last executing test programs:

4m11.3608112s ago: executing program 3 (id=943):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = inotify_init()
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
poll(&(0x7f0000000140)=[{r2, 0x12}], 0x1, 0x79)
close_range(r1, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0)
close(r3)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
fcntl$setstatus(r3, 0x4, 0x2000)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x3)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x12c5008, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
r7 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xfffffffc}, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r9, @ANYBLOB="470d00000000000000008100000004000180"], 0x18}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000039ac0a4c000000060a0b04000000000000000002000000200004801c0001800b00010065787468647200000c00028008000640000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0)

4m11.103223962s ago: executing program 3 (id=944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000100020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4m11.023554017s ago: executing program 3 (id=945):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e1f, @empty}}, 0x7fff, 0x9}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f00000002c0)=0x84)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, '\x00', 0x31}}}}, 0x84)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x47524247}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9], 0x1})
ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x2, @buffer={0x0, 0x1000, &(0x7f0000000f80)=""/4096}, &(0x7f0000000040)="0000501ef663", 0x0, 0x4, 0x10030, 0x0, 0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x96}}], 0x18}, 0x0)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

4m8.028563464s ago: executing program 3 (id=974):
r0 = inotify_init()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x6)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007"], 0xc0}}, 0x20040004)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68)
r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000080)=0xd0)
close(r3)
r4 = accept4$inet6(r1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000440)={"17c0c63e59104c3b6fa6d1105d0a15cb", 0x0, <r6=>0x0, {0x20000000}, {0xf2a, 0x1}, 0x5, [0x2, 0xfffffffffffffff6, 0x100000000, 0x3, 0x3, 0x1, 0x100000001, 0x1, 0x7fe, 0x0, 0x7, 0x6, 0x6, 0x400, 0x81, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000c40)={{r5}, r6, 0x6, @inherit={0x50, &(0x7f00000001c0)={0x0, 0x1, 0x400, 0x6, {0x0, 0x6, 0x8, 0xfffffffffffff828, 0x10c539cc}, [0x9]}}, @name="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"})
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="3201000000000020c007251540000102030109022400010100000009040000010301020009210000000122000009058103"], 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

4m5.035219231s ago: executing program 3 (id=994):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="090000006e696376663000000000000000000000080005000600000008001780040001000a00e8000802110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r1, r0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000080)=0x30)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)
fcntl$setpipe(r0, 0x407, 0xfff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r8 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x9c, 0x0, &(0x7f0000000740)=[@increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x2}, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/71, 0x47, 0x1, 0x3f}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x40}, @exit_looper, @increfs, @acquire_done], 0x4a, 0x0, &(0x7f0000000800)="723c2f302ad748d8217d2add930b7f26b4d6583c050fc2576e014b22abafcdef62d449e7b54f1b01e3457e3e4491095a8738f0912f3f76242030a62182fb3c91a342f0d54618b43ba113"})
socket$packet(0x11, 0x2, 0x300)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)

4m4.920639853s ago: executing program 3 (id=995):
syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x44, 0x5a, 0x49, 0x20, 0x1b80, 0xe346, 0x3579, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0xea, 0x76, 0x0, 0x4d, 0x93, 0x69, 0x10}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x48, &(0x7f0000000300)={0x5, 0xf, 0x48, 0x1, [@generic={0x43, 0x10, 0xa, "9d708f32738217022b44589c17c908bd1bb3ba87f035f58c4678a9365d4e90fd2dfccbf946e50da183065b291494a48d2d899093fdb8bb6df699ed5a0b2f871b"}]}, 0x1, [{0x39, &(0x7f0000000380)=@string={0x39, 0x3, "7ddb5ee56fc30b5b783e0401b900775ad59de40f44984a1d68ae61dc9b04efc76f23ff9a84a9269a1fe6760af3412a2b02261f25b73084"}}]})

3m49.824733515s ago: executing program 32 (id=995):
syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x44, 0x5a, 0x49, 0x20, 0x1b80, 0xe346, 0x3579, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0xea, 0x76, 0x0, 0x4d, 0x93, 0x69, 0x10}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x48, &(0x7f0000000300)={0x5, 0xf, 0x48, 0x1, [@generic={0x43, 0x10, 0xa, "9d708f32738217022b44589c17c908bd1bb3ba87f035f58c4678a9365d4e90fd2dfccbf946e50da183065b291494a48d2d899093fdb8bb6df699ed5a0b2f871b"}]}, 0x1, [{0x39, &(0x7f0000000380)=@string={0x39, 0x3, "7ddb5ee56fc30b5b783e0401b900775ad59de40f44984a1d68ae61dc9b04efc76f23ff9a84a9269a1fe6760af3412a2b02261f25b73084"}}]})

8.180928993s ago: executing program 2 (id=3181):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4aa6ebbaadac821a088be79aff597e399b67bde0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e3c8a0000f22d59504afc715f8eccf9b851691d3b14dac31434c85b11022072fe0fa5286123a3a84101d7aed2ec8c81a89d8d405d251f2ee1ffefd430c8aab10057a6919df57d2cab38afa06333101dd7b6c344aaea04a0b784cf2a6c70329597011650e89b305cf5ebff", 0xb1}], 0x1, 0x0, 0x0, 0x4000800}, {0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000140)="8f181b980baef05e390310718a721f6be2e357cab96ab959553faa7675c7a952245619c5ff8f83bcfeffb93c5785091a67482e2595219b877f101a6e6a9ed11383f0b7fb4467b53cf4079aab4ebcb2f8d916a32c91c84fb9420e5f004a68e36407ef341fc0e542e593015adde1c89c362bcc9be562f7a166bb4af4c51657d74169b1da88e6be2e486a09896b2a3323d1a5ad18e3da67d1de3e3cc45c6bf848a496f9b114b3d8f18cf651d2f764353bed7a807aca4e0f145531639e80dd66d9d50d9302842d094c72f0a9c54c23e3c536d091101b80606c7501d1d5b34695cc703c02adc83e9b5da30ffb071cf7", 0xed}, {&(0x7f0000000000)="f5728871718374918988063f58b071ce9f62fb91e1608e6ba7", 0x19}], 0x3, 0x0, 0x0, 0x20004000}], 0x2, 0x20004884)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000600010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r1)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x9})
syz_usb_control_io$printer(r2, &(0x7f0000001480)={0x14, &(0x7f0000001300)={0x40, 0x0, 0xd3, {0xd3, 0x21, "817e79b8545fb1ea725f67024ee49baf88a78e933497754e4b47b0c90a0641dd3739561e0b02b242738ae13d4d9bef6e9208186853007471b29d1355f423785ec7f77682eceb8c0bf507bcc4725ffc74d7572354028a6001dc853d464ddca9cb4b7b9977faa8e580bcb96666cc26b464c32406cd1a61d9ec7838423c2b073e0bbcb8b37b6a82d20092d477ac01e66ce0f293b1c1d45b922970453ac62a56c224a585c7705ccb1f4a894f55615805f25930b3e82979947e1d9afc900db85cc25ac6a557adaadff4820bf98536b5ab57c1a7"}}, &(0x7f0000001800)=ANY=[@ANYBLOB="0003690000006903c6c1fc9bfc21234e278cd7c35a1cbec85870e7a296ae214fa4749274bcd3da8723719a54db58fbee647f056989bb75c94c0854ac059b3ca983546dd5fc6177781ee3ac0931cd41690600fb89e8a5dccb4b6b2633454fe70bac3d6775f2fd0663ba25cb65e42399a2f5dcef9c53468b32fedc0093d1ca2c8c37c9dddb918e424d25a13ebbb55b5c2671d738aa3aaf49d8bd148e2d7b53272f4623d9b798cae64004ccb107dde3635a200b3da5476e6d4d5085af8b6f0ca8f5a217d43e453a81ebe1286de06f32ae18bdde71654cf7539f792b80d64e8be407c488"]}, &(0x7f00000017c0)={0x34, &(0x7f00000014c0)=ANY=[@ANYBLOB="400fbf00000083826c3ad5654b9a63de6e139de98b3a752648a1fbd9be0b88ad60008d6ac6303091cf6c98c0fe96344cc3986046f5d24500cdc4753373c4d7f899cbeacf5b1043f15a7a2262a43cdd632804acfe99dc0729c554b299216d2692572e356b57014f80828b50982acd1d25b2e40e9f95586775c85c8789631700ac5612f02e10aea7f3515a6a796a4de4096700826ddb4407d9976b0fb20b4412a493c1b56919e58245127451d73e3ba65b0a25b92df6e347a5b11a61c1d4a960f3a453ff58f6"], &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001640)={0x20, 0x0, 0xe4, {0xe2, "176ff6e7fa0e3531eb6c7972e93e134cb69ac667a1a490cc13875b8146b1275091e27d4d87d779d99faa42f09cf3c067b113dc2b8f0e9530d7bf6acb0c77f817e4e02ce3f7c956e3cd52b83e20fd1048f23cc30ae45184814d9fbd45d54fd9b277f91a98104ad0f954b4404f75dad3d0d610939cbd33073c8b75e1e4fc3d9d6d6f653715d2d8e95a1abec94eb410a10655a17988c1c88af044c1291db73012f195489d5d2c579c13c34518ce9864e759fbbf349c7cc04bad6ae51b0e30fe686652ebd2fa8f6626311ec84e8c3900144252f008bf044c0145bc06e6ff260efe777bab"}}, &(0x7f0000001740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001780)={0x20, 0x0, 0x1, 0xfe}})
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000003c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xee8, 0x2, 0xc, 0x5, 0x1, 0x7, "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"}}, 0x1000)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b000100000000090400000201035100090583130000000000072501"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x8}}, './file0\x00'})
getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000001440), &(0x7f0000001900)=0x4)

5.008437664s ago: executing program 2 (id=3206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0xffffffffffffff2f, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x40, 0x0, 0x7fff7ffc}]}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x3}, 0x4) (async)
open(&(0x7f0000000480)='./file0/file0\x00', 0x6002, 0x45)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) (async)
setsockopt(r4, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', 0x0}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x1, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='C', 0x0, 0xfffffffd, 0x0, 0x2, 0x0})
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="8235bc1dde60105b901802c94072006e0001000e030300c30c02060404000200060007020400040009000482250000080900050101061001010e000100000011000000090000000102020002020500010207000504180005000500040006107301020000000080030000000f0b0000010302000600030908000000020008000200"], 0x77)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010200a01f7100"], 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000a40)={&(0x7f0000000340)=[{0x7, 0x4200, 0x0, 0x0}, {0x9, 0x9000, 0x0, 0x0}, {0xffff, 0x5010, 0x0, 0x0}], 0x3})
setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000040)=0x2, 0x4) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x240000d0) (async)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46)

3.437804076s ago: executing program 1 (id=3213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="090f26bd0000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (fail_nth: 5)

3.218579333s ago: executing program 1 (id=3214):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000d0000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340012990000080026006c090000100051"], 0x40}}, 0x4800)

3.128574795s ago: executing program 1 (id=3215):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x250803)
quotactl_fd$Q_GETINFO(r4, 0xffffffff80000502, 0xee01, &(0x7f0000000140))
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0})
r5 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
setresuid(0x0, r6, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3.069164383s ago: executing program 1 (id=3216):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x14000000, 0x0, 0x800}, 0x20000000)
socket$nl_rdma(0x10, 0x3, 0x14)

3.023747001s ago: executing program 1 (id=3217):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x6000000}, 0x4000010)

2.938099151s ago: executing program 1 (id=3218):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x20000000, 0x4000002, 0x2})
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x111b090c, 0x40d})
close(r0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0x67, 0x95, 0x40, 0xbb4, 0xa7c, 0x1d1c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x43, 0x4, 0x0, 0x4, 0x45, 0xfd, 0x3}}]}}]}}, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async)
dup(r2) (async)
write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x20000000, 0x4000002, 0x2}) (async)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x111b090c, 0x40d}) (async)
close(r0) (async)
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0x67, 0x95, 0x40, 0xbb4, 0xa7c, 0x1d1c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x43, 0x4, 0x0, 0x4, 0x45, 0xfd, 0x3}}]}}]}}, 0x0) (async)

2.011656237s ago: executing program 2 (id=3219):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000fffffffffffffff5000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0xa8)
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0)
io_setup(0x2, &(0x7f0000000a00)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x0, 0x0, 0x22, 0x8, 0x7, r4, 0x0, 0x0, 0x9}])
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1c0}}, 0x0)

1.930668394s ago: executing program 2 (id=3220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0)

1.85693817s ago: executing program 2 (id=3221):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x10, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000000000000800", [0x0, 0x2000000000001]}})
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x207d)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x2604a000)

1.856450503s ago: executing program 2 (id=3222):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000b00)=ANY=[], &(0x7f0000000980)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a00)={0xc0, 0x5, 0x3, "ee83ca"}, &(0x7f0000000a40)={0x40, 0x5, 0x4, "a1cb2f80"}})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0x10, 0xcc, {0xcc, 0x21, "c9015d5ead392f16daab3402bd56257685bab5ab9442596d8cd7c8d86f2334ded16b9abe50ed5ab0b6ed25177f39f5424d45030dfa9f9973385d2298978240e36100d6ffcc4f2212fee46b669e72d02dc9588d3a9e9230ae232b08acf3e5d9166fd36a2879095fdbe6a08d18054702d58e8d20bb9a3f83af9904c24151d4e8b4c6bc9df179995b29bc1f7e6ebb27fcce609173323245825db7441431e3b6c2d6427584fb2e85e3b4ec7451931dc898303e1234e883bebf2f690fcd54fb6bb59e6621c9c3ba62ec0ea1da"}}, &(0x7f0000000140)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "fdca8fa225eb7417b470f8a9cb9b91693f3ab5a06bb15e408c7346e1a6399b4419988cb6601112b698a7a1060bdf6d72f4c1f8c22f87ed30e6de4321c7147e80cca21c6a5811d4f85b3bde364c2eb1be79af6c42175d95d249ab8f471ab24d677408e7d22ce10f0ffc8ae6394332dadc23c273fd2b4a37415f843b2eea7dce17984cb57528bc5a87c1abb28277b80ddb60866202cfbade78c16e9a4688a6dde5acdda05c"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0x11, 0xe3, "c456d76f34f3161f98746d352a02939fbe30104fe798cc2837b5ce69faa2d8a8ed223ec66db4867c463489fa092fd3472392ffc68528c218d814f652a769f254a4dad20523d286d73e2d60627eea6eb547a9319863c3eec8477fc763b29020a16cf5a071a91ad80d4ef1d450d7cb8bde3a6803db6211e85dbb2de1bf75e6ba49ef5ea46eb45a251624f187c1cb481e22be6c0382afe9901c894663ef917aeab28630771d3b49cea36539cae33467138f59b1397ffc0833aa28627397b3ae9fd261e85efb0cb1ea88d4384140936688e89e6833a4e57771bd30bb18bb526b05e09aa914"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x76}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0xfffffffa}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "baa8447aea03d77311bbebfe00c763d10fcd664f7cba0d04b76ae5f4a0952fdc9f0aabcb0da21c6cdbcad0a2017b5d"}})

