last executing test programs:

2m52.728065238s ago: executing program 3 (id=1025):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x4000034, 0x3, 0x800000})

2m52.695644101s ago: executing program 3 (id=1026):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xd6, 0xc, 0x4, 0x0, 0xc45, 0xd, 0xd3, 0xb, 0xc0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x6, 0x0, 0xc0, 0x9, 0xe, '\x00', 0xff, 0xb01f})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, {[0x7, 0xa151, 0x7, 0x21, 0x6, 0x2, 0x9, 0x5]}})
r3 = socket(0x10, 0x3, 0x0)
connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x4, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r3) (async, rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) (async)
socket(0x2, 0x80805, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={<r8=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x5, 0x7bd, 0x7fffffff, 0x38, 0x0, 0x8}, &(0x7f0000000180)=0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={<r9=>r8, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffe, @mcast2, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r9, 0xffff}, 0x8)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000000300)="48dfb597439027a100a94131cb6c6c3e51bcaf4c4f1ca10d7948fbe99767749379b5116cec9ed8b0243ec54c4d3cba967da56cb3ba8ff81c0995c5b542ebe07d7d7f275e86abdae93bcd951bae84d6a045af900bffa56e7e0081e9f8bfe9d04421de687a48de1d24cf92ea14f9ae55b433ab8b44d782b4f862e113081106864e9bcb199f46cdfb0221d90dbb", 0x8c}, {&(0x7f0000000400)="bb4adf55322c3bb61f5c8ddc2909600bee6153dd1ae04e5f56c70ef5fd4bf5c3a55303e6c70a6db97e8e5f5768b86bdf4a50c82d639b", 0x36}, {&(0x7f0000000440)="18669ac266e6296f522abd14416dc0f9910d696e4647da6d8dae87bac01babf6e5ec77f41946f507c7c26d4862569c775e78a1ecadbc878d15f738bd2bcf8c115f5adc97f834d04e02b62a0fcad960b1cddb6267b6766ac31eeadcefb5ce82e32a6752a1e9c7d38347362564f69f950551d73b4b1607d75fa11a4ff166b09767772c3662afa4b6e0fb1746a494a39b4816362ee2238f3050dd8a23ba79f47f60376f14002ae64bf2dfb83eeec0730bbcd6ad1d51f49e935aa346859d3ab12e9c762d6044b22c003b81b458350fd7e842abd40fe4ea3bcbe29ab7e0ec1da47274cae8d947f77a6a25caf6aee29456134f07802a", 0xf3}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f0000000640)="9931c8bf8b043371f7c0b27be3e1f19524eb5dae79922aa76b9c22e1d5d8e22dcd7f5985e66167047a764a31406d3e9627967ec225ac4a5c728d36ed35414e17842271930250b7ccbbd820f68d14f7019cee2ace464a37c927e2bbb8a58f6e1e3f33e5b8153e957ccf2299cd79509eae57c2fa6c01da541685dc1843608cba54de079f91a204057e918724aae5c9844c3847e7568089a1776678d5d309542a7fc85eef32a3918db97d5c40110648f6142ad192ae33b6eac07963956d127855bf1e70b953ec6ce97c8b4158fe2b60fbd342733a22c1fbcc551aca219d740736e710", 0xe1}, {&(0x7f0000000740)="d62b4f015fefc49a4564689e9146", 0xe}, {&(0x7f0000000780)="95014da7837c32d85a3e24134d9a11b99bb5e63cd411ec5ae209b30c807cba9e444321326acb6f5290ff4389c27eb752bf17c7e11dcabf57023826dffa8094069bba9d13525e8cdc157d23816262615ddd8d377916ffaab71e1b950eff8c965df9fe996112ec6ffd0e3e34089733116da9de50371055b386ca4ae7f1767f7b0679723ecbfe412dfe544704f75e9cc8602b20a69753b5cdb44e087cbb83a89c6b55df8f3f314d", 0xa6}], 0x7) (async)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x47f, 0x0, 0x5}]}) (async, rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000200)={0x4000, 0x2}, 0x10) (async, rerun: 32)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)

2m52.531851873s ago: executing program 3 (id=1028):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x3c, r2, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4b2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e20, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000380))
r4 = syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a240129000302010209050101000203ff0609050a030800030101072501040809"], 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x17, r7}, 0x14)
syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m51.99115212s ago: executing program 3 (id=1033):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m51.383976699s ago: executing program 3 (id=1035):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYBLOB="3fe1a59eb1b12dd0"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x222000, 0x20)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583"], 0x0)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, &(0x7f0000000080)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="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"]) (async, rerun: 32)
r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x21, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000)
syz_open_dev$mouse(&(0x7f0000000280), 0x1, 0x0)
syz_usb_ep_write(r3, 0x7, 0x61, &(0x7f0000000300)="3f884868ce268475301c134e6081815857d123ddc5b8ae704e9f3af37e97a9b3248d788b04609e52b8ee5010e82bc387fb783364e3c7bebf0205de49fd8cfcfceb31e107de6a29c78b9e6cbe8200bd12d5b44ccc49918c707c3da1374cae175975")
fcntl$setlease(r2, 0x400, 0x1)
openat$audio(0xffffff9c, &(0x7f00000000c0), 0x4003, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffff}, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async, rerun: 32)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000) (rerun: 32)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000007c0)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) (async)
write(r7, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) (async)
ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000640)) (async)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000003006903000000d8eb101d20f9702423", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4005)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

2m51.341220183s ago: executing program 3 (id=1037):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async)
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])

2m35.424711351s ago: executing program 32 (id=1037):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async)
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])

6.591953977s ago: executing program 0 (id=1809):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
dup(0xffffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7)

6.306128977s ago: executing program 2 (id=1810):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x89dc, 0x70}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1fafec7c8534fa16}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
io_pgetevents(0x0, 0xe8bc, 0x0, 0x0, &(0x7f00000006c0), 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r5], 0x9)
read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000e02000000042b"], 0x0, 0x0})
syz_usb_control_io$hid(r6, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = dup(r7)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff0000000000009000200"], 0x58}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r8)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)

5.992660233s ago: executing program 0 (id=1811):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x4004510f, 0x0)
fanotify_init(0x18, 0x1000)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000580)='3', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x8000}, 0x20000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000002010500000000000000000002000008080015400000000206001240000100003ed9f195da287ca785ecde42380ddef2581e6ecf718b5babe62385ce662e5b46a807527c84df561719cee705a70bb8d7532fb24c01501974425a21dd96ae673af5bab195722ec664d6299e31645414730e8f214b2cd27e22b31e6689c8"], 0x24}, 0x1, 0x0, 0x0, 0x80440d5}, 0x40440d0)
r4 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
dup(r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @private2, 0x85}, 0x1c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)="f7b80fa1")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000165000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, &(0x7f0000000140)="660f7dc6baf80c66b8a5a5288166efbafc0cecbaf80c66b88e40098c66efbafc0ced0f01de66b9800000c00f326635000400000f30260f07660fd833660f0782870c00490f381d7d6b", 0x49}], 0x1, 0x1e, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

5.684052166s ago: executing program 2 (id=1812):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000080)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x88, 0x0, 0x3ff, 0x1e0f, 0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0xd, 0xc, "11b14ebd", "c293fbd4"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x18, 0x81, 0x7, 0x40, 0x4a, 0x8001}}}, 0x0) (async)
r3 = dup(r1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2e, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.9640421s ago: executing program 0 (id=1813):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.892989615s ago: executing program 2 (id=1814):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020d80402c000000000000109022400010000000c090400000103000300092100000000000000090581030000030f00"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc2482, 0x0)
ioctl$SNDCTL_MIDI_INFO(r1, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9", 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]})
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000978000000780c53ad60947d6f4e0627ce8208f7"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x18100, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000640)={0x48, 0x5, r4})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r4, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5})

4.776191851s ago: executing program 1 (id=1815):
creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r0 = fanotify_init(0x0, 0x0)
fanotify_mark(r0, 0x21, 0x40001020, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00')

4.708231742s ago: executing program 1 (id=1816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x80080, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300"/28], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x494a05, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000001140)=0x10000000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="00082abd7000fedbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b0000080000080001007063690011000200303030303a30303a31302e300000000008000b00010001000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff0f00006d696e"], 0x84}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000)
r5 = socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES16=r2, @ANYRES8=r2], 0x0)
bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000002c0)="7bd61c645bcebbadc3fc7b34172c2de1ec91ce561b7182bf9c785c7cfafec95183fe899ec31048e76429ea6cf4a35d18bc300fbc74aab2ed0e9b2269d2473372c2dad54adfc0dab2a990a019fb9d0e9c707d2f218b0c72b93f2ce76c361a8ba42f923601006457bc065d1e853b0f50f1cb66d877a7560fab37bab2adc8931e66cd2a7863f4cdbe2f01be1cf676d1f817d21eca1eede7e0da14818dd373bb08ad4546b2d6417d67dc406b5195c77d3e281f880c29401c517a6a155b22a9d8b97c1c21d6bdf2a2de57c281f36ffdab6572589c733b9524b923d4d363fcfceaf6531410cf5b8810fe6cc4286c96dd3bf392febf136b98ea0fa3465026a24600", 0xfe)
r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x1012, 0x0, 0x0, 0x3}})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, 0x0, &(0x7f0000000380))
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x8c0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x585442, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r10 = dup(r9)
write$UHID_INPUT(r10, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000045c0)=0x40)
openat$cgroup_ro(r10, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)

4.137357721s ago: executing program 0 (id=1817):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))
accept$alg(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402de010205050724"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef)
write$binfmt_script(r2, 0x0, 0x0)

3.7320372s ago: executing program 4 (id=1818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async, rerun: 32)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44000, 0x20) (async)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x5af, 0x81, 0x8, 0x74}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0x7, 0x6, 0x40, 0x12}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41f}}]}) (async, rerun: 64)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x0, 0x4}) (async, rerun: 64)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

3.668119121s ago: executing program 4 (id=1819):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
dup(0xffffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7)

3.022886986s ago: executing program 4 (id=1820):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x10000, 0x48, 0x6}, 0x18) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf00000000000000000000000000000000000000000000002138e0ee6242ac033f586bf21366c33456b125c47bc7e049353c2db6e362614fbb79b3c17e517ac54dcd35e0f48c14046a3f5195d4ca2a45737b2f4eb2fcec24282d300a6219f49f6e075f9749fcfc27ff129185a3d60bcb8a0ebd585c4e4dffedf436e5b085ba77fc0f64cc2f5b1aff70c9c5548b530c5cb438abcbe954f90d937ce885dbe4af7358de5c83e67c80620d7b3910667e47f0c88ed4ee02dabbb460ebb05932d8ce"]) (async)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) (async, rerun: 64)
unshare(0x26020480) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, 0x0, 0x0) (async)
connect$inet(r3, 0x0, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async, rerun: 32)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0xb94767e455803d10, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async, rerun: 32)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0x9362, 0x0)
utimensat(r6, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, 0x0) (async)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.828110971s ago: executing program 4 (id=1821):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c000)
r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x4208, r0)
ptrace$poke(0x4, r0, 0x0, 0x7)

2.78161257s ago: executing program 4 (id=1822):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x4004510f, 0x0)
fanotify_init(0x18, 0x1000)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000580)='3', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x8000}, 0x20000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000002010500000000000000000002000008080015400000000206001240000100003ed9f195da287ca785ecde42380ddef2581e6ecf718b5babe62385ce662e5b46a807527c84df561719cee705a70bb8d7532fb24c01501974425a21dd96ae673af5bab195722ec664d6299e31645414730e8f214b2cd27e22b31e6689c8"], 0x24}, 0x1, 0x0, 0x0, 0x80440d5}, 0x40440d0)
r4 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
dup(r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)="f7b80fa1")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000165000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, &(0x7f0000000140)="660f7dc6baf80c66b8a5a5288166efbafc0cecbaf80c66b88e40098c66efbafc0ced0f01de66b9800000c00f326635000400000f30260f07660fd833660f0782870c00490f381d7d6b", 0x49}], 0x1, 0x1e, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1.79229033s ago: executing program 2 (id=1823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24040040)
r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x6, @vbi={0x5, 0x886d, 0x400, 0x32525942, [0x101, 0xa2], [0xfffff800], 0x13a}})

1.739325721s ago: executing program 4 (id=1824):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r0 = fanotify_init(0x4, 0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3)
fanotify_mark(r0, 0x1, 0x1, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
mount$9p_rdma(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x21001, &(0x7f0000000080)=ANY=[])
openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)

1.611968201s ago: executing program 2 (id=1825):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x1}, {}, {}, 0x70bd27, 0x3502, 0x2}, [@etimer_thresh={0x8, 0xc, 0x6}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x144}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fcntl$lock(r6, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x7fffffffffffffff})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2d9ecc72}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

1.61146558s ago: executing program 1 (id=1826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2e2900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ffd3bf79a1f5c5dc34cf2645cbc11c4562d22db8780edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b000000fb354673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0100f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce78754182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f26df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132155fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf2515000000140001800d0001007564703a8a2eac523a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="a374afea5daf2b8b584232345f30b8b8cfe14cb75f94a80d7afaca6df69d1fcfc1b9a7cadad1b62ecf7f74f64a623350c637bcc0214381118e692a69c3a8d1053c1fce6098c8927711f2faee5dc306aeab17c51fa73b786e62278fc82d3854f0e4035ca9cc708de67935343945e147762a79d8cfa741406e59a00e6e2c3cdfe2786455ee6c5654b677224d4efc1f1fb6034b18718456868d91e98a7e9b250c82e370e4dcae10176fda9a1f89559bb4f9aa1e480490f65704e7283829c380a6826f9501da00"})
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x10001, 0x28000000}, {0x6, 0x5}, 0x9, 0x1})
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000840)={0xbe, 0x0, 0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x4e, 0x1, 0xf, 0x10100, 0x4cf, 0xfffffffffffffffe, 0x44e, 0xfffffffff7ffffff, 0x1, 0x102, 0x8, 0xb, 0x2, 0xfffffffffffffffe, 0x0, 0x10001], 0x1000, 0x280})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="02"])
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5})
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff})
close(r10)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')

