdd4c4"}}]})
fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x2, r3})
r4 = fcntl$getown(r0, 0x9)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r4)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='omfs\x00', 0x208004, 0x0)

590.858µs ago: executing program 1 (id=1196):
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x1, 0x0, 0x6, &(0x7f0000000340)={0xff, "bd12e80000000000000000001900000000000000000000a884dfcc00"}})
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r1, r2, 0x1, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x7, 0xa35, 0x1, 0x9, 'syz0\x00'})

0s ago: executing program 1 (id=1197):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

kernel console output (not intermixed with test programs):

717418][ T7137]  lookup_one_qstr_excl+0x131/0x360
[  161.717454][ T7137]  filename_create+0x20e/0x370
[  161.717485][ T7137]  ? __pfx_filename_create+0x10/0x10
[  161.717518][ T7137]  filename_mkdirat+0xd2/0x510
[  161.717550][ T7137]  ? __pfx_filename_mkdirat+0x10/0x10
[  161.717577][ T7137]  ? do_getname+0x151/0x250
[  161.717607][ T7137]  __se_sys_mkdirat+0x35/0x150
[  161.717643][ T7137]  do_syscall_64+0x14d/0xf80
[  161.717668][ T7137]  ? trace_irq_disable+0x3b/0x150
[  161.717697][ T7137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.717718][ T7137]  ? clear_bhb_loop+0x40/0x90
[  161.717745][ T7137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.717765][ T7137] RIP: 0033:0x7feec5b9c799
[  161.717785][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.717802][ T7137] RSP: 002b:00007feec69f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  161.717823][ T7137] RAX: ffffffffffffffda RBX: 00007feec5e15fa0 RCX: 00007feec5b9c799
[  161.717838][ T7137] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  161.717851][ T7137] RBP: 00007feec69f1090 R08: 0000000000000000 R09: 0000000000000000
[  161.717863][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.717875][ T7137] R13: 00007feec5e16038 R14: 00007feec5e15fa0 R15: 00007ffed3f6c6c8
[  161.717909][ T7137]  </TASK>
[  162.028115][ T5871] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  162.185507][ T5871] usb 4-1: Using ep0 maxpacket: 32
[  162.205678][ T5871] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  162.213909][ T5871] usb 4-1: config 0 has no interface number 0
[  162.222836][ T5871] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  162.232436][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.240817][ T5871] usb 4-1: Product: syz
[  162.245128][ T5871] usb 4-1: Manufacturer: syz
[  162.249767][ T5871] usb 4-1: SerialNumber: syz
[  162.264987][ T5871] usb 4-1: config 0 descriptor??
[  162.278571][ T5871] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  162.290696][ T5871] usb 4-1: selecting invalid altsetting 1
[  162.296844][ T5871] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  162.321659][ T5871] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  162.333500][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  162.342279][ T5871] usb 4-1: media controller created
[  162.349624][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  162.359291][ T5923] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  162.380504][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.388358][   T10] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  162.526829][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.537296][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  162.549144][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  162.560452][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  162.565151][ T7146] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  162.570500][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  162.584972][ T7146] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock
[  162.600736][ T7146] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  162.608797][ T7146] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock
[  162.628432][ T5923] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  162.637838][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  162.647269][ T5923] usb 3-1: Product: syz
[  162.651679][ T5923] usb 3-1: Manufacturer: syz
[  162.656457][ T5923] usb 3-1: SerialNumber: syz
[  162.664631][ T5923] usb 3-1: config 0 descriptor??
[  162.837422][   T10] em28xx 1-1:0.89: AC97 command still being executed: not handled properly!
[  162.877293][ T5923] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  162.884723][ T5923] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  163.022174][   T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  163.033032][   T10] em28xx 1-1:0.89: board has no eeprom
[  163.090941][ T5923] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  163.102185][   T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  163.109667][ T5923] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  163.118745][   T10] em28xx 1-1:0.89: analog set to bulk mode.
[  163.126844][ T5923] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  163.137182][ T5939] em28xx 1-1:0.89: Registering V4L2 extension
[  163.147794][   T10] usb 1-1: USB disconnect, device number 40
[  163.165368][ T5923] usb 3-1: USB disconnect, device number 33
[  163.174725][   T10] em28xx 1-1:0.89: Disconnecting em28xx
[  163.224038][ T5939] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  163.232034][ T5939] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  163.239684][ T5939] em28xx 1-1:0.89: No AC97 audio processor
[  163.253927][ T5939] usb 1-1: Decoder not found
[  163.258831][ T5939] em28xx 1-1:0.89: failed to create media graph
[  163.265327][ T5939] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  163.276866][ T5939] em28xx 1-1:0.89: Registering snapshot button...
[  163.289845][ T5939] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input15
[  163.307706][ T5939] em28xx 1-1:0.89: Remote control support is not available for this card.
[  163.317684][   T10] em28xx 1-1:0.89: Closing input extension
[  163.325392][   T10] em28xx 1-1:0.89: Deregistering snapshot button
[  163.345849][   T10] em28xx 1-1:0.89: Freeing device
[  163.485618][ T5871] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  163.493810][ T5871] zl10353_read_register: readreg error (reg=127, ret==-110)
[  163.505775][ T5871] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  163.555589][ T5871] usb 4-1: USB disconnect, device number 39
[  163.763774][ T7159] netlink: 14 bytes leftover after parsing attributes in process `syz.2.438'.
[  163.941789][ T7166] capability: warning: `syz.1.441' uses deprecated v2 capabilities in a way that may be insecure
[  163.956356][ T5923] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  164.120693][ T5923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  164.144473][ T5923] usb 1-1: config 0 has no interface number 0
[  164.153386][ T5923] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  164.173734][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.183820][ T5923] usb 1-1: Product: syz
[  164.197056][ T5923] usb 1-1: Manufacturer: syz
[  164.201761][ T5923] usb 1-1: SerialNumber: syz
[  164.224624][ T5923] usb 1-1: config 0 descriptor??
[  164.436065][ T5923] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  164.453279][ T5923] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  164.466531][ T5923] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  164.475221][ T5923] usb 1-1: media controller created
[  164.494904][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  164.894449][ T5939] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  165.054441][ T5939] usb 3-1: Using ep0 maxpacket: 8
[  165.069088][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short
[  165.084616][ T5939] usb 3-1: string descriptor 0 read error: -22
[  165.091271][ T5939] usb 3-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  165.100845][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.119215][ T5939] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  165.307636][ T5186] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  165.325666][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.341144][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.352422][ T5939] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  165.465363][ T5186] usb 4-1: Using ep0 maxpacket: 32
[  165.476526][ T5939] usb 3-1: USB disconnect, device number 34
[  165.486618][ T5186] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  165.506454][ T5186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.537825][ T5186] usb 4-1: Product: syz
[  165.542069][ T5186] usb 4-1: Manufacturer: syz
[  165.556522][ T5923] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  165.568843][ T5186] usb 4-1: SerialNumber: syz
[  165.583417][ T5186] usb 4-1: config 0 descriptor??
[  166.007672][ T5186] airspy 4-1:0.0: Board ID: 00
[  166.012530][ T5186] airspy 4-1:0.0: Firmware version: 
[  166.159143][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.182734][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.219353][ T5186] airspy 4-1:0.0: usb_control_msg() failed -71 request 11
[  166.248910][ T5186] airspy 4-1:0.0: Registered as swradio24
[  166.261097][ T5186] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  166.281610][ T5186] usb 4-1: USB disconnect, device number 40
[  166.345617][ T7226] net_ratelimit: 43 callbacks suppressed
[  166.345640][ T7226] openvswitch: netlink: Key 6 has unexpected len 485 expected 2
[  166.366344][ T5884] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  166.418810][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.448483][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.544495][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  166.556158][ T5884] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  166.574496][ T5884] usb 3-1: config 0 has no interface number 0
[  166.591739][ T5884] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  166.603680][ T5884] usb 3-1: config 0 interface 1 has no altsetting 0
[  166.614766][ T5884] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  166.624145][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.636222][ T5884] usb 3-1: Product: syz
[  166.640552][ T5884] usb 3-1: Manufacturer: syz
[  166.645782][ T5884] usb 3-1: SerialNumber: syz
[  166.654668][ T5884] usb 3-1: config 0 descriptor??
[  166.865748][ T5884] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  166.877298][ T5884] cx231xx 3-1:0.1: Failed to read PCB config
[  166.885010][ T5884] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  166.895471][ T5884] usb 3-1: USB disconnect, device number 35
[  167.254703][ T5186] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  167.314407][ T5871] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  167.404433][ T5186] usb 4-1: Using ep0 maxpacket: 8
[  167.412818][ T5186] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  167.422259][ T5186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.431220][ T5186] usb 4-1: Product: syz
[  167.435641][ T5186] usb 4-1: Manufacturer: syz
[  167.440275][ T5186] usb 4-1: SerialNumber: syz
[  167.448824][ T5186] usb 4-1: config 0 descriptor??
[  167.464425][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  167.471940][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  167.480157][ T5871] usb 3-1: config 0 has no interface number 0
[  167.486625][ T5871] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  167.498214][ T5871] usb 3-1: config 0 interface 1 has no altsetting 0
[  167.507601][ T5871] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  167.513982][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.521184][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.536440][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.543655][ T5871] usb 3-1: Product: syz
[  167.549412][ T5871] usb 3-1: Manufacturer: syz
[  167.554219][ T5871] usb 3-1: SerialNumber: syz
[  167.562517][ T5871] usb 3-1: config 0 descriptor??
[  167.656516][ T5186] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  167.776685][ T5871] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  167.788221][ T5871] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  167.904705][ T5871] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  167.915235][ T5871] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  167.923659][ T5871] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  167.932296][ T5871] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  167.940774][ T5871] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  167.948738][ T5871] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32
[  167.971482][ T5871] i2c i2c-3: Added multiplexed i2c bus 5
[  167.981231][ T5871] i2c i2c-3: Added multiplexed i2c bus 6
[  167.987653][ T5871] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]!
[  167.996929][ T5871] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]!
[  168.025463][ T5871] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -32
[  168.073665][ T5186] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  168.117168][ T5186] usb 4-1: USB disconnect, device number 41
[  168.700132][ T7251] netlink: 'syz.2.455': attribute type 58 has an invalid length.
[  169.740504][ T5884] usb 3-1: USB disconnect, device number 36
[  192.279100][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  194.520463][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.527414][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  211.954563][ T5824] Bluetooth: hci1: command 0x0406 tx timeout
[  211.960008][ T5139] Bluetooth: hci0: command 0x0406 tx timeout
[  223.204140][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  227.022167][ T5191] udevd[5191]: worker [5833] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[  235.271568][ T7265] ubi0: attaching mtd0
[  235.275796][ T7265] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  235.301211][ T7265] dvmrp1: entered allmulticast mode
[  235.397729][ T7271] gfs2: error -5 reading superblock
[  235.509610][ T7269] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  235.516786][ T7269] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  235.523329][ T7269] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  235.529854][ T7269] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  235.536453][ T7269] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  235.543538][ T7269] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  235.550166][ T7269] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  235.556678][ T7269] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  235.563367][ T7269] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  235.569881][ T7269] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  237.280193][ T7287] sg_write: data in/out 44713/14 bytes for SCSI command 0x0-- guessing data in;
[  237.280193][ T7287]    program syz.3.474 not setting count and/or reply_len properly
[  237.365109][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.374688][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.595296][ T5939] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  237.636977][ T7293] IPv6: syztnl0: Disabled Multicast RS
[  237.733827][ T7296] capability: warning: `syz.1.478' uses 32-bit capabilities (legacy support in use)
[  237.776167][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  237.787091][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  237.799347][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  237.812286][ T5939] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  237.824935][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.833034][ T5939] usb 4-1: Product: syz
[  237.837739][ T5939] usb 4-1: Manufacturer: syz
[  237.842395][ T5939] usb 4-1: SerialNumber: syz
[  237.853320][ T5939] usb 4-1: config 0 descriptor??