1.620462234s ago: executing program 4 (id=3225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
accept4(r0, &(0x7f0000000100)=@x25, &(0x7f0000000040)=0x80, 0x40000)

1.562651876s ago: executing program 4 (id=3227):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x80, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ce5, 0x1, 0x100000000000008, 0x98c1, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x7, 0x5, 0x5, 0x10049, 0x200003ff, 0x5, 0x0, 0x9, 0x200, 0x7, 0x1be, 0x1000000003, 0x2, 0x2, 0x6, 0x0, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0x8, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0x6, 0xe1, 0x2, 0xe, 0x21, 0x8, 0xe6, 0x2000000000000ff, 0x5, 0x9, 0x66, 0x800, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2002, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x4, 0x5, 0x7, 0x8000000000006, 0x4, 0xffff, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0x2, 0xcc, 0x8, 0x1]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.512931514s ago: executing program 0 (id=3228):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0x80, {0xdddd1000, 0x26000}}, "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", "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"})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x595, 0x1, 0x7ff, 0x4}}], 0x50})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x3ff, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.352496808s ago: executing program 0 (id=3229):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x2a8, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}], 0x92})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000700)={[0x8, 0x8, 0x2, 0x7, 0x0, 0x80000001, 0x400, 0xe, 0xabe0, 0x81, 0xcc, 0x6, 0x401, 0x4000000, 0x2, 0x8, 0x100, 0x98b62ec, 0x1ff, 0x8, 0xfffffffd, 0x7, 0xd, 0x1, 0xfffffff7, 0x7, 0x8, 0x8, 0x6, 0xc, 0xc0, 0x80000001, 0x80000000, 0x7, 0xda, 0x100, 0x100, 0x0, 0x3, 0x1, 0x1, 0x3, 0x40, 0x1, 0x81, 0x4, 0x27, 0x0, 0x895, 0x0, 0x1ff, 0x81, 0xfffffffb, 0x1, 0x1, 0x10, 0x7f, 0x1, 0x4679, 0x4, 0x2, 0xdbef, 0x9, 0x5, 0x8, 0x80, 0x72, 0xe1, 0xa, 0x404000, 0x2, 0x400, 0x0, 0x1, 0x3, 0x5, 0x3, 0x6, 0x1, 0x4, 0xff, 0x6, 0x4, 0x6, 0xffffff00, 0xd, 0x5, 0x9, 0x401, 0x10000, 0x41, 0x4, 0x6, 0x4, 0x401, 0x5, 0x100, 0x0, 0x1, 0x80000001, 0xfffffff8, 0x32578d2c, 0x88, 0x8000, 0xffff, 0x6, 0x7, 0x5, 0x2, 0x5, 0x10001, 0xfffffa87, 0x4319, 0x5, 0x2, 0xfff, 0x18000000, 0x7, 0x800, 0x6, 0x4, 0x6, 0x7, 0x8, 0x8, 0x2, 0x2ee, 0x2, 0x0, 0xbda6, 0x9, 0x3, 0x9, 0x3, 0x8, 0x9, 0x9, 0x5, 0xb721, 0x0, 0x7, 0x0, 0x9, 0x4, 0x10001, 0x2, 0x3, 0x7fffffff, 0x7fffffff, 0x6000000, 0x0, 0x5, 0x1000, 0x2, 0x39b, 0x7, 0x7, 0x51af4a9a, 0x4, 0x3, 0x0, 0x7, 0x1, 0x7, 0x2, 0x4, 0x8, 0x5, 0xcf3a, 0x6, 0x9, 0x1, 0x2, 0x5, 0x5eb5, 0x80000001, 0x5, 0x8, 0x859b, 0x7, 0x4, 0x4, 0x0, 0x9f, 0xffffffff, 0x0, 0x2, 0x4, 0xfffffff8, 0xfffffe01, 0x1, 0x2, 0x6, 0x5, 0x6, 0x70f, 0x3, 0x3, 0x0, 0x0, 0x1, 0x7558, 0x3, 0x5, 0xfffffff8, 0xfffffff8, 0x5, 0x0, 0x7, 0x2, 0x2, 0x4, 0x9, 0x18, 0x1, 0xc, 0x5, 0x4, 0xfffffffa, 0x9, 0x7, 0x0, 0xffff09b4, 0x5b4, 0x1, 0x4, 0x401, 0x9, 0x7, 0x7, 0x6, 0x7fff, 0x4, 0x8e7c, 0x0, 0x3, 0xc, 0x7, 0x100, 0x5, 0x4, 0x7fff, 0x7fff, 0x0, 0xee, 0x7, 0xfffeffff, 0x6, 0x0, 0x2, 0x2, 0x40, 0xffffffff, 0x27c, 0x4729, 0x3, 0x7d1, 0x7f, 0xfffffc00, 0x7, 0x9, 0x9, 0x2, 0x1ff, 0x3c290ea5, 0x8, 0x5, 0x8, 0x6, 0x8000, 0xb25, 0x4, 0x7, 0xa, 0xfffff9ab, 0xfffffaad, 0x8fa3, 0x1, 0x80000001, 0xfffff72d, 0x3ff, 0x7ff, 0x5, 0x4c9, 0x2, 0x1, 0x9d6, 0x7fffffff, 0x5, 0x200, 0xfff, 0x6, 0x7, 0x4c1, 0x8, 0x8, 0x7, 0x5, 0x8db, 0x5, 0x9, 0x7, 0x3, 0x1, 0xfffffffe, 0x3, 0x10001, 0x9, 0x2, 0x0, 0x8, 0x6, 0x5, 0xc8, 0x8, 0xfffffffb, 0x1, 0xc2, 0xd17, 0x8, 0xfffff19a, 0x24, 0x0, 0x80000000, 0xa48, 0xfb, 0x9dd0, 0x1, 0x0, 0xf, 0x1, 0x47, 0x5, 0x9, 0x1ce4, 0x2, 0x4, 0x5, 0x2, 0xf, 0xfff, 0x2, 0xe72, 0x401, 0x10, 0x4800000, 0x8, 0x0, 0x2, 0x4, 0x4, 0xbc8, 0xfffffffb, 0xd8d00000, 0x16, 0x40, 0x7fffffff, 0x101, 0x5, 0xffffffff, 0x6, 0x358f034e, 0xd, 0x8, 0x0, 0xb9, 0x5, 0xe, 0x4, 0x4, 0x6, 0x6, 0x468, 0x401, 0x3, 0x1, 0x9, 0x0, 0x7fff, 0x40, 0x9, 0x9, 0xaebf, 0x2, 0x4, 0xe8, 0x9, 0x3, 0x101, 0x7, 0x3, 0x101, 0x4, 0x1, 0xb, 0x9, 0x6, 0x9, 0xa061, 0x7fffffff, 0x1, 0x81, 0x300000, 0x1, 0x1000, 0x4, 0xc, 0x8, 0x2000000, 0x8, 0x4, 0x8, 0xfffffff8, 0xaf94, 0x1, 0x5, 0x9687, 0xa4, 0xb0e3, 0xdb, 0x1, 0xe, 0x4, 0x1, 0x7, 0x4, 0x2, 0x0, 0x3, 0x2, 0x0, 0xa, 0x3, 0x7f, 0x9, 0x9, 0x3aa48000, 0xd, 0x5, 0x7, 0x8001, 0x9, 0x9, 0xbfd7, 0x400, 0xe06, 0xa9f4, 0x5, 0x9, 0x5, 0x12, 0x0, 0x6, 0x80, 0x8, 0x5, 0x8, 0x3, 0x9, 0x5, 0x6, 0x5, 0x4, 0x101, 0x8, 0x4, 0xff, 0x101, 0x3, 0x2, 0x23fc6160, 0x6893, 0x1, 0x97e, 0x5, 0x8, 0xbc, 0x4, 0x8, 0x2ec, 0x9, 0x0, 0x4, 0x7, 0x4, 0x5, 0x4, 0x2, 0x80000001, 0xc139, 0x9, 0x8, 0x4, 0xc000, 0x1, 0x651, 0x4, 0x7, 0x7fff, 0x7, 0x3, 0x2, 0x4, 0x6, 0x4, 0xfffffff7, 0xa, 0x2, 0x3, 0x101, 0x3, 0x4, 0x7, 0x5, 0x9, 0x1ac, 0x6, 0x2, 0x7, 0x979, 0xc, 0xfffffffe, 0x0, 0x0, 0x7, 0x2, 0x6, 0x6, 0x4, 0x80000000, 0x40, 0x7, 0xc, 0x9, 0x0, 0xfffffff9, 0x5, 0xa60, 0x9, 0x2, 0x1, 0x2, 0x1, 0x1, 0xfffffff7, 0x13e, 0x2, 0xf, 0x126c, 0x5, 0xb5, 0x6, 0x1, 0xfffffe01, 0x8, 0x0, 0x7, 0x7, 0x7, 0x5, 0x2, 0x0, 0x4, 0x2, 0x1, 0x2, 0x2, 0x8000, 0x0, 0xfffffffd, 0x5, 0x1, 0x2d2, 0x8, 0x3, 0x4, 0x8001, 0x7, 0x800, 0x5, 0x2, 0x1, 0x8e49, 0x9, 0x6, 0x3, 0x8, 0xffffff01, 0x0, 0x1ff, 0x2d88, 0x80000000, 0x6, 0x4, 0x3, 0x3, 0x2, 0x3, 0x7, 0x5, 0x7, 0x23, 0xd7efbfc6, 0xffff, 0x8, 0x80000001, 0x0, 0x6, 0xc000, 0x1, 0xc, 0x8, 0x7fff, 0x2, 0x0, 0xffff8000, 0x200, 0x82, 0x20fd, 0x8, 0x33, 0x4, 0x1, 0x4, 0xa35, 0x3, 0x6, 0x80000001, 0x33b6, 0x0, 0x1, 0xe, 0xfffffeff, 0x80, 0x7, 0x1ff, 0x1, 0xffff, 0x816, 0x3, 0xfffff801, 0x5, 0x4, 0x2, 0x6, 0x40, 0x4, 0x1, 0xf, 0x6, 0x83, 0x7, 0x1, 0x9, 0x3, 0x8, 0x6, 0x5, 0x4, 0x100, 0x1, 0x2, 0xe, 0x5, 0x2, 0x69, 0x0, 0x7fffffff, 0x8, 0x4e, 0x8473, 0x0, 0x2, 0x4, 0x1, 0x74, 0x8, 0xe9, 0x6, 0x9, 0x78e4c7cd, 0x5, 0x1, 0x1, 0x5, 0x6, 0x6031811c, 0x2, 0xd, 0x6, 0xc356, 0xffffff38, 0x5713, 0x7ff, 0x7d2b, 0x0, 0x3, 0x427d, 0x400, 0x7f, 0x4, 0x400, 0xb24, 0x3, 0x800, 0x9, 0x1, 0x600, 0x7, 0x7, 0x80000000, 0x20, 0x7, 0xad, 0x873, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x3, 0x10, 0xd, 0x4, 0x7, 0x1, 0x0, 0x0, 0x4fe, 0x3, 0x5, 0xc, 0x10, 0x5, 0x2, 0xffff9d01, 0x101, 0x8, 0x8001, 0x77c, 0x7, 0xed, 0x4b00, 0x5, 0x6, 0xc01, 0x5, 0x2, 0x2, 0x5, 0xae01, 0xb3, 0x2, 0x3, 0x10000, 0x7, 0xc38, 0x35, 0x8000, 0x4, 0x2000, 0xf1, 0x9, 0x5, 0xfffffff9, 0x4, 0x100, 0x4, 0xd7a9, 0xf8, 0x1, 0x3, 0x5, 0x2, 0x3, 0x7, 0x80, 0x2, 0x1, 0x9, 0x4, 0x3ff, 0x8951, 0x6, 0xfffffff9, 0x1ff, 0x7ff, 0x0, 0x8, 0x1, 0x736a63a2, 0x3, 0x5, 0x3, 0x4, 0x2, 0x8, 0x4, 0x80000000, 0xff, 0x7, 0x2, 0xffff8000, 0x6, 0x7fff, 0x7, 0x0, 0x0, 0x1, 0x8, 0x929, 0x8, 0x200, 0x6284, 0x9, 0x3, 0x42, 0x9, 0x6ce, 0x2, 0x0, 0x7, 0x5c13, 0x2, 0x800, 0xe, 0x0, 0x5, 0x0, 0x3, 0x3, 0x1000, 0x7, 0x41a5, 0x7, 0x3, 0x7, 0x1, 0x6, 0x10, 0xbf7b, 0x0, 0x1b, 0x7a3, 0xffffffff, 0xffff, 0xfffffffb, 0x5, 0x8, 0x0, 0x1d, 0x9, 0xec86, 0x2d8, 0x0, 0x6, 0x6, 0x3, 0x8, 0x1, 0x40, 0x3d34, 0x1, 0x1, 0x6, 0x8, 0x792d60bd, 0xffffffff, 0x4565, 0x8, 0x7, 0x46f, 0x4, 0x4499, 0x7f, 0xfffffffe, 0x3, 0x4, 0x5, 0xe00000, 0xdc9, 0xfae8, 0x9, 0x5, 0x100, 0xffffff5e, 0x401, 0x401, 0x0, 0x40, 0x2, 0x0, 0x9, 0x1, 0x6, 0x0, 0x6, 0x3, 0x6, 0x8001, 0x42d4, 0x3, 0xfffffffb, 0x1ff, 0x4, 0x400, 0x7, 0x153, 0x648f, 0x3, 0x0, 0x3b7, 0x5, 0x0, 0x1cf, 0x4, 0x9, 0x2, 0x4, 0x4, 0xfffffff6, 0x6, 0xfffffff1, 0xfffffffe, 0x100, 0x5, 0x40, 0xfffffff9, 0x2, 0x2, 0x10000, 0x8, 0x2c3a, 0x2, 0x4, 0x9, 0x4, 0xc, 0x8, 0x9, 0xffffff4c, 0x9, 0x6, 0x7, 0x5, 0x5, 0x4, 0x1, 0x2, 0x0, 0x1, 0xff, 0xa83d, 0x5, 0x8, 0x200, 0x4, 0x9, 0x6, 0x2, 0x0, 0x2, 0xd, 0x6, 0x6, 0x6, 0x7, 0x6, 0xffff, 0x2, 0xd123, 0x5, 0x3, 0x9, 0x9, 0x2, 0x8, 0x8, 0x9, 0x3ff, 0xa14, 0x6, 0x1, 0x3, 0x1, 0x3, 0xf5d, 0x7fffffff, 0x0, 0x80000001, 0xb, 0x800, 0x4, 0xfffffff3, 0x0, 0x2, 0x7ff, 0x7, 0x7, 0xffffffff, 0x6, 0x3d, 0x1, 0x8, 0x0, 0x9, 0x6, 0x6, 0x1ff, 0x1, 0x930, 0x8, 0x2, 0x52, 0x5, 0x3, 0x8, 0x1, 0x2, 0x5, 0x7ff, 0x8, 0xffffffff, 0x7]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)={0x3})
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000140)={[{0x5, 0xc, 0x6, 0x3, 0x41, 0x2, 0x42, 0x9, 0x1, 0x44, 0x2, 0x9, 0x4}, {0x1, 0x80, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0x0, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.331574897s ago: executing program 4 (id=3230):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@in_dx={0x69, 0x20, {0xe3ce, 0x2}}, @code={0xa, 0x5a, {"420f23ecf047804f0000f38aaca8080000000f32c4a2d93a748d053e41c32e41a766420f38823bc441b1689c1b0000000048b885000000000000000f23d80f21f835800000000f23f8"}}], 0x7a})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000040)=[@code={0x1, 0x6f, {"66470f64dfc4a3255f1d040000000266baf80cb8ecdcf388ef66bafc0cb86b420000ef0fc76cf3b30f01f8c4619e5a72f8b9800000c00f3235010000000f30420f01c448b85a000000000000000f23c00f21f835020007000f23f843cd05"}}, @code={0x1, 0x64, {"0fc75a223e660f382a0f0f20c035010000000f22c048b808000000000000000f23c80f21f8350000c0000f23f866ba410066ed430f0fa4da81966fb7a6c46255453ca60f005da4f2410f2b833e4b285a430f30"}}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x65, {"b8010000000f01d9c40202f546000f90cf48b8407f0000000000000f23c00f21f83503000a000f23f80f0f4040b6c421217ccd660f3880370fc1860090000066baf80cb823f6858eef66bafc0cec8f28288e2137"}}, @uexit={0x0, 0x18, 0x3714}, @code={0x1, 0x51, {"0f01f867420f21f066baf80cb8050ad381ef66bafc0cec420fbe15020000002e6666440f1c477d360fc73b66b817008ed80f088fc818ce5b00096465360f01cb"}}], 0x1b9})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x5, 0x0, 0x7ff, 0x10000, 0xbdb], 0x1, 0x3c4210})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffffff, 0x8)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x4000000000, 0x9, 0x2, 0x1, 0x1, 0xd, 0x4002004c5, 0x1000, 0x0, 0xfffffffffffffff9, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x49], 0xdddd1000, 0x1c4646})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000118, 0x0, 0xd}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