1.51656257s ago: executing program 2 (id=1827):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="12000000", @ANYRES32, @ANYBLOB="0a001b", @ANYRES64], 0x2c}], 0x1, 0x0, 0x0, 0x20004890}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f864920ca0768a8998a01020300000002000103001000000000000000200400"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0xfffffffffffff000, 0x5, 0x1, 0x7, 0x3})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
close_range(r3, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x0)
ioctl$NBD_SET_SOCK(r7, 0xab00, 0xffffffffffffffff)

1.374810816s ago: executing program 1 (id=1828):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
dup(0xffffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7)

1.039926s ago: executing program 0 (id=1829):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020)
writev(r1, &(0x7f0000002280)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
write$cgroup_devices(r1, 0x0, 0x0)
ptrace(0x4206, r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x8, @loopback, 0x5}, 0x1c)
listen(r2, 0x5)
accept(r2, &(0x7f0000000100)=@can, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
tkill(0x0, 0x32)
ptrace(0x4208, r0)
capget(&(0x7f0000000000)={0x20071026, r0}, 0x0)
waitid(0x1, r0, 0x0, 0x8, 0x0)
wait4(r0, 0x0, 0x2, 0x0)

732.694704ms ago: executing program 1 (id=1830):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x14, 0xe4})
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c5e0ddcddfaeaad866f0d32cf0c39bb", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r4, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0xe9d2, {0x7, 0x29, 0x1, 0x8020000, 0xdcd, 0x4005, 0x3, 0x3, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x6, 0x0, {0x5, 0x7, 0x0, 0x80000001, 0x3, 0x8001, 0x3, 0x35741061, 0x10000, 0x8001, 0x9e7, 0xffffffffffffffff, 0x0, 0x40, 0xdad}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utimensat(0xffffffffffffff9c, &(0x7f0000006380)='./file0\x00', 0x0, 0x0)
write$vhost_msg_v2(r3, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000480)=""/26, 0xffffffffffffff7f, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000280)=""/183, 0xb7, &(0x7f00000007c0)=""/4096, 0x1}}, 0x48)
r5 = syz_usbip_server_init(0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
dup2(r0, r7)
ioctl$SIOCSIFHWADDR(r8, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
ioctl(r6, 0x8b2a, &(0x7f0000000040))
fchdir(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'})
write$usbip_server(r5, &(0x7f0000000000)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0xfffffffe}, {0x481ff02b}}, 0x30)
write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000140)={0x4000000})
ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000040)={0x4000000})
close_range(r0, 0xffffffffffffffff, 0x0)

170.088316ms ago: executing program 0 (id=1831):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x1)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000200)={0x0, [], 0x5})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, <r5=>0x0], &(0x7f0000000000), 0x0, 0x3, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000300)={0x1, r5, r4})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0)
pread64(r6, &(0x7f0000000140)=""/255, 0xff, 0x5)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000001040)={0xffff1000, 0x10000})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001100)={[0x5836, 0x2, 0x1400000000000004, 0x4000000000000e52, 0x4, 0xb, 0x1045, 0x200000000006, 0x2, 0x1, 0x10000000009, 0xc44, 0x1, 0x80000001, 0x8000000000005, 0xfffffffffffffffb], 0xa0000, 0x63581})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) (async)
recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x1) (async)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000200)={0x0, [], 0x5}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x0, 0x3, 0x0, 0x0, r4}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000300)={0x1, r5, r4}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async)
pread64(r6, &(0x7f0000000140)=""/255, 0xff, 0x5) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000001040)={0xffff1000, 0x10000}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001100)={[0x5836, 0x2, 0x1400000000000004, 0x4000000000000e52, 0x4, 0xb, 0x1045, 0x200000000006, 0x2, 0x1, 0x10000000009, 0xc44, 0x1, 0x80000001, 0x8000000000005, 0xfffffffffffffffb], 0xa0000, 0x63581}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)

0s ago: executing program 1 (id=1832):
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
unshare(0x2040400)
syz_clone3(&(0x7f0000000440)={0x100040000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x82) (async)
r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x82)
write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0xfffd}, 0x7)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400030080000300", 0x33a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0)

kernel console output (not intermixed with test programs):