[  237.854612][ T5871] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  237.869343][ T7289] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  237.877680][ T7289] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  237.889384][ T5939] usb 4-1: ucan: probing device on interface #0
[  238.024348][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  238.043402][ T5871] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  238.063905][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.083147][ T5871] usb 3-1: Product: syz
[  238.093575][ T5871] usb 3-1: Manufacturer: syz
[  238.104174][ T5871] usb 3-1: SerialNumber: syz
[  238.372224][ T5871] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  238.386875][ T5871] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  238.397887][ T5871] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  238.407007][ T5871] usb 3-1: media controller created
[  238.431957][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  238.511756][ T7311] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7311]
[  238.589262][ T5871] zl10353_read_register: readreg error (reg=127, ret==-71)
[  238.642339][ T5871] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  238.661274][ T5871] usb 3-1: USB disconnect, device number 37
[  239.343274][ T7314] afs: Unknown parameter 'dyn'
[  239.654403][ T5871] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  239.816182][ T5871] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[  239.825427][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.836463][ T5871] usb 3-1: config 0 has no interfaces?
[  239.842107][ T5871] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  239.854731][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.869225][ T5871] usb 3-1: config 0 descriptor??
[  239.928177][ T5939] usb 4-1: ucan: could not read protocol version, ret=-110
[  239.935624][ T5939] usb 4-1: ucan: probe failed; try to update the device firmware
[  240.089777][ T5939] usb 3-1: USB disconnect, device number 38
[  240.369172][ T5939] usb 4-1: USB disconnect, device number 42
[  240.642774][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.653057][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.663803][ T7339] netlink: 180 bytes leftover after parsing attributes in process `syz.0.492'.
[  241.044388][ T5871] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  241.161974][ T7349] netlink: 822 bytes leftover after parsing attributes in process `syz.1.496'.
[  241.217858][ T5871] usb 4-1: Using ep0 maxpacket: 32
[  241.261600][ T7356] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[7356]
[  241.335819][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short
[  241.345278][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.355878][ T5871] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  241.367848][ T5871] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  241.379099][ T5871] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  241.396125][ T5871] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  241.414409][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.422522][ T5871] usb 4-1: Product: syz
[  241.427759][ T5871] usb 4-1: Manufacturer: syz
[  241.433354][ T5871] usb 4-1: SerialNumber: syz
[  241.662236][ T5871] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  241.670415][ T5871] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  241.715663][ T5871] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  241.737053][ T5871] usb 4-1: USB disconnect, device number 43
[  241.806043][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.842018][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.856632][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.928252][ T7380] mmap: syz.0.506 (7380) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  243.703167][ T7392] netlink: 320 bytes leftover after parsing attributes in process `syz.3.510'.
[  244.054666][   T29] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  244.194609][   T29] usb 4-1: device descriptor read/64, error -71
[  244.258156][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'.
[  244.444549][   T29] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  244.538194][ T7429] tmpfs: Unknown parameter 'usrquota/pcmC#D#p'
[  244.584542][   T29] usb 4-1: device descriptor read/64, error -71
[  244.605467][ T7431] syzkaller0: entered promiscuous mode
[  244.611284][ T7431] syzkaller0: entered allmulticast mode
[  244.695673][   T29] usb usb4-port1: attempt power cycle
[  245.035703][   T29] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  245.055629][   T29] usb 4-1: device descriptor read/8, error -71
[  245.264401][  T798] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  245.294631][   T29] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  245.328585][   T29] usb 4-1: device descriptor read/8, error -71
[  245.424486][  T798] usb 3-1: Using ep0 maxpacket: 8
[  245.441816][  T798] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  245.461331][  T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.464508][   T29] usb usb4-port1: unable to enumerate USB device
[  245.470462][  T798] usb 3-1: Product: syz
[  245.484323][  T798] usb 3-1: Manufacturer: syz
[  245.489041][  T798] usb 3-1: SerialNumber: syz
[  245.505036][  T798] usb 3-1: config 0 descriptor??
[  245.560666][ T7452] net_ratelimit: 26146 callbacks suppressed
[  245.560687][ T7452] openvswitch: netlink: IP tunnel dst address not specified
[  245.651895][ T7454] 9p: Bad value for 'rfdno'
[  245.711681][  T798] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  245.728586][ T7440] use of bytesused == 0 is deprecated and will be removed in the future,
[  245.749430][ T7440] use the actual size instead.
[  246.463614][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.483168][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.756429][  T798] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  247.170240][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'.
[  247.266348][ T7495] evm: overlay not supported
[  247.393597][   T29] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  247.564992][   T29] usb 4-1: Using ep0 maxpacket: 32
[  247.572420][   T29] usb 4-1: config 0 has no interfaces?
[  247.584612][   T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  247.597559][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.614285][   T29] usb 4-1: Product: syz
[  247.621923][   T29] usb 4-1: Manufacturer: syz
[  247.630294][   T29] usb 4-1: SerialNumber: syz
[  247.652817][   T29] usb 4-1: config 0 descriptor??
[  247.867100][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.888555][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.924822][   T29] usb 4-1: USB disconnect, device number 48
[  248.110223][ T7514] netlink: 220 bytes leftover after parsing attributes in process `syz.3.553'.
[  248.467611][ T5884] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  248.523594][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.535592][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.625037][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  248.633003][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.644471][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.654905][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  248.668820][ T5884] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  248.678921][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.690212][ T5884] usb 4-1: config 0 descriptor??
[  249.143042][ T5884] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input17
[  249.180466][ T5884] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  249.242474][   T30] audit: type=1800 audit(1772282415.636:4): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.557" name="bus" dev="overlay" ino=774 res=0 errno=0
[  249.347344][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.383071][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.399378][ T5915] usb 4-1: USB disconnect, device number 49
[  249.471570][ T7533] overlayfs: failed to clone upperpath
[  249.487041][ T7533] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  250.135246][   T29] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  250.178256][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'.
[  250.222534][ T5915] kernel read not supported for file /vcs (pid: 5915 comm: kworker/1:6)
[  250.314440][   T29] usb 4-1: device descriptor read/64, error -71
[  250.574375][   T29] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  250.704496][   T29] usb 4-1: device descriptor read/64, error -71
[  250.814693][   T29] usb usb4-port1: attempt power cycle
[  250.840295][ T7558] kvm: pic: non byte read
[  250.845740][ T7558] kvm: pic: non byte read
[  250.850215][ T7558] kvm: pic: non byte read
[  250.856486][ T7558] kvm: pic: non byte read
[  250.861072][ T7558] kvm: pic: non byte read
[  250.865848][ T7558] kvm: pic: non byte read
[  250.870504][ T7558] kvm: pic: non byte read
[  250.875137][ T7558] kvm: pic: non byte read
[  250.879608][ T7558] kvm: pic: non byte read
[  250.884527][ T7558] kvm: pic: non byte read
[  250.896830][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.909731][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.154398][   T29] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  251.175089][   T29] usb 4-1: device descriptor read/8, error -71
[  251.330190][ T7570] overlayfs: failed to clone upperpath
[  251.434501][   T29] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  251.478097][   T29] usb 4-1: device descriptor read/8, error -71
[  251.605848][   T29] usb usb4-port1: unable to enumerate USB device
[  252.881317][ T7588] IPVS: length: 225 != 24
[  253.414391][ T5186] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  253.577162][ T5186] usb 4-1: Using ep0 maxpacket: 32
[  253.586417][ T5186] usb 4-1: unable to get BOS descriptor or descriptor too short
[  253.605514][ T5186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.624370][ T5186] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  253.640274][ T5186] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  253.661644][ T5186] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  253.688616][ T5186] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  253.698094][ T5186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.706328][ T5186] usb 4-1: Product: syz
[  253.710782][ T5186] usb 4-1: Manufacturer: syz
[  253.716123][ T5186] usb 4-1: SerialNumber: syz
[  253.880047][ T7608] delete_channel: no stack
[  253.884707][ T7608] delete_channel: no stack
[  253.945157][ T5186] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  253.956525][ T5186] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  254.032630][ T5186] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  254.048589][ T5186] usb 4-1: USB disconnect, device number 54
[  254.107629][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.129405][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  254.299446][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.310845][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.317077][ T7619] batadv_slave_1: entered promiscuous mode
[  254.334163][ T7619] batadv_slave_1: left promiscuous mode
[  254.592686][ T7626] sp0: Synchronizing with TNC
[  255.214498][ T5186] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  255.290081][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.299151][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.358431][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.368965][ T5186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.372763][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.385253][ T5186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.402382][ T5186] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  255.412081][ T5186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.427851][ T5186] usb 4-1: config 0 descriptor??
[  255.865710][ T5186] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0
[  255.877527][ T5186] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0
[  255.894766][ T5186] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000A/input/input18
[  255.961569][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.969782][ T5186] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  255.984057][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  256.031672][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.042551][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.071675][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.095152][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.127738][ T5884] usb 4-1: USB disconnect, device number 55
[  256.208600][ T7663] netlink: 'syz.2.606': attribute type 12 has an invalid length.
[  257.076741][ T7683] netlink: 'syz.1.614': attribute type 21 has an invalid length.
[  257.085099][ T7683] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[  257.157044][ T5884] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  257.198505][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.208385][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.294372][ T5884] usb 4-1: device descriptor read/64, error -71
[  257.534380][ T5884] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  257.664419][ T5884] usb 4-1: device descriptor read/64, error -71
[  257.775138][ T5884] usb usb4-port1: attempt power cycle
[  257.862889][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.880248][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.124363][ T5884] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  258.146541][ T5884] usb 4-1: device descriptor read/8, error -71
[  258.394448][ T5884] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  258.404493][ T7722] openvswitch: netlink: Flow key attr not present in new flow.
[  258.417363][ T5884] usb 4-1: device descriptor read/8, error -71
[  258.472328][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.481442][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.525865][ T5884] usb usb4-port1: unable to enumerate USB device
[  258.607412][ T7729] netlink: 1680 bytes leftover after parsing attributes in process `syz.1.629'.
[  259.094010][ T7741] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  259.123666][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.136526][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.163437][ T7744] netlink: 'syz.2.634': attribute type 1 has an invalid length.
[  259.174351][ T7744] netlink: 'syz.2.634': attribute type 2 has an invalid length.
[  259.194114][ T7744] netlink: 'syz.2.634': attribute type 4 has an invalid length.
[  259.202349][ T7744] netlink: 'syz.2.634': attribute type 2 has an invalid length.
[  259.213875][ T7744] tmpfs: Unknown parameter 'hardlimit'
[  259.220683][ T5834] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  259.302074][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.327755][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.743798][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.754130][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.024057][ T7761] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  260.079297][ T7761] netlink: 'syz.2.642': attribute type 6 has an invalid length.
[  260.090894][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.118606][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.327517][ T7770] comedi comedi2: dt2815: I/O port conflict (0xafff,2)
[  260.456745][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.467808][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.478747][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.488458][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.634411][ T5884] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  260.788482][ T5884] usb 4-1: not running at top speed; connect to a high speed hub
[  260.801498][ T5884] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  260.826961][ T5884] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  260.837391][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.846164][ T5884] usb 4-1: Product: syz
[  260.850693][ T5884] usb 4-1: Manufacturer: syz
[  260.855811][ T5884] usb 4-1: SerialNumber: syz
[  261.088650][ T5884] usb 4-1: 1:1 : format type 0 is detected, processed as PCM
[  261.104320][ T5884] usb 4-1: 1:1 : sample bitwidth 225 in over sample bytes 1
[  261.111697][ T5884] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  261.121128][ T5884] usb 4-1: 1:1 : invalid channels 0
[  261.127661][ T5884] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  261.202649][ T5884] usb 4-1: USB disconnect, device number 60
[  261.831026][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.841780][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.868525][ T7802] syzkaller1: entered promiscuous mode
[  261.874064][ T7802] syzkaller1: entered allmulticast mode
[  262.110751][ T7808] FAULT_INJECTION: forcing a failure.