587.05345ms ago: executing program 0 (id=3231):
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0xfffffffffffffffc], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110c230020)

304.455318ms ago: executing program 0 (id=3232):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xffff1000, 0x8, 0x3, 0x7ff, 0x0, [{0x40, 0x3, 0x4d, '\x00', 0xff}, {0x1, 0x3, 0x3, '\x00', 0xf1}, {0x0, 0x6, 0x4, '\x00', 0x6}, {0xeb, 0x9, 0x3, '\x00', 0x2}, {0xf4, 0x6, 0x10, '\x00', 0x1}, {0x0, 0x4, 0x7, '\x00', 0x9c}, {0x10, 0x81, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0x6}, {0x40, 0x65, 0x5c, '\x00', 0x3}, {0x11, 0xfe, 0x4, '\x00', 0x7}, {0x2, 0x5, 0x2, '\x00', 0xff}, {0x0, 0x3, 0x6, '\x00', 0x2}, {0x7, 0x9, 0xff, '\x00', 0xff}, {0xc, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0xd1, 0x0, '\x00', 0x15}, {0xa2, 0x9, 0xa7, '\x00', 0x3}, {0x80, 0x7, 0x1, '\x00', 0xa}, {0xa5, 0x4, 0x24, '\x00', 0x6}, {0xfa, 0x9d, 0x1, '\x00', 0x4}, {0x1, 0x1, 0x11, '\x00', 0x8}, {0x8, 0x3, 0x9, '\x00', 0x8}, {0x4, 0x7, 0x0, '\x00', 0x2}, {0x6, 0x0, 0x5, '\x00', 0x9}, {0x4, 0x4, 0x1, '\x00', 0x4}]}})
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000180))

304.131354ms ago: executing program 4 (id=3233):
openat$kvm(0x0, &(0x7f0000000040), 0x86800, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x48b, 0x0, 0x100000003}]})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

196.011174ms ago: executing program 0 (id=3234):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0xff, 0x0, 0x2, 0x0, 0x4, 0x8, 0x9, 0x1e, 0x0, 0x20, 0x65, 0xc3, 0x0, 0x70a, 0x3, 0x0, 0x1, 0x5d, 0x2, '\x00', 0x9, 0x2})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

162.053667ms ago: executing program 4 (id=3235):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x41, 0x1, 0x7ff, 0x404}}], 0x50})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x6, 0x2, 0x0, 0x2, 0x6, 0xb, 0xfe, 0xfc, 0x12, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8000000000005})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x403, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0xfec00000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

25.1445ms ago: executing program 0 (id=3236):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)=@arm64={0xf, 0x9, 0x2, '\x00', 0x6})
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040))

0s ago: executing program 4 (id=3237):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48, 0x0, 0x80000000}]})

kernel console output (not intermixed with test programs):