sb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.665734][ T5918] usb 2-1: Product: syz
[  382.669948][ T5918] usb 2-1: Manufacturer: syz
[  382.674753][ T5918] usb 2-1: SerialNumber: syz
[  382.778169][ T8014] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  382.792920][ T8014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.818576][ T8014] usb 5-1: can't set config #4, error -71
[  382.851976][ T8014] usb 5-1: USB disconnect, device number 46
[  382.861307][ T6801] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  382.873592][T10768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  382.886309][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.903859][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.934902][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  382.943403][ T5918] usb 2-1: MIDIStreaming interface descriptor not found
[  382.998199][ T5918] usb 2-1: USB disconnect, device number 57
[  383.001385][ T6801] usb 3-1: device descriptor read/64, error -71
[  383.061349][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  383.231333][ T8014] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  383.251319][ T6801] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  383.381652][ T6801] usb 3-1: device descriptor read/64, error -71
[  383.390329][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.398855][T10771] Invalid option length (0) for dns_resolver key
[  383.400419][ T8014] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  383.420117][ T8014] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  383.434656][ T8014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.453557][ T8014] usb 5-1: config 0 descriptor??
[  383.491819][ T6801] usb usb3-port1: attempt power cycle
[  383.831308][ T5918] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  383.841516][ T6801] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  383.862627][ T6801] usb 3-1: device descriptor read/8, error -71
[  383.878172][ T8014] usbhid 5-1:0.0: can't add hid device: -71
[  383.886018][ T8014] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  383.898176][ T8014] usb 5-1: USB disconnect, device number 47
[  383.981238][ T5918] usb 2-1: device descriptor read/64, error -71
[  384.101294][ T6801] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  384.122708][ T6801] usb 3-1: device descriptor read/8, error -71
[  384.231313][ T5918] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  384.231558][ T6801] usb usb3-port1: unable to enumerate USB device
[  384.381461][ T5918] usb 2-1: device descriptor read/64, error -71
[  384.494612][ T5918] usb usb2-port1: attempt power cycle
[  384.601088][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.610105][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.619968][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.629021][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.640461][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.649310][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.821285][  T917] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  384.871283][ T5918] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  384.892533][ T5918] usb 2-1: device descriptor read/8, error -71
[  384.981304][  T917] usb 5-1: Using ep0 maxpacket: 8
[  384.987957][  T917] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  384.996749][  T917] usb 5-1: config 179 has no interface number 0
[  385.003515][  T917] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  385.015466][  T917] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  385.026907][  T917] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  385.038205][  T917] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9472, setting to 1024
[  385.049686][  T917] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  385.063330][  T917] usb 5-1: config 179 interface 65 has no altsetting 0
[  385.070208][  T917] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  385.079301][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.091366][T10785] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  385.109362][  T917] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input96
[  385.141357][ T5918] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  385.172416][ T5217] input input96: unable to receive magic message: -110
[  385.179788][ T5918] usb 2-1: device descriptor read/8, error -71
[  385.190105][ T5217] input input96: unable to receive magic message: -32
[  385.207175][ T5217] input input96: unable to receive magic message: -32
[  385.227574][ T5217] input input96: unable to receive magic message: -32
[  385.256044][ T5217] input input96: unable to receive magic message: -32
[  385.266893][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.284860][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.293741][ T5217] input input96: unable to receive magic message: -32
[  385.302115][ T5918] usb usb2-port1: unable to enumerate USB device
[  385.308192][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.324998][T10785] input input96: unable to receive magic message: -32
[  385.333659][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.335345][T10791] dlm: Unknown command passed to DLM device : 0
[  385.335345][T10791] 
[  385.364547][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.370744][ T5918] usb 5-1: USB disconnect, device number 48
[  385.372970][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  385.373569][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.042390][ T8014] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  386.201267][ T8014] usb 3-1: Using ep0 maxpacket: 32
[  386.208176][ T8014] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  386.217590][ T8014] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.228168][ T8014] usb 3-1: config 0 has no interface number 0
[  386.235448][ T8014] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  386.245646][ T8014] usb 3-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88
[  386.257449][ T8014] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  386.267453][ T8014] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  386.277454][ T8014] usb 3-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  386.293606][ T8014] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  386.302741][ T8014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.310778][ T8014] usb 3-1: Product: syz
[  386.315004][ T8014] usb 3-1: Manufacturer: syz
[  386.320085][ T8014] usb 3-1: SerialNumber: syz
[  386.327424][ T8014] usb 3-1: config 0 descriptor??
[  386.334057][T10798] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  386.431341][ T6801] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  386.585181][ T6801] usb 5-1: Using ep0 maxpacket: 16
[  386.593793][ T6801] usb 5-1: config 1 interface 0 has no altsetting 0
[  386.755884][ T8014] usb 3-1: probing VID:PID(0424:012C)   
[  386.766538][ T8014] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B
[  386.773522][ T8014] usb 3-1: vub300 testing BULK IN EndPoint(1) 88
[  386.779930][ T8014] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  386.788310][ T8014] vub300 3-1:0.133: probe with driver vub300 failed with error -22
[  386.801222][ T8014] usb 3-1: USB disconnect, device number 48
[  387.003712][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.014616][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.015605][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.025592][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.049526][T10814] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12)
[  387.056166][T10814] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  387.063738][T10815] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14)
[  387.070345][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  387.079253][T10815] vhci_hcd vhci_hcd.0: Device attached
[  387.080525][T10814] vhci_hcd vhci_hcd.0: Device attached
[  387.094748][T10816] vhci_hcd: connection closed
[  387.094882][T10817] vhci_hcd: connection closed
[  387.100140][   T36] vhci_hcd: stop threads
[  387.109524][   T36] vhci_hcd: release socket
[  387.117732][   T36] vhci_hcd: disconnect device
[  387.123462][   T36] vhci_hcd: stop threads
[  387.127828][   T36] vhci_hcd: release socket
[  387.134693][   T36] vhci_hcd: disconnect device
[  387.334111][T10822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  387.631352][ T8014] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  387.748180][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.757463][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.783669][ T8014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.793726][ T8014] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  387.807802][ T8014] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  387.817268][ T8014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.829145][ T8014] usb 3-1: config 0 descriptor??
[  388.251388][ T8014] usbhid 3-1:0.0: can't add hid device: -71
[  388.258238][ T8014] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  388.279785][ T8014] usb 3-1: USB disconnect, device number 49
[  388.878394][T10843] C: renamed from team_slave_0 (while UP)
[  388.897351][T10843] netlink: 'syz.2.1519': attribute type 2 has an invalid length.
[  388.905290][T10843] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1519'.
[  388.915099][T10843] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  389.250933][ T6801] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40
[  389.273771][ T8014] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  389.282915][ T6801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.311303][ T6801] usb 5-1: Product: 讟귞䑻캊抴翘豨��噀ꂌ숱㌖㸇訾ꑰ闉娓ꆤ騟ጘ쯫ᡦ�櫇⥀䌭볇छ癞｟㔆죄憞쾗ⵎ콲�ే駭ᑜ�듂
[  389.338315][ T6801] usb 5-1: Manufacturer: à°�
[  389.360888][ T6801] usb 5-1: can't set config #1, error -71
[  389.369403][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'.
[  389.381014][ T6801] usb 5-1: USB disconnect, device number 49
[  389.432049][ T8014] usb 3-1: device descriptor read/64, error -71
[  389.534072][T10877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.544616][T10877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.621261][ T5970] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  389.671301][ T8014] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  389.701309][ T6801] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  389.751380][ T5970] usb 2-1: device descriptor read/64, error -71
[  389.801580][ T8014] usb 3-1: device descriptor read/64, error -71
[  389.851489][ T6801] usb 5-1: Using ep0 maxpacket: 32
[  389.858394][ T6801] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  389.868551][ T6801] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  389.879080][ T6801] usb 5-1: config 0 interface 0 has no altsetting 0
[  389.887998][ T6801] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  389.897177][ T6801] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  389.905877][ T6801] usb 5-1: Product: syz
[  389.910058][ T6801] usb 5-1: Manufacturer: syz
[  389.914955][ T6801] usb 5-1: SerialNumber: syz
[  389.921111][ T8014] usb usb3-port1: attempt power cycle
[  389.928422][ T6801] usb 5-1: config 0 descriptor??
[  390.002277][ T5970] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  390.141438][ T5970] usb 2-1: device descriptor read/64, error -71
[  390.253179][ T5970] usb usb2-port1: attempt power cycle
[  390.271383][ T8014] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  390.291970][ T8014] usb 3-1: device descriptor read/8, error -71
[  390.338835][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.347978][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.357628][ T6801] gs_usb 5-1:0.0: Configuring for 241 interfaces
[  390.364280][ T6801] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  390.372260][ T6801] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22
[  390.531396][ T8014] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  390.551971][ T8014] usb 3-1: device descriptor read/8, error -71
[  390.558933][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.570710][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.574059][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.587461][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.591289][ T5970] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  390.618385][ T6801] usb 5-1: USB disconnect, device number 50
[  390.630705][ T5970] usb 2-1: device descriptor read/8, error -71
[  390.667697][ T8014] usb usb3-port1: unable to enumerate USB device
[  390.704842][T10887] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  390.881303][ T5970] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  390.902986][ T5970] usb 2-1: device descriptor read/8, error -71
[  391.020935][ T5970] usb usb2-port1: unable to enumerate USB device
[  391.037625][T10895] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1530'.
[  391.063205][ T6801] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  391.176081][T10895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.186903][T10895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.196770][T10895] bond0 (unregistering): Released all slaves
[  391.223257][ T6801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.233272][ T6801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  391.246821][ T6801] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  391.255993][ T6801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.274351][ T6801] usb 5-1: config 0 descriptor??
[  391.347141][T10900] xt_HMARK: spi-set and port-set can't be combined
[  391.467918][T10905] netlink: 'syz.0.1533': attribute type 10 has an invalid length.
[  391.478452][T10905] bridge_slave_1: left allmulticast mode
[  391.484745][T10905] bridge_slave_1: left promiscuous mode
[  391.491431][T10905] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.509344][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.518359][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.703369][ T6801] usbhid 5-1:0.0: can't add hid device: -71
[  391.715302][ T6801] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  391.728469][ T6801] usb 5-1: USB disconnect, device number 51
[  392.075642][   T30] audit: type=1804 audit(1758892951.771:40): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1534" name="/newroot/286/cgroup.controllers" dev="tmpfs" ino=1589 res=1 errno=0
[  392.098108][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.107471][T10910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.121361][   T30] audit: type=1800 audit(1758892951.801:41): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1534" name="cgroup.controllers" dev="tmpfs" ino=1589 res=0 errno=0
[  392.125356][T10910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.150851][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.379435][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'.
[  392.456102][   T30] audit: type=1326 audit(1758892952.151:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10919 comm="syz.1.1539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f3d8eec9 code=0x0
[  392.477927][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.681305][ T5949] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  392.841398][ T5949] usb 5-1: Using ep0 maxpacket: 16
[  392.850298][ T5949] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  392.860212][ T5949] usb 5-1: config 0 has no interface number 0
[  392.867038][ T5949] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  392.884516][ T5949] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  392.895829][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.904472][ T5949] usb 5-1: Product: syz
[  392.909029][ T5949] usb 5-1: Manufacturer: syz
[  392.914407][ T5949] usb 5-1: SerialNumber: syz
[  392.925536][ T5949] usb 5-1: config 0 descriptor??
[  393.006428][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.015250][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.143835][ T5949] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0
[  393.154746][ T5949] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5
[  393.179734][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'.
[  393.352661][ T6801] usb 5-1: USB disconnect, device number 52
[  393.536472][T10937] syzkaller0: entered promiscuous mode
[  393.549783][T10937] syzkaller0: entered allmulticast mode
[  393.571469][ T5918] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  393.653963][T10941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  393.722330][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.736536][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.786973][ T5918] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  393.798095][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.806554][ T5918] usb 3-1: Product: syz
[  393.812090][ T5918] usb 3-1: Manufacturer: syz
[  393.818926][ T5918] usb 3-1: SerialNumber: syz
[  393.831432][ T5918] usb 3-1: config 0 descriptor??
[  394.081353][ T5970] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  394.247030][ T5918] airspy 3-1:0.0: Board ID: 00
[  394.253066][ T5918] airspy 3-1:0.0: Firmware version: 
[  394.253426][ T5970] usb 2-1: unable to get BOS descriptor or descriptor too short
[  394.281886][ T5970] usb 2-1: not running at top speed; connect to a high speed hub
[  394.303195][ T5970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.321348][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  394.344942][ T5970] usb 2-1: string descriptor 0 read error: -22
[  394.352032][ T5970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  394.361125][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.389453][ T5970] usb 2-1: 0:2 : does not exist
[  394.501335][ T5949] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  394.632628][ T5949] usb 5-1: device descriptor read/64, error -71
[  394.849376][ T5918] airspy 3-1:0.0: usb_control_msg() failed -71 request 12
[  394.862306][ T5918] airspy 3-1:0.0: Registered as swradio24
[  394.868097][ T5918] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  394.878731][ T5949] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  394.889554][ T5918] usb 3-1: USB disconnect, device number 54
[  395.031309][ T5949] usb 5-1: device descriptor read/64, error -71
[  395.142143][ T5949] usb usb5-port1: attempt power cycle
[  395.409808][ T5970] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  395.439471][ T5970] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  395.481499][ T5949] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  395.496861][ T5970] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  395.517508][ T5970] usb 2-1: USB disconnect, device number 66
[  395.518166][ T5949] usb 5-1: device descriptor read/8, error -71
[  395.801335][ T5949] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  395.821963][ T5949] usb 5-1: device descriptor read/8, error -71
[  395.901305][ T6801] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  395.942125][ T5949] usb usb5-port1: unable to enumerate USB device
[  396.051323][ T6801] usb 3-1: Using ep0 maxpacket: 32
[  396.058115][ T6801] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  396.071816][ T6801] usb 3-1: config 0 interface 0 has no altsetting 0
[  396.078470][ T6801] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  396.087608][ T6801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.098410][ T6801] usb 3-1: config 0 descriptor??
[  396.201351][ T5970] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  396.351279][ T5970] usb 2-1: Using ep0 maxpacket: 8
[  396.358785][ T5970] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.368824][ T5970] usb 2-1: config 0 interface 0 has no altsetting 0