[  262.110751][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.125806][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.3.659 Not tainted syzkaller #0 PREEMPT(full) 
[  262.125834][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  262.125861][ T7808] Call Trace:
[  262.125874][ T7808]  <TASK>
[  262.125883][ T7808]  dump_stack_lvl+0xe8/0x150
[  262.125919][ T7808]  should_fail_ex+0x412/0x560
[  262.125950][ T7808]  _copy_from_iter+0x1d3/0x1670
[  262.125987][ T7808]  ? __pfx__copy_from_iter+0x10/0x10
[  262.126016][ T7808]  ? __lock_acquire+0x6b5/0x2cf0
[  262.126052][ T7808]  tun_get_user+0x275/0x3dd0
[  262.126098][ T7808]  ? __pfx_tun_get_user+0x10/0x10
[  262.126122][ T7808]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  262.126147][ T7808]  ? lockdep_hardirqs_on+0x7a/0x110
[  262.126172][ T7808]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  262.126195][ T7808]  ? save_netdev_trace_buffer+0x4e2/0x610
[  262.126226][ T7808]  ? ref_tracker_alloc+0x35c/0x4c0
[  262.126250][ T7808]  ? tun_chr_write_iter+0x60/0x210
[  262.126272][ T7808]  ? vfs_write+0x61d/0xb90
[  262.126292][ T7808]  ? ksys_write+0x150/0x270
[  262.126312][ T7808]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  262.126343][ T7808]  ? tun_get+0x1c/0x2f0
[  262.126371][ T7808]  ? tun_get+0x1c/0x2f0
[  262.126402][ T7808]  ? tun_get+0x1c/0x2f0
[  262.126428][ T7808]  tun_chr_write_iter+0x113/0x210
[  262.126455][ T7808]  vfs_write+0x61d/0xb90
[  262.126484][ T7808]  ? __pfx_vfs_write+0x10/0x10
[  262.126518][ T7808]  ? __fget_files+0x2a/0x420
[  262.126547][ T7808]  ksys_write+0x150/0x270
[  262.126564][ T7808]  ? __pfx_ksys_write+0x10/0x10
[  262.126587][ T7808]  do_syscall_64+0x14d/0xf80
[  262.126605][ T7808]  ? trace_irq_disable+0x3b/0x150
[  262.126627][ T7808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.126643][ T7808]  ? clear_bhb_loop+0x40/0x90
[  262.126664][ T7808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.126681][ T7808] RIP: 0033:0x7fbe0479c799
[  262.126696][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.126708][ T7808] RSP: 002b:00007fbe05744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  262.126724][ T7808] RAX: ffffffffffffffda RBX: 00007fbe04a15fa0 RCX: 00007fbe0479c799
[  262.126735][ T7808] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 0000000000000003
[  262.126745][ T7808] RBP: 00007fbe05744090 R08: 0000000000000000 R09: 0000000000000000
[  262.126754][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.126762][ T7808] R13: 00007fbe04a16038 R14: 00007fbe04a15fa0 R15: 00007ffe74772d98
[  262.126785][ T7808]  </TASK>
[  262.734307][ T5884] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  262.793217][ T5834] Bluetooth: hci1: unexpected event for opcode 0x6e02
[  262.904385][ T5884] usb 4-1: Using ep0 maxpacket: 8
[  262.925956][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  262.943530][ T7828] input: syz1 as /devices/virtual/input/input19
[  262.952599][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  262.963704][ T7829] FAULT_INJECTION: forcing a failure.
[  262.963704][ T7829] name failslab, interval 1, probability 0, space 0, times 0
[  262.976486][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.986310][ T5884] usb 4-1: Product: syz
[  262.990877][ T5884] usb 4-1: Manufacturer: syz
[  262.997927][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.2.666 Not tainted syzkaller #0 PREEMPT(full) 
[  262.997953][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  262.997965][ T7829] Call Trace:
[  262.997973][ T7829]  <TASK>
[  262.997982][ T7829]  dump_stack_lvl+0xe8/0x150
[  262.998016][ T7829]  should_fail_ex+0x412/0x560
[  262.998045][ T7829]  should_failslab+0xa8/0x100
[  262.998072][ T7829]  __kmalloc_noprof+0xe8/0x760
[  262.998094][ T7829]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  262.998126][ T7829]  tomoyo_realpath_from_path+0xe3/0x5d0
[  262.998160][ T7829]  ? tomoyo_path_number_perm+0x219/0x630
[  262.998193][ T7829]  tomoyo_path_number_perm+0x246/0x630
[  262.998228][ T7829]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  262.998262][ T7829]  ? __lock_acquire+0x6b5/0x2cf0
[  262.998299][ T7829]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  262.998345][ T7829]  ? __fget_files+0x2a/0x420
[  262.998379][ T7829]  ? __fget_files+0x2a/0x420
[  262.998406][ T7829]  ? __fget_files+0x3a0/0x420
[  262.998434][ T7829]  ? __fget_files+0x2a/0x420
[  262.998467][ T7829]  security_file_ioctl+0xc3/0x2a0
[  262.998500][ T7829]  __se_sys_ioctl+0x47/0x170
[  262.998526][ T7829]  do_syscall_64+0x14d/0xf80
[  262.998551][ T7829]  ? trace_irq_disable+0x3b/0x150
[  262.998580][ T7829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.998601][ T7829]  ? clear_bhb_loop+0x40/0x90
[  262.998626][ T7829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.998647][ T7829] RIP: 0033:0x7feec5b9c799
[  262.998673][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.998690][ T7829] RSP: 002b:00007feec69cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.998711][ T7829] RAX: ffffffffffffffda RBX: 00007feec5e16090 RCX: 00007feec5b9c799
[  262.998726][ T7829] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  262.998737][ T7829] RBP: 00007feec69cf090 R08: 0000000000000000 R09: 0000000000000000
[  262.998749][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.998761][ T7829] R13: 00007feec5e16128 R14: 00007feec5e16090 R15: 00007ffed3f6c6c8
[  262.998791][ T7829]  </TASK>
[  263.220434][ T7829] ERROR: Out of memory at tomoyo_realpath_from_path.
[  263.233356][ T5884] usb 4-1: SerialNumber: syz
[  263.268454][ T5884] usb 4-1: config 0 descriptor??
[  263.279453][ T5884] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  263.383721][ T7835] syzkaller0: entered promiscuous mode
[  263.389796][ T7835] syzkaller0: entered allmulticast mode
[  263.706955][ T7853] netlink: 666 bytes leftover after parsing attributes in process `syz.2.673'.
[  263.871402][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.882010][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.034046][ T7858] Bluetooth: MGMT ver 1.23
[  264.469335][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.486019][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.486543][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.510592][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.536950][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.547816][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.345940][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'.
[  265.461883][ T7885] syzkaller1: entered promiscuous mode
[  265.467651][ T7885] syzkaller1: entered allmulticast mode
[  266.136727][ T5884] gspca_zc3xx: reg_r err -71
[  266.395754][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807d61b000: rx timeout, send abort
[  266.406211][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807d61b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  266.655902][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.665881][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.677568][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.687115][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.699848][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.713966][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.716519][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.733426][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.733883][ T5884] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  266.747800][ T5884] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  266.766923][ T5884] usb 4-1: USB disconnect, device number 61
[  266.979071][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.988813][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.111358][ T7918] FAULT_INJECTION: forcing a failure.
[  267.111358][ T7918] name failslab, interval 1, probability 0, space 0, times 0
[  267.125532][ T7918] CPU: 1 UID: 0 PID: 7918 Comm: syz.3.696 Not tainted syzkaller #0 PREEMPT(full) 
[  267.125561][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  267.125574][ T7918] Call Trace:
[  267.125583][ T7918]  <TASK>
[  267.125591][ T7918]  dump_stack_lvl+0xe8/0x150
[  267.125625][ T7918]  should_fail_ex+0x412/0x560
[  267.125655][ T7918]  should_failslab+0xa8/0x100
[  267.125680][ T7918]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  267.125712][ T7918]  kmem_cache_alloc_noprof+0x87/0x650
[  267.125731][ T7918]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  267.125768][ T7918]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  267.125794][ T7918]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  267.125841][ T7918]  mmu_topup_memory_caches+0x21/0x170
[  267.125875][ T7918]  kvm_mmu_load+0x9d/0x22d0
[  267.125897][ T7918]  ? vmx_vcpu_load+0x1b0/0x260
[  267.125922][ T7918]  ? kvm_arch_vcpu_load+0x1f6/0xa50
[  267.125951][ T7918]  ? kvm_arch_vcpu_load+0x78d/0xa50
[  267.125977][ T7918]  ? kasan_quarantine_put+0xbb/0x1f0
[  267.126006][ T7918]  kvm_arch_vcpu_pre_fault_memory+0x642/0x6f0
[  267.126046][ T7918]  kvm_vcpu_pre_fault_memory+0x228/0x460
[  267.126070][ T7918]  ? kvm_vcpu_pre_fault_memory+0x15b/0x460
[  267.126096][ T7918]  kvm_vcpu_ioctl+0x8a7/0xfd0
[  267.126121][ T7918]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  267.126139][ T7918]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  267.126199][ T7918]  ? __fget_files+0x2a/0x420
[  267.126241][ T7918]  ? bpf_lsm_file_ioctl+0x9/0x20
[  267.126267][ T7918]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  267.126288][ T7918]  __se_sys_ioctl+0xfc/0x170
[  267.126315][ T7918]  do_syscall_64+0x14d/0xf80
[  267.126339][ T7918]  ? trace_irq_disable+0x3b/0x150
[  267.126369][ T7918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.126390][ T7918]  ? clear_bhb_loop+0x40/0x90
[  267.126415][ T7918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.126436][ T7918] RIP: 0033:0x7fbe0479c799
[  267.126455][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.126472][ T7918] RSP: 002b:00007fbe05744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  267.126492][ T7918] RAX: ffffffffffffffda RBX: 00007fbe04a15fa0 RCX: 00007fbe0479c799
[  267.126507][ T7918] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000005
[  267.126520][ T7918] RBP: 00007fbe05744090 R08: 0000000000000000 R09: 0000000000000000
[  267.126533][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  267.126545][ T7918] R13: 00007fbe04a16038 R14: 00007fbe04a15fa0 R15: 00007ffe74772d98
[  267.126578][ T7918]  </TASK>
[  267.894366][ T5939] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  268.046271][ T5939] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  268.055368][ T5939] usb 4-1: config 0 has no interface number 0
[  268.062360][ T5939] usb 4-1: config 0 interface 41 has no altsetting 0
[  268.072761][ T5939] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  268.082334][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.090627][ T5939] usb 4-1: Product: syz
[  268.095032][ T5939] usb 4-1: Manufacturer: syz
[  268.099762][ T5939] usb 4-1: SerialNumber: syz
[  268.108993][ T5939] usb 4-1: config 0 descriptor??
[  269.133529][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.143405][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.153130][ T5939] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  269.177888][ T5939] usb 4-1: USB disconnect, device number 62
[  270.184363][ T5884] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  270.255525][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.269054][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.344504][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  270.352062][ T5884] usb 4-1: config 0 has an invalid interface number: 13 but max is 0
[  270.360738][ T5884] usb 4-1: config 0 has no interface number 0
[  270.366967][ T5884] usb 4-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.378998][ T5884] usb 4-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.391207][ T5884] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  270.400462][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.415017][ T5884] usb 4-1: config 0 descriptor??
[  270.779443][ T7997] overlayfs: failed to clone upperpath
[  270.815347][ T7999] overlayfs: failed to resolve './file1': -2
[  270.839662][ T5884] uclogic 0003:5543:0781.000B: collection stack underflow
[  270.864945][ T5884] uclogic 0003:5543:0781.000B: item 0 1 0 12 parsing failed
[  270.873556][ T5884] uclogic 0003:5543:0781.000B: parse failed
[  270.892863][ T5884] uclogic 0003:5543:0781.000B: probe with driver uclogic failed with error -22
[  271.043608][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'.
[  271.062666][ T5884] usb 4-1: USB disconnect, device number 63
[  271.142331][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.156303][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.302239][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  271.341178][ T8039] overlayfs: failed to clone upperpath
[  271.462001][ T8041] ALSA: mixer_oss: invalid OSS volume ''
[  271.716130][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.734953][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.884622][ T5915] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  272.019628][ T8068] netlink: 'syz.0.729': attribute type 11 has an invalid length.
[  272.027681][ T8068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.729'.
[  272.040113][ T8066] ALSA: mixer_oss: invalid OSS volume ''
[  272.047075][ T8066] ALSA: mixer_oss: invalid OSS volume ''
[  272.057248][ T5915] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  272.074714][ T5915] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  272.089029][ T5915] usb 4-1: config 0 has no interface number 0
[  272.097059][ T5915] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 511
[  272.114877][ T5915] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.146299][ T5915] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  272.157278][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.166161][ T5915] usb 4-1: Product: syz
[  272.170558][ T5915] usb 4-1: Manufacturer: syz
[  272.178607][ T5915] usb 4-1: SerialNumber: syz
[  272.195818][ T5915] usb 4-1: config 0 descriptor??