[  377.230652][T13208] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  377.241070][T13208] binder: 13207:13208 ioctl c0306201 2000000002c0 returned -14
[  377.347438][T13191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.361006][T13210] pim6reg1: entered promiscuous mode
[  377.367155][T13191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.369741][T13210] pim6reg1: entered allmulticast mode
[  377.397326][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'.
[  377.412374][ T6242] usb 1-1: USB disconnect, device number 118
[  377.448067][ T6573] usbhid 3-1:0.0: can't add hid device: -71
[  377.454097][ T6573] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  377.481398][T13216] validate_nla: 1 callbacks suppressed
[  377.481418][T13216] netlink: 'syz.0.2573': attribute type 10 has an invalid length.
[  377.493946][ T6573] usb 3-1: USB disconnect, device number 110
[  377.554686][T13218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2574'.
[  377.638683][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2577'.
[  377.802629][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'.
[  377.818692][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'.
[  377.998470][T12488] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  378.015787][T12488] ath9k_htc: Failed to initialize the device
[  378.027035][ T6242] usb 1-1: ath9k_htc: USB layer deinitialized
[  378.326137][ T5815] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  378.346181][ T6242] usb 1-1: new full-speed USB device number 119 using dummy_hcd
[  378.476208][ T5815] usb 3-1: Using ep0 maxpacket: 32
[  378.483967][ T5815] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  378.496047][ T5815] usb 3-1: config 0 has no interface number 0
[  378.498487][ T6242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  378.502209][ T5815] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  378.530152][ T5815] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  378.538979][ T6242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.547572][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.550633][ T6242] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  378.575543][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  378.606501][ T6242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.607881][ T5815] usb 3-1: Product: syz
[  378.619220][ T5815] usb 3-1: Manufacturer: syz
[  378.623910][ T5815] usb 3-1: SerialNumber: syz
[  378.628090][ T6242] usb 1-1: config 0 descriptor??
[  378.659979][ T5815] usb 3-1: config 0 descriptor??
[  378.667760][T13246] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  378.878458][T13246] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  378.896651][ T5909] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  379.002446][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2593'.
[  379.064060][ T6242] elan 0003:04F3:0755.0024: failed to start in urb: -90
[  379.085288][ T6242] elan 0003:04F3:0755.0024: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  379.098966][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  379.106843][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.113673][ T5815] asix 3-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random
[  379.123528][ T5909] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  379.138319][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.139068][T13267] 9pnet_fd: p9_fd_create_unix (13267): problem connecting socket: ./file0: -111
[  379.156909][ T5909] usb 2-1: config 0 descriptor??
[  379.277731][T12488] usb 1-1: USB disconnect, device number 119
[  379.403605][T13276] netlink: 'syz.4.2596': attribute type 21 has an invalid length.
[  379.507585][ T5815] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  379.529553][ T5815] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  379.577589][ T5909] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  379.600410][T13282] binder_alloc: 13281: binder_alloc_buf size 64768 failed, no address space
[  379.609752][T13282] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  379.620629][T13282] binder: 13281:13282 ioctl c0306201 2000000002c0 returned -14
[  379.697265][ T5815] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  379.708551][ T5815] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  379.775694][T13250] netlink: 'syz.1.2588': attribute type 2 has an invalid length.
[  379.813685][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.827750][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.895199][ T5909] usb 2-1: USB disconnect, device number 107
[  379.902497][ T5815] asix 3-1:0.191 eth5: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 86:20:bc:f6:26:27
[  379.972491][ T5815] usb 3-1: USB disconnect, device number 111
[  379.991369][ T5815] asix 3-1:0.191 eth5: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet
[  380.022569][T13297] Can't find a SQUASHFS superblock on nullb0
[  380.231445][T13306] netlink: 'syz.4.2609': attribute type 10 has an invalid length.
[  380.332599][T13317] binder: 13316:13317 unknown command 0
[  380.342315][T13317] binder: 13316:13317 ioctl c0306201 200000000080 returned -22
[  380.352817][T13317] binder: 13316:13317 ioctl c0306201 2000000003c0 returned -14
[  380.636299][ T5815] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  380.816254][ T5815] usb 5-1: Using ep0 maxpacket: 8
[  380.867314][ T5815] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  380.896069][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.916049][ T5815] usb 5-1: Product: syz
[  380.920258][ T5815] usb 5-1: Manufacturer: syz
[  380.936052][ T5815] usb 5-1: SerialNumber: syz
[  380.957513][ T5815] usb 5-1: config 0 descriptor??
[  381.015347][T13353] netlink: 'syz.1.2621': attribute type 4 has an invalid length.
[  381.033944][T13353] netlink: 'syz.1.2621': attribute type 4 has an invalid length.
[  381.059237][T13355] __nla_validate_parse: 3 callbacks suppressed
[  381.059256][T13355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2622'.
[  381.081088][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'.
[  381.090213][T13353] nbd: must specify a size in bytes for the device
[  381.207813][  T108] usb 5-1: USB disconnect, device number 64
[  381.248659][T13361] netlink: 'syz.1.2624': attribute type 10 has an invalid length.
[  381.376084][ T5909] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  381.513398][T13374] netlink: 'syz.1.2627': attribute type 21 has an invalid length.
[  381.536039][T13374] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2627'.
[  381.546453][ T5909] usb 3-1: Using ep0 maxpacket: 16
[  381.556510][ T5909] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  381.580423][ T5909] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.600932][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.621590][ T5909] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  381.642021][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.660481][ T5909] usb 3-1: Product: syz
[  381.668156][ T5909] usb 3-1: Manufacturer: syz
[  381.678822][ T5909] usb 3-1: SerialNumber: syz
[  381.680424][T13380] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2628'.
[  381.734614][T13380] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  381.944718][T13394] binder_alloc: 13391: binder_alloc_buf size 64768 failed, no address space
[  381.953642][T13394] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  382.103788][ T5909] usb 3-1: 0:2 : does not exist
[  382.129532][ T5909] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  382.207256][ T5909] usb 3-1: USB disconnect, device number 112
[  382.235096][ T6286] udevd[6286]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  382.445421][T13414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2639'.
[  382.576120][ T6242] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  382.649699][T13427] netlink: 'syz.1.2644': attribute type 10 has an invalid length.
[  382.747778][ T6242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23218, setting to 64
[  382.758978][ T6242] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  382.768134][ T6242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.778331][ T6242] usb 1-1: config 0 descriptor??
[  382.792113][ T6242] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  382.846490][  T108] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  382.996436][  T108] usb 5-1: device descriptor read/64, error -71
[  383.236287][  T108] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  383.376431][  T108] usb 5-1: device descriptor read/64, error -71
[  383.489509][T13446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2653'.
[  383.506487][  T108] usb usb5-port1: attempt power cycle
[  383.560960][T13450] netlink: 'syz.1.2655': attribute type 10 has an invalid length.
[  383.846664][  T108] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  383.876764][  T108] usb 5-1: device descriptor read/8, error -71
[  384.050892][   T30] audit: type=1800 audit(1764239968.392:54): pid=13466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2661" name="bus" dev="overlay" ino=646 res=0 errno=0
[  384.146113][  T108] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  384.179061][  T108] usb 5-1: device descriptor read/8, error -71
[  384.247523][ T5815] usb 1-1: USB disconnect, device number 120
[  384.300899][  T108] usb usb5-port1: unable to enumerate USB device
[  384.456090][   T49] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  384.616176][   T49] usb 3-1: Using ep0 maxpacket: 16
[  384.622081][   T49] usb 3-1: no configurations
[  384.627630][   T49] usb 3-1: can't read configurations, error -22
[  384.756164][   T49] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  384.797382][ T5815] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  384.916187][   T49] usb 3-1: Using ep0 maxpacket: 16
[  384.922898][   T49] usb 3-1: no configurations
[  384.927712][   T49] usb 3-1: can't read configurations, error -22
[  384.934721][   T49] usb usb3-port1: attempt power cycle
[  384.966219][ T5815] usb 2-1: Using ep0 maxpacket: 16
[  384.973040][ T5815] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[  384.982260][ T5815] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 249
[  384.991961][ T5815] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  385.008301][ T5815] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  385.018138][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.027070][ T5815] usb 2-1: Product: syz
[  385.031456][ T5815] usb 2-1: Manufacturer: syz
[  385.037221][ T5815] usb 2-1: SerialNumber: syz
[  385.093871][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2670'.
[  385.189197][T13489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2672'.
[  385.280891][   T49] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  385.326708][   T49] usb 3-1: Using ep0 maxpacket: 16
[  385.340027][   T49] usb 3-1: no configurations
[  385.361294][ T5815] em28xx 2-1:255.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  385.372135][   T49] usb 3-1: can't read configurations, error -22
[  385.387237][ T5815] em28xx 2-1:255.0: DVB interface 0 found: bulk
[  385.506201][   T49] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  385.538552][   T49] usb 3-1: Using ep0 maxpacket: 16
[  385.544639][   T49] usb 3-1: no configurations
[  385.559653][T13502] sp0: Synchronizing with TNC
[  385.569658][   T49] usb 3-1: can't read configurations, error -22
[  385.584090][   T49] usb usb3-port1: unable to enumerate USB device
[  385.738632][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'.
[  385.920025][ T5815] em28xx 2-1:255.0: unknown em28xx chip ID (0)
[  386.003783][ T5815] em28xx 2-1:255.0: reading from i2c device at 0xa0 failed (error=-5)
[  386.026064][ T5815] em28xx 2-1:255.0: board has no eeprom
[  386.096384][ T5815] em28xx 2-1:255.0: Identified as PCTV tripleStick (292e) (card=94)
[  386.116099][ T5815] em28xx 2-1:255.0: dvb set to bulk mode.
[  386.121914][ T5928] em28xx 2-1:255.0: Binding DVB extension
[  386.149310][ T5815] usb 2-1: USB disconnect, device number 108
[  386.168888][ T5815] em28xx 2-1:255.0: Disconnecting em28xx
[  386.250838][ T5928] em28xx 2-1:255.0: Registering input extension
[  386.260546][ T5815] em28xx 2-1:255.0: Closing input extension
[  386.293413][ T5815] em28xx 2-1:255.0: Freeing device
[  386.483621][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2683'.
[  386.506405][T13541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2683'.
[  386.698825][T13550] binder_alloc: 13548: binder_alloc_buf size 64768 failed, no address space
[  386.707760][T13549] overlayfs: conflicting lowerdir path
[  386.756057][T13550] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  386.964011][   T30] audit: type=1800 audit(1764239971.302:55): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2689" name="bus" dev="overlay" ino=1987 res=0 errno=0
[  387.026237][ T5815] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  387.132933][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'.
[  387.167073][ T5815] usb 2-1: device descriptor read/64, error -71
[  387.178608][T13570] tmpfs: Unknown parameter 'grpquota'
[  387.236421][   T49] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  387.406922][   T49] usb 1-1: Using ep0 maxpacket: 32
[  387.408563][ T5815] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  387.413992][   T49] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  387.428715][   T49] usb 1-1: config 0 has no interface number 0
[  387.437061][   T49] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  387.446307][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.454558][   T49] usb 1-1: Product: syz
[  387.458970][   T49] usb 1-1: Manufacturer: syz
[  387.463584][   T49] usb 1-1: SerialNumber: syz
[  387.471219][   T49] usb 1-1: config 0 descriptor??
[  387.479666][   T49] asix 1-1:0.191: probe with driver asix failed with error -22
[  387.546239][ T5815] usb 2-1: device descriptor read/64, error -71
[  387.557509][  T108] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  387.656762][ T5815] usb usb2-port1: attempt power cycle
[  387.717896][  T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.729371][  T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.740107][  T108] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  387.749277][  T108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.759557][  T108] usb 5-1: config 0 descriptor??
[  387.826105][   T49] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  387.970389][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  387.977605][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  387.977781][   T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  387.984580][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  387.984610][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  387.984636][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  387.998924][   T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.004661][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  388.015043][   T49] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  388.017774][ T5815] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  388.027852][   T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.035314][  T108] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[  388.069281][   T49] usb 3-1: config 0 descriptor??
[  388.075546][  T108] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  388.087622][ T5815] usb 2-1: device descriptor read/8, error -71
[  388.173937][  T108] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE
[  388.336158][ T5815] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  388.356773][ T5815] usb 2-1: device descriptor read/8, error -71
[  388.466935][ T5815] usb usb2-port1: unable to enumerate USB device
[  388.523578][  T108] cp2112 0003:10C4:EA90.0026: error reading lock byte: -32
[  388.554237][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.564373][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.577773][   T49] usbhid 3-1:0.0: can't add hid device: -71
[  388.589222][   T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  388.606601][   T49] usb 3-1: USB disconnect, device number 117
[  388.612270][ T5928] usb 5-1: USB disconnect, device number 69
[  388.679360][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2702'.
[  388.788227][   T30] audit: type=1326 audit(1764239973.132:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.4.2705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca758f749 code=0x0
[  388.962324][T13604] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  388.979269][T13604] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  389.101100][T13604] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  389.136070][T13604] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  389.231639][T13604] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  389.233227][T13613] netlink: 'syz.2.2706': attribute type 10 has an invalid length.
[  389.240118][T13604] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  389.297528][T13604] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  389.313323][T13604] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  389.517479][T13624] befs: (nbd2): No write support. Marking filesystem read-only
[  389.617824][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2710'.
[  389.641409][T13628] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2710'.
[  389.707648][T13631] block nbd2: NBD_DISCONNECT
[  389.882771][T13641] binder: BINDER_SET_CONTEXT_MGR already set
[  389.889498][T13641] binder: 13640:13641 ioctl 4018620d 200000000040 returned -16
[  390.039944][ T5928] usb 1-1: USB disconnect, device number 121
[  390.162554][T13654] netlink: 'syz.1.2721': attribute type 21 has an invalid length.
[  390.177171][T13654] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2721'.
[  390.212736][T13654] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2721'.
[  390.222282][   T30] audit: type=1800 audit(1764239974.552:57): pid=13658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2719" name="bus" dev="overlay" ino=2062 res=0 errno=0
[  390.415070][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'.
[  390.797506][ T5909] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  390.956266][  T108] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  390.986463][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  391.008684][ T5909] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  391.029002][ T5928] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  391.029646][ T5909] usb 3-1: config 0 has no interface number 0
[  391.045280][ T5909] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  391.054686][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.072283][ T5909] usb 3-1: Product: syz
[  391.076924][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'.
[  391.085946][ T5909] usb 3-1: Manufacturer: syz
[  391.091449][ T5909] usb 3-1: SerialNumber: syz
[  391.099880][ T5909] usb 3-1: config 0 descriptor??
[  391.113378][ T5909] asix 3-1:0.191: probe with driver asix failed with error -22
[  391.121089][  T108] usb 1-1: Using ep0 maxpacket: 16
[  391.127933][  T108] usb 1-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.156124][  T108] usb 1-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  391.186093][  T108] usb 1-1: config 0 interface 0 has no altsetting 0
[  391.192758][  T108] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  391.213024][  T108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.224851][  T108] usb 1-1: config 0 descriptor??
[  391.229985][ T5928] usb 2-1: Using ep0 maxpacket: 8
[  391.244525][ T5928] usb 2-1: config 111 has an invalid interface number: 71 but max is 0
[  391.253204][ T5928] usb 2-1: config 111 has no interface number 0
[  391.270182][ T5928] usb 2-1: config 111 interface 71 has no altsetting 0
[  391.281235][ T5928] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=50.12
[  391.306052][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.324972][ T5928] usb 2-1: Product: syz