[  396.375539][ T5970] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  396.384761][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.396174][ T5970] usb 2-1: config 0 descriptor??
[  396.517592][ T6801] cougar 0003:060B:500A.0028: unknown main item tag 0x0
[  396.524935][ T6801] cougar 0003:060B:500A.0028: unknown main item tag 0x0
[  396.533743][ T6801] cougar 0003:060B:500A.0028: unknown main item tag 0x0
[  396.540802][ T6801] cougar 0003:060B:500A.0028: unknown main item tag 0x0
[  396.548283][ T6801] cougar 0003:060B:500A.0028: unknown main item tag 0x0
[  396.560719][T10984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  396.562764][ T6801] cougar 0003:060B:500A.0028: hidraw0: USB HID v0.05 Device [HID 060b:500a] on usb-dummy_hcd.2-1/input0
[  396.593161][T10984] overlayfs: missing 'lowerdir'
[  396.606169][T10984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.615090][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.624623][T10984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.633122][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.720029][ T6801] usb 3-1: USB disconnect, device number 55
[  396.904783][ T5970] holtek 0003:1241:5015.0029: unknown main item tag 0x0
[  396.912347][ T5970] holtek 0003:1241:5015.0029: unknown main item tag 0x0
[  396.919311][ T5970] holtek 0003:1241:5015.0029: unknown main item tag 0x0
[  396.926599][ T5970] holtek 0003:1241:5015.0029: unknown main item tag 0x0
[  396.933650][ T5970] holtek 0003:1241:5015.0029: unknown main item tag 0x0
[  396.943719][ T5970] holtek 0003:1241:5015.0029: hidraw0: USB HID v54.8a Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0
[  396.955076][ T5970] holtek 0003:1241:5015.0029: no inputs found
[  397.107181][ T5970] usb 2-1: USB disconnect, device number 67
[  397.503466][T11000] sctp: [Deprecated]: syz.4.1563 (pid 11000) Use of int in max_burst socket option deprecated.
[  397.503466][T11000] Use struct sctp_assoc_value instead
[  397.526330][T10999] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  397.535220][T10999] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  397.541901][T10999] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  397.548067][T10999] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  397.859235][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.901770][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.961514][T11022] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  398.060671][T11024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  398.082039][T11024] overlayfs: missing 'lowerdir'
[  398.161472][ T5918] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  398.311415][ T5918] usb 3-1: Using ep0 maxpacket: 32
[  398.318489][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short
[  398.326310][ T5949] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  398.335533][ T5918] usb 3-1: config 4 has an invalid interface number: 91 but max is 0
[  398.343773][ T5918] usb 3-1: config 4 has no interface number 0
[  398.352167][ T5918] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05
[  398.361334][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.369339][ T5918] usb 3-1: Product: syz
[  398.373942][ T5918] usb 3-1: Manufacturer: syz
[  398.378622][ T5918] usb 3-1: SerialNumber: syz
[  398.431294][ T5970] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  398.488969][T11030] program syz.0.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.506459][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.518445][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  398.531454][ T5949] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  398.540536][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.551440][ T5949] usb 2-1: config 0 descriptor??
[  398.584880][ T5970] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  398.589136][T11002] mmap: syz.2.1564 (11002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  398.606104][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  398.606133][ T5970] usb 5-1: Product: syz
[  398.606149][ T5970] usb 5-1: SerialNumber: syz
[  398.625467][ T5970] usb 5-1: config 0 descriptor??
[  398.680337][T11002] netlink: 'syz.2.1564': attribute type 21 has an invalid length.
[  398.688528][T11002] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  398.845600][ T5970] ldusb 5-1:0.0: Interrupt in endpoint not found
[  398.854936][ T5970] usb 5-1: USB disconnect, device number 57
[  398.902323][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.911405][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.930503][ T5918] empeg 3-1:4.91: empeg converter detected
[  398.936475][ T5918] usb 3-1: active config #4 != 1 ??
[  398.949716][ T5918] usb 3-1: USB disconnect, device number 56
[  398.969580][ T5949] usbhid 2-1:0.0: can't add hid device: -71
[  398.981848][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  399.005158][ T5949] usb 2-1: USB disconnect, device number 68
[  399.531407][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  399.560123][ T5861] Bluetooth: hci4: ISO packet for unknown connection handle 201
[  399.568793][ T5861] Bluetooth: hci4: ISO packet for unknown connection handle 201
[  399.577145][ T5861] Bluetooth: hci4: ISO packet for unknown connection handle 201
[  399.612373][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout
[  399.618608][ T5182] Bluetooth: hci2: command 0x0406 tx timeout
[  399.625120][ T5869] Bluetooth: hci3: command 0x0406 tx timeout
[  399.853628][T11058] openvswitch: netlink: Multiple metadata blocks provided
[  399.944659][ T5949] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  399.990703][T11061] could not allocate digest TFM handle sha256-avx2
[  399.997580][  T917] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  400.064551][T11061] could not allocate digest TFM handle sha256-avx2
[  400.101326][ T5949] usb 2-1: Using ep0 maxpacket: 32
[  400.109426][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  400.121348][ T6801] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  400.123074][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  400.140872][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  400.153891][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  400.157415][T11061] could not allocate digest TFM handle sha256-avx2
[  400.163734][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.178279][  T917] usb 5-1: Using ep0 maxpacket: 8
[  400.187794][  T917] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  400.196693][  T917] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  400.208931][  T917] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  400.222198][ T5949] usb 2-1: config 0 descriptor??
[  400.229294][T11050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  400.238242][  T917] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  400.252957][ T5949] hub 2-1:0.0: USB hub found
[  400.259932][  T917] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  400.273440][  T917] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  400.282799][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.287434][T11061] could not allocate digest TFM handle sha256-avx2
[  400.307270][ T6801] usb 3-1: Using ep0 maxpacket: 8
[  400.328304][ T6801] usb 3-1: unable to get BOS descriptor or descriptor too short
[  400.349012][ T6801] usb 3-1: too many configurations: 151, using maximum allowed: 8
[  400.371644][ T6801] usb 3-1: unable to read config index 0 descriptor/start: -71
[  400.379266][ T6801] usb 3-1: can't read configurations, error -71
[  400.415658][T11061] could not allocate digest TFM handle sha256-avx2
[  400.497070][  T917] usb 5-1: GET_CAPABILITIES returned 0
[  400.497652][T11061] could not allocate digest TFM handle sha256-avx2
[  400.505338][  T917] usbtmc 5-1:16.0: can't read capabilities
[  400.598737][T11061] could not allocate digest TFM handle sha256-avx2
[  400.678295][T11061] could not allocate digest TFM handle sha256-avx2
[  400.700855][  T917] usb 5-1: USB disconnect, device number 58
[  400.728437][T11061] could not allocate digest TFM handle sha256-avx2
[  400.854525][T11085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.865415][T11085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.010577][   T30] audit: type=1326 audit(1758892960.701:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.2.1588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fdc18eec9 code=0x0
[  401.271347][  T917] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  401.419799][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.430043][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.431204][  T917] usb 5-1: unable to get BOS descriptor or descriptor too short
[  401.448293][  T917] usb 5-1: not running at top speed; connect to a high speed hub
[  401.458374][  T917] usb 5-1: config 10 has an invalid interface number: 240 but max is 0
[  401.467831][  T917] usb 5-1: config 10 has no interface number 0
[  401.475444][  T917] usb 5-1: config 10 interface 240 has no altsetting 0
[  401.485989][  T917] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=2a.72
[  401.493461][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'.
[  401.495394][  T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.512260][  T917] usb 5-1: Product: syz
[  401.516526][  T917] usb 5-1: Manufacturer: syz
[  401.521443][  T917] usb 5-1: SerialNumber: syz
[  401.606101][T11104] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  401.616343][T11104] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  401.628464][T11104] overlayfs: failed to set uuid (466/file1, err=-13); falling back to uuid=null.
[  401.754757][  T917] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:10.240/input/input98
[  401.766287][ T5217] bcm5974 5-1:10.240: could not read from device
[  401.774378][ T5217] bcm5974 5-1:10.240: could not read from device
[  401.785662][ T5217] bcm5974 5-1:10.240: could not read from device
[  401.789173][  T917] usb 5-1: USB disconnect, device number 59
[  401.798650][ T5217] bcm5974 5-1:10.240: could not read from device
[  402.161361][ T5918] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  402.246162][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.257715][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.311683][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  402.319982][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short
[  402.331359][ T5918] usb 3-1: config 15 has an invalid interface number: 53 but max is 0
[  402.351321][ T5918] usb 3-1: config 15 has no interface number 0
[  402.357596][ T5918] usb 3-1: config 15 interface 53 altsetting 99 has an endpoint descriptor with address 0x2C, changing to 0xC
[  402.369836][ T5918] usb 3-1: config 15 interface 53 altsetting 99 endpoint 0xC has an invalid bInterval 144, changing to 11
[  402.390653][ T5918] usb 3-1: config 15 interface 53 altsetting 99 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  402.402845][ T5918] usb 3-1: config 15 interface 53 has no altsetting 0
[  402.414329][ T5918] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=91.ce
[  402.423745][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.432151][ T5918] usb 3-1: Product: syz
[  402.436346][ T5918] usb 3-1: Manufacturer: syz
[  402.440959][ T5918] usb 3-1: SerialNumber: syz
[  402.641333][ T6801] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  402.667608][ T5918] option 3-1:15.53: GSM modem (1-port) converter detected
[  402.680617][ T5918] usb 3-1: USB disconnect, device number 59
[  402.691315][ T5918] option 3-1:15.53: device disconnected
[  402.745744][ T5949] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  402.772146][ T5949] usbhid 2-1:0.0: can't add hid device: -71
[  402.781542][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  402.791488][ T6801] usb 5-1: Using ep0 maxpacket: 8
[  402.807316][ T6801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.823093][ T5949] usb 2-1: USB disconnect, device number 69
[  402.834649][ T6801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.851398][ T6801] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  402.860470][ T6801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.889689][ T6801] usb 5-1: config 0 descriptor??
[  402.979523][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.999592][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.077347][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.088057][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.097677][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.106891][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.310872][ T6801] hid_parser_main: 2 callbacks suppressed
[  403.310897][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x2
[  403.330658][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.337890][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.341389][ T5949] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  403.345321][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.359786][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.368211][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.375615][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.382789][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.390749][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.398712][ T6801] cherry 0003:046A:0027.002A: unknown main item tag 0x0
[  403.410412][ T6801] cherry 0003:046A:0027.002A: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0
[  403.512046][ T5949] usb 2-1: Using ep0 maxpacket: 32
[  403.520223][ T5949] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  403.529454][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  403.543482][ T5949] usb 2-1: config 0 has no interface number 0
[  403.549757][ T5949] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  403.560497][ T5949] usb 2-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88
[  403.586261][ T5949] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  403.597293][ T5949] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  403.619611][ T5949] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  403.632103][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.635202][ T6801] usb 5-1: USB disconnect, device number 60
[  403.640596][ T5949] usb 2-1: Product: syz
[  403.654422][ T5949] usb 2-1: Manufacturer: syz
[  403.659169][ T5949] usb 2-1: SerialNumber: syz
[  403.667808][T11138] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  403.675668][ T5949] usb 2-1: config 0 descriptor??
[  403.697846][T11130] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  403.784517][T11143] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  403.804323][T11143] overlayfs: missing 'lowerdir'
[  403.811023][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.820223][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.921096][ T5949] usb 2-1: probing VID:PID(0424:012C)   
[  403.928407][ T5949] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B
[  403.935465][ T5949] usb 2-1: vub300 testing UNKNOWN EndPoint(1) 88
[  403.941931][ T5949] usb 2-1: vub300 ignoring EndPoint(1) 88
[  403.947693][ T5949] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  403.955551][ T5949] vub300 2-1:0.133: probe with driver vub300 failed with error -22
[  403.968187][ T5949] usb 2-1: USB disconnect, device number 70
[  404.482433][ T6801] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  404.507756][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.517834][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.568443][T11168] Can't find a SQUASHFS superblock on nullb0
[  404.592485][T11169] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1610'.
[  404.603112][T11164] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1610'.
[  404.644617][ T6801] usb 5-1: unable to get BOS descriptor or descriptor too short
[  404.654150][ T6801] usb 5-1: not running at top speed; connect to a high speed hub
[  404.663252][ T6801] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.674058][ T6801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.686180][ T6801] usb 5-1: string descriptor 0 read error: -22
[  404.693170][ T6801] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  404.702319][ T6801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.720394][ T6801] usb 5-1: 0:2 : does not exist
[  404.731627][ T8014] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  404.821319][ T5970] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[  404.881306][ T8014] usb 3-1: Using ep0 maxpacket: 16
[  404.888550][ T8014] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  404.897225][ T8014] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  404.907907][ T8014] usb 3-1: config 0 has no interface number 0
[  404.916825][ T8014] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  404.926080][ T8014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.934947][ T8014] usb 3-1: Product: syz
[  404.939154][ T8014] usb 3-1: Manufacturer: syz
[  404.943880][ T8014] usb 3-1: SerialNumber: syz
[  404.952266][ T8014] usb 3-1: config 0 descriptor??
[  404.961398][ T5970] usb 2-1: device descriptor read/64, error -71
[  405.221348][ T5970] usb 2-1: new low-speed USB device number 72 using dummy_hcd
[  405.381334][ T5970] usb 2-1: device descriptor read/64, error -71
[  405.501609][ T5970] usb usb2-port1: attempt power cycle
[  405.744768][ T6801] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  405.761103][ T6801] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  405.808126][ T6801] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  405.837445][ T6801] usb 5-1: USB disconnect, device number 61
[  405.847601][ T5970] usb 2-1: new low-speed USB device number 73 using dummy_hcd
[  405.903478][ T5970] usb 2-1: device descriptor read/8, error -71
[  406.151286][ T5970] usb 2-1: new low-speed USB device number 74 using dummy_hcd
[  406.182073][ T5970] usb 2-1: device descriptor read/8, error -71
[  406.302127][ T5970] usb usb2-port1: unable to enumerate USB device
[  406.447732][T11185] netlink: 'syz.0.1617': attribute type 19 has an invalid length.
[  406.474972][T11183] netlink: 'syz.0.1617': attribute type 19 has an invalid length.
[  406.493799][T11185] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1617'.
[  406.503334][T11183] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1617'.
[  406.530443][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.544098][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.573101][T11187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  406.593950][T11187] overlayfs: missing 'lowerdir'
[  406.852657][ T5949] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  407.014503][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.024643][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  407.037777][ T5949] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  407.046996][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.060428][ T5949] usb 5-1: config 0 descriptor??
[  407.190938][T11192] overlayfs: upper fs does not support file handles, falling back to index=off.
[  407.206099][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.216060][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.485401][ T5949] usbhid 5-1:0.0: can't add hid device: -71
[  407.492860][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  407.518869][ T5949] usb 5-1: USB disconnect, device number 62
[  407.529568][ T5970] usb 3-1: USB disconnect, device number 60
[  407.971411][ T5970] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  408.001290][ T6801] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  408.111427][ T5970] usb 3-1: device descriptor read/64, error -71