[  272.202517][ T8049] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  272.215047][ T5915] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  272.231199][ T5915] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  272.237940][ T8071] netlink: 'syz.0.731': attribute type 10 has an invalid length.
[  272.247295][ T5915] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  272.279868][ T5834] Bluetooth: hci1: Unable to find connection for big 0x00
[  272.435813][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.445841][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.461678][ T8086] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1
[  272.471796][ T8086] PKCS7: Only support pkcs7_signedData type
[  272.558264][ T5915] usb 4-1: USB disconnect, device number 64
[  272.574911][ T5915] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  272.589333][ T5915] cyberjack 4-1:0.69: device disconnected
[  272.839545][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.852625][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.025252][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.034698][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.369695][ T5915] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  273.519970][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.531390][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.543611][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  273.553263][ T8129] binder: BC_ACQUIRE_RESULT not supported
[  273.560248][ T8129] binder: 8128:8129 ioctl c0306201 200000000580 returned -22
[  273.568883][ T5915] usb 4-1: config 14 has an invalid interface number: 21 but max is 0
[  273.587499][ T5915] usb 4-1: config 14 has no interface number 0
[  273.593788][ T5915] usb 4-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32
[  273.624956][ T5915] usb 4-1: config 14 interface 21 has no altsetting 0
[  273.640657][ T5915] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[  273.650358][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.658443][ T5915] usb 4-1: Product: syz
[  273.662742][ T5915] usb 4-1: Manufacturer: syz
[  273.667513][ T5915] usb 4-1: SerialNumber: syz
[  273.683271][ T8115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  273.915296][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  273.924975][ T5915] usb 4-1: MIDIStreaming interface descriptor not found
[  274.054577][ T5915] usb 4-1: USB disconnect, device number 65
[  274.173638][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  274.176598][ T8173] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929
[  274.249555][ T8175] binder: 8169:8175 unknown command 0
[  274.271146][ T8173] binder: 8169:8173 ioctl 4018620d 2000000000c0 returned -1
[  274.283563][ T8175] binder: 8169:8175 ioctl c0306201 200000000080 returned -22
[  274.998079][ T8210] ubi0: attaching mtd0
[  275.006494][ T8210] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  275.136772][ T8227] tipc: MTU too low for tipc bearer
[  275.219575][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.232300][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.326505][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.340240][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.707526][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.721749][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.760789][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.778329][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.237481][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.251727][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.324389][   T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  276.467602][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.482724][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  276.493559][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.504944][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.513373][   T10] usb 4-1: Product: syz
[  276.523114][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.532166][   T10] usb 4-1: Manufacturer: syz
[  276.537796][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.546750][   T10] usb 4-1: SerialNumber: syz
[  276.564369][   T10] usb 4-1: config 0 descriptor??
[  276.780118][ T8296] mkiss: ax0: crc mode is auto.
[  276.780371][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  276.793043][ T8296] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  277.410600][ T8320] FAULT_INJECTION: forcing a failure.
[  277.410600][ T8320] name failslab, interval 1, probability 0, space 0, times 0
[  277.444175][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.0.781 Not tainted syzkaller #0 PREEMPT(full) 
[  277.444208][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  277.444220][ T8320] Call Trace:
[  277.444228][ T8320]  <TASK>
[  277.444237][ T8320]  dump_stack_lvl+0xe8/0x150
[  277.444272][ T8320]  should_fail_ex+0x412/0x560
[  277.444299][ T8320]  should_failslab+0xa8/0x100
[  277.444323][ T8320]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  277.444354][ T8320]  kmem_cache_alloc_noprof+0x87/0x650
[  277.444374][ T8320]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  277.444403][ T8320]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  277.444429][ T8320]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  277.444469][ T8320]  mmu_topup_memory_caches+0x21/0x170
[  277.444502][ T8320]  kvm_mmu_load+0x9d/0x22d0
[  277.444522][ T8320]  ? kvm_msr_allowed+0x3f4/0x490
[  277.444544][ T8320]  ? kvm_msr_allowed+0x9a/0x490
[  277.444572][ T8320]  ? vmx_recalc_intercepts+0xed5/0x1b40
[  277.444593][ T8320]  ? kvm_apic_has_interrupt+0x73c/0x770
[  277.444628][ T8320]  vcpu_run+0x5faf/0x7b90
[  277.444652][ T8320]  ? trace_ipi_send_cpu+0x7e/0x220
[  277.444697][ T8320]  ? irqentry_exit+0x59e/0x620
[  277.444727][ T8320]  ? irqentry_exit+0x59e/0x620
[  277.444805][ T8320]  ? __pfx_vcpu_run+0x10/0x10
[  277.444827][ T8320]  ? fpu_swap_kvm_fpstate+0xc1/0x4f0
[  277.444860][ T8320]  ? rcu_is_watching+0x15/0xb0
[  277.444893][ T8320]  kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0
[  277.444930][ T8320]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  277.444954][ T8320]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  277.444977][ T8320]  ? register_lock_class+0x31/0x2e0
[  277.445007][ T8320]  ? __lock_acquire+0x6b5/0x2cf0
[  277.445039][ T8320]  ? kasan_quarantine_put+0xbb/0x1f0
[  277.445061][ T8320]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  277.445091][ T8320]  ? do_raw_write_lock+0x11d/0x260
[  277.445130][ T8320]  kvm_vcpu_ioctl+0xa62/0xfd0
[  277.445157][ T8320]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  277.445175][ T8320]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  277.445223][ T8320]  ? __fget_files+0x2a/0x420
[  277.445254][ T8320]  ? __fget_files+0x2a/0x420
[  277.445281][ T8320]  ? __fget_files+0x3a0/0x420
[  277.445308][ T8320]  ? __fget_files+0x2a/0x420
[  277.445340][ T8320]  ? bpf_lsm_file_ioctl+0x9/0x20
[  277.445364][ T8320]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  277.445384][ T8320]  __se_sys_ioctl+0xfc/0x170
[  277.445411][ T8320]  do_syscall_64+0x14d/0xf80
[  277.445436][ T8320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.445457][ T8320]  ? clear_bhb_loop+0x40/0x90
[  277.445480][ T8320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.445499][ T8320] RIP: 0033:0x7fca83f9c799
[  277.445519][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.445536][ T8320] RSP: 002b:00007fca84df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  277.445558][ T8320] RAX: ffffffffffffffda RBX: 00007fca84216090 RCX: 00007fca83f9c799
[  277.445573][ T8320] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  277.445584][ T8320] RBP: 00007fca84df6090 R08: 0000000000000000 R09: 0000000000000000
[  277.445596][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  277.445608][ T8320] R13: 00007fca84216128 R14: 00007fca84216090 R15: 00007ffcb64f64b8
[  277.445642][ T8320]  </TASK>
[  278.179323][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.202113][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.370279][ T8333] ubi0: attaching mtd0
[  278.378181][ T8333] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  278.524821][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.544030][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.605314][ T8346] netlink: 'syz.1.789': attribute type 2 has an invalid length.
[  278.636543][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'.
[  278.822922][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.837366][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.879423][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  278.895110][   T10] usb 4-1: USB disconnect, device number 66
[  279.266562][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.276006][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.502279][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.536791][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.754311][ T5915] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  279.908499][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.918901][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.926376][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  279.946552][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  279.956175][ T5915] usb 4-1: config 11 has an invalid interface number: 189 but max is 0
[  279.974794][ T5915] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  279.994539][ T5915] usb 4-1: config 11 has no interface number 0
[  280.000891][ T5915] usb 4-1: config 11 interface 189 altsetting 120 has a duplicate endpoint with address 0x4, skipping
[  280.030430][ T5915] usb 4-1: config 11 interface 189 altsetting 120 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  280.054297][ T5915] usb 4-1: config 11 interface 189 altsetting 120 endpoint 0x7 has invalid wMaxPacketSize 0
[  280.074383][ T5915] usb 4-1: config 11 interface 189 has no altsetting 0
[  280.084307][ T5915] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=33.84
[  280.104485][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.112738][ T5915] usb 4-1: Product: syz
[  280.134294][ T5915] usb 4-1: Manufacturer: syz
[  280.139408][ T5915] usb 4-1: SerialNumber: syz
[  280.628850][ T5915] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  280.666263][ T5915] usb 4-1: USB disconnect, device number 67
[  281.627457][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.658684][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.034697][   T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  282.198456][   T10] usb 4-1: Using ep0 maxpacket: 32
[  282.219948][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  282.240082][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.253948][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  282.284472][   T10] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  282.296987][   T10] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  282.325639][   T10] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  282.335402][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.343585][   T10] usb 4-1: Product: syz
[  282.348381][   T10] usb 4-1: Manufacturer: syz
[  282.353201][   T10] usb 4-1: SerialNumber: syz
[  282.557922][ T8465] syzkaller1: entered promiscuous mode
[  282.563772][ T8465] syzkaller1: entered allmulticast mode
[  282.577272][ T8465] syzkaller1: left promiscuous mode
[  282.602505][ T8465] syzkaller1: left allmulticast mode
[  282.612964][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  282.627741][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  282.759088][   T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  282.791856][   T10] usb 4-1: USB disconnect, device number 68
[  282.877546][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  283.454768][ T8506] netlink: 'syz.1.823': attribute type 11 has an invalid length.
[  283.474364][ T8508] vivid-000: =================  START STATUS  =================
[  283.501140][ T8508] vivid-000: Enable Output Cropping: true grabbed
[  283.514348][ T8508] vivid-000: Enable Output Composing: true grabbed
[  283.532245][ T8508] vivid-000: Enable Output Scaler: true grabbed
[  283.541654][ T8508] vivid-000: Tx RGB Quantization Range: Automatic grabbed
[  283.556422][ T8508] vivid-000: Transmit Mode: HDMI grabbed
[  283.562252][ T8508] vivid-000: Hotplug Present: 0x00000000
[  283.572377][ T8508] vivid-000: RxSense Present: 0x00000000
[  283.588783][ T8508] vivid-000: EDID Present: 0x00000000
[  283.605007][ T8508] vivid-000: ==================  END STATUS  ==================
[  283.614368][  T982] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  283.786580][  T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  283.798565][  T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  283.819954][  T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  283.837776][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  283.859263][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  283.886456][  T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  283.904378][  T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  283.914829][  T982] usb 4-1: Product: syz
[  283.919169][  T982] usb 4-1: Manufacturer: syz
[  283.976224][  T982] cdc_wdm 4-1:1.0: skipping garbage
[  283.981566][  T982] cdc_wdm 4-1:1.0: skipping garbage
[  284.009539][  T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  284.018991][ T8516] netlink: 100 bytes leftover after parsing attributes in process `syz.1.827'.
[  284.024477][  T982] cdc_wdm 4-1:1.0: Unknown control protocol
[  284.195016][  T982] usb 4-1: USB disconnect, device number 69
[  284.710572][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.722296][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.844389][  T982] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  284.875627][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.887226][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.997514][  T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  285.006650][  T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.017390][  T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.027319][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  285.039974][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  285.054154][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  285.065486][  T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  285.077054][  T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  285.085499][  T982] usb 4-1: Product: syz
[  285.089833][  T982] usb 4-1: Manufacturer: syz
[  285.101488][  T982] cdc_wdm 4-1:1.0: skipping garbage
[  285.112820][  T982] cdc_wdm 4-1:1.0: skipping garbage
[  285.122822][  T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  285.130011][  T982] cdc_wdm 4-1:1.0: Unknown control protocol
[  285.167269][ T8556] : renamed from veth0_to_bond (while UP)
[  285.176167][ T8556] futex_wake_op: syz.1.833 tries to shift op by 144; fix this program
[  285.286906][ T8559] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929
[  285.293546][ T8559] binder: 8558:8559 ioctl 4018620d 200000000100 returned -1
[  285.306274][    C1] cdc_wdm 4-1:1.0: Stall on int endpoint
[  285.312180][    C1] cdc_wdm 4-1:1.0: Cannot schedule work
[  285.318048][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  285.329305][    C1] cdc_wdm 4-1:1.0: Unexpected error -71
[  285.341890][   T10] usb 4-1: USB disconnect, device number 70
[  285.350815][ T8559] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929
[  285.359223][ T8559] binder: 8558:8559 ioctl 4018620d 200000004a80 returned -1
[  285.691412][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.693090][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.697514][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.697968][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.705843][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.707907][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.479241][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.489583][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.548798][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.561069][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.901878][ T8640] fuse: Bad value for 'fd'
[  287.050280][  T982] Process accounting resumed
[  287.070796][ T8645] Process accounting resumed
[  287.143675][ T8647] kernel profiling enabled (shift: 63)
[  287.151289][ T8647] profiling shift: 63 too large
[  287.258670][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.271385][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.321258][ T8660] netlink: 'syz.2.856': attribute type 16 has an invalid length.