[  391.333339][ T5928] usb 2-1: Manufacturer: syz
[  391.346508][ T5928] usb 2-1: SerialNumber: syz
[  391.534028][T13728] overlayfs: failed to resolve './file1': -2
[  391.657963][  T108] logitech-djreceiver 0003:046D:C513.0027: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0
[  391.663190][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.766599][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.837852][T13745] binder: 13744:13745 unknown command 0
[  391.868135][T13745] binder: 13744:13745 ioctl c0306201 200000000080 returned -22
[  391.892939][T13745] binder: 13744:13745 ioctl c0306201 2000000003c0 returned -14
[  391.943836][   T30] audit: type=1326 audit(1764239976.282:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.1.2732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c58f749 code=0x0
[  392.048273][ T5909] usb 1-1: USB disconnect, device number 122
[  392.231579][ T5928] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:111.71/input/input55
[  392.254714][ T5182] bcm5974 2-1:111.71: could not read from device
[  392.275850][ T5182] bcm5974 2-1:111.71: could not read from device
[  392.286895][ T5182] bcm5974 2-1:111.71: could not read from device
[  392.297667][ T5928] usb 2-1: USB disconnect, device number 113
[  392.305886][ T5182] bcm5974 2-1:111.71: could not read from device
[  392.406209][ T5909] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  392.576502][ T5909] usb 5-1: Using ep0 maxpacket: 32
[  392.601932][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short
[  392.621463][ T5909] usb 5-1: config 128 has an invalid interface number: 127 but max is 3
[  392.637055][ T5909] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  392.664306][ T5909] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  392.696088][ T5909] usb 5-1: config 128 has no interface number 0
[  392.702409][ T5909] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  392.730118][ T5909] usb 5-1: config 128 interface 127 has no altsetting 0
[  392.742136][T13785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2748'.
[  392.742876][ T5909] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  392.760755][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.769224][ T5909] usb 5-1: Product: syz
[  392.773494][ T5909] usb 5-1: Manufacturer: syz
[  392.778513][ T5909] usb 5-1: SerialNumber: syz
[  392.789162][T13756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  393.086467][ T5928] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  393.102283][ T5909] usb 5-1: USB disconnect, device number 70
[  393.159951][ T6286] udevd[6286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  393.257422][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  393.265670][T13806] netlink: 'syz.1.2753': attribute type 10 has an invalid length.
[  393.277863][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.295575][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.318823][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  393.361685][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  393.379624][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.394243][ T5928] usb 1-1: config 0 descriptor??
[  393.581645][  T108] usb 3-1: USB disconnect, device number 118
[  393.613270][ T5928] microsoft 0003:045E:07DA.0028: report_id 2062262987 is invalid
[  393.635568][ T5928] microsoft 0003:045E:07DA.0028: item 0 4 1 8 parsing failed
[  393.658014][ T5928] microsoft 0003:045E:07DA.0028: parse failed
[  393.664779][ T5928] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22
[  393.677633][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2756'.
[  393.700791][T13821] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2756'.
[  393.710097][ T5815] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  393.807473][  T108] usb 1-1: USB disconnect, device number 123
[  393.867845][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.886963][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  393.915068][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  393.930550][ T5815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  393.939943][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.956687][ T5815] usb 2-1: config 0 descriptor??
[  394.048106][T13839] binder_alloc: 13838: binder_alloc_buf size 64768 failed, no address space
[  394.057780][T13839] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  394.146533][ T5928] usb 5-1: new full-speed USB device number 71 using dummy_hcd
[  394.176660][T13814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.201946][T13814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.231211][ T5815] ath6kl: Failed to submit usb control message: -71
[  394.243435][ T5815] ath6kl: unable to send the bmi data to the device: -71
[  394.252079][ T5815] ath6kl: Unable to send get target info: -71
[  394.260484][ T5815] ath6kl: Failed to init ath6kl core: -71
[  394.268217][ T5815] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  394.286283][ T5928] usb 5-1: device descriptor read/64, error -71
[  394.293507][ T5815] usb 2-1: USB disconnect, device number 114
[  394.536445][ T5928] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  394.670809][ T5909] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  394.678624][ T5928] usb 5-1: device descriptor read/64, error -71
[  394.696530][ T5815] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  394.806337][ T5928] usb usb5-port1: attempt power cycle
[  394.847392][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  394.852635][   T30] audit: type=1800 audit(1764239979.192:59): pid=13874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2768" name="bus" dev="overlay" ino=697 res=0 errno=0
[  394.856155][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  394.884252][ T5815] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  394.887314][ T5909] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  394.892928][ T5815] usb 3-1: can't read configurations, error -22
[  394.912196][ T5909] usb 1-1: config 0 has no interface number 0
[  394.921578][ T5909] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  394.932203][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.940343][ T5909] usb 1-1: Product: syz
[  394.944514][ T5909] usb 1-1: Manufacturer: syz
[  394.951737][ T5909] usb 1-1: SerialNumber: syz
[  394.960596][ T5909] usb 1-1: config 0 descriptor??
[  394.978539][ T5909] asix 1-1:0.191: probe with driver asix failed with error -22
[  395.040267][ T5815] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  395.146254][ T5928] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  395.156149][T13883] rtc_cmos 00:00: Alarms can be up to one day in the future
[  395.169451][T13883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  395.183998][ T5928] usb 5-1: device descriptor read/8, error -71
[  395.208003][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  395.215790][ T5815] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  395.224435][ T5815] usb 3-1: can't read configurations, error -22
[  395.235238][ T5815] usb usb3-port1: attempt power cycle
[  395.436138][ T5928] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  395.456868][ T5928] usb 5-1: device descriptor read/8, error -71
[  395.566400][ T5928] usb usb5-port1: unable to enumerate USB device
[  395.576312][ T5815] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  395.596874][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  395.604340][ T5815] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  395.612498][ T5815] usb 3-1: can't read configurations, error -22
[  395.746245][ T5815] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  395.766741][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  395.774026][ T5815] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  395.782678][ T5815] usb 3-1: can't read configurations, error -22
[  395.789659][ T5815] usb usb3-port1: unable to enumerate USB device
[  395.798294][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'.
[  396.172735][T13908] siw: device registration error -23
[  397.290397][T13930] binder: 13929:13930 unknown command 0
[  397.296258][T13930] binder: 13929:13930 ioctl c0306201 200000000080 returned -22
[  397.305570][T13930] binder: 13929:13930 ioctl c0306201 2000000003c0 returned -14
[  397.434748][ T5815] usb 1-1: USB disconnect, device number 124
[  397.516834][  T108] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  397.579094][T13942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2794'.
[  397.637951][ T5928] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  397.688537][  T108] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  397.703369][  T108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.720337][  T108] usb 2-1: config 0 descriptor??
[  397.729836][  T108] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  397.818017][ T5928] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  397.826326][ T5928] usb 5-1: config 5 has no interface number 0
[  397.832470][ T5928] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  397.851042][T13952] netlink: 'syz.2.2799': attribute type 10 has an invalid length.
[  397.851407][ T5928] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  397.870745][ T5928] usb 5-1: config 5 interface 123 has no altsetting 0
[  397.881484][ T5928] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  397.890871][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.899167][ T5928] usb 5-1: Product: syz
[  397.903415][ T5928] usb 5-1: Manufacturer: syz
[  397.908079][ T5928] usb 5-1: SerialNumber: syz
[  397.946077][ T5909] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  398.076312][ T5909] usb 1-1: device descriptor read/64, error -71
[  398.119644][T13934] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2790'.
[  398.135503][T13928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.140227][ T5928] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  398.157887][T13928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.169026][ T5928] usb 5-1: USB disconnect, device number 75
[  398.176063][   T49] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  398.177769][  T108] gp8psk: usb in 128 operation failed.
[  398.193848][  T108] gp8psk: usb in 137 operation failed.
[  398.200024][  T108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  398.222376][  T108] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  398.231764][  T108] usb 2-1: media controller created
[  398.245661][  T108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  398.267641][  T108] gp8psk_fe: Frontend attached
[  398.272485][  T108] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  398.281156][  T108] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  398.320032][  T108] gp8psk: usb in 138 operation failed.
[  398.325717][  T108] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  398.335292][  T108] gp8psk: found Genpix USB device pID = 203 (hex)
[  398.336138][ T5909] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  398.345211][  T108] usb 2-1: USB disconnect, device number 115
[  398.366101][   T49] usb 3-1: Using ep0 maxpacket: 32
[  398.373588][   T49] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  398.385962][   T49] usb 3-1: config 0 has no interface number 0
[  398.392551][   T49] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  398.409692][   T49] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  398.419373][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.428413][   T49] usb 3-1: Product: syz
[  398.432831][   T49] usb 3-1: Manufacturer: syz
[  398.433791][  T108] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  398.437994][   T49] usb 3-1: SerialNumber: syz
[  398.458294][   T49] usb 3-1: config 0 descriptor??
[  398.466964][T13954] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  398.477882][   T49] asix 3-1:0.191: probe with driver asix failed with error -22
[  398.496235][ T5909] usb 1-1: device descriptor read/64, error -71
[  398.606517][ T5909] usb usb1-port1: attempt power cycle
[  398.789666][T13960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2803'.
[  398.799531][T13960] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2803'.
[  398.956274][   T49] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  398.964124][ T5909] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  398.998182][ T5909] usb 1-1: device descriptor read/8, error -71
[  399.033981][T13972] netlink: 'syz.4.2809': attribute type 9 has an invalid length.
[  399.120204][   T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.130596][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  399.140539][   T49] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  399.152146][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  399.163065][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  399.172884][   T49] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  399.185887][   T49] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[  399.195176][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.206923][   T49] usb 2-1: config 0 descriptor??
[  399.215074][   T49] appledisplay 2-1:0.0: Submitting URB failed
[  399.221390][   T49] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5
[  399.256214][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  399.277212][ T5909] usb 1-1: device descriptor read/8, error -71
[  399.386470][ T5909] usb usb1-port1: unable to enumerate USB device
[  399.417072][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.427966][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.437448][  T108] usb 2-1: USB disconnect, device number 116
[  400.759790][T13976] netlink: 'syz.1.2811': attribute type 10 has an invalid length.
[  400.792233][ T5928] IPVS: starting estimator thread 0...
[  400.897459][T13981] IPVS: using max 26 ests per chain, 62400 per kthread
[  400.952319][ T5928] usb 3-1: USB disconnect, device number 123
[  401.029268][T13987] netlink: 'syz.2.2815': attribute type 12 has an invalid length.
[  401.038367][T13987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2815'.
[  401.046142][  T108] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  401.076147][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  401.083737][   T49] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  401.186090][  T108] usb 5-1: device descriptor read/64, error -71
[  401.226167][ T5909] usb 1-1: device descriptor read/64, error -71
[  401.246778][   T49] usb 2-1: Using ep0 maxpacket: 16
[  401.253824][   T49] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  401.264844][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11
[  401.276030][   T49] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  401.289140][   T49] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00
[  401.298302][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.310569][   T49] usb 2-1: config 0 descriptor??
[  401.396582][T13995] binder_alloc: 13994: binder_alloc_buf size 64768 failed, no address space
[  401.405508][T13995] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  401.426102][  T108] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  401.466185][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  401.526778][T14000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.542271][T14000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.555246][T13999] : renamed from veth0_vlan (while UP)
[  401.556204][  T108] usb 5-1: device descriptor read/64, error -71
[  401.585663][   T49] usbhid 2-1:0.0: can't add hid device: -71
[  401.593661][   T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  401.601678][ T5909] usb 1-1: device descriptor read/64, error -71
[  401.617694][   T49] usb 2-1: USB disconnect, device number 117
[  401.686643][  T108] usb usb5-port1: attempt power cycle
[  401.716382][ T5909] usb usb1-port1: attempt power cycle
[  401.826091][ T6242] usb 3-1: new low-speed USB device number 124 using dummy_hcd
[  401.977456][ T6242] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  401.987727][ T6242] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  401.998197][ T6242] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  402.008083][   T49] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  402.016034][ T6242] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  402.026227][  T108] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  402.029521][ T6242] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  402.046025][ T6242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.057773][  T108] usb 5-1: device descriptor read/8, error -71
[  402.065051][ T6242] usbtmc 3-1:16.0: bulk endpoints not found
[  402.071330][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  402.096936][ T5909] usb 1-1: device descriptor read/8, error -71
[  402.186122][   T49] usb 2-1: Using ep0 maxpacket: 32
[  402.192938][   T49] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  402.201427][   T49] usb 2-1: config 0 has no interface number 0
[  402.208201][   T49] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  402.220393][   T49] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  402.229603][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.237951][   T49] usb 2-1: Product: syz
[  402.242273][   T49] usb 2-1: Manufacturer: syz
[  402.247019][   T49] usb 2-1: SerialNumber: syz
[  402.253369][   T49] usb 2-1: config 0 descriptor??
[  402.259899][T14006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  402.270279][   T49] asix 2-1:0.191: probe with driver asix failed with error -22
[  402.270766][ T5928] usb 3-1: USB disconnect, device number 124
[  402.306175][  T108] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  402.326594][  T108] usb 5-1: device descriptor read/8, error -71
[  402.336430][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  402.356593][ T5909] usb 1-1: device descriptor read/8, error -71
[  402.436444][  T108] usb usb5-port1: unable to enumerate USB device
[  402.467452][ T5909] usb usb1-port1: unable to enumerate USB device
[  402.822071][   T30] audit: type=1800 audit(1764239987.162:60): pid=14008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2824" name="bus" dev="overlay" ino=872 res=0 errno=0
[  403.186109][ T5909] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[  403.337532][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  403.348753][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 246, setting to 64
[  403.362359][ T5909] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  403.371553][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.379600][ T5909] usb 3-1: Product: syz
[  403.383744][ T5909] usb 3-1: Manufacturer: syz
[  403.388359][ T5909] usb 3-1: SerialNumber: syz
[  403.395628][ T5909] usb 3-1: config 0 descriptor??
[  403.401486][T14011] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  403.456184][ T5909] rc_core: IR keymap rc-streamzap not found
[  403.462199][ T5909] Registered IR keymap rc-empty
[  403.473097][ T5909] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  403.486709][ T5909] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56
[  404.317277][T14040] siw: device registration error -23
[  404.395045][T14044] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.2838'.
[  404.404843][T14044] openvswitch: netlink: Message has 6 unknown bytes.
[  404.475301][T14045] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2838'.
[  404.719098][ T6573] usb 2-1: USB disconnect, device number 118
[  404.801813][T14058] binder: 14056:14058 unknown command 0
[  404.808070][T14058] binder: 14056:14058 ioctl c0306201 200000000080 returned -22
[  404.820684][T14058] binder: 14056:14058 ioctl c0306201 2000000003c0 returned -14
[  404.929993][T14064] fuse: Unknown parameter '00000000000000000007'
[  405.218423][T14076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2851'.
[  405.546076][  T108] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  405.706554][  T108] usb 2-1: Using ep0 maxpacket: 32
[  405.727504][  T108] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  405.735712][  T108] usb 2-1: config 0 has no interface number 0