[  408.151291][ T6801] usb 2-1: Using ep0 maxpacket: 32
[  408.168611][ T6801] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  408.193090][ T6801] usb 2-1: config 0 has no interface number 0
[  408.209440][ T6801] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  408.218839][ T6801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.227181][ T6801] usb 2-1: Product: syz
[  408.232142][ T6801] usb 2-1: Manufacturer: syz
[  408.237203][ T6801] usb 2-1: SerialNumber: syz
[  408.244907][ T6801] usb 2-1: config 0 descriptor??
[  408.253968][ T6801] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  408.361351][ T5970] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  408.491461][ T5970] usb 3-1: device descriptor read/64, error -71
[  408.591320][ T5949] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  408.601681][ T5970] usb usb3-port1: attempt power cycle
[  408.753382][ T5949] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  408.763679][ T5949] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  408.772736][ T5949] usb 5-1: config 1 has no interface number 1
[  408.778882][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  408.794680][ T5949] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  408.805238][ T5949] usb 5-1: New USB device strings: Mfr=22, Product=2, SerialNumber=3
[  408.813436][ T5949] usb 5-1: Product: syz
[  408.817636][ T5949] usb 5-1: Manufacturer: syz
[  408.822326][ T5949] usb 5-1: SerialNumber: syz
[  408.941433][ T5970] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  408.969507][ T5970] usb 3-1: device descriptor read/8, error -71
[  409.072971][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.083831][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.211326][ T5970] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  409.231922][ T5970] usb 3-1: device descriptor read/8, error -71
[  409.341591][ T5970] usb usb3-port1: unable to enumerate USB device
[  409.744800][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.754940][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.675596][ T6801] usb 2-1: qt2_attach - failed to power on unit: -71
[  410.698464][ T6801] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  410.730933][ T6801] usb 2-1: USB disconnect, device number 75
[  410.778999][T11226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  410.799966][T11226] overlayfs: missing 'lowerdir'
[  411.041290][ T5970] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  411.091289][ T6801] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  411.193435][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.204153][ T5970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  411.217928][ T5970] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  411.227526][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.257372][ T6801] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  411.265803][ T5970] usb 3-1: config 0 descriptor??
[  411.273139][ T5949] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  411.284040][ T6801] usb 2-1: config 1 has no interface number 0
[  411.289781][ T5949] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  411.301594][ T6801] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  411.318638][ T6801] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  411.339883][ T6801] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[  411.347332][ T5949] usb 5-1: USB disconnect, device number 63
[  411.350721][ T6801] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.382135][ T6801] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  411.406162][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  411.441275][ T6801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.465613][ T6801] usb 2-1: Product: syz
[  411.469935][ T6801] usb 2-1: Manufacturer: syz
[  411.475295][ T6801] usb 2-1: SerialNumber: syz
[  411.485401][T11228] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  411.493211][T11228] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  411.704153][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.718349][T11234] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  411.719467][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.729975][T11234] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  411.750612][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.756158][ T5970] usbhid 3-1:0.0: can't add hid device: -71
[  411.767603][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.780177][T11235] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.1631'.
[  411.780711][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  411.819071][ T5970] usb 3-1: USB disconnect, device number 65
[  411.830354][ T6801] usb 2-1: Incompatible driver and firmware versions
[  411.860750][ T6801] usb 2-1: USB disconnect, device number 76
[  412.211309][ T6801] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[  412.364273][ T6801] usb 2-1: unable to get BOS descriptor or descriptor too short
[  412.372790][ T6801] usb 2-1: not running at top speed; connect to a high speed hub
[  412.386451][   T30] audit: type=1326 audit(1758892972.081:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092138eec9 code=0x7fc00000
[  412.392426][ T6801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  412.435061][ T6801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  412.447865][ T6801] usb 2-1: string descriptor 0 read error: -22
[  412.454765][ T6801] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  412.468175][ T6801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.489663][ T6801] usb 2-1: 0:2 : does not exist
[  412.510824][ T5861] Bluetooth: hci1: unexpected event for opcode 0x2002
[  412.536672][T11249] netlink: 'syz.4.1638': attribute type 46 has an invalid length.
[  412.546851][T11249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1638'.
[  412.811402][ T5949] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  412.981615][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  412.985149][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.000294][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  413.006084][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.014545][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  413.030221][ T5949] usb 5-1: SerialNumber: syz
[  413.469744][T11258] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  413.521515][ T6801] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  413.560944][ T6801] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  413.632921][ T6801] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  413.649760][ T5949] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  413.675207][ T6801] usb 2-1: USB disconnect, device number 77
[  413.692427][T11263] random: crng reseeded on system resumption
[  413.858533][ T5949] usb 5-1: USB disconnect, device number 64
[  414.158374][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.176901][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.412898][ T5970] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  414.591248][ T5970] usb 2-1: Using ep0 maxpacket: 32
[  414.603229][ T5970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.621436][ T5970] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  414.630435][ T5970] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  414.676219][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.712381][ T5970] usb 2-1: config 0 descriptor??
[  414.858610][T11300] tmpfs: Bad value for 'mpol'
[  414.973847][T11283] kvm: pic: non byte write
[  414.978912][T11283] kvm: pic: non byte write
[  415.093223][ T5970] usb 2-1: string descriptor 0 read error: -71
[  415.129760][ T5970] usb 2-1: USB disconnect, device number 78
[  415.177071][T11318] overlayfs: failed to resolve './file0': -2
[  415.193979][T11317] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1652'.
[  415.281826][ T6801] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  415.431265][ T6801] usb 5-1: Using ep0 maxpacket: 8
[  415.448922][ T6801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.469170][ T6801] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  415.480277][T11327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.489547][ T6801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.493429][T11327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.512333][ T6801] usb 5-1: config 0 descriptor??
[  415.523391][ T6801] gspca_main: vc032x-2.14.0 probing 046d:0892
[  415.571520][  T917] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[  415.684581][T11329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  415.707114][T11329] overlayfs: failed to resolve './file1': -2
[  415.732396][  T917] usb 3-1: unable to get BOS descriptor or descriptor too short
[  415.742473][  T917] usb 3-1: unable to read config index 0 descriptor/start: -71
[  415.750085][  T917] usb 3-1: can't read configurations, error -71
[  415.956026][ T5970] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  416.114336][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.125380][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  416.139908][ T5970] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  416.146696][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.149129][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.160333][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.183865][ T5970] usb 2-1: config 0 descriptor??
[  416.245793][T11337] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1657'.
[  416.308249][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1658'.
[  416.373090][ T6801] gspca_vc032x: reg_w err -71
[  416.379978][ T6801] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  416.410374][ T6801] usb 5-1: USB disconnect, device number 65
[  416.604044][ T5970] usbhid 2-1:0.0: can't add hid device: -71
[  416.610096][ T5970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  416.635168][ T5970] usb 2-1: USB disconnect, device number 79
[  417.028533][ T5955] nci: nci_rx_work: unknown MT 0x1
[  417.054029][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.063066][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.614895][T11371] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  417.671875][ T6801] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  417.823533][ T6801] usb 2-1: unable to get BOS descriptor or descriptor too short
[  417.833217][ T6801] usb 2-1: not running at top speed; connect to a high speed hub
[  417.846689][ T6801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.858213][ T6801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  417.868062][ T5970] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  417.880146][ T6801] usb 2-1: string descriptor 0 read error: -22
[  417.887127][ T6801] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  417.897258][ T6801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.923142][ T6801] usb 2-1: 0:2 : does not exist
[  417.951885][T11375] delete_channel: no stack
[  418.011411][ T5970] usb 3-1: device descriptor read/64, error -71
[  418.241306][ T8014] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  418.251282][ T5970] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  418.381481][ T5970] usb 3-1: device descriptor read/64, error -71
[  418.401291][ T8014] usb 5-1: Using ep0 maxpacket: 16
[  418.407208][ T8014] usb 5-1: too many configurations: 154, using maximum allowed: 8
[  418.416581][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.435288][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.449473][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.463994][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.477475][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.490371][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.502633][ T5970] usb usb3-port1: attempt power cycle
[  418.510484][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.523644][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  418.538018][ T8014] usb 5-1: New USB device found, idVendor=1e7d, idProduct=8556, bcdDevice=9a.8a
[  418.547409][ T8014] usb 5-1: New USB device strings: Mfr=154, Product=226, SerialNumber=179
[  418.556125][ T8014] usb 5-1: Product: syz
[  418.560342][ T8014] usb 5-1: Manufacturer: syz
[  418.566351][ T8014] usb 5-1: SerialNumber: syz
[  418.578589][ T8014] usb 5-1: config 0 descriptor??
[  418.628934][T11385] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  418.650177][T11385] overlayfs: failed to resolve './file1': -2
[  418.660403][T11385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.669843][T11385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.807159][T11378] program syz.4.1669 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  418.826761][ T8014] usbhid 5-1:0.0: can't add hid device: -71
[  418.833180][ T8014] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  418.841377][ T5970] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  418.852948][ T8014] usb 5-1: USB disconnect, device number 66
[  418.882043][ T5970] usb 3-1: device descriptor read/8, error -71
[  418.932310][ T6801] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  418.944512][ T6801] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  418.972396][ T6801] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  418.986670][ T6801] usb 2-1: USB disconnect, device number 80
[  419.121428][ T5970] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  419.142056][ T5970] usb 3-1: device descriptor read/8, error -71
[  419.251879][ T5970] usb usb3-port1: unable to enumerate USB device
[  419.396411][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.408016][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.631298][ T5970] usb 5-1: new full-speed USB device number 67 using dummy_hcd
[  419.784289][ T5970] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  419.795264][ T5970] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  419.809022][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0
[  419.815836][ T5970] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  419.825281][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.836642][ T5970] usb 5-1: config 0 descriptor??
[  419.842629][T11391] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  420.056078][ T5970] usbhid 5-1:0.0: can't add hid device: -71
[  420.068135][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  420.079920][ T5970] usb 5-1: USB disconnect, device number 67
[  420.275502][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.281314][ T6801] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  420.287108][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.421352][ T6801] usb 2-1: device descriptor read/64, error -71
[  420.661375][ T6801] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  420.697743][T11404] comedi comedi2: mpc624: I/O port conflict (0x4,16)
[  420.811401][ T6801] usb 2-1: device descriptor read/64, error -71
[  420.858364][T11409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  420.879914][T11409] overlayfs: failed to resolve './file1': -2
[  420.931763][ T6801] usb usb2-port1: attempt power cycle
[  420.940506][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.949931][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.081290][ T8014] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  421.121350][ T5970] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  421.232869][ T8014] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.246622][ T8014] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  421.256269][ T8014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.264629][ T8014] usb 5-1: Product: syz
[  421.268814][ T8014] usb 5-1: Manufacturer: syz
[  421.273586][ T6801] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  421.281345][ T8014] usb 5-1: SerialNumber: syz
[  421.288069][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.298771][ T5970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  421.313352][ T5970] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  421.324572][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.333415][ T6801] usb 2-1: device descriptor read/8, error -71
[  421.344469][ T5970] usb 3-1: config 0 descriptor??
[  421.510821][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.520501][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.570559][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.579228][ T6801] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  421.583374][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.602186][ T6801] usb 2-1: device descriptor read/8, error -71
[  421.712324][ T6801] usb usb2-port1: unable to enumerate USB device
[  421.764896][ T5970] usbhid 3-1:0.0: can't add hid device: -71
[  421.771488][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  421.784912][ T5970] usb 3-1: USB disconnect, device number 72
[  421.933983][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.942913][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.354418][ T8014] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  422.361111][ T8014] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  422.369703][ T8014] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  422.387636][T11425] netlink: 'syz.2.1687': attribute type 20 has an invalid length.
[  423.153641][T11432] FAULT_INJECTION: forcing a failure.
[  423.153641][T11432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.170070][T11432] CPU: 1 UID: 0 PID: 11432 Comm: syz.0.1689 Not tainted syzkaller #0 PREEMPT(full) 
[  423.170097][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  423.170108][T11432] Call Trace:
[  423.170116][T11432]  <TASK>
[  423.170125][T11432]  dump_stack_lvl+0x189/0x250
[  423.170166][T11432]  ? __pfx____ratelimit+0x10/0x10
[  423.170195][T11432]  ? __pfx_dump_stack_lvl+0x10/0x10
[  423.170224][T11432]  ? __pfx__printk+0x10/0x10
[  423.170249][T11432]  ? __might_fault+0xb0/0x130
[  423.170288][T11432]  should_fail_ex+0x414/0x560
[  423.170318][T11432]  _copy_from_user+0x2d/0xb0
[  423.170342][T11432]  ___sys_sendmsg+0x158/0x2a0
[  423.170366][T11432]  ? __pfx____sys_sendmsg+0x10/0x10
[  423.170424][T11432]  ? __fget_files+0x2a/0x420
[  423.170445][T11432]  ? __fget_files+0x3a0/0x420
[  423.170476][T11432]  __x64_sys_sendmsg+0x19b/0x260
[  423.170502][T11432]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  423.170532][T11432]  ? __pfx_ksys_write+0x10/0x10
[  423.170558][T11432]  ? do_syscall_64+0xbe/0xfa0
[  423.170579][T11432]  do_syscall_64+0xfa/0xfa0
[  423.170597][T11432]  ? lockdep_hardirqs_on+0x9c/0x150
[  423.170616][T11432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.170636][T11432]  ? clear_bhb_loop+0x60/0xb0
[  423.170659][T11432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.170677][T11432] RIP: 0033:0x7f741bf8eec9
[  423.170695][T11432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.170719][T11432] RSP: 002b:00007f741ce3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  423.170741][T11432] RAX: ffffffffffffffda RBX: 00007f741c1e5fa0 RCX: 00007f741bf8eec9
[  423.170755][T11432] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003
[  423.170768][T11432] RBP: 00007f741ce3e090 R08: 0000000000000000 R09: 0000000000000000
[  423.170780][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.170790][T11432] R13: 00007f741c1e6038 R14: 00007f741c1e5fa0 R15: 00007ffe50bc9bd8
[  423.170822][T11432]  </TASK>
[  423.466098][T11438] netlink: 'syz.2.1691': attribute type 21 has an invalid length.
[  423.478778][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.488075][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.771406][  T917] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  423.802102][ T8014] cdc_ncm 5-1:1.0: setting tx_max = 184