[  287.329363][ T8660] netlink: 152 bytes leftover after parsing attributes in process `syz.2.856'.
[  287.501630][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.511494][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.914560][ T8685] netlink: 'syz.0.863': attribute type 9 has an invalid length.
[  288.161139][ T8703] netlink: 592 bytes leftover after parsing attributes in process `syz.2.867'.
[  288.838280][ T8738] netlink: 'syz.0.873': attribute type 9 has an invalid length.
[  288.944425][ T5915] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  289.115007][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  289.132695][ T5915] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  289.163116][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.191815][ T5915] usb 4-1: Product: syz
[  289.201979][ T5915] usb 4-1: Manufacturer: syz
[  289.213097][ T5915] usb 4-1: SerialNumber: syz
[  289.230545][ T5915] usb 4-1: config 0 descriptor??
[  289.256971][ T5915] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  289.367341][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.404115][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.535308][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.545482][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.666127][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035702000: rx timeout, send abort
[  289.681671][ T8731] syzkaller1: entered promiscuous mode
[  289.689037][ T8731] syzkaller1: entered allmulticast mode
[  290.104390][ T5915] gspca_sonixj: reg_r err -32
[  290.113175][ T5915] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[  290.166601][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035702400: rx timeout, send abort
[  290.175392][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035702000: abort rx timeout. Force session deactivation
[  290.187034][ T8794] netlink: 80 bytes leftover after parsing attributes in process `syz.0.884'.
[  290.206392][ T8794] overlayfs: failed to get inode (-116)
[  290.213526][ T8794] overlayfs: failed to get inode (-116)
[  290.220303][ T8794] overlayfs: failed to get inode (-116)
[  290.226557][ T8794] overlayfs: failed to get inode (-116)
[  290.299312][ T5834] Bluetooth: hci1: Malformed HCI Event: 0x22
[  290.590627][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.600228][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.675154][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035702400: abort rx timeout. Force session deactivation
[  290.718359][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880356fa400: rx timeout, send abort
[  291.159064][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'.
[  291.221970][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  291.229022][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880356fa400: abort rx timeout. Force session deactivation
[  291.244810][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.255314][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.759141][   T10] usb 4-1: USB disconnect, device number 71
[  291.855339][ T8835] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  292.095060][   T30] audit: type=1800 audit(1772282458.486:5): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.898" name="/newroot/199/pids.events" dev="tmpfs" ino=1086 res=0 errno=0
[  292.183353][ T8854] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[  292.193582][ T8854] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  292.234529][   T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  292.261007][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'.
[  292.394378][   T10] usb 4-1: Using ep0 maxpacket: 16
[  292.401618][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.413381][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.426683][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  292.437179][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.444829][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.462220][   T10] usb 4-1: config 0 descriptor??
[  292.484787][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.771621][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.782431][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.888282][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.895771][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.902976][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.911306][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.919462][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.927465][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.934985][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.942781][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.950192][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.957451][   T10] logitech 0003:046D:C50C.000C: unknown main item tag 0x0
[  292.971136][   T10] logitech 0003:046D:C50C.000C: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0
[  293.090283][   T10] usb 4-1: USB disconnect, device number 72
[  293.092040][ T8888] netlink: 160 bytes leftover after parsing attributes in process `syz.1.906'.
[  293.173669][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.907'.
[  293.378346][ T8912] netlink: 'syz.2.912': attribute type 4 has an invalid length.
[  293.387418][ T8912] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.912'.
[  293.400653][ T8912] netlink: 'syz.2.912': attribute type 13 has an invalid length.
[  293.424551][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.733162][ T8923] netlink: 'syz.3.916': attribute type 83 has an invalid length.
[  294.252522][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.918'.
[  294.303794][ T8931] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.919'.
[  294.402636][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.413820][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.724196][ T8944] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  294.839904][ T8949] sp0: Synchronizing with TNC
[  295.035086][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'.
[  295.048885][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.060370][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.072153][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.083449][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.278016][ T8948] [U] �
[  295.358051][ T8971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.372159][ T8971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.696125][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'.
[  295.706331][ T5884] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  295.799849][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.812613][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.865181][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  295.872258][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.882727][ T5884] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  295.894057][ T5884] usb 4-1: New USB device found, idVendor=3199, idProduct=b000, bcdDevice=a8.98
[  295.903803][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.912721][ T5884] usb 4-1: Product: syz
[  295.917449][ T5884] usb 4-1: Manufacturer: syz
[  295.922261][ T5884] usb 4-1: SerialNumber: syz
[  295.937035][ T5884] usb 4-1: config 0 descriptor??
[  295.989424][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.999388][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.150862][  T982] usb 4-1: USB disconnect, device number 73
[  296.812814][ T9012] netlink: 'syz.1.936': attribute type 2 has an invalid length.
[  296.889763][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.903196][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.542559][ T9044] =======================================================
[  297.542559][ T9044] WARNING: The mand mount option has been deprecated and
[  297.542559][ T9044]          and is ignored by this kernel. Remove the mand
[  297.542559][ T9044]          option from the mount to silence this warning.
[  297.542559][ T9044] =======================================================
[  297.580302][ T9044] cgroup: Unknown subsys name 'smackfstransmute'
[  297.598353][ T9045] sg_write: process 542 (syz.0.942) changed security contexts after opening file descriptor, this is not allowed.
[  297.974898][ T9069] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  297.981826][ T9069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  298.010361][ T9069] vhci_hcd vhci_hcd.0: Device attached
[  298.054328][ T9072] vhci_hcd vhci_hcd.0: port 0 already used
[  298.210211][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'.
[  298.286685][ T5884] usb 40-1: SetAddress Request (2) to port 0
[  298.300062][ T5884] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  298.324360][   T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  298.336836][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.368993][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.494306][   T10] usb 4-1: Using ep0 maxpacket: 16
[  298.509803][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  298.529944][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  298.540264][   T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  298.550093][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.572002][   T10] usb 4-1: Product: syz
[  298.577117][   T10] usb 4-1: Manufacturer: syz
[  298.581948][   T10] usb 4-1: SerialNumber: syz
[  298.607442][   T10] usb 4-1: config 0 descriptor??
[  298.664050][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.676095][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.831030][    C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  298.852414][   T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22
[  298.880487][   T10] imon:send_packet: packet tx failed (-71)
[  298.907189][   T10] imon 4-1:0.0: panel buttons/knobs setup failed
[  298.980832][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'.
[  299.014383][   T10] rc_core: IR keymap rc-imon-pad not found
[  299.020441][   T10] Registered IR keymap rc-empty
[  299.047583][   T10] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  299.067099][   T10] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  299.079268][   T10] imon:send_packet: packet tx failed (-71)
[  299.104373][   T10] imon 4-1:0.0: remote input dev register failed
[  299.110964][   T10] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  299.165345][   T10] imon 4-1:0.0: unable to initialize intf0, err 0
[  299.173365][   T10] imon:imon_probe: failed to initialize context!
[  299.180477][   T10] imon 4-1:0.0: unable to register, err -19
[  299.213738][   T10] usb 4-1: USB disconnect, device number 74
[  299.364986][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.373865][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.390475][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.415416][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.584301][   T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  299.754421][   T10] usb 4-1: Using ep0 maxpacket: 16
[  299.766741][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  299.784307][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  299.796207][   T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  299.812976][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.823278][   T10] usb 4-1: Product: syz
[  299.827658][   T10] usb 4-1: Manufacturer: syz
[  299.832353][   T10] usb 4-1: SerialNumber: syz
[  299.845440][   T10] usb 4-1: config 0 descriptor??
[  300.034850][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.050121][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.088822][   T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24
[  300.211769][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.244790][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.364556][   T10] rc_core: IR keymap rc-imon-pad not found
[  300.373944][   T10] Registered IR keymap rc-empty
[  300.379719][   T10] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  300.393855][   T10] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  300.480139][   T10] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  300.498800][   T10] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25
[  300.518126][   T10] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:75> initialized
[  300.667628][    C0] imon 4-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 0, intf0)
[  300.879777][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.906241][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.906445][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.931927][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.972385][    C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  300.973915][  T982] usb 4-1: USB disconnect, device number 75
[  300.988863][ T9070] vhci_hcd: connection reset by peer
[  301.001293][   T12] vhci_hcd vhci_hcd.3: stop threads
[  301.013805][   T12] vhci_hcd vhci_hcd.3: release socket
[  301.030184][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  301.774639][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  301.794563][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  301.795101][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  302.011732][ T9239] ubi0: attaching mtd0
[  302.011764][ T9239] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  302.049891][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.052107][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.394627][ T5915] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  302.417580][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.426677][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.554364][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  302.562142][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  302.571911][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  302.582441][ T5915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  302.594392][ T5915] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  302.605507][ T5915] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  302.620912][ T5915] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  302.630219][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.638354][ T5915] usb 4-1: Product: syz
[  302.642655][ T5915] usb 4-1: Manufacturer: syz
[  302.647527][ T5915] usb 4-1: SerialNumber: syz
[  302.778912][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  302.787430][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  302.871731][ T5915] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  302.883020][ T5915] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  302.967074][ T5915] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  302.991718][ T5915] usb 4-1: USB disconnect, device number 76
[  303.028464][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.394631][ T5884] usb 40-1: device descriptor read/8, error -110
[  303.440575][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  303.576626][ T9320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.996'.
[  303.739206][ T9328] ubi0: attaching mtd0
[  303.753614][ T9328] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  303.815562][ T5884] usb usb40-port1: attempt power cycle
[  304.041016][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.052983][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.385220][ T5884] usb usb40-port1: unable to enumerate USB device
[  304.618354][ T9355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1007'.
[  304.807395][ T9362] ubi0: attaching mtd0
[  304.811557][ T9362] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  304.835160][ T5831] Bluetooth: hci4: command 0x1003 tx timeout
[  304.841557][ T5834] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  304.985122][ T9375] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  304.995002][ T9375] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  305.004663][ T9375] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  305.277124][ T9388] syzkaller1: entered promiscuous mode
[  305.283022][ T9388] syzkaller1: entered allmulticast mode
[  305.409463][ T9399] ubi0: attaching mtd0
[  305.413738][ T9399] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  305.520786][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.536385][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.549128][ T9412] netlink: 'syz.0.1022': attribute type 10 has an invalid length.
[  305.714960][ T5939] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  305.766669][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.779008][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.866926][ T5939] usb 4-1: config 0 has an invalid interface number: 175 but max is 0
[  305.875468][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.886196][ T5939] usb 4-1: config 0 has no interface number 0
[  305.892354][ T5939] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  305.904158][ T5939] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  305.916089][ T5939] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  305.926415][ T5939] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  305.943017][ T5939] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  305.952273][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.960640][ T5939] usb 4-1: Product: syz
[  305.965065][ T5939] usb 4-1: Manufacturer: syz
[  305.969874][ T5939] usb 4-1: SerialNumber: syz
[  305.977669][ T5939] usb 4-1: config 0 descriptor??
[  305.989091][ T5939] symbolserial 4-1:0.175: symbol converter detected
[  306.004478][ T5939] usb 4-1: symbol converter now attached to ttyUSB0
[  306.191210][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.204997][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.216716][ T5939] usb 4-1: USB disconnect, device number 77
[  306.243314][ T5939] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  306.255759][ T5939] symbolserial 4-1:0.175: device disconnected
[  306.295981][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.305800][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.677844][ T9464] ubi0: attaching mtd0
[  306.682049][ T9464] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  306.736568][ T9467] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1030'.