[  405.749717][  T108] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  405.765701][  T108] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  405.775164][  T108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.783438][  T108] usb 2-1: Product: syz
[  405.786102][   T49] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  405.787791][  T108] usb 2-1: Manufacturer: syz
[  405.801057][  T108] usb 2-1: SerialNumber: syz
[  405.817609][  T108] usb 2-1: config 0 descriptor??
[  405.823464][T14078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  405.849500][  T108] asix 2-1:0.191: probe with driver asix failed with error -22
[  405.967607][  T108] usb 3-1: USB disconnect, device number 125
[  405.968496][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.994002][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.010088][   T49] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  406.019777][   T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.031050][   T49] usb 1-1: config 0 descriptor??
[  406.102852][T14097] netlink: 'syz.2.2858': attribute type 10 has an invalid length.
[  406.150747][T14099] netlink: 'syz.2.2859': attribute type 21 has an invalid length.
[  406.159226][T14099] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2859'.
[  406.169934][   T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  406.178159][T14099] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2859'.
[  406.302242][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2862'.
[  406.311381][T14107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2862'.
[  406.336074][   T10] usb 5-1: Using ep0 maxpacket: 16
[  406.343466][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.354239][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  406.365467][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  406.375783][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  406.386892][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  406.401740][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  406.411430][   T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  406.419687][   T10] usb 5-1: Manufacturer: syz
[  406.427162][   T10] usb 5-1: config 0 descriptor??
[  406.461926][   T49] logitech 0003:046D:C29C.0029: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0
[  406.552444][T14112] netlink: 'syz.2.2863': attribute type 21 has an invalid length.
[  406.562537][T14112] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2863'.
[  406.574231][T14112] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2863'.
[  406.656383][T14080] tipc: Started in network mode
[  406.661288][T14080] tipc: Node identity d311fc2a, cluster identity 4711
[  406.676135][T14080] tipc: Node number set to 3541171242
[  406.694736][   T49] logitech 0003:046D:C29C.0029: no inputs found
[  406.719318][   T10] rc_core: IR keymap rc-hauppauge not found
[  406.725237][   T10] Registered IR keymap rc-empty
[  406.746420][   T49] usb 1-1: USB disconnect, device number 7
[  406.746476][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.777156][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.798879][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  406.816936][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57
[  406.832817][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.856429][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.877003][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.896286][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.917437][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.936160][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.966178][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.986507][T14088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.987062][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  406.995280][T14088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.016672][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.038459][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.072896][   T10] mceusb 5-1:0.0: Registered 鵣뙊쑡 with mce emulator interface version 1
[  407.084740][   T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  407.103152][   T10] usb 5-1: USB disconnect, device number 80
[  407.162282][T14131] netlink: 'syz.4.2869': attribute type 10 has an invalid length.
[  407.206169][   T49] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  407.368519][   T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.384178][   T49] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  407.394739][   T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.407398][   T49] usb 3-1: config 0 descriptor??
[  407.615517][   T49] usbhid 3-1:0.0: can't add hid device: -71
[  407.626782][   T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  407.640366][T14146] binder_alloc: 14145: binder_alloc_buf size 64768 failed, no address space
[  407.645919][   T49] usb 3-1: USB disconnect, device number 126
[  407.651783][T14146] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  407.665558][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  407.796165][   T10] usb 1-1: device descriptor read/64, error -71
[  407.823162][T14126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.842680][T14126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.931881][T14156] program syz.4.2880 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  407.942563][T14156] program syz.4.2880 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  408.036178][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  408.148004][   T49] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  408.166126][   T10] usb 1-1: device descriptor read/64, error -71
[  408.176255][ T5928] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  408.276420][   T10] usb usb1-port1: attempt power cycle
[  408.297152][T12488] usb 2-1: USB disconnect, device number 119
[  408.330422][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -71
[  408.334419][   T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.352109][ T5928] usb 5-1: can't read configurations, error -71
[  408.353688][   T49] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  408.370639][   T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.379476][   T30] audit: type=1800 audit(1764239992.722:61): pid=14160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2881" name="bus" dev="overlay" ino=853 res=0 errno=0
[  408.402813][   T49] usb 3-1: config 0 descriptor??
[  408.612358][   T49] usbhid 3-1:0.0: can't add hid device: -71
[  408.616145][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  408.618740][   T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  408.641232][   T49] usb 3-1: USB disconnect, device number 127
[  408.647594][   T10] usb 1-1: device descriptor read/8, error -71
[  408.815336][T14126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.826419][T14126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.886124][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  408.907584][   T10] usb 1-1: device descriptor read/8, error -71
[  409.016621][   T10] usb usb1-port1: unable to enumerate USB device
[  409.138390][   T49] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  409.276287][   T49] usb 3-1: device descriptor read/64, error -71
[  409.466081][ T5928] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  409.536727][   T49] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  409.616088][ T5928] usb 5-1: Using ep0 maxpacket: 32
[  409.623792][ T5928] usb 5-1: config 0 has an invalid interface number: 191 but max is 0
[  409.633293][ T5928] usb 5-1: config 0 has no interface number 0
[  409.639494][ T5928] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  409.651327][ T5928] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  409.660646][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.668688][ T5928] usb 5-1: Product: syz
[  409.672854][ T5928] usb 5-1: Manufacturer: syz
[  409.676074][   T49] usb 3-1: device descriptor read/64, error -71
[  409.677569][ T5928] usb 5-1: SerialNumber: syz
[  409.688338][   T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  409.698380][ T5928] usb 5-1: config 0 descriptor??
[  409.704186][T14180] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  409.786457][   T49] usb usb3-port1: attempt power cycle
[  409.826211][   T10] usb 2-1: device descriptor read/64, error -71
[  409.916964][T14180] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  410.048842][T14187] siw: device registration error -23
[  410.066151][   T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  410.125397][ T5928] asix 5-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random
[  410.198234][   T10] usb 2-1: device descriptor read/64, error -71
[  410.306658][   T10] usb usb2-port1: attempt power cycle
[  410.540171][ T5928] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  410.552998][ T5928] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  410.576234][T14208] binder: 14207:14208 unknown command 0
[  410.581815][T14208] binder: 14207:14208 ioctl c0306201 200000000080 returned -22
[  410.592137][T14208] binder: 14207:14208 ioctl c0306201 2000000003c0 returned -14
[  410.646336][   T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  410.667725][   T10] usb 2-1: device descriptor read/8, error -71
[  410.707100][   T49] usb usb3-port1: Cannot enable. Maybe the USB cable is bad?
[  410.717113][T14215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.725770][T14215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.726744][ T5928] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  410.744495][ T5928] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  410.766510][ T6242] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  410.866152][   T49] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  410.891805][   T49] usb 3-1: unable to get BOS descriptor or descriptor too short
[  410.900229][ T6242] usb 1-1: device descriptor read/64, error -71
[  410.907234][   T49] usb 3-1: unable to read config index 0 descriptor/start: -71
[  410.914832][   T49] usb 3-1: can't read configurations, error -71
[  410.916595][   T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  410.921480][   T49] usb usb3-port1: unable to enumerate USB device
[  410.939418][ T5928] asix 5-1:0.191 eth5: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 66:ca:6c:29:3a:ee
[  410.956225][ T5928] usb 5-1: USB disconnect, device number 83
[  410.964681][ T5928] asix 5-1:0.191 eth5: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet
[  410.975500][   T10] usb 2-1: device descriptor read/8, error -71
[  411.087055][   T10] usb usb2-port1: unable to enumerate USB device
[  411.147542][ T6242] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  411.296099][ T6242] usb 1-1: device descriptor read/64, error -71
[  411.416189][ T6242] usb usb1-port1: attempt power cycle
[  411.429727][T14224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2909'.
[  411.505725][T14228] overlayfs: missing 'lowerdir'
[  411.511495][T14228] overlayfs: missing 'lowerdir'
[  411.610236][T14234] netlink: 'syz.2.2914': attribute type 10 has an invalid length.
[  411.736423][T14240] netlink: 'syz.4.2917': attribute type 21 has an invalid length.
[  411.744643][T14240] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2917'.
[  411.754522][T14240] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2917'.
[  411.764881][ T6242] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  411.796749][ T6242] usb 1-1: device descriptor read/8, error -71
[  411.869104][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2920'.
[  411.878185][T14246] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2920'.
[  411.887865][   T49] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  412.036126][ T6242] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  412.047192][   T49] usb 3-1: Using ep0 maxpacket: 32
[  412.054171][   T49] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  412.062802][   T49] usb 3-1: config 0 has no interface number 0
[  412.069202][   T49] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  412.079492][ T6242] usb 1-1: device descriptor read/8, error -71
[  412.089080][   T49] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  412.098258][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.106278][   T49] usb 3-1: Product: syz
[  412.110481][   T49] usb 3-1: Manufacturer: syz
[  412.115456][   T49] usb 3-1: SerialNumber: syz
[  412.122923][   T49] usb 3-1: config 0 descriptor??
[  412.128874][T14236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  412.197283][ T6242] usb usb1-port1: unable to enumerate USB device
[  412.340111][T14236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  412.525711][T14259] netlink: 'syz.1.2926': attribute type 21 has an invalid length.
[  412.534996][T14259] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2926'.
[  412.548316][   T49] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  412.559854][   T49] asix 3-1:0.191: probe with driver asix failed with error -32
[  412.615577][T14261] netlink: 'syz.1.2927': attribute type 10 has an invalid length.
[  412.695119][T14265] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  412.701663][T14265] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  412.709746][T14265] vhci_hcd vhci_hcd.0: Device attached
[  412.719755][T14266] vhci_hcd: connection closed
[  412.720762][   T13] vhci_hcd vhci_hcd.1: stop threads
[  412.731883][   T13] vhci_hcd vhci_hcd.1: release socket
[  412.737359][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  413.152788][T14279] binder_alloc: 14278: binder_alloc_buf size 64768 failed, no address space
[  413.161600][T14279] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  413.355578][   T30] audit: type=1800 audit(1764239997.692:62): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2938" name="bus" dev="overlay" ino=2495 res=0 errno=0
[  413.415599][T14291] netlink: 'syz.1.2940': attribute type 10 has an invalid length.
[  413.425348][T14291] bond0: (slave wlan1): Opening slave failed
[  413.568156][T14297] Failed to get privilege flags for destination (handle=0x0:0x0)
[  413.638131][T14297] Failed to get privilege flags for destination (handle=0x0:0x0)
[  413.811116][T14314] overlayfs: failed to resolve './file1': -2
[  413.817399][T14316] overlayfs: failed to resolve './file1': -2
[  413.820013][T14317] siw: device registration error -23
[  414.204580][T14327] vivid-003: disconnect
[  414.206249][   T49] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  414.246706][T14327] vivid-003: reconnect
[  414.322829][T14332] binder: 14331:14332 unknown command 0
[  414.328644][T14332] binder: 14331:14332 ioctl c0306201 200000000080 returned -22
[  414.338986][T14332] binder: 14331:14332 ioctl c0306201 2000000003c0 returned -14
[  414.378154][T14336] netlink: 'syz.1.2959': attribute type 2 has an invalid length.
[  414.386215][   T49] usb 1-1: unable to get BOS descriptor or descriptor too short
[  414.394569][   T49] usb 1-1: not running at top speed; connect to a high speed hub
[  414.405584][   T49] usb 1-1: config 129 has an invalid interface number: 28 but max is 0
[  414.416127][   T49] usb 1-1: config 129 has no interface number 0
[  414.422420][   T49] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  414.434541][   T49] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  414.447680][   T49] usb 1-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  414.461143][   T49] usb 1-1: config 129 interface 28 has no altsetting 0
[  414.472042][   T49] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  414.481995][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.490263][   T49] usb 1-1: Product: syz
[  414.494457][   T49] usb 1-1: Manufacturer: syz
[  414.499149][   T49] usb 1-1: SerialNumber: syz
[  414.513376][T14320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  414.671980][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2964'.
[  414.676207][   T10] usb 3-1: USB disconnect, device number 6
[  414.732183][T14320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.757646][T14320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.784870][   T49] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz)
[  414.812321][   T49] etas_es58x 1-1:129.28: could not retrieve the product info string
[  414.853179][   T49] usb 1-1: USB disconnect, device number 16
[  414.885378][   T49] etas_es58x 1-1:129.28: Disconnecting syz syz
[  414.918476][T14357] netlink: 'syz.1.2968': attribute type 83 has an invalid length.
[  414.927760][T14359] netlink: 'syz.4.2969': attribute type 10 has an invalid length.
[  415.005806][T14361] netlink: 'syz.4.2970': attribute type 21 has an invalid length.
[  415.014985][T14361] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2970'.
[  415.025314][T14361] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2970'.
[  415.056651][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  415.236060][   T10] usb 3-1: Using ep0 maxpacket: 16
[  415.244670][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  415.253338][   T10] usb 3-1: config 0 has no interface number 0
[  415.261861][   T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  415.271482][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.279939][   T10] usb 3-1: Product: syz
[  415.285386][   T10] usb 3-1: Manufacturer: syz
[  415.290470][   T10] usb 3-1: SerialNumber: syz
[  415.299373][   T10] usb 3-1: config 0 descriptor??
[  415.317275][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  415.416556][T14363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2971'.
[  415.746099][   T49] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  415.847911][T14375] netlink: 'syz.1.2975': attribute type 2 has an invalid length.
[  415.917027][   T49] usb 1-1: Using ep0 maxpacket: 32
[  415.939773][   T49] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  415.956266][   T49] usb 1-1: config 0 has no interface number 0
[  415.962489][   T49] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  415.965562][   T10] gspca_spca1528: reg_w err -71
[  415.974978][   T49] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  416.006103][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.006166][   T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  416.014161][   T49] usb 1-1: Product: syz
[  416.014183][   T49] usb 1-1: Manufacturer: syz
[  416.043219][   T10] usb 3-1: USB disconnect, device number 7
[  416.053506][   T49] usb 1-1: SerialNumber: syz
[  416.077695][   T49] usb 1-1: config 0 descriptor??
[  416.104775][T14369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  416.332497][T14369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  416.448610][T14404] binder_alloc: 14402: binder_alloc_buf size 64768 failed, no address space
[  416.457502][T14404] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  416.476280][   T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  416.548267][   T49] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  416.559786][   T49] asix 1-1:0.191: probe with driver asix failed with error -32
[  416.629266][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  416.647274][   T10] usb 5-1: config 6 has an invalid interface number: 158 but max is 0
[  416.655480][   T10] usb 5-1: config 6 has no interface number 0
[  416.662142][   T10] usb 5-1: config 6 interface 158 has no altsetting 0
[  416.672071][   T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  416.681486][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.689649][   T10] usb 5-1: Product: syz
[  416.693823][   T10] usb 5-1: Manufacturer: syz
[  416.700056][   T10] usb 5-1: SerialNumber: syz
[  416.756180][T12488] usb 2-1: new low-speed USB device number 124 using dummy_hcd
[  416.918411][T12488] usb 2-1: config 0 has an invalid interface number: 168 but max is 0
[  416.926739][T12488] usb 2-1: config 0 has no interface number 0
[  416.932884][T12488] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8
[  416.942105][T12488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.954319][T12488] usb 2-1: config 0 descriptor??