[  423.826415][ T8014] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  423.866321][ T8014] usb 5-1: USB disconnect, device number 68
[  423.877915][ T8014] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  423.939228][  T917] usb 3-1: unable to get BOS descriptor or descriptor too short
[  423.954920][  T917] usb 3-1: config 255 has an invalid interface number: 144 but max is 0
[  423.963972][  T917] usb 3-1: config 255 has no interface number 0
[  423.970283][  T917] usb 3-1: config 255 interface 144 has no altsetting 0
[  423.980035][  T917] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=b2.bd
[  423.990115][  T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.998259][  T917] usb 3-1: Product: syz
[  424.003589][  T917] usb 3-1: Manufacturer: syz
[  424.008453][  T917] usb 3-1: SerialNumber: syz
[  424.231344][ T8014] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  424.278814][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.288185][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.329144][  T917] usb 3-1: USB disconnect, device number 73
[  424.341604][ T5970] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  424.350177][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1697'.
[  424.383907][ T8014] usb 5-1: config 0 has an invalid interface number: 93 but max is 0
[  424.393503][ T8014] usb 5-1: config 0 has no interface number 0
[  424.414469][ T8014] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  424.426834][ T8014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.435025][ T8014] usb 5-1: Product: syz
[  424.439214][ T8014] usb 5-1: Manufacturer: syz
[  424.444562][ T8014] usb 5-1: SerialNumber: syz
[  424.460619][ T8014] usb 5-1: config 0 descriptor??
[  424.504655][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.516838][ T5970] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00
[  424.526080][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.537587][ T5970] usb 2-1: config 0 descriptor??
[  424.668555][ T8014] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  424.680388][ T8014] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  424.690382][ T8014] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  424.699693][ T8014] usb 5-1: media controller created
[  424.709675][ T8014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  424.768760][ T8014] DVB: Unable to find symbol dib7000p_attach()
[  424.775735][ T8014] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  424.786079][ T8014] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  424.795831][ T8014] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  424.804729][ T8014] usb 5-1: media controller created
[  424.818045][ T8014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  424.836478][ T8014] dib0700: the master dib7090 has to be initialized first
[  424.845371][ T8014] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  424.943663][ T8014] rc_core: IR keymap rc-dib0700-rc5 not found
[  424.949808][ T8014] Registered IR keymap rc-empty
[  424.958504][ T5970] thrustmaster 0003:044F:B654.002B: item fetching failed at offset 6/7
[  424.967169][ T8014] dvb-usb: could not initialize remote control.
[  424.974229][ T5970] thrustmaster 0003:044F:B654.002B: parse failed
[  424.980640][ T5970] thrustmaster 0003:044F:B654.002B: probe with driver thrustmaster failed with error -22
[  424.996184][ T8014] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  425.008950][ T8014] usb 5-1: USB disconnect, device number 69
[  425.041642][ T8014] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  425.189850][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.198885][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.213928][ T5970] usb 2-1: USB disconnect, device number 85
[  425.221644][  T917] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  425.361840][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.370747][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.386409][  T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.388032][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.406500][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.414418][  T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  425.425589][  T917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  425.458499][T11465] FAULT_INJECTION: forcing a failure.
[  425.458499][T11465] name failslab, interval 1, probability 0, space 0, times 0
[  425.460414][  T917] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  425.489420][  T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.490390][T11465] CPU: 1 UID: 0 PID: 11465 Comm: syz.4.1701 Not tainted syzkaller #0 PREEMPT(full) 
[  425.490413][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  425.490423][T11465] Call Trace:
[  425.490431][T11465]  <TASK>
[  425.490439][T11465]  dump_stack_lvl+0x189/0x250
[  425.490469][T11465]  ? __pfx____ratelimit+0x10/0x10
[  425.490495][T11465]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.490520][T11465]  ? __pfx__printk+0x10/0x10
[  425.490548][T11465]  ? __pfx___might_resched+0x10/0x10
[  425.490569][T11465]  ? fs_reclaim_acquire+0x7d/0x100
[  425.490590][T11465]  should_fail_ex+0x414/0x560
[  425.490619][T11465]  should_failslab+0xa8/0x100
[  425.490638][T11465]  kmem_cache_alloc_node_noprof+0x77/0x710
[  425.490663][T11465]  ? __alloc_skb+0x112/0x2d0
[  425.490687][T11465]  ? netlink_autobind+0xdb/0x300
[  425.490710][T11465]  __alloc_skb+0x112/0x2d0
[  425.490730][T11465]  netlink_sendmsg+0x5c6/0xb30
[  425.490756][T11465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.490776][T11465]  ? aa_sock_msg_perm+0xf1/0x1d0
[  425.490797][T11465]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  425.490815][T11465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.490832][T11465]  __sock_sendmsg+0x21c/0x270
[  425.490858][T11465]  ____sys_sendmsg+0x505/0x830
[  425.490883][T11465]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.490911][T11465]  ? import_iovec+0x74/0xa0
[  425.490935][T11465]  ___sys_sendmsg+0x21f/0x2a0
[  425.490956][T11465]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.491009][T11465]  ? __fget_files+0x2a/0x420
[  425.491028][T11465]  ? __fget_files+0x3a0/0x420
[  425.491057][T11465]  __x64_sys_sendmsg+0x19b/0x260
[  425.491078][T11465]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.491107][T11465]  ? __pfx_ksys_write+0x10/0x10
[  425.491128][T11465]  ? do_syscall_64+0xbe/0xfa0
[  425.491153][T11465]  do_syscall_64+0xfa/0xfa0
[  425.491169][T11465]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.491186][T11465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.491202][T11465]  ? clear_bhb_loop+0x60/0xb0
[  425.491224][T11465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.491240][T11465] RIP: 0033:0x7f092138eec9
[  425.491256][T11465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.491270][T11465] RSP: 002b:00007f092220f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.491289][T11465] RAX: ffffffffffffffda RBX: 00007f09215e5fa0 RCX: 00007f092138eec9
[  425.491303][T11465] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003
[  425.491314][T11465] RBP: 00007f092220f090 R08: 0000000000000000 R09: 0000000000000000
[  425.491325][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.491335][T11465] R13: 00007f09215e6038 R14: 00007f09215e5fa0 R15: 00007ffc1ed41348
[  425.491365][T11465]  </TASK>
[  425.784117][  T917] usb 3-1: config 0 descriptor??
[  425.791735][ T5970] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  425.961262][ T5970] usb 5-1: Using ep0 maxpacket: 8
[  425.972786][ T5970] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  425.981090][ T5970] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  426.001575][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  426.010491][ T5970] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  426.028480][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  426.040858][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  426.058850][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  426.065127][T11478] binder: BINDER_SET_CONTEXT_MGR already set
[  426.070951][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  426.076808][ T5918] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  426.100623][T11478] binder: 11477:11478 ioctl 4018620d 200000000000 returned -16
[  426.104113][ T5970] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  426.119356][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.129158][ T5970] usb 5-1: Product: syz
[  426.133743][ T5970] usb 5-1: Manufacturer: syz
[  426.138370][ T5970] usb 5-1: SerialNumber: syz
[  426.156678][ T5970] usb 5-1: config 0 descriptor??
[  426.162562][T11467] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  426.173352][ T5970] hub 5-1:0.0: bad descriptor, ignoring hub
[  426.179300][ T5970] hub 5-1:0.0: probe with driver hub failed with error -5
[  426.224759][ T5970] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input100
[  426.264269][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.285809][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.308558][ T5918] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  426.334378][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.363286][T11483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.380382][ T5918] usb 2-1: config 0 descriptor??
[  426.389375][T11483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.419222][ T8028] usb 5-1: USB disconnect, device number 70
[  426.419390][    C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19
[  426.754907][T11495] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  426.776269][T11495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  426.787120][T11495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.796075][T11495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.411134][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.420318][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.929521][  T917] ath6kl: Failed to read usb control message: -71
[  427.971415][  T917] ath6kl: Unable to read the bmi data from the device: -71
[  427.978714][  T917] ath6kl: Unable to recv target info: -71
[  428.034070][  T917] ath6kl: Failed to init ath6kl core: -71
[  428.058483][  T917] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  428.101708][  T917] usb 3-1: USB disconnect, device number 74
[  428.139487][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.150334][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.223504][T11515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.250226][T11515] tipc: Disabling bearer <eth:syzkaller0>
[  428.271523][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'.
[  428.282401][T11517] veth1_macvtap: left promiscuous mode
[  428.383844][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.416962][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.431441][  T917] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  428.566067][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'.
[  428.593205][  T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.604406][  T917] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00
[  428.613919][  T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.624606][  T917] usb 3-1: config 0 descriptor??
[  429.081133][  T917] thrustmaster 0003:044F:B654.002C: item fetching failed at offset 6/7
[  429.090895][  T917] thrustmaster 0003:044F:B654.002C: parse failed
[  429.098810][  T917] thrustmaster 0003:044F:B654.002C: probe with driver thrustmaster failed with error -22
[  429.243993][ T5918] usbhid 2-1:0.0: can't add hid device: -71
[  429.252682][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  429.267142][ T5918] usb 2-1: USB disconnect, device number 86
[  429.379426][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.392090][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.406832][  T917] usb 3-1: USB disconnect, device number 75
[  429.569725][T11542] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1720'.
[  429.778079][T11553] netlink: 'syz.1.1724': attribute type 1 has an invalid length.
[  429.781397][ T5970] usb 5-1: new full-speed USB device number 71 using dummy_hcd
[  429.946052][ T5970] usb 5-1: config 0 has an invalid interface number: 93 but max is 0
[  429.963071][ T5970] usb 5-1: config 0 has no interface number 0
[  429.975641][ T5970] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  429.986503][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.994964][ T5970] usb 5-1: Product: syz
[  429.999294][ T5970] usb 5-1: Manufacturer: syz
[  430.004869][ T5970] usb 5-1: SerialNumber: syz
[  430.020377][ T5970] usb 5-1: config 0 descriptor??
[  430.153137][T11568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.166861][T11568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.233801][ T5970] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  430.253576][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  430.265382][ T5970] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  430.274761][ T5970] usb 5-1: media controller created
[  430.286495][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  430.360167][ T5970] DVB: Unable to find symbol dib7000p_attach()
[  430.366637][ T5970] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  430.377467][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  430.386797][ T5970] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  430.395667][ T5970] usb 5-1: media controller created
[  430.403998][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  430.419232][ T5970] dib0700: the master dib7090 has to be initialized first
[  430.426866][ T5970] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  430.501265][ T5970] rc_core: IR keymap rc-dib0700-rc5 not found
[  430.507386][ T5970] Registered IR keymap rc-empty
[  430.514569][ T5970] dvb-usb: could not initialize remote control.
[  430.520822][ T5970] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  430.538040][ T5970] usb 5-1: USB disconnect, device number 71
[  430.592828][ T5970] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  430.761514][  T917] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  430.894692][  T917] usb 2-1: device descriptor read/64, error -71
[  431.151694][  T917] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  431.301397][  T917] usb 2-1: device descriptor read/64, error -71
[  431.361292][ T5970] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  431.421543][  T917] usb usb2-port1: attempt power cycle
[  431.519466][ T5970] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  431.528758][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.536854][ T5970] usb 3-1: Product: syz
[  431.541107][ T5970] usb 3-1: Manufacturer: syz
[  431.545769][ T5970] usb 3-1: SerialNumber: syz
[  431.553482][ T5970] usb 3-1: config 0 descriptor??
[  431.761332][  T917] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  431.768412][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.778045][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.792606][  T917] usb 2-1: device descriptor read/8, error -71
[  431.996313][ T5970] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  432.041994][  T917] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  432.082762][  T917] usb 2-1: device descriptor read/8, error -71
[  432.201871][  T917] usb usb2-port1: unable to enumerate USB device
[  432.632865][ T5970] usb 3-1: reset high-speed USB device number 76 using dummy_hcd
[  432.802622][ T5970] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  432.810910][ T5970] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  432.819893][ T6801] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  432.829273][ T6801] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  433.013208][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.026451][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.048429][  T917] usb 3-1: USB disconnect, device number 76
[  433.188774][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.197897][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.521328][  T917] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  433.681341][  T917] usb 5-1: Using ep0 maxpacket: 16
[  433.688525][  T917] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[  433.696906][  T917] usb 5-1: config 0 has no interface number 0
[  433.705521][  T917] usb 5-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00
[  433.714705][  T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.722916][  T917] usb 5-1: Product: syz
[  433.727633][  T917] usb 5-1: Manufacturer: syz
[  433.735060][  T917] usb 5-1: SerialNumber: syz
[  433.748504][  T917] usb 5-1: config 0 descriptor??
[  433.759459][  T917] usb-storage 5-1:0.200: USB Mass Storage device detected
[  433.781479][ T5970] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[  433.807090][T11615] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1740'.
[  433.861489][ T8028] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  433.936763][ T5970] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  433.945620][ T5970] usb 2-1: config 0 has no interface number 0
[  433.956596][ T5970] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  433.974058][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.985029][ T8014] usb 5-1: USB disconnect, device number 72
[  434.000169][ T5970] usb 2-1: Product: syz
[  434.011126][ T5970] usb 2-1: Manufacturer: syz
[  434.011979][ T8028] usb 3-1: device descriptor read/64, error -71
[  434.023094][ T5970] usb 2-1: SerialNumber: syz
[  434.031048][ T5970] usb 2-1: config 0 descriptor??
[  434.241836][ T5970] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  434.257071][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  434.261357][ T8028] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  434.266448][ T5970] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  434.281941][ T5970] usb 2-1: media controller created
[  434.289989][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.336519][ T5970] DVB: Unable to find symbol dib7000p_attach()
[  434.350017][ T5970] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  434.363934][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  434.372998][ T5970] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  434.381812][ T5970] usb 2-1: media controller created
[  434.389944][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.402796][ T8028] usb 3-1: device descriptor read/64, error -71
[  434.404405][ T5970] dib0700: the master dib7090 has to be initialized first
[  434.416580][ T5970] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  434.491665][ T5970] rc_core: IR keymap rc-dib0700-rc5 not found
[  434.498287][ T5970] Registered IR keymap rc-empty
[  434.503556][ T5970] dvb-usb: could not initialize remote control.
[  434.509818][ T5970] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  434.512702][ T8028] usb usb3-port1: attempt power cycle
[  434.526028][ T5970] usb 2-1: USB disconnect, device number 91
[  434.598379][ T5970] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  434.893793][ T8028] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  434.902203][ T5918] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  434.928982][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.938095][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.938339][ T8028] usb 3-1: device descriptor read/8, error -71
[  435.072749][ T5918] usb 5-1: Using ep0 maxpacket: 32
[  435.081221][ T5918] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  435.089456][ T5918] usb 5-1: config 0 has no interface number 0