[  306.825160][ T9470] overlay: Unknown parameter 'smackfsdef'
[  306.844843][ T9470] 9p: Bad value for 'rfdno'
[  307.094402][ T5939] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  307.197411][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.210721][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.273423][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.284096][ T5939] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  307.293454][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.320243][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.330560][ T5939] usb 4-1: config 0 descriptor??
[  307.341691][ T5939] pwc: Askey VC010 type 2 USB webcam detected.
[  307.352765][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.742814][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00
[  307.750727][ T5939] pwc: recv_control_msg error -32 req 02 val 2700
[  307.759414][ T5939] pwc: recv_control_msg error -32 req 02 val 2c00
[  307.767564][ T5939] pwc: recv_control_msg error -32 req 04 val 1000
[  307.787425][ T9473] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  307.794539][ T9473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  307.805852][ T9473] vhci_hcd vhci_hcd.0: Device attached
[  307.813475][ T9509] vhci_hcd: cannot find a urb of seqnum 33 max seqnum 0
[  307.816254][ T5939] pwc: recv_control_msg error -32 req 04 val 1300
[  307.827631][   T12] vhci_hcd vhci_hcd.3: stop threads
[  307.833180][   T12] vhci_hcd vhci_hcd.3: release socket
[  307.840524][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  307.851353][ T5939] pwc: recv_control_msg error -32 req 04 val 1400
[  307.864418][ T5939] pwc: recv_control_msg error -32 req 02 val 2000
[  307.915019][ T5939] pwc: recv_control_msg error -32 req 02 val 2100
[  307.923216][ T5939] pwc: recv_control_msg error -32 req 04 val 1500
[  307.931302][ T5939] pwc: recv_control_msg error -32 req 02 val 2500
[  307.939212][ T5939] pwc: recv_control_msg error -32 req 02 val 2400
[  308.149909][ T5939] pwc: recv_control_msg error -71 req 02 val 2900
[  308.166735][ T5939] pwc: recv_control_msg error -71 req 02 val 2800
[  308.174046][ T5939] pwc: recv_control_msg error -71 req 04 val 1100
[  308.181462][ T5939] pwc: recv_control_msg error -71 req 04 val 1200
[  308.209358][ T5939] pwc: Registered as video103.
[  308.226058][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31
[  308.266103][ T5939] usb 4-1: USB disconnect, device number 78
[  308.298255][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  308.326333][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  308.488766][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.501109][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.731943][ T9554] ubi0: attaching mtd0
[  308.736201][ T9554] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  309.079766][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.097188][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.169703][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.208625][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.563625][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.576936][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.078973][ T9634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1057'.
[  310.179260][ T9637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1058'.
[  310.213110][ T9637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1058'.
[  310.235070][ T9639] ubi0: attaching mtd0
[  310.244311][ T9639] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  310.307107][ T9642] Malformed UNC in devname
[  310.307107][ T9642] 
[  310.315149][ T9642] CIFS: VFS: Malformed UNC in devname
[  310.335915][ T9642] input: syz0 as /devices/virtual/input/input34
[  310.354933][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.372525][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.604655][ T5186] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  310.617543][ T9668] syzkaller1: entered promiscuous mode
[  310.623369][ T9668] syzkaller1: entered allmulticast mode
[  310.764982][ T5186] usb 4-1: Using ep0 maxpacket: 8
[  310.777419][ T5186] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 93, changing to 10
[  310.800725][ T5186] usb 4-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  310.834324][ T5186] usb 4-1: config 1 interface 0 has no altsetting 0
[  310.843909][ T5186] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.40
[  310.867670][ T5186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.876756][ T5186] usb 4-1: Product: 됚⦩ꈆ챼雏⠧뀂毉䈸萲멷㰴쓀픈䏹ᮡꍜ佟ꤵ㧞忱쮝訯곻苟뱎쒗뱔삇㦬竲챲㕀뫚쿛廔㶜횻蛫宜详࿠䀦甿⒩ԝ㞨莧퍐棤ဣ倰ʚᘮᔚ실ꨥ❫嶀䤖ꄑ;⅞ಓ轺ἓ飣펷ꙝਫ਼밟腵衇
[  310.914432][ T5186] usb 4-1: Manufacturer: 肋焿䦶⏯䷁‒땮跤岝祝뺗炎䐵樸ォ絬牑펯ꮌᰡ儎ﻝ⧪໶袘᱄벮脘ቅ३攀塕噰薸틋缎췊ྖ蝳ࠠ磮έủꆷⷔ洑䝚鴯癁떂욊蹻၀喪ᬅ彀鷗꼫庳ꌂ⬶玜낵ோ묽웽䛻ᄫꞆⅧ䈜⩳
[  310.969172][ T5186] usb 4-1: SerialNumber: Ⰹ
[  310.986364][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.007013][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.101906][ T9696] FAULT_INJECTION: forcing a failure.
[  311.101906][ T9696] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.115941][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.0.1070 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  311.115976][ T9696] Tainted: [L]=SOFTLOCKUP
[  311.115984][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  311.115997][ T9696] Call Trace:
[  311.116006][ T9696]  <TASK>
[  311.116014][ T9696]  dump_stack_lvl+0xe8/0x150
[  311.116048][ T9696]  should_fail_ex+0x412/0x560
[  311.116078][ T9696]  _copy_to_iter+0x589/0x17d0
[  311.116101][ T9696]  ? unwind_get_return_address+0x4d/0x90
[  311.116147][ T9696]  ? __pfx__copy_to_iter+0x10/0x10
[  311.116171][ T9696]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  311.116196][ T9696]  ? lockdep_hardirqs_on+0x7a/0x110
[  311.116222][ T9696]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  311.116246][ T9696]  ? __skb_try_recv_datagram+0x3d4/0x4d0
[  311.116282][ T9696]  __skb_datagram_iter+0xf8/0x980
[  311.116313][ T9696]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  311.116352][ T9696]  skb_copy_datagram_iter+0xb5/0x270
[  311.116387][ T9696]  netlink_recvmsg+0x2c3/0xa50
[  311.116421][ T9696]  ? __pfx_netlink_recvmsg+0x10/0x10
[  311.116448][ T9696]  ? __pfx_aa_sk_perm+0x10/0x10
[  311.116475][ T9696]  ? __pfx_netlink_recvmsg+0x10/0x10
[  311.116500][ T9696]  sock_recvmsg_nosec+0x186/0x1c0
[  311.116526][ T9696]  ____sys_recvmsg+0x245/0x510
[  311.116564][ T9696]  ? __pfx_____sys_recvmsg+0x10/0x10
[  311.116608][ T9696]  ? import_iovec+0x73/0xa0
[  311.116638][ T9696]  ___sys_recvmsg+0x215/0x590
[  311.116675][ T9696]  ? __pfx____sys_recvmsg+0x10/0x10
[  311.116736][ T9696]  ? __fget_files+0x3a0/0x420
[  311.116777][ T9696]  do_recvmmsg+0x334/0x800
[  311.116815][ T9696]  ? __pfx_do_recvmmsg+0x10/0x10
[  311.116857][ T9696]  ? _copy_from_user+0x94/0xb0
[  311.116899][ T9696]  __x64_sys_recvmmsg+0x1b7/0x250
[  311.116932][ T9696]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  311.116974][ T9696]  do_syscall_64+0x14d/0xf80
[  311.116998][ T9696]  ? trace_irq_disable+0x3b/0x150
[  311.117027][ T9696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.117046][ T9696]  ? clear_bhb_loop+0x40/0x90
[  311.117070][ T9696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.117112][ T9696] RIP: 0033:0x7fca83f9c799
[  311.117132][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.117150][ T9696] RSP: 002b:00007fca84df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  311.117172][ T9696] RAX: ffffffffffffffda RBX: 00007fca84216090 RCX: 00007fca83f9c799
[  311.117186][ T9696] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005
[  311.117199][ T9696] RBP: 00007fca84df6090 R08: 0000200000003700 R09: 0000000000000000
[  311.117214][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.117222][ T9696] R13: 00007fca84216128 R14: 00007fca84216090 R15: 00007ffcb64f64b8
[  311.117245][ T9696]  </TASK>
[  311.208732][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.416356][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.440249][ T5186] usbhid 4-1:1.0: can't add hid device: -71
[  311.453764][ T5186] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  311.472354][ T5186] usb 4-1: USB disconnect, device number 79
[  311.843237][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.853267][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.936190][ T9714] ubi0: attaching mtd0
[  311.940795][ T9714] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  312.092543][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'.
[  312.246931][ T5915] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  312.298847][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'.
[  312.377133][ T9735] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config
[  312.411845][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.434521][ T5915] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  312.443725][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.473871][ T5915] usb 4-1: config 0 descriptor??
[  312.551792][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.561142][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.591398][ T9750] fuse: Bad value for 'user_id'
[  312.596963][ T9750] fuse: Bad value for 'user_id'
[  312.807153][ T9761] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  312.971886][ T5915] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  313.002107][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input36
[  313.157573][ T5915] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  313.493737][ T9801] ������: renamed from lo (while UP)
[  313.502609][ T9801] FAULT_INJECTION: forcing a failure.
[  313.502609][ T9801] name failslab, interval 1, probability 0, space 0, times 0
[  313.515663][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.0.1086 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  313.515699][ T9801] Tainted: [L]=SOFTLOCKUP
[  313.515707][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  313.515719][ T9801] Call Trace:
[  313.515727][ T9801]  <TASK>
[  313.515735][ T9801]  dump_stack_lvl+0xe8/0x150
[  313.515771][ T9801]  should_fail_ex+0x412/0x560
[  313.515798][ T9801]  should_failslab+0xa8/0x100
[  313.515826][ T9801]  __kmalloc_noprof+0xe8/0x760
[  313.515849][ T9801]  ? kobject_get_path+0xc5/0x2f0
[  313.515877][ T9801]  ? __kasan_kmalloc+0x93/0xb0
[  313.515902][ T9801]  kobject_get_path+0xc5/0x2f0
[  313.515924][ T9801]  ? kobject_uevent_env+0x28c/0x9e0
[  313.515954][ T9801]  kobject_uevent_env+0x2a1/0x9e0
[  313.515987][ T9801]  kobject_rename+0x41a/0x520
[  313.516013][ T9801]  ? __pfx_kobject_rename+0x10/0x10
[  313.516040][ T9801]  ? sysfs_rename_link_ns+0x178/0x1b0
[  313.516068][ T9801]  device_rename+0x15d/0x210
[  313.516093][ T9801]  netif_change_name+0x28e/0x960
[  313.516114][ T9801]  ? dev_change_name+0x125/0x260
[  313.516135][ T9801]  ? kasan_quarantine_put+0xbb/0x1f0
[  313.516151][ T9801]  ? dev_ioctl+0x5dc/0x1150
[  313.516171][ T9801]  ? __pfx_netif_change_name+0x10/0x10
[  313.516188][ T9801]  ? full_name_hash+0x92/0xe0
[  313.516214][ T9801]  ? __dev_get_by_name+0xe5/0x140
[  313.516245][ T9801]  dev_change_name+0x125/0x260
[  313.516269][ T9801]  dev_ioctl+0x5ec/0x1150
[  313.516292][ T9801]  sock_do_ioctl+0x23e/0x320
[  313.516310][ T9801]  ? __pfx_sock_do_ioctl+0x10/0x10
[  313.516324][ T9801]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  313.516360][ T9801]  sock_ioctl+0x5c6/0x7f0
[  313.516387][ T9801]  ? __pfx_sock_ioctl+0x10/0x10
[  313.516415][ T9801]  ? __fget_files+0x2a/0x420
[  313.516439][ T9801]  ? __fget_files+0x3a0/0x420
[  313.516462][ T9801]  ? __fget_files+0x2a/0x420
[  313.516489][ T9801]  ? bpf_lsm_file_ioctl+0x9/0x20
[  313.516510][ T9801]  ? __pfx_sock_ioctl+0x10/0x10
[  313.516535][ T9801]  __se_sys_ioctl+0xfc/0x170
[  313.516557][ T9801]  do_syscall_64+0x14d/0xf80
[  313.516578][ T9801]  ? trace_irq_disable+0x3b/0x150
[  313.516603][ T9801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.516619][ T9801]  ? clear_bhb_loop+0x40/0x90
[  313.516640][ T9801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.516664][ T9801] RIP: 0033:0x7fca83f9c799
[  313.516681][ T9801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.516695][ T9801] RSP: 002b:00007fca84e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  313.516713][ T9801] RAX: ffffffffffffffda RBX: 00007fca84215fa0 RCX: 00007fca83f9c799
[  313.516726][ T9801] RDX: 0000200000000480 RSI: 0000000000008923 RDI: 0000000000000004
[  313.516737][ T9801] RBP: 00007fca84e17090 R08: 0000000000000000 R09: 0000000000000000
[  313.516747][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  313.516757][ T9801] R13: 00007fca84216038 R14: 00007fca84215fa0 R15: 00007ffcb64f64b8
[  313.516782][ T9801]  </TASK>
[  313.896390][ T5186] usb 4-1: USB disconnect, device number 80
[  314.047967][ T9829] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1089'.