[  416.964445][T12488] lan78xx 2-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported
[  416.974845][T12488] lan78xx 2-1:0.168: probe with driver lan78xx failed with error -5
[  417.076097][ T5928] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  417.164610][   T49] usb 2-1: USB disconnect, device number 124
[  417.207156][ T5928] usb 3-1: device descriptor read/64, error -71
[  417.280171][   T10] rtsx_usb 5-1:6.158: probe with driver rtsx_usb failed with error -71
[  417.300634][   T10] usb 5-1: USB disconnect, device number 84
[  417.344186][   T30] audit: type=1800 audit(1764240001.682:63): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2991" name="bus" dev="overlay" ino=2574 res=0 errno=0
[  417.446259][ T5928] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  417.586354][ T5928] usb 3-1: device descriptor read/64, error -71
[  417.696514][ T5928] usb usb3-port1: attempt power cycle
[  417.786192][   T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  417.937790][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.937842][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  417.937871][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  417.937913][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  417.937937][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.944899][   T10] usb 5-1: config 0 descriptor??
[  418.036112][ T5928] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  418.056782][ T5928] usb 3-1: device descriptor read/8, error -71
[  418.089392][T14443] FAULT_INJECTION: forcing a failure.
[  418.089392][T14443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.103152][T14443] CPU: 1 UID: 0 PID: 14443 Comm: syz.1.3001 Not tainted syzkaller #0 PREEMPT(full) 
[  418.103169][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  418.103176][T14443] Call Trace:
[  418.103182][T14443]  <TASK>
[  418.103186][T14443]  dump_stack_lvl+0x189/0x250
[  418.103205][T14443]  ? __pfx____ratelimit+0x10/0x10
[  418.103221][T14443]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.103234][T14443]  ? __pfx__printk+0x10/0x10
[  418.103247][T14443]  ? __might_fault+0xb0/0x130
[  418.103263][T14443]  should_fail_ex+0x414/0x560
[  418.103280][T14443]  _copy_from_user+0x2d/0xb0
[  418.103293][T14443]  __sys_sendto+0x260/0x540
[  418.103306][T14443]  ? __pfx___sys_sendto+0x10/0x10
[  418.103315][T14443]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  418.103333][T14443]  ? __fget_files+0x3a0/0x420
[  418.103352][T14443]  ? ksys_write+0x22a/0x250
[  418.103364][T14443]  ? __pfx_ksys_write+0x10/0x10
[  418.103377][T14443]  __x64_sys_sendto+0xde/0x100
[  418.103389][T14443]  do_syscall_64+0xfa/0xf80
[  418.103400][T14443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.103411][T14443]  ? clear_bhb_loop+0x60/0xb0
[  418.103423][T14443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.103433][T14443] RIP: 0033:0x7f3c2c5915dc
[  418.103444][T14443] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  418.103453][T14443] RSP: 002b:00007f3c2d39bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  418.103465][T14443] RAX: ffffffffffffffda RBX: 00007f3c2d39bfc0 RCX: 00007f3c2c5915dc
[  418.103473][T14443] RDX: 0000000000000020 RSI: 00007f3c2d39c010 RDI: 0000000000000003
[  418.103480][T14443] RBP: 0000000000000000 R08: 00007f3c2d39bf14 R09: 000000000000000c
[  418.103487][T14443] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  418.103493][T14443] R13: 00007f3c2d39bf68 R14: 00007f3c2d39c010 R15: 0000000000000000
[  418.103509][T14443]  </TASK>
[  418.316825][T14422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  418.426178][ T5928] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  418.435782][ T6242] usb 5-1: USB disconnect, device number 85
[  418.450245][ T5928] usb 3-1: device descriptor read/8, error -71
[  418.529184][   T49] usb 1-1: USB disconnect, device number 17
[  418.576674][ T5928] usb usb3-port1: unable to enumerate USB device
[  418.609994][T14458] siw: device registration error -23
[  418.949386][T14477] binder: 14476:14477 unknown command 0
[  418.954987][T14477] binder: 14476:14477 ioctl c0306201 200000000080 returned -22
[  418.965462][T14477] binder: 14476:14477 ioctl c0306201 2000000003c0 returned -14
[  419.193111][T14496] __nla_validate_parse: 4 callbacks suppressed
[  419.193131][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3020'.
[  419.226848][   T49] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  419.396161][   T49] usb 1-1: Using ep0 maxpacket: 32
[  419.409691][   T49] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  419.426196][   T49] usb 1-1: config 0 has no interface number 0
[  419.442544][   T49] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  419.455877][T14505] validate_nla: 2 callbacks suppressed
[  419.455895][T14505] netlink: 'syz.4.3025': attribute type 10 has an invalid length.
[  419.463807][   T49] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  419.496351][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.505909][   T49] usb 1-1: Product: syz
[  419.510376][   T49] usb 1-1: Manufacturer: syz
[  419.523910][   T49] usb 1-1: SerialNumber: syz
[  419.528467][T14508] netlink: 'syz.4.3026': attribute type 21 has an invalid length.
[  419.532446][   T49] usb 1-1: config 0 descriptor??
[  419.543247][T14479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  419.550417][T14508] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3026'.
[  419.559834][T14508] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3026'.
[  419.569850][T14506] team_slave_0: entered promiscuous mode
[  419.575880][T14506] team_slave_1: entered promiscuous mode
[  419.581651][T14506] geneve0: entered promiscuous mode
[  419.589093][T14506] team_slave_0: left promiscuous mode
[  419.594744][T14506] team_slave_1: left promiscuous mode
[  419.600401][T14506] geneve0: left promiscuous mode
[  419.762798][T14479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  419.798798][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3029'.
[  419.808090][T14516] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3029'.
[  419.854887][T14518] cgroup: release_agent respecified
[  419.982205][   T49] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  420.016791][   T49] asix 1-1:0.191: probe with driver asix failed with error -32
[  420.050532][T14528] netlink: 'syz.4.3035': attribute type 10 has an invalid length.
[  420.576180][ T6573] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  420.736075][ T6573] usb 5-1: Using ep0 maxpacket: 16
[  420.743453][ T6573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.754840][ T6573] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  420.768775][ T6573] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00
[  420.778035][ T6573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.789288][ T6573] usb 5-1: config 0 descriptor??
[  420.947755][   T49] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  420.984954][   T30] audit: type=1800 audit(1764240005.322:64): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3044" name="bus" dev="overlay" ino=1101 res=0 errno=0
[  421.116222][   T49] usb 2-1: Using ep0 maxpacket: 32
[  421.128462][   T49] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  421.138827][   T49] usb 2-1: config 0 has no interface number 0
[  421.150018][   T49] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  421.159303][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.168342][   T49] usb 2-1: Product: syz
[  421.172515][   T49] usb 2-1: Manufacturer: syz
[  421.177285][   T49] usb 2-1: SerialNumber: syz
[  421.184968][   T49] usb 2-1: config 0 descriptor??
[  421.192650][   T49] smsc95xx v2.0.0
[  421.205821][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.215546][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.223225][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.231195][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.238730][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.245736][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.254119][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.265371][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.272456][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.279613][ T6573] apple 0003:05AC:0219.002A: unknown main item tag 0x0
[  421.293784][ T6573] apple 0003:05AC:0219.002A: hidraw0: USB HID v0.00 Device [HID 05ac:0219] on usb-dummy_hcd.4-1/input0
[  421.420255][ T6573] usb 5-1: USB disconnect, device number 86
[  421.427929][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'.
[  421.702647][   T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  421.713598][   T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  421.810740][T14585] FAULT_INJECTION: forcing a failure.
[  421.810740][T14585] name failslab, interval 1, probability 0, space 0, times 0
[  421.823495][T14585] CPU: 0 UID: 0 PID: 14585 Comm: syz.2.3055 Not tainted syzkaller #0 PREEMPT(full) 
[  421.823522][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  421.823534][T14585] Call Trace:
[  421.823545][T14585]  <TASK>
[  421.823563][T14585]  dump_stack_lvl+0x189/0x250
[  421.823593][T14585]  ? __pfx____ratelimit+0x10/0x10
[  421.823617][T14585]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.823635][T14585]  ? __pfx__printk+0x10/0x10
[  421.823660][T14585]  ? __pfx___might_resched+0x10/0x10
[  421.823684][T14585]  ? fs_reclaim_acquire+0x7d/0x100
[  421.823712][T14585]  should_fail_ex+0x414/0x560
[  421.823734][T14585]  should_failslab+0xa8/0x100
[  421.823748][T14585]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  421.823767][T14585]  ? __alloc_skb+0x255/0x430
[  421.823776][T14585]  ? napi_skb_cache_get+0x4a5/0x780
[  421.823794][T14585]  ? napi_skb_cache_get+0x151/0x780
[  421.823817][T14585]  __alloc_skb+0x255/0x430
[  421.823838][T14585]  ? __pfx___alloc_skb+0x10/0x10
[  421.823862][T14585]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  421.823889][T14585]  netlink_sendmsg+0x5c6/0xb30
[  421.823913][T14585]  ? aa_sk_perm+0x15f/0x920
[  421.823934][T14585]  ? __pfx_netlink_sendmsg+0x10/0x10
[  421.823956][T14585]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  421.823987][T14585]  ? __pfx_netlink_sendmsg+0x10/0x10
[  421.824012][T14585]  sock_sendmsg_nosec+0x18f/0x1d0
[  421.824037][T14585]  __sys_sendto+0x3ce/0x540
[  421.824049][T14585]  ? __pfx___sys_sendto+0x10/0x10
[  421.824058][T14585]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  421.824076][T14585]  ? __fget_files+0x3a0/0x420
[  421.824110][T14585]  ? ksys_write+0x22a/0x250
[  421.824134][T14585]  ? __pfx_ksys_write+0x10/0x10
[  421.824164][T14585]  __x64_sys_sendto+0xde/0x100
[  421.824185][T14585]  do_syscall_64+0xfa/0xf80
[  421.824209][T14585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.824220][T14585]  ? clear_bhb_loop+0x60/0xb0
[  421.824232][T14585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.824246][T14585] RIP: 0033:0x7f694dd915dc
[  421.824264][T14585] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  421.824282][T14585] RSP: 002b:00007f694ebf7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  421.824303][T14585] RAX: ffffffffffffffda RBX: 00007f694ebf7fc0 RCX: 00007f694dd915dc
[  421.824319][T14585] RDX: 0000000000000020 RSI: 00007f694ebf8010 RDI: 0000000000000003
[  421.824331][T14585] RBP: 0000000000000000 R08: 00007f694ebf7f14 R09: 000000000000000c
[  421.824337][T14585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  421.824344][T14585] R13: 00007f694ebf7f68 R14: 00007f694ebf8010 R15: 0000000000000000
[  421.824360][T14585]  </TASK>
[  422.129469][  T108] usb 1-1: USB disconnect, device number 18
[  422.222443][T14589] 9p: Bad value for 'rfdno'
[  422.229195][   T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  422.247884][   T49] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  422.268094][   T49] usb 2-1: USB disconnect, device number 125
[  422.509947][  T108] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  422.666077][  T108] usb 1-1: Using ep0 maxpacket: 16
[  422.672056][  T108] usb 1-1: too many configurations: 72, using maximum allowed: 8
[  422.687605][  T108] usb 1-1: config 0 has no interfaces?
[  422.698288][  T108] usb 1-1: config 0 has no interfaces?
[  422.705055][  T108] usb 1-1: config 0 has no interfaces?
[  422.717890][  T108] usb 1-1: config 0 has no interfaces?
[  422.724708][  T108] usb 1-1: config 0 has no interfaces?
[  422.731932][  T108] usb 1-1: config 0 has no interfaces?
[  422.767487][  T108] usb 1-1: config 0 has no interfaces?
[  422.776420][   T49] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  422.794784][  T108] usb 1-1: config 0 has no interfaces?
[  422.809422][  T108] usb 1-1: string descriptor 0 read error: -71
[  422.820293][  T108] usb 1-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1
[  422.836036][  T108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70
[  422.856764][  T108] usb 1-1: config 0 descriptor??
[  422.860859][T14618] binder: 14617:14618 unknown command 0
[  422.863928][  T108] usb 1-1: can't set config #0, error -71
[  422.879524][T14618] binder: 14617:14618 ioctl c0306201 200000000080 returned -22
[  422.885635][  T108] usb 1-1: USB disconnect, device number 19
[  422.889943][T14618] binder: 14617:14618 ioctl c0306201 2000000003c0 returned -14
[  422.956144][   T49] usb 5-1: Using ep0 maxpacket: 32
[  422.963720][   T49] usb 5-1: config 0 has an invalid interface number: 191 but max is 0
[  422.982081][   T49] usb 5-1: config 0 has no interface number 0
[  423.010449][   T49] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  423.031598][   T49] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  423.041157][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.049313][   T49] usb 5-1: Product: syz
[  423.053609][   T49] usb 5-1: Manufacturer: syz
[  423.058444][   T49] usb 5-1: SerialNumber: syz
[  423.067673][   T49] usb 5-1: config 0 descriptor??
[  423.073687][T14611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  423.277947][T14633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3074'.
[  423.295838][T14611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  423.479090][T14639] binder: BINDER_SET_CONTEXT_MGR already set
[  423.485141][T14639] binder: 14637:14639 ioctl 4018620d 200000000040 returned -16
[  423.505039][   T49] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  423.536359][   T49] asix 5-1:0.191: probe with driver asix failed with error -32
[  423.544899][T14641] netlink: 'syz.2.3078': attribute type 10 has an invalid length.
[  423.764772][T14644] netlink: 'syz.1.3080': attribute type 21 has an invalid length.
[  423.776785][T14651] netlink: 'syz.2.3081': attribute type 21 has an invalid length.
[  423.795015][T14651] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  423.804299][T14644] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3080'.
[  423.826650][T14651] netlink: 'syz.2.3081': attribute type 6 has an invalid length.
[  423.852529][T14651] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3081'.
[  424.109820][T14661] netlink: 'syz.2.3085': attribute type 21 has an invalid length.
[  424.142457][T14661] befs: (nullb0): invalid magic header
[  424.216528][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  424.418671][T14669] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  424.681278][T14677] __nla_validate_parse: 3 callbacks suppressed
[  424.681300][T14677] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.3094'.
[  425.086090][ T5909] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  425.187829][   T30] audit: type=1800 audit(1764240009.532:65): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3098" name="bus" dev="overlay" ino=1250 res=0 errno=0
[  425.249323][ T5909] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  425.268813][ T5909] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  425.308522][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0
[  425.335273][ T5909] usb 2-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.00
[  425.359465][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.374769][ T5909] usb 2-1: config 0 descriptor??
[  425.655240][   T49] usb 5-1: USB disconnect, device number 87
[  425.846789][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  425.956112][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  426.206130][   T49] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  426.256258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  426.378372][   T49] usb 5-1: config index 0 descriptor too short (expected 215, got 45)
[  426.399752][   T49] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  426.419218][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.437630][   T49] usb 5-1: Product: syz
[  426.441943][   T49] usb 5-1: Manufacturer: syz
[  426.446623][   T49] usb 5-1: SerialNumber: syz
[  426.671204][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  426.695005][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  426.710356][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  426.722489][   T49] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  426.748648][   T49] usb 5-1: USB disconnect, device number 88
[  426.826151][ T6573] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  427.006061][ T6573] usb 3-1: Using ep0 maxpacket: 8
[  427.013040][ T6573] usb 3-1: too many endpoints for config 1 interface 2 altsetting 10: 68, using maximum allowed: 30
[  427.024336][ T6573] usb 3-1: config 1 interface 2 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  427.038091][ T5892] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  427.045892][ T6573] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7
[  427.056973][ T6573] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  427.068394][ T6573] usb 3-1: config 1 interface 2 has no altsetting 2
[  427.077674][ T6573] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  427.087682][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.095722][ T6573] usb 3-1: Product: syz
[  427.099984][   T49] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  427.107578][ T6573] usb 3-1: Manufacturer: syz
[  427.112189][ T6573] usb 3-1: SerialNumber: syz
[  427.226334][ T5892] usb 1-1: Using ep0 maxpacket: 32
[  427.233783][ T5892] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  427.242303][ T5892] usb 1-1: config 0 has no interface number 0
[  427.248567][ T5892] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  427.261225][ T5892] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  427.270491][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.279322][ T5892] usb 1-1: Product: syz
[  427.283847][ T5892] usb 1-1: Manufacturer: syz
[  427.288941][ T5892] usb 1-1: SerialNumber: syz
[  427.294418][   T49] usb 5-1: config index 0 descriptor too short (expected 215, got 45)
[  427.305701][ T5892] usb 1-1: config 0 descriptor??
[  427.311951][T14724] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  427.313363][   T49] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  427.328700][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.334005][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.341098][   T49] usb 5-1: Product: syz
[  427.350132][   T49] usb 5-1: Manufacturer: syz
[  427.351921][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.354850][   T49] usb 5-1: SerialNumber: syz
[  427.400169][ T6573] usb 3-1: USB disconnect, device number 12
[  427.550195][T14724] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  427.604399][ T5909] usb 2-1: string descriptor 0 read error: -71
[  427.630398][ T5909] usbhid 2-1:0.0: can't add hid device: -71
[  427.638957][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  427.656719][ T5909] usb 2-1: USB disconnect, device number 126
[  427.670548][T14726] siw: device registration error -23
[  427.759684][ T5892] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  427.771778][ T5892] asix 1-1:0.191: probe with driver asix failed with error -32
[  427.785292][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  427.814526][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  428.063312][T14740] binder: 14739:14740 unknown command 0