[  435.098111][ T5918] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  435.107240][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.115550][ T5918] usb 5-1: Product: syz
[  435.119743][ T5918] usb 5-1: Manufacturer: syz
[  435.124668][ T5918] usb 5-1: SerialNumber: syz
[  435.131929][ T5918] usb 5-1: config 0 descriptor??
[  435.140943][ T5918] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  435.211293][ T8028] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  435.232761][ T8028] usb 3-1: device descriptor read/8, error -71
[  435.291325][ T5970] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  435.343064][ T8028] usb usb3-port1: unable to enumerate USB device
[  435.350079][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  435.365913][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  435.441531][ T5970] usb 2-1: Using ep0 maxpacket: 32
[  435.449061][ T5970] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  435.458911][ T5970] usb 2-1: config 0 has no interface number 0
[  435.465941][ T5970] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  435.489121][ T5970] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  435.498546][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.506621][ T5970] usb 2-1: Product: syz
[  435.510973][ T5970] usb 2-1: Manufacturer: syz
[  435.515731][ T5970] usb 2-1: SerialNumber: syz
[  435.525535][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.528308][ T5970] usb 2-1: config 0 descriptor??
[  435.543777][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.551746][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 7
[  435.562143][ T5970] smsc95xx v2.0.0
[  435.565838][ T5970] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  435.577585][ T5970] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[  435.759269][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.768446][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.857183][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.866179][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.165821][T11712] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[  436.174377][T11712] netlink: 'syz.0.1748': attribute type 101 has an invalid length.
[  436.183684][T11712] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1748'.
[  436.268161][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  436.281476][ T8028] usb 5-1: USB disconnect, device number 73
[  436.324741][ T8028] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  436.378608][ T8028] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  436.414104][ T8028] quatech2 5-1:0.51: device disconnected
[  436.506191][T11741] syzkaller1: entered promiscuous mode
[  436.531342][T11741] syzkaller1: entered allmulticast mode
[  437.021342][ T5970] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[  437.173634][ T5970] usb 3-1: config 0 has an invalid interface number: 93 but max is 0
[  437.181842][ T5970] usb 3-1: config 0 has no interface number 0
[  437.190225][ T5970] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  437.199504][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.207904][ T5970] usb 3-1: Product: syz
[  437.213058][ T5970] usb 3-1: Manufacturer: syz
[  437.217687][ T5970] usb 3-1: SerialNumber: syz
[  437.225467][ T5970] usb 3-1: config 0 descriptor??
[  437.442398][ T5970] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  437.470325][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  437.481717][ T5970] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  437.494776][ T5970] usb 3-1: media controller created
[  437.505615][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  437.562906][ T5970] DVB: Unable to find symbol dib7000p_attach()
[  437.569181][ T5970] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  437.578106][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  437.588879][ T5970] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  437.601361][ T5970] usb 3-1: media controller created
[  437.610440][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  437.627066][ T5970] dib0700: the master dib7090 has to be initialized first
[  437.633512][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.636125][ T5970] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  437.646027][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.678576][T11782] sctp: [Deprecated]: syz.0.1755 (pid 11782) Use of int in maxseg socket option.
[  437.678576][T11782] Use struct sctp_assoc_value instead
[  437.732935][ T8028] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  437.734123][ T5970] rc_core: IR keymap rc-dib0700-rc5 not found
[  437.748143][ T5970] Registered IR keymap rc-empty
[  437.753474][ T5970] dvb-usb: could not initialize remote control.
[  437.757026][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.761881][ T5970] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  437.773245][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.791822][ T5970] usb 3-1: USB disconnect, device number 81
[  437.850428][ T5970] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  437.852310][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.878172][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.892534][ T8028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.905430][ T8028] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  437.917885][ T8028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.920406][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.937998][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.947838][ T8028] usb 5-1: config 0 descriptor??
[  438.083656][T11823] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1758'.
[  438.149193][ T8014] usb 2-1: USB disconnect, device number 92
[  438.232512][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.249993][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.501380][ T8014] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  438.551282][ T5918] usb 3-1: new low-speed USB device number 82 using dummy_hcd
[  438.651269][ T8014] usb 2-1: Using ep0 maxpacket: 8
[  438.660930][ T8014] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  438.670106][ T8014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.678300][ T8014] usb 2-1: Product: syz
[  438.682555][ T8014] usb 2-1: Manufacturer: syz
[  438.687167][ T8014] usb 2-1: SerialNumber: syz
[  438.697049][ T8014] usb 2-1: config 0 descriptor??
[  438.706912][ T8014] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  438.713494][ T5918] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  438.722039][ T5918] usb 3-1: config 0 has no interface number 0
[  438.728292][ T5918] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  438.739916][ T5918] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  438.751559][ T5918] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  438.760702][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.773188][ T5918] usb 3-1: config 0 descriptor??
[  438.779455][T11845] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  438.795191][ T5918] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  438.993282][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[  439.058314][ T5918] usb 3-1: USB disconnect, device number 82
[  439.913639][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'.
[  439.931246][ T8014] gspca_sonixj: reg_w1 err -71
[  440.018042][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  440.019352][ T8014] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  440.024508][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  440.052534][ T8014] usb 2-1: USB disconnect, device number 93
[  440.515874][ T8028] usbhid 5-1:0.0: can't add hid device: -71
[  440.557542][ T8028] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  440.596046][ T8028] usb 5-1: USB disconnect, device number 74
[  440.861356][  T917] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  440.931481][ T8028] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  441.013590][  T917] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.024923][  T917] usb 2-1: config 0 interface 0 has no altsetting 0
[  441.031623][  T917] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  441.040702][  T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.062065][  T917] usb 2-1: config 0 descriptor??
[  441.084320][ T8028] usb 5-1: unable to get BOS descriptor or descriptor too short
[  441.094355][ T8028] usb 5-1: not running at top speed; connect to a high speed hub
[  441.108181][ T8028] usb 5-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13
[  441.117611][ T8028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.128321][ T8028] usb 5-1: Product: syz
[  441.132774][ T8028] usb 5-1: Manufacturer: syz
[  441.137471][ T8028] usb 5-1: SerialNumber: syz
[  441.274527][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.285502][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.350772][ T8028] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  441.361339][ T8014] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  441.385759][ T8028] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -2
[  441.399115][ T8028] usb 5-1: USB disconnect, device number 75
[  441.424039][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  441.477040][  T917] hid_parser_main: 48 callbacks suppressed
[  441.477065][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.492128][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.499530][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.506983][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.514750][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.522316][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.529745][  T917] playstation 0003:054C:05C4.002D: unknown main item tag 0x0
[  441.531283][ T8014] usb 3-1: Using ep0 maxpacket: 8
[  441.545955][  T917] playstation 0003:054C:05C4.002D: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[  441.547559][ T8014] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  441.566641][ T8014] usb 3-1: config 179 has no interface number 0
[  441.573197][ T8014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  441.586789][ T8014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  441.598678][ T8014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  441.610363][ T8014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  441.629943][ T8014] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  441.643815][ T8014] usb 3-1: config 179 interface 65 has no altsetting 0
[  441.650725][ T8014] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  441.659947][ T8014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.681247][T11895] input: syz0 as /devices/virtual/input/input104
[  441.697858][T11895] netlink: 'syz.1.1766': attribute type 58 has an invalid length.
[  441.708629][  T917] playstation 0003:054C:05C4.002D: Failed to retrieve feature with reportID 18: -71
[  441.711053][ T8014] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input105
[  441.749572][  T917] playstation 0003:054C:05C4.002D: Failed to retrieve DualShock4 pairing info: -71
[  441.760881][  T917] playstation 0003:054C:05C4.002D: Failed to get MAC address from DualShock4
[  441.773702][  T917] playstation 0003:054C:05C4.002D: Failed to create dualshock4.
[  441.788428][  T917] playstation 0003:054C:05C4.002D: probe with driver playstation failed with error -71
[  441.827074][  T917] usb 2-1: USB disconnect, device number 94
[  441.926091][ T8014] usb 3-1: USB disconnect, device number 83
[  441.932206][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  441.967830][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.996768][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.023596][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.044387][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.332800][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.361513][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.388799][T12001] netlink: 'syz.0.1772': attribute type 2 has an invalid length.
[  442.403066][T12001] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1772'.
[  442.621881][  T917] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  442.781553][  T917] usb 5-1: Using ep0 maxpacket: 16
[  442.789720][T12038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.800762][  T917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.817200][T12038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.825406][  T917] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  442.836395][  T917] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  442.847142][  T917] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  442.863248][  T917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  442.872629][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  442.880709][  T917] usb 5-1: SerialNumber: syz
[  442.891383][ T8028] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  442.913287][T12007] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  442.920844][T12007] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  442.935256][  T917] hub 5-1:1.0: bad descriptor, ignoring hub
[  442.944627][  T917] hub 5-1:1.0: probe with driver hub failed with error -5
[  443.055701][ T8028] usb 2-1: unable to get BOS descriptor or descriptor too short
[  443.064794][ T8028] usb 2-1: not running at top speed; connect to a high speed hub
[  443.076629][ T8028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.087897][ T8028] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  443.101718][ T8028] usb 2-1: string descriptor 0 read error: -22
[  443.108672][ T8028] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  443.118038][ T8028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.141106][T12007] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  443.172957][T12007] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  443.180669][ T8028] usb 2-1: 0:2 : does not exist
[  443.594622][T12075] ubi31: attaching mtd0
[  443.619115][T12075] ubi31: scanning is finished
[  443.628271][  T917] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  443.634637][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.653570][T12075] ubi31: empty MTD device detected
[  443.675016][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.835370][T12075] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  443.949422][ T8014] usb 5-1: USB disconnect, device number 76
[  443.969301][ T8014] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  444.105657][T12101] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1782'.
[  444.197276][ T8028] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  444.211065][ T8028] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  444.311227][ T8028] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  444.336642][ T8028] usb 2-1: USB disconnect, device number 95
[  444.395796][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.434295][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.506258][T12131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  444.526547][T12131] overlayfs: failed to resolve './file1': -2
[  444.745821][ T8014] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  444.903013][ T8014] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[  444.911608][ T8014] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  444.920795][ T8014] usb 5-1: config 150 has no interface number 0
[  444.928126][ T8014] usb 5-1: config 150 interface 204 has no altsetting 0
[  444.937940][ T8014] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  444.947072][ T8014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.955337][ T8014] usb 5-1: Product: syz
[  444.959518][ T8014] usb 5-1: Manufacturer: syz
[  444.964223][ T8014] usb 5-1: SerialNumber: syz
[  444.981765][ T5970] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  445.044976][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.054470][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.156355][ T5970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  445.166725][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.174932][ T5970] usb 2-1: Product: syz
[  445.179216][ T5970] usb 2-1: Manufacturer: syz
[  445.184457][ T5970] usb 2-1: SerialNumber: syz
[  445.193865][ T8014] xr_serial 5-1:150.204: skipping garbage
[  445.203147][ T8014] xr_serial 5-1:150.204: xr_serial converter detected
[  445.224349][ T5970] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  445.245451][   T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  445.664675][  T917] usb 2-1: USB disconnect, device number 96
[  446.014667][ T8014] usb 5-1: xr_serial converter now attached to ttyUSB0
[  446.213825][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.245974][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.256625][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.280244][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.304862][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.320551][ T5970] usb 5-1: USB disconnect, device number 77
[  446.335493][   T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  446.363372][ T5970] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  446.375394][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.391985][   T24] ath9k_htc: Failed to initialize the device
[  446.401262][  T917] usb 2-1: ath9k_htc: USB layer deinitialized
[  446.413536][ T5970] xr_serial 5-1:150.204: device disconnected
[  446.463243][ T8014] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  446.605624][T12258] netlink: 'syz.4.1794': attribute type 3 has an invalid length.
[  446.625110][ T8014] usb 3-1: device descriptor read/64, error -71
[  446.648802][   T30] audit: type=1326 audit(1758893006.341:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.4.1794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f092138eec9 code=0x0
[  446.881357][ T8014] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  446.973097][T12278] 8021q: VLANs not supported on wg1
[  447.023775][ T8014] usb 3-1: device descriptor read/64, error -71
[  447.044546][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.055685][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.064622][ T5970] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  447.135047][ T8014] usb usb3-port1: attempt power cycle
[  447.226550][ T5970] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  447.245208][ T5970] usb 5-1: config 0 has no interface number 0
[  447.261245][ T5970] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  447.291447][ T5970] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  447.314510][ T5970] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[  447.339085][ T5970] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[  447.347396][T12299] FAULT_INJECTION: forcing a failure.
[  447.347396][T12299] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.357828][ T5970] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  447.377431][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.390670][ T5970] usb 5-1: Product: syz
[  447.391217][T12299] CPU: 0 UID: 0 PID: 12299 Comm: syz.1.1799 Not tainted syzkaller #0 PREEMPT(full) 
[  447.391240][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  447.391251][T12299] Call Trace:
[  447.391258][T12299]  <TASK>
[  447.391266][T12299]  dump_stack_lvl+0x189/0x250
[  447.391302][T12299]  ? __pfx____ratelimit+0x10/0x10
[  447.391328][T12299]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.391353][T12299]  ? __pfx__printk+0x10/0x10
[  447.391388][T12299]  should_fail_ex+0x414/0x560
[  447.391418][T12299]  _copy_to_user+0x31/0xb0
[  447.391442][T12299]  simple_read_from_buffer+0xe1/0x170