[  314.059758][ T9827] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1089'.
[  314.071603][ T9828] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  314.221167][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.234946][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.261733][ T9837] FAULT_INJECTION: forcing a failure.
[  314.261733][ T9837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.275489][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.0.1091 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.275522][ T9837] Tainted: [L]=SOFTLOCKUP
[  314.275529][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  314.275541][ T9837] Call Trace:
[  314.275549][ T9837]  <TASK>
[  314.275558][ T9837]  dump_stack_lvl+0xe8/0x150
[  314.275601][ T9837]  should_fail_ex+0x412/0x560
[  314.275631][ T9837]  _copy_from_iter+0x1d3/0x1670
[  314.275668][ T9837]  ? __pfx__copy_from_iter+0x10/0x10
[  314.275690][ T9837]  ? sock_alloc_send_pskb+0x896/0x990
[  314.275727][ T9837]  ? __pfx__copy_from_iter+0x10/0x10
[  314.275752][ T9837]  ? page_copy_sane+0x16a/0x270
[  314.275777][ T9837]  copy_page_from_iter+0xdd/0x170
[  314.275806][ T9837]  skb_copy_datagram_from_iter+0x306/0x710
[  314.275848][ T9837]  tun_get_user+0xc38/0x3dd0
[  314.275892][ T9837]  ? __pfx_tun_get_user+0x10/0x10
[  314.275917][ T9837]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  314.275941][ T9837]  ? lockdep_hardirqs_on+0x7a/0x110
[  314.275966][ T9837]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  314.275988][ T9837]  ? save_netdev_trace_buffer+0x4e2/0x610
[  314.276019][ T9837]  ? ref_tracker_alloc+0x35c/0x4c0
[  314.276043][ T9837]  ? tun_chr_write_iter+0x60/0x210
[  314.276064][ T9837]  ? vfs_write+0x61d/0xb90
[  314.276083][ T9837]  ? ksys_write+0x150/0x270
[  314.276103][ T9837]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  314.276133][ T9837]  ? tun_get+0x1c/0x2f0
[  314.276162][ T9837]  ? tun_get+0x1c/0x2f0
[  314.276185][ T9837]  ? tun_get+0x1c/0x2f0
[  314.276213][ T9837]  tun_chr_write_iter+0x113/0x210
[  314.276240][ T9837]  vfs_write+0x61d/0xb90
[  314.276270][ T9837]  ? __pfx_vfs_write+0x10/0x10
[  314.276301][ T9837]  ? __fget_files+0x2a/0x420
[  314.276340][ T9837]  ksys_write+0x150/0x270
[  314.276365][ T9837]  ? __pfx_ksys_write+0x10/0x10
[  314.276398][ T9837]  do_syscall_64+0x14d/0xf80
[  314.276424][ T9837]  ? trace_irq_disable+0x3b/0x150
[  314.276453][ T9837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.276475][ T9837]  ? clear_bhb_loop+0x40/0x90
[  314.276500][ T9837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.276521][ T9837] RIP: 0033:0x7fca83f9c799
[  314.276540][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.276558][ T9837] RSP: 002b:00007fca84e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  314.276580][ T9837] RAX: ffffffffffffffda RBX: 00007fca84215fa0 RCX: 00007fca83f9c799
[  314.276603][ T9837] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000007
[  314.276616][ T9837] RBP: 00007fca84e17090 R08: 0000000000000000 R09: 0000000000000000
[  314.276628][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.276640][ T9837] R13: 00007fca84216038 R14: 00007fca84215fa0 R15: 00007ffcb64f64b8
[  314.276672][ T9837]  </TASK>
[  314.770246][ T5915] libceph: connect (1)[c::]:6789 error -101
[  314.778302][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  314.789648][ T5915] libceph: connect (1)[c::]:6789 error -101
[  314.798361][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  315.067007][ T5915] libceph: connect (1)[c::]:6789 error -101
[  315.073357][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  315.252363][ T9861] netlink: 'syz.0.1095': attribute type 10 has an invalid length.
[  315.264563][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.273033][ T9861] bridge_slave_1: left allmulticast mode
[  315.280151][ T9861] bridge_slave_1: left promiscuous mode
[  315.289063][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.308846][ T9861] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  315.550274][ T9873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.562785][ T9873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.579094][ T9852] ceph: No mds server is up or the cluster is laggy
[  315.585647][ T5915] libceph: connect (1)[c::]:6789 error -101
[  315.592218][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  315.779143][ T9885] binder: 9883:9885 ioctl c01064c7 0 returned -22
[  315.809535][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'.
[  315.977625][   T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  316.025595][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.039617][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.410511][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.417494][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.804334][ T5884] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  317.964295][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  317.971748][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.982765][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  317.996049][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  318.007753][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.017697][ T5884] usb 4-1: Product: syz
[  318.022054][ T5884] usb 4-1: Manufacturer: syz
[  318.028188][ T5884] usb 4-1: SerialNumber: syz
[  318.034825][ T5834] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  318.559374][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.571195][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.685478][ T9997] ubi0: attaching mtd0
[  318.691682][ T9997] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  319.215976][T10023] syzkaller1: entered promiscuous mode
[  319.221759][T10023] syzkaller1: entered allmulticast mode
[  319.244900][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.255484][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.266044][T10023] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  319.417671][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.427163][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.014382][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.023816][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.052916][T10044] input: syz0 as /devices/virtual/input/input39
[  320.103462][T10051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.113498][T10051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.141602][T10048] syz.0.1137 (10048): drop_caches: 2
[  320.190920][T10048] syz.0.1137 (10048): drop_caches: 2
[  320.474512][ T5884] usb 4-1: 0:2 : does not exist
[  320.495455][ T5884] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  320.605648][ T5884] usb 4-1: USB disconnect, device number 81
[  320.660316][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.679815][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.695693][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.723106][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.735557][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.876246][T10098] syzkaller1: entered promiscuous mode
[  320.881825][T10098] syzkaller1: entered allmulticast mode
[  320.921157][T10088] ieee802154 phy0 wpan0: encryption failed: -22
[  320.956798][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.965419][ T5884] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  320.975352][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.985395][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.995996][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.126173][ T5884] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  321.137307][ T5884] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  321.148477][ T5884] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  321.161811][ T5884] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  321.171001][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.187348][ T5884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  321.196201][ T5884] usb 4-1: invalid MIDI out EP 0
[  321.280480][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.301283][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.339989][ T5884] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  321.390395][ T5884] usb 4-1: USB disconnect, device number 82
[  321.639990][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  321.860943][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.870294][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.329190][T10164] ubi0: attaching mtd0
[  322.333436][T10164] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  322.539219][T10179] picdev_read: 77 callbacks suppressed
[  322.539236][T10179] kvm: pic: non byte read
[  322.550200][T10179] kvm: pic: non byte read
[  322.555068][T10179] kvm: pic: non byte read
[  322.559605][T10179] kvm: pic: non byte read
[  322.564072][T10179] kvm: pic: non byte read
[  322.570058][T10179] kvm: pic: non byte read
[  322.575612][T10179] kvm: pic: non byte read
[  322.580113][T10179] kvm: pic: non byte read
[  322.594553][T10179] kvm: pic: non byte read
[  322.599331][T10179] kvm: pic: non byte read
[  322.606694][T10171] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  322.629855][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'.
[  322.927646][ T5186] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  322.963490][T10203] ubi0: attaching mtd0
[  322.967925][T10203] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  323.015934][T10206] netlink: 'syz.0.1161': attribute type 21 has an invalid length.
[  323.024247][T10206] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1161'.
[  323.025667][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.048317][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.103526][ T5186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.119130][ T5186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.135558][ T5186] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  323.145031][ T5186] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  323.159582][ T5186] usb 4-1: Manufacturer: syz
[  323.169161][ T5186] usb 4-1: config 0 descriptor??
[  323.251608][T10220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'.
[  323.285131][T10220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'.
[  323.687336][T10241] ubi0: attaching mtd0
[  323.691481][T10241] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  324.167923][T10263] netlink: 'syz.2.1175': attribute type 10 has an invalid length.
[  324.189894][T10263] team0: Device vxcan1 is of different type
[  324.221225][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.238082][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.255812][T10261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.285835][T10261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.325874][ T5186] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71
[  324.345009][ T5186] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71
[  324.364457][ T5186] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71
[  324.372648][ T5186] uclogic 0003:256C:006D.000E: failed probing parameters: -71
[  324.382121][ T5186] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71
[  324.412689][ T5186] usb 4-1: USB disconnect, device number 83
[  324.795013][T10288] netlink: 'syz.2.1177': attribute type 27 has an invalid length.
[  324.878103][T10288] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.026918][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.038284][T10304] ubi0: attaching mtd0
[  325.042481][T10304] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  325.060580][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.139595][T10288] macvtap0: left allmulticast mode
[  325.249861][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.280124][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.312803][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.343537][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.503722][T10315] netlink: 'syz.3.1180': attribute type 11 has an invalid length.
[  325.564875][T10322] netlink: 'syz.0.1182': attribute type 27 has an invalid length.
[  325.615404][T10322] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.697177][T10322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.713424][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.722684][T10322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.738720][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.818197][   T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.831334][   T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.841073][   T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.850440][   T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.921260][T10331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1184'.
[  326.121062][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.131284][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.143365][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.155107][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.344356][T10295] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  326.411937][T10351] ubi0: attaching mtd0
[  326.417823][T10351] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[  326.496050][T10295] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  326.514483][T10295] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  326.526969][T10295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  326.538059][T10295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  326.547938][T10295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  326.561368][T10295] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  326.575993][T10295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.589995][T10295] usb 4-1: config 0 descriptor??
[  327.033962][T10371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1194'.
[  327.100003][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.110817][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.123712][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.135119][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.214185][T10339] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  327.232610][T10295] usbhid 4-1:0.0: can't add hid device: -71
[  327.239626][T10295] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  327.254030][T10295] usb 4-1: USB disconnect, device number 84
[  327.637607][   T31] INFO: task kworker/0:5:5923 blocked for more than 143 seconds.