[  447.391466][T12299]  proc_fail_nth_read+0x1b3/0x220
[  447.391495][T12299]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.391530][T12299]  ? rw_verify_area+0x2a6/0x4d0
[  447.391546][T12299]  ? __lock_acquire+0xab9/0xd20
[  447.391563][T12299]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.391589][T12299]  vfs_read+0x200/0xa30
[  447.391605][T12299]  ? fdget_pos+0x247/0x320
[  447.391629][T12299]  ? __pfx___mutex_lock+0x10/0x10
[  447.391648][T12299]  ? __pfx_vfs_read+0x10/0x10
[  447.391667][T12299]  ? __fget_files+0x2a/0x420
[  447.391691][T12299]  ? __fget_files+0x3a0/0x420
[  447.391709][T12299]  ? __fget_files+0x2a/0x420
[  447.391737][T12299]  ksys_read+0x145/0x250
[  447.391757][T12299]  ? __pfx_ksys_read+0x10/0x10
[  447.391778][T12299]  ? do_syscall_64+0xbe/0xfa0
[  447.391799][T12299]  do_syscall_64+0xfa/0xfa0
[  447.391817][T12299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.391833][T12299]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  447.391851][T12299]  ? clear_bhb_loop+0x60/0xb0
[  447.391873][T12299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.391889][T12299] RIP: 0033:0x7fd1f3d8d8dc
[  447.391904][T12299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  447.391919][T12299] RSP: 002b:00007fd1f4cb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  447.391939][T12299] RAX: ffffffffffffffda RBX: 00007fd1f3fe5fa0 RCX: 00007fd1f3d8d8dc
[  447.391952][T12299] RDX: 000000000000000f RSI: 00007fd1f4cb40a0 RDI: 0000000000000004
[  447.391963][T12299] RBP: 00007fd1f4cb4090 R08: 0000000000000000 R09: 0000000000000000
[  447.391974][T12299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.391985][T12299] R13: 00007fd1f3fe6038 R14: 00007fd1f3fe5fa0 R15: 00007ffe6d15ae28
[  447.392015][T12299]  </TASK>
[  447.633583][ T5970] usb 5-1: Manufacturer: syz
[  447.638216][ T5970] usb 5-1: SerialNumber: syz
[  447.647297][ T5970] usb 5-1: config 0 descriptor??
[  447.653369][T12271] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  447.692031][ T8014] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  447.762675][ T8014] usb 3-1: device descriptor read/8, error -71
[  447.866380][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.883162][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.001442][ T8014] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  448.022350][ T8014] usb 3-1: device descriptor read/8, error -71
[  448.132707][ T8014] usb usb3-port1: unable to enumerate USB device
[  448.487860][T12339] netlink: 'syz.1.1803': attribute type 6 has an invalid length.
[  448.502578][T12339] netlink: 'syz.1.1803': attribute type 6 has an invalid length.
[  449.071394][ T8014] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[  449.238112][ T8014] usb 2-1: config index 0 descriptor too short (expected 19492, got 36)
[  449.247813][ T8014] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  449.256708][ T8014] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36
[  449.265970][ T8014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  449.277093][ T8014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.286962][ T8014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  449.300712][ T8014] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  449.309998][ T8014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.322893][ T8014] usb 2-1: config 0 descriptor??
[  449.741601][ T8014] hid (null): report_id 2952473739 is invalid
[  449.759309][ T8014] lg-g15 0003:046D:C225.002E: report_id 2952473739 is invalid
[  449.775423][ T8014] lg-g15 0003:046D:C225.002E: item 0 4 1 8 parsing failed
[  449.785196][ T8014] lg-g15 0003:046D:C225.002E: probe with driver lg-g15 failed with error -22
[  449.950562][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.960696][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.971384][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.980576][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.003844][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.015939][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.061594][ T8014] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  450.085566][  T917] usb 2-1: USB disconnect, device number 97
[  450.211300][ T8014] usb 3-1: Using ep0 maxpacket: 32
[  450.219846][ T8014] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  450.231734][ T8014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  450.242982][ T8014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  450.255004][ T8014] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  450.264226][ T8014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.277578][ T8014] usb 3-1: config 0 descriptor??
[  450.284434][T12390] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  450.298660][ T8014] hub 3-1:0.0: USB hub found
[  450.598095][ T8014] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  450.647377][T12422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  450.654689][ T8014] usbhid 3-1:0.0: can't add hid device: -71
[  450.681591][T12422] overlayfs: failed to resolve './file1': -2
[  450.688291][ T8014] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  450.720959][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.753190][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.907125][ T8014] usb 3-1: reset high-speed USB device number 88 using dummy_hcd
[  451.063403][ T8014] usb 3-1: device firmware changed
[  451.072141][ T8014] usb 3-1: USB disconnect, device number 88
[  451.091344][   T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  451.221433][   T24] usb 2-1: device descriptor read/64, error -71
[  451.391339][ T8014] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  451.462414][   T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  451.474368][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.489339][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.541367][ T8014] usb 3-1: Using ep0 maxpacket: 32
[  451.549628][ T8014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.560687][ T8014] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  451.570740][ T8014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.583532][ T8014] usb 3-1: config 0 descriptor??
[  451.597458][ T8014] usbhid 3-1:0.0: can't add hid device: -22
[  451.603706][ T8014] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  451.611772][   T24] usb 2-1: device descriptor read/64, error -71
[  451.735850][   T24] usb usb2-port1: attempt power cycle
[  451.798426][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.808011][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.081292][   T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  452.102023][   T24] usb 2-1: device descriptor read/8, error -71
[  452.341290][   T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  452.361978][   T24] usb 2-1: device descriptor read/8, error -71
[  452.471987][   T24] usb usb2-port1: unable to enumerate USB device
[  453.708618][  T917] usb 3-1: USB disconnect, device number 89
[  454.291319][   T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  454.441468][   T24] usb 3-1: Using ep0 maxpacket: 32
[  454.447728][   T24] usb 3-1: no configurations
[  454.452744][   T24] usb 3-1: can't read configurations, error -22
[  454.581349][   T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  454.741619][   T24] usb 3-1: Using ep0 maxpacket: 32
[  454.747798][   T24] usb 3-1: no configurations
[  454.752816][   T24] usb 3-1: can't read configurations, error -22
[  454.759620][   T24] usb usb3-port1: attempt power cycle
[  454.822734][T12555] fuse: Unknown parameter '^ÜÝúê­†o2Ï9»00000000000000000000'
[  454.835883][T12555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  454.842417][T12555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  454.852617][T12555] vhci_hcd vhci_hcd.0: Device attached
[  454.862792][T12556] vhci_hcd: cannot find the pending unlink 0
[  454.875753][T12556] vhci_hcd: connection closed
[  454.876910][   T12] vhci_hcd: stop threads
[  454.886171][   T12] vhci_hcd: release socket
[  454.890638][   T12] vhci_hcd: disconnect device
[  455.101386][   T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  455.122280][   T24] usb 3-1: Using ep0 maxpacket: 32
[  455.128356][   T24] usb 3-1: no configurations
[  455.138355][   T24] usb 3-1: can't read configurations, error -22
[  455.273193][   T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  455.302495][   T24] usb 3-1: Using ep0 maxpacket: 32
[  455.310563][   T24] usb 3-1: no configurations
[  455.315629][   T24] usb 3-1: can't read configurations, error -22
[  455.323126][   T24] usb usb3-port1: unable to enumerate USB device
[  455.424016][T12559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  455.579118][T12569] ==================================================================
[  455.579135][T12569] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x3d8/0xd80
[  455.579165][T12569] Read of size 776 at addr ffff88804ec3eb68 by task syz.1.1832/12569
[  455.579183][T12569] 
[  455.579194][T12569] CPU: 0 UID: 0 PID: 12569 Comm: syz.1.1832 Not tainted syzkaller #0 PREEMPT(full) 
[  455.579220][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  455.579232][T12569] Call Trace:
[  455.579240][T12569]  <TASK>
[  455.579249][T12569]  dump_stack_lvl+0x189/0x250
[  455.579277][T12569]  ? __virt_addr_valid+0x1c8/0x5c0
[  455.579295][T12569]  ? rcu_is_watching+0x15/0xb0
[  455.579318][T12569]  ? __kasan_check_byte+0x12/0x40
[  455.579337][T12569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.579364][T12569]  ? rcu_is_watching+0x15/0xb0
[  455.579387][T12569]  ? lock_release+0x4b/0x3e0
[  455.579410][T12569]  ? __virt_addr_valid+0x1c8/0x5c0
[  455.579426][T12569]  ? __virt_addr_valid+0x4a5/0x5c0
[  455.579452][T12569]  print_report+0xca/0x240
[  455.579471][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.579489][T12569]  kasan_report+0x118/0x150
[  455.579508][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.579532][T12569]  kasan_check_range+0x2b0/0x2c0
[  455.579550][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.579570][T12569]  __asan_memcpy+0x29/0x70
[  455.579595][T12569]  soft_cursor+0x3d8/0xd80
[  455.579618][T12569]  bit_cursor+0x16d0/0x1f80
[  455.579636][T12569]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  455.579664][T12569]  ? queue_delayed_work_on+0x11a/0x280
[  455.579695][T12569]  ? __pfx_bit_cursor+0x10/0x10
[  455.579713][T12569]  ? bit_cursor+0x16d0/0x1f80
[  455.579738][T12569]  ? __pfx_bit_cursor+0x10/0x10
[  455.579760][T12569]  hide_cursor+0xd8/0x480
[  455.579787][T12569]  ? __pfx_hide_cursor+0x10/0x10
[  455.579810][T12569]  ? add_softcursor+0xe9/0x510
[  455.579830][T12569]  ? __pfx_add_softcursor+0x10/0x10
[  455.579849][T12569]  ? __pfx_bit_cursor+0x10/0x10
[  455.579870][T12569]  update_region+0x1c1/0x490
[  455.579896][T12569]  vcs_write+0xd65/0x1260
[  455.579924][T12569]  ? __pfx_vcs_write+0x10/0x10
[  455.579941][T12569]  ? security_file_permission+0x75/0x290
[  455.579968][T12569]  ? rw_verify_area+0x255/0x4d0
[  455.579985][T12569]  ? __lock_acquire+0xab9/0xd20
[  455.580005][T12569]  ? __pfx_vcs_write+0x10/0x10
[  455.580023][T12569]  vfs_write+0x27e/0xb30
[  455.580045][T12569]  ? __pfx_vfs_write+0x10/0x10
[  455.580063][T12569]  ? __fget_files+0x2a/0x420
[  455.580087][T12569]  ? __fget_files+0x2a/0x420
[  455.580117][T12569]  ? __fget_files+0x3a0/0x420
[  455.580144][T12569]  ? __fget_files+0x2a/0x420
[  455.580167][T12569]  ksys_write+0x145/0x250
[  455.580186][T12569]  ? __pfx_ksys_write+0x10/0x10
[  455.580205][T12569]  ? do_syscall_64+0xbe/0xfa0
[  455.580225][T12569]  do_syscall_64+0xfa/0xfa0
[  455.580242][T12569]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.580260][T12569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.580279][T12569]  ? clear_bhb_loop+0x60/0xb0
[  455.580300][T12569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.580319][T12569] RIP: 0033:0x7fd1f3d8eec9
[  455.580335][T12569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  455.580352][T12569] RSP: 002b:00007fd1f4c93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  455.580372][T12569] RAX: ffffffffffffffda RBX: 00007fd1f3fe6090 RCX: 00007fd1f3d8eec9
[  455.580387][T12569] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000005
[  455.580399][T12569] RBP: 00007fd1f3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  455.580412][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.580423][T12569] R13: 00007fd1f3fe6128 R14: 00007fd1f3fe6090 R15: 00007ffe6d15ae28
[  455.580453][T12569]  </TASK>
[  455.580461][T12569] 
[  455.580467][T12569] The buggy address belongs to the physical page:
[  455.580478][T12569] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ec00
[  455.580497][T12569] head: order:6 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  455.580512][T12569] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  455.580531][T12569] page_type: f8(unknown)
[  455.580547][T12569] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000
[  455.580564][T12569] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000
[  455.580582][T12569] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000
[  455.580598][T12569] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000
[  455.580616][T12569] head: 00fff00000000006 ffffea00013b0001 00000000ffffffff 00000000ffffffff
[  455.580633][T12569] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000040
[  455.580644][T12569] page dumped because: kasan: bad access detected
[  455.580654][T12569] page_owner tracks the page as allocated
[  455.580663][T12569] page last allocated via order 6, migratetype Unmovable, gfp_mask 0x140cc0(GFP_USER|__GFP_COMP), pid 7344, tgid 7343 (syz.1.427), ts 189179272278, free_ts 161245834729
[  455.580694][T12569]  post_alloc_hook+0x240/0x2a0
[  455.580719][T12569]  get_page_from_freelist+0x2365/0x2440
[  455.580737][T12569]  __alloc_frozen_pages_noprof+0x181/0x370
[  455.580755][T12569]  alloc_pages_mpol+0x232/0x4a0
[  455.580772][T12569]  ___kmalloc_large_node+0x5f/0x1b0
[  455.580796][T12569]  __kmalloc_large_node_noprof+0x18/0x90
[  455.580821][T12569]  __kmalloc_noprof+0x4bd/0x7f0
[  455.580845][T12569]  fbcon_set_font+0x54d/0xec0
[  455.580862][T12569]  con_font_op+0xc08/0xfd0
[  455.580878][T12569]  vt_ioctl+0x1a89/0x1f20
[  455.580902][T12569]  tty_ioctl+0x929/0xde0
[  455.580920][T12569]  __se_sys_ioctl+0xfc/0x170
[  455.580946][T12569]  do_syscall_64+0xfa/0xfa0
[  455.580962][T12569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.580979][T12569] page last free pid 12 tgid 12 stack trace:
[  455.580991][T12569]  free_unref_folios+0xdb3/0x14f0
[  455.581016][T12569]  folios_put_refs+0x584/0x670
[  455.581037][T12569]  release_pages+0x4b4/0x520
[  455.581057][T12569]  io_free_region+0xb4/0x270
[  455.581078][T12569]  io_ring_ctx_free+0x278/0x4e0
[  455.581101][T12569]  io_ring_exit_work+0x8c4/0x930
[  455.581123][T12569]  process_scheduled_works+0xae1/0x17b0
[  455.581144][T12569]  worker_thread+0x8a0/0xda0
[  455.581165][T12569]  kthread+0x711/0x8a0
[  455.581188][T12569]  ret_from_fork+0x4bc/0x870
[  455.581205][T12569]  ret_from_fork_asm+0x1a/0x30
[  455.581224][T12569] 
[  455.581229][T12569] Memory state around the buggy address:
[  455.581240][T12569]  ffff88804ec3ea00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  455.581253][T12569]  ffff88804ec3ea80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  455.581265][T12569] >ffff88804ec3eb00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  455.581275][T12569]                                                           ^
[  455.581287][T12569]  ffff88804ec3eb80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  455.581300][T12569]  ffff88804ec3ec00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  455.581311][T12569] ==================================================================
[  455.581434][T12569] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  455.581457][T12569] CPU: 0 UID: 0 PID: 12569 Comm: syz.1.1832 Not tainted syzkaller #0 PREEMPT(full) 
[  455.581478][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  455.581496][T12569] Call Trace:
[  455.581504][T12569]  <TASK>
[  455.581512][T12569]  dump_stack_lvl+0x99/0x250
[  455.581541][T12569]  ? __asan_memcpy+0x40/0x70
[  455.581566][T12569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.581595][T12569]  ? __pfx__printk+0x10/0x10
[  455.581623][T12569]  vpanic+0x237/0x6d0
[  455.581645][T12569]  ? __pfx_vpanic+0x10/0x10
[  455.581664][T12569]  ? preempt_schedule_common+0x83/0xd0
[  455.581693][T12569]  ? preempt_schedule+0xae/0xc0
[  455.581723][T12569]  panic+0xb9/0xc0
[  455.581743][T12569]  ? __pfx_panic+0x10/0x10
[  455.581768][T12569]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  455.581798][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.581817][T12569]  check_panic_on_warn+0x89/0xb0
[  455.581837][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.581856][T12569]  end_report+0x78/0x160
[  455.581875][T12569]  kasan_report+0x129/0x150
[  455.581894][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.581918][T12569]  kasan_check_range+0x2b0/0x2c0
[  455.581936][T12569]  ? soft_cursor+0x3d8/0xd80
[  455.581956][T12569]  __asan_memcpy+0x29/0x70
[  455.581981][T12569]  soft_cursor+0x3d8/0xd80
[  455.582005][T12569]  bit_cursor+0x16d0/0x1f80
[  455.582024][T12569]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  455.582051][T12569]  ? queue_delayed_work_on+0x11a/0x280
[  455.582081][T12569]  ? __pfx_bit_cursor+0x10/0x10
[  455.582101][T12569]  ? bit_cursor+0x16d0/0x1f80
[  455.582128][T12569]  ? __pfx_bit_cursor+0x10/0x10
[  455.582152][T12569]  hide_cursor+0xd8/0x480
[  455.582181][T12569]  ? __pfx_hide_cursor+0x10/0x10
[  455.582203][T12569]  ? add_softcursor+0xe9/0x510
[  455.582224][T12569]  ? __pfx_add_softcursor+0x10/0x10
[  455.582245][T12569]  ? __pfx_bit_cursor+0x10/0x10
[  455.582266][T12569]  update_region+0x1c1/0x490
[  455.582290][T12569]  vcs_write+0xd65/0x1260
[  455.582313][T12569]  ? __pfx_vcs_write+0x10/0x10
[  455.582330][T12569]  ? security_file_permission+0x75/0x290
[  455.582356][T12569]  ? rw_verify_area+0x255/0x4d0
[  455.582372][T12569]  ? __lock_acquire+0xab9/0xd20
[  455.582390][T12569]  ? __pfx_vcs_write+0x10/0x10
[  455.582407][T12569]  vfs_write+0x27e/0xb30
[  455.582430][T12569]  ? __pfx_vfs_write+0x10/0x10
[  455.582456][T12569]  ? __fget_files+0x2a/0x420
[  455.582479][T12569]  ? __fget_files+0x2a/0x420
[  455.582500][T12569]  ? __fget_files+0x3a0/0x420
[  455.582521][T12569]  ? __fget_files+0x2a/0x420
[  455.582545][T12569]  ksys_write+0x145/0x250
[  455.582565][T12569]  ? __pfx_ksys_write+0x10/0x10
[  455.582584][T12569]  ? do_syscall_64+0xbe/0xfa0
[  455.582605][T12569]  do_syscall_64+0xfa/0xfa0
[  455.582623][T12569]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.582642][T12569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.582660][T12569]  ? clear_bhb_loop+0x60/0xb0
[  455.582682][T12569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.582701][T12569] RIP: 0033:0x7fd1f3d8eec9
[  455.582717][T12569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  455.582734][T12569] RSP: 002b:00007fd1f4c93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  455.582755][T12569] RAX: ffffffffffffffda RBX: 00007fd1f3fe6090 RCX: 00007fd1f3d8eec9
[  455.582770][T12569] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000005
[  455.582782][T12569] RBP: 00007fd1f3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  455.582795][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.582808][T12569] R13: 00007fd1f3fe6128 R14: 00007fd1f3fe6090 R15: 00007ffe6d15ae28
[  455.582831][T12569]  </TASK>
[  455.583115][T12569] Kernel Offset: disabled