[  327.645832][   T31]       Tainted: G             L      syzkaller #0
[  327.652854][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.662110][   T31] task:kworker/0:5     state:D stack:21792 pid:5923  tgid:5923  ppid:2      task_flags:0x4208060 flags:0x00080000
[  327.674713][   T31] Workqueue: usb_hub_wq hub_event
[  327.679826][   T31] Call Trace:
[  327.683153][   T31]  <TASK>
[  327.686731][   T31]  __schedule+0x15dd/0x52d0
[  327.691589][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  327.697139][   T31]  ? device_add+0x7b6/0xb70
[  327.701864][   T31]  ? usb_generic_driver_probe+0x8d/0x150
[  327.708128][   T31]  ? usb_probe_device+0x1c4/0x3b0
[  327.713317][   T31]  ? really_probe+0x267/0xaf0
[  327.718766][   T31]  ? __device_attach_driver+0x2d4/0x4c0
[  327.725867][   T31]  ? device_initial_probe+0xa1/0xd0
[  327.731248][   T31]  ? worker_thread+0xb46/0x1140
[  327.736651][   T31]  ? kthread+0x388/0x470
[  327.741184][   T31]  ? ret_from_fork+0x51e/0xb90
[  327.746177][   T31]  ? ret_from_fork_asm+0x1a/0x30
[  327.751547][   T31]  ? __pfx___schedule+0x10/0x10
[  327.758434][   T31]  ? schedule+0x90/0x360
[  327.762765][   T31]  schedule+0x164/0x360
[  327.767077][   T31]  schedule_timeout+0xc3/0x2c0
[  327.771969][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  327.777240][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  327.782702][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  327.788169][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  327.793528][   T31]  ? wait_for_completion+0x274/0x5e0
[  327.799167][   T31]  wait_for_completion+0x2cc/0x5e0
[  327.804415][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  327.810195][   T31]  i2c_del_adapter+0x5c0/0x790
[  327.815364][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  327.820715][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  327.826137][   T31]  ? dvb_usbv2_exit+0x935/0xb60
[  327.831209][   T31]  dvb_usbv2_probe+0x4c3/0x3d40
[  327.836428][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  327.841942][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  327.847852][   T31]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  327.853697][   T31]  usb_probe_interface+0x668/0xc90
[  327.859590][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  327.874348][   T31]  really_probe+0x267/0xaf0
[  327.879163][   T31]  __driver_probe_device+0x18c/0x320
[  327.887734][   T31]  driver_probe_device+0x4f/0x240
[  327.892855][   T31]  __device_attach_driver+0x2d4/0x4c0
[  327.898585][   T31]  bus_for_each_drv+0x258/0x2f0
[  327.903563][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  327.909591][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  327.915241][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  327.920497][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  327.926722][   T31]  __device_attach+0x2c5/0x450
[  327.931557][   T31]  ? __pfx___device_attach+0x10/0x10
[  327.937393][   T31]  ? _raw_spin_unlock+0x28/0x50
[  327.942310][   T31]  device_initial_probe+0xa1/0xd0
[  327.954435][   T31]  bus_probe_device+0x12a/0x220
[  327.964051][   T31]  ? device_add+0x726/0xb70
[  327.968831][   T31]  device_add+0x7b6/0xb70
[  327.973319][   T31]  usb_set_configuration+0x1a87/0x2110
[  327.984274][   T31]  usb_generic_driver_probe+0x8d/0x150
[  327.989841][   T31]  usb_probe_device+0x1c4/0x3b0
[  327.995005][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  328.000429][   T31]  really_probe+0x267/0xaf0
[  328.005247][   T31]  __driver_probe_device+0x18c/0x320
[  328.010577][   T31]  driver_probe_device+0x4f/0x240
[  328.015762][   T31]  __device_attach_driver+0x2d4/0x4c0
[  328.021204][   T31]  bus_for_each_drv+0x258/0x2f0
[  328.026202][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  328.032155][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  328.037886][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  328.043138][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  328.049100][   T31]  __device_attach+0x2c5/0x450
[  328.054103][   T31]  ? __pfx___device_attach+0x10/0x10
[  328.059722][   T31]  ? _raw_spin_unlock+0x28/0x50
[  328.064983][   T31]  device_initial_probe+0xa1/0xd0
[  328.070129][   T31]  bus_probe_device+0x12a/0x220
[  328.075285][   T31]  ? device_add+0x726/0xb70
[  328.079853][   T31]  device_add+0x7b6/0xb70
[  328.084495][   T31]  usb_new_device+0xa08/0x16f0
[  328.089346][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  328.094830][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.100091][   T31]  hub_event+0x2a1c/0x4f30
[  328.104873][   T31]  ? __pfx_hub_event+0x10/0x10
[  328.109720][   T31]  ? process_one_work+0x87c/0x1650
[  328.115298][   T31]  process_one_work+0x949/0x1650
[  328.120310][   T31]  ? irqentry_exit+0x59e/0x620
[  328.125209][   T31]  ? __pfx_process_one_work+0x10/0x10
[  328.130725][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  328.136152][   T31]  worker_thread+0xb46/0x1140
[  328.140893][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  328.146887][   T31]  kthread+0x388/0x470
[  328.151009][   T31]  ? __pfx_worker_thread+0x10/0x10
[  328.156327][   T31]  ? __pfx_kthread+0x10/0x10
[  328.160965][   T31]  ret_from_fork+0x51e/0xb90
[  328.165937][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  328.171144][   T31]  ? __switch_to+0xc7d/0x1450
[  328.175961][   T31]  ? __pfx_kthread+0x10/0x10
[  328.180597][   T31]  ret_from_fork_asm+0x1a/0x30
[  328.185482][   T31]  </TASK>
[  328.188602][   T31] 
[  328.188602][   T31] Showing all locks held in the system:
[  328.196797][   T31] 1 lock held by khungtaskd/31:
[  328.201874][   T31]  #0: ffffffff8e960620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  328.211881][   T31] 2 locks held by getty/5580:
[  328.216673][   T31]  #0: ffff8880377fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  328.226724][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  328.237574][   T31] 4 locks held by udevd/5833:
[  328.242293][   T31]  #0: ffff888032ce19e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  328.251515][   T31]  #1: ffff8880347e7888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  328.261787][   T31]  #2: ffff88805c551f08 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  328.272300][   T31]  #3: ffff88807972e198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  328.282271][   T31] 5 locks held by kworker/0:5/5923:
[  328.287621][   T31]  #0: ffff888022ac7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[  328.298440][   T31]  #1: ffffc90004837c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[  328.310055][   T31]  #2: ffff88802adc6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  328.319146][   T31]  #3: ffff88807972e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  328.328509][   T31]  #4: ffff88802037b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  328.338009][   T31] 
[  328.340371][   T31] =============================================
[  328.340371][   T31] 
[  328.353757][   T31] NMI backtrace for cpu 1
[  328.353776][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.353796][   T31] Tainted: [L]=SOFTLOCKUP
[  328.353801][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  328.353810][   T31] Call Trace:
[  328.353816][   T31]  <TASK>
[  328.353822][   T31]  dump_stack_lvl+0xe8/0x150
[  328.353849][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  328.353874][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  328.353895][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  328.353921][   T31]  sys_info+0x135/0x170
[  328.353941][   T31]  watchdog+0xfd9/0x1030
[  328.353967][   T31]  ? watchdog+0x21a/0x1030
[  328.353994][   T31]  kthread+0x388/0x470
[  328.354027][   T31]  ? __pfx_watchdog+0x10/0x10
[  328.354057][   T31]  ? __pfx_kthread+0x10/0x10
[  328.354078][   T31]  ret_from_fork+0x51e/0xb90
[  328.354111][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  328.354129][   T31]  ? __switch_to+0xc7d/0x1450
[  328.354149][   T31]  ? __pfx_kthread+0x10/0x10
[  328.354163][   T31]  ret_from_fork_asm+0x1a/0x30
[  328.354225][   T31]  </TASK>
[  328.466852][   T31] Sending NMI from CPU 1 to CPUs 0:
[  328.472436][    C0] NMI backtrace for cpu 0
[  328.472456][    C0] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.472488][    C0] Tainted: [L]=SOFTLOCKUP
[  328.472495][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  328.472506][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  328.472531][    C0] RIP: 0010:unwind_next_frame+0x210/0x23c0
[  328.472561][    C0] Code: 29 c7 49 c1 ef 08 8b 15 6e 81 b6 0c 8d 42 ff 44 39 f8 0f 86 78 04 00 00 44 89 f8 4c 8d 2c 85 cc af 76 91 4c 89 e8 48 c1 e8 03 <0f> b6 04 28 84 c0 48 89 eb 0f 85 25 1c 00 00 45 8b 6d 00 44 89 f8
[  328.472576][    C0] RSP: 0018:ffffc900015f7478 EFLAGS: 00000a02
[  328.472590][    C0] RAX: 1ffffffff22f1173 RBX: 0000000000000001 RCX: 0000000080000000
[  328.472603][    C0] RDX: 00000000000abdbb RSI: ffffffff8c29f940 RDI: ffffffff8c29f900
[  328.472615][    C0] RBP: dffffc0000000000 R08: ffffffff8176ca45 R09: ffffffff8e960620
[  328.472628][    C0] R10: ffffc900015f75a8 R11: fffff520002beec1 R12: ffffffff8176f336
[  328.472641][    C0] R13: ffffffff91788b98 R14: ffffc900015f75a8 R15: 00000000000076f3
[  328.472653][    C0] FS:  0000000000000000(0000) GS:ffff888125002000(0000) knlGS:0000000000000000
[  328.472668][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  328.472679][    C0] CR2: 000055557206ea28 CR3: 0000000078fb0000 CR4: 00000000003526f0
[  328.472695][    C0] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000
[  328.472705][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  328.472715][    C0] Call Trace:
[  328.472721][    C0]  <TASK>
[  328.472733][    C0]  ? ieee80211_iface_work+0x84e/0x1340
[  328.472751][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  328.472775][    C0]  ? kthread+0x388/0x470
[  328.472790][    C0]  ? get_stack_info_noinstr+0x1b/0x130
[  328.472807][    C0]  ? __unwind_start+0xf7/0x760
[  328.472834][    C0]  __unwind_start+0x5b8/0x760
[  328.472861][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  328.472880][    C0]  arch_stack_walk+0xe3/0x150
[  328.472908][    C0]  ? __unwind_start+0xf7/0x760
[  328.472934][    C0]  stack_trace_save+0xa9/0x100
[  328.472950][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  328.472970][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[  328.472987][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  328.473009][    C0]  kasan_save_track+0x3e/0x80
[  328.473051][    C0]  kasan_save_free_info+0x46/0x50
[  328.473075][    C0]  __kasan_slab_free+0x5c/0x80
[  328.473093][    C0]  kmem_cache_free+0x187/0x630
[  328.473110][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  328.473127][    C0]  ? skb_release_data+0x6c3/0x940
[  328.473152][    C0]  skb_release_data+0x6c3/0x940
[  328.473180][    C0]  __kfree_skb+0x5d/0x210
[  328.473201][    C0]  ieee80211_iface_work+0xb8e/0x1340
[  328.473223][    C0]  cfg80211_wiphy_work+0x2ab/0x4a0
[  328.473242][    C0]  ? process_one_work+0x87c/0x1650
[  328.473263][    C0]  process_one_work+0x949/0x1650
[  328.473290][    C0]  ? irqentry_exit+0x570/0x620
[  328.473315][    C0]  ? __pfx_process_one_work+0x10/0x10
[  328.473334][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  328.473359][    C0]  worker_thread+0xb46/0x1140
[  328.473386][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  328.473429][    C0]  kthread+0x388/0x470
[  328.473446][    C0]  ? __pfx_worker_thread+0x10/0x10
[  328.473467][    C0]  ? __pfx_kthread+0x10/0x10
[  328.473490][    C0]  ret_from_fork+0x51e/0xb90
[  328.473513][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  328.473534][    C0]  ? __switch_to+0xc7d/0x1450
[  328.473555][    C0]  ? __pfx_kthread+0x10/0x10
[  328.473571][    C0]  ret_from_fork_asm+0x1a/0x30
[  328.473605][    C0]  </TASK>
[  328.496377][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  328.496443][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.496533][   T31] Tainted: [L]=SOFTLOCKUP
[  328.496555][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  328.496587][   T31] Call Trace:
[  328.496611][   T31]  <TASK>
[  328.496650][   T31]  vpanic+0x56c/0xa60
[  328.496780][   T31]  ? __pfx___schedule+0x10/0x10
[  328.496863][   T31]  ? __pfx_vpanic+0x10/0x10
[  328.496972][   T31]  panic+0xc5/0xd0
[  328.497040][   T31]  ? __pfx_panic+0x10/0x10
[  328.497132][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  328.497208][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  328.497306][   T31]  watchdog+0x1023/0x1030
[  328.497405][   T31]  ? watchdog+0x21a/0x1030
[  328.497516][   T31]  kthread+0x388/0x470
[  328.497571][   T31]  ? __pfx_watchdog+0x10/0x10
[  328.497647][   T31]  ? __pfx_kthread+0x10/0x10
[  328.497706][   T31]  ret_from_fork+0x51e/0xb90
[  328.497801][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  328.497866][   T31]  ? __switch_to+0xc7d/0x1450
[  328.497941][   T31]  ? __pfx_kthread+0x10/0x10
[  328.498003][   T31]  ret_from_fork_asm+0x1a/0x30
[  328.498141][   T31]  </TASK>
[  328.944468][   T31] Kernel Offset: disabled
[  328.948807][   T31] Rebooting in 86400 seconds..