[  428.069010][T14740] binder: 14739:14740 ioctl c0306201 200000000080 returned -22
[  428.079267][T14740] binder: 14739:14740 ioctl c0306201 2000000003c0 returned -14
[  428.216206][T12488] usb 2-1: new low-speed USB device number 127 using dummy_hcd
[  428.346127][T12488] usb 2-1: device descriptor read/64, error -71
[  428.366122][ T5909] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  428.530321][ T5909] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  428.539585][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.547973][ T5909] usb 3-1: Product: syz
[  428.552284][ T5909] usb 3-1: Manufacturer: syz
[  428.556981][ T5909] usb 3-1: SerialNumber: syz
[  428.563727][ T5909] usb 3-1: config 0 descriptor??
[  428.574149][ T5909] gspca_main: sunplus-2.14.0 probing 055f:c230
[  428.586226][T12488] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  428.716302][T12488] usb 2-1: device descriptor read/64, error -71
[  428.827002][T12488] usb usb2-port1: attempt power cycle
[  428.976625][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.985680][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.999225][ T5928] usb 3-1: USB disconnect, device number 13
[  429.176392][T12488] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  429.196694][T12488] usb 2-1: device descriptor read/8, error -71
[  429.437287][T12488] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  429.457262][T12488] usb 2-1: device descriptor read/8, error -71
[  429.567419][T12488] usb usb2-port1: unable to enumerate USB device
[  429.816402][T12488] usb 1-1: USB disconnect, device number 20
[  429.933258][ T5909] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  430.043916][T14762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3129'.
[  430.089660][ T5909] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  430.109011][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.120096][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  430.132565][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.145185][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.152563][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  430.167806][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  430.179733][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.189268][   T49] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  430.198103][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.209544][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.219231][   T49] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  430.229366][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.243672][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.256997][   T49] usb 5-1: USB disconnect, device number 89
[  430.264192][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.274143][T14768] netlink: 'syz.0.3132': attribute type 10 has an invalid length.
[  430.276473][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.294440][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.305530][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.315166][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.324427][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.337080][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.344809][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.358502][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.375652][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.380871][T14771] netlink: 'syz.0.3133': attribute type 21 has an invalid length.
[  430.383716][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.391872][T14771] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3133'.
[  430.400460][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.420895][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.428665][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  430.438078][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  430.449494][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.459330][ T5909] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  430.468696][ T5909] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  430.477151][ T5909] usb 3-1: Product: syz
[  430.481396][ T5909] usb 3-1: Manufacturer: syz
[  430.486050][ T5909] usb 3-1: SerialNumber: syz
[  430.492703][ T5909] usb 3-1: config 0 descriptor??
[  430.503043][ T5909] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  430.710850][T12488] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  430.728897][ T5909] usb 3-1: USB disconnect, device number 14
[  430.742218][ T5909] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  430.800192][T14779] netlink: 'syz.2.3136': attribute type 21 has an invalid length.
[  430.808365][T14779] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3136'.
[  430.818681][T14779] netlink: 'syz.2.3136': attribute type 6 has an invalid length.
[  430.827258][T14779] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3136'.
[  430.866071][T12488] usb 1-1: Using ep0 maxpacket: 32
[  430.871597][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'.
[  430.882036][T14781] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3137'.
[  430.882169][T12488] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  430.892256][T12488] usb 1-1: config 0 has no interface number 0
[  430.905669][T12488] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  430.921286][T12488] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  430.930599][T12488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.938642][   T49] usb 5-1: new low-speed USB device number 90 using dummy_hcd
[  430.946561][T12488] usb 1-1: Product: syz
[  430.950997][T12488] usb 1-1: Manufacturer: syz
[  430.955608][T12488] usb 1-1: SerialNumber: syz
[  430.964312][T12488] usb 1-1: config 0 descriptor??
[  430.977344][T14773] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  431.096434][   T49] usb 5-1: device descriptor read/64, error -71
[  431.197364][T14773] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  431.265460][T14799] netlink: 'syz.2.3145': attribute type 10 has an invalid length.
[  431.333735][T14803] XFS (nbd2): SB validate failed with error -5.
[  431.348767][   T49] usb 5-1: new low-speed USB device number 91 using dummy_hcd
[  431.406659][T12488] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  431.417885][T12488] asix 1-1:0.191: probe with driver asix failed with error -32
[  431.496203][   T49] usb 5-1: device descriptor read/64, error -71
[  431.610941][   T49] usb usb5-port1: attempt power cycle
[  431.669522][   T30] audit: type=1800 audit(1764240016.012:66): pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3154" name="bus" dev="overlay" ino=1323 res=0 errno=0
[  431.976211][   T49] usb 5-1: new low-speed USB device number 92 using dummy_hcd
[  432.000292][   T49] usb 5-1: device descriptor read/8, error -71
[  432.039980][T14841] FAULT_INJECTION: forcing a failure.
[  432.039980][T14841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  432.057549][T14841] CPU: 0 UID: 0 PID: 14841 Comm: syz.2.3161 Not tainted syzkaller #0 PREEMPT(full) 
[  432.057576][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  432.057592][T14841] Call Trace:
[  432.057604][T14841]  <TASK>
[  432.057613][T14841]  dump_stack_lvl+0x189/0x250
[  432.057640][T14841]  ? __pfx____ratelimit+0x10/0x10
[  432.057667][T14841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.057691][T14841]  ? __pfx__printk+0x10/0x10
[  432.057715][T14841]  ? __might_fault+0xb0/0x130
[  432.057744][T14841]  should_fail_ex+0x414/0x560
[  432.057775][T14841]  _copy_from_iter+0x1cd/0x1630
[  432.057798][T14841]  ? __build_skb_around+0x22d/0x3c0
[  432.057823][T14841]  ? __pfx__copy_from_iter+0x10/0x10
[  432.057837][T14841]  ? __alloc_skb+0x2f1/0x430
[  432.057857][T14841]  ? __pfx___alloc_skb+0x10/0x10
[  432.057875][T14841]  ? netlink_sendmsg+0x642/0xb30
[  432.057896][T14841]  ? skb_put+0x11b/0x210
[  432.057915][T14841]  netlink_sendmsg+0x6b2/0xb30
[  432.057934][T14841]  ? aa_sk_perm+0x15f/0x920
[  432.057968][T14841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.057990][T14841]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  432.058015][T14841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.058037][T14841]  sock_sendmsg_nosec+0x18f/0x1d0
[  432.058065][T14841]  __sys_sendto+0x3ce/0x540
[  432.058085][T14841]  ? __pfx___sys_sendto+0x10/0x10
[  432.058101][T14841]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  432.058129][T14841]  ? __fget_files+0x3a0/0x420
[  432.058170][T14841]  ? ksys_write+0x22a/0x250
[  432.058192][T14841]  ? __pfx_ksys_write+0x10/0x10
[  432.058213][T14841]  __x64_sys_sendto+0xde/0x100
[  432.058237][T14841]  do_syscall_64+0xfa/0xf80
[  432.058257][T14841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.058275][T14841]  ? clear_bhb_loop+0x60/0xb0
[  432.058298][T14841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.058315][T14841] RIP: 0033:0x7f694dd915dc
[  432.058331][T14841] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  432.058347][T14841] RSP: 002b:00007f694ebf7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  432.058368][T14841] RAX: ffffffffffffffda RBX: 00007f694ebf7fc0 RCX: 00007f694dd915dc
[  432.058382][T14841] RDX: 0000000000000020 RSI: 00007f694ebf8010 RDI: 0000000000000003
[  432.058395][T14841] RBP: 0000000000000000 R08: 00007f694ebf7f14 R09: 000000000000000c
[  432.058406][T14841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  432.058416][T14841] R13: 00007f694ebf7f68 R14: 00007f694ebf8010 R15: 0000000000000000
[  432.058446][T14841]  </TASK>
[  432.456063][   T49] usb 5-1: new low-speed USB device number 93 using dummy_hcd
[  432.476875][   T49] usb 5-1: device descriptor read/8, error -71
[  432.576100][ T5815] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  432.596384][   T49] usb usb5-port1: unable to enumerate USB device
[  432.636106][ T5892] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  432.726081][ T5815] usb 2-1: Using ep0 maxpacket: 32
[  432.732741][ T5815] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  432.741646][ T5815] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  432.750361][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  432.759564][ T5815] usb 2-1: config 1 has no interface number 0
[  432.765677][ T5815] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  432.776713][ T5815] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  432.789720][ T5815] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  432.798913][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.808691][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.820719][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.822565][ T5815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  432.832466][ T5892] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  432.846246][ T5892] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  432.854252][ T5892] usb 3-1: Manufacturer: syz
[  432.861927][ T5892] usb 3-1: config 0 descriptor??
[  433.020800][ T5815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  433.451967][ T5909] usb 2-1: USB disconnect, device number 5
[  433.461305][ T5909] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  433.474978][ T5892] uclogic 0003:256C:006D.002B: failed retrieving Huion firmware version: -71
[  433.486249][ T5892] uclogic 0003:256C:006D.002B: failed probing parameters: -71
[  433.494738][ T5892] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71
[  433.515898][  T108] usb 1-1: USB disconnect, device number 21
[  433.529570][ T5892] usb 3-1: USB disconnect, device number 15
[  433.996115][ T5892] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  434.106788][T14873] binder: 14871:14873 unknown command 0
[  434.112351][T14873] binder: 14871:14873 ioctl c0306201 200000000080 returned -22
[  434.122089][T14873] binder: 14871:14873 ioctl c0306201 2000000003c0 returned -14
[  434.167420][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.179705][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.191375][ T5892] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  434.200585][ T5892] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  434.208666][ T5892] usb 3-1: Manufacturer: syz
[  434.215218][ T5892] usb 3-1: config 0 descriptor??
[  434.337668][  T108] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  434.396385][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  434.423969][ T5892] usbhid 3-1:0.0: can't add hid device: -71
[  434.431068][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  434.441927][ T5892] usb 3-1: USB disconnect, device number 16
[  434.497197][  T108] usb 5-1: Using ep0 maxpacket: 32
[  434.504177][  T108] usb 5-1: config 0 has an invalid interface number: 191 but max is 0
[  434.512435][  T108] usb 5-1: config 0 has no interface number 0
[  434.518772][  T108] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  434.532606][  T108] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  434.541746][  T108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.550276][  T108] usb 5-1: Product: syz
[  434.554496][  T108] usb 5-1: Manufacturer: syz
[  434.559533][  T108] usb 5-1: SerialNumber: syz
[  434.565039][ T5815] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  434.574926][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.584467][  T108] usb 5-1: config 0 descriptor??
[  434.591216][T14872] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  434.592479][ T5815] usb 2-1: config 0 descriptor??
[  434.807297][T14872] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  435.018750][  T108] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  435.029696][  T108] asix 5-1:0.191: probe with driver asix failed with error -61
[  435.326113][  T108] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  435.486110][  T108] usb 3-1: Using ep0 maxpacket: 16
[  435.550201][T14885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.559900][T14885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.575198][T14882] overlayfs: failed to resolve './file1/file0': -2
[  435.584097][  T108] usb 3-1: unable to get BOS descriptor or descriptor too short
[  435.594359][  T108] usb 3-1: unable to read config index 0 descriptor/start: -71
[  435.602163][  T108] usb 3-1: can't read configurations, error -71
[  435.621234][ T5815] usb 2-1: Cannot set autoneg
[  435.627320][ T5815] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  436.529989][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.539241][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.548492][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.558244][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.577815][ T5892] usb 2-1: USB disconnect, device number 6
[  436.618401][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3182'.
[  436.646188][  T108] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  436.742175][T14902] netlink: 'syz.0.3185': attribute type 10 has an invalid length.
[  436.779055][T14904] netlink: 'syz.0.3186': attribute type 21 has an invalid length.
[  436.788476][T14904] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3186'.
[  436.799289][T14904] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3186'.
[  436.816173][  T108] usb 3-1: Using ep0 maxpacket: 8
[  436.823208][  T108] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  436.833952][  T108] usb 3-1: config 179 has no interface number 0
[  436.840954][  T108] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  436.852413][  T108] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  436.863876][  T108] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  436.875107][  T108] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  436.889556][  T108] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  436.902927][  T108] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  436.912192][  T108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.934290][T14892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  436.938985][T14908] netlink: 'syz.0.3188': attribute type 21 has an invalid length.
[  436.949752][T14908] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3188'.
[  436.959455][T14908] netlink: 'syz.0.3188': attribute type 6 has an invalid length.
[  436.967508][T14908] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3188'.
[  437.021699][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3189'.
[  437.032762][T14910] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3189'.
[  437.046363][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  437.120034][ T5909] usb 5-1: USB disconnect, device number 94
[  437.208025][  T108] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input60
[  437.213912][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.268009][ T5892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  437.293370][ T5892] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=51.27
[  437.354483][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.403136][ T5892] usb 2-1: config 0 descriptor??
[  437.427398][ T5892] gspca_main: spca506-2.14.0 probing 99fa:8988
[  437.526212][T14924] netlink: 'syz.4.3193': attribute type 12 has an invalid length.
[  437.534367][T14924] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3193'.
[  437.627689][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.637998][T14928] netlink: 'syz.4.3195': attribute type 10 has an invalid length.
[  437.646831][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.691883][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.713884][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.766732][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.795867][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.876488][ T5892] usb 2-1: USB disconnect, device number 7
[  437.936145][T12488] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  438.097762][T12488] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.108215][T12488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  438.119206][T12488] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  438.132296][T12488] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  438.141513][T12488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.152077][T12488] usb 1-1: config 0 descriptor??
[  438.236175][ T5892] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  438.361337][T12488] ath6kl: Failed to submit usb control message: -71
[  438.371005][T12488] ath6kl: unable to send the bmi data to the device: -71
[  438.378201][T12488] ath6kl: Unable to send get target info: -71
[  438.385188][T12488] ath6kl: Failed to init ath6kl core: -71
[  438.393229][T12488] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  438.416485][ T5909] usb 5-1: new full-speed USB device number 95 using dummy_hcd
[  438.416528][T12488] usb 1-1: USB disconnect, device number 22
[  438.424160][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  438.437717][ T5892] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  438.446763][ T5892] usb 2-1: config 0 has no interface number 0
[  438.452969][ T5892] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  438.466716][ T5892] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  438.476116][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.484137][ T5892] usb 2-1: Product: syz
[  438.489179][ T5892] usb 2-1: Manufacturer: syz
[  438.493793][ T5892] usb 2-1: SerialNumber: syz
[  438.501512][ T5892] usb 2-1: config 0 descriptor??
[  438.508571][T14942] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  438.578569][ T5909] usb 5-1: not running at top speed; connect to a high speed hub
[  438.589404][ T5909] usb 5-1: config 3 has an invalid interface number: 144 but max is 1
[  438.597946][ T5909] usb 5-1: config 3 has an invalid interface number: 152 but max is 1
[  438.606324][ T5909] usb 5-1: config 3 has no interface number 0
[  438.612547][ T5909] usb 5-1: config 3 has no interface number 1
[  438.618832][ T5909] usb 5-1: config 3 interface 144 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64
[  438.629954][ T5909] usb 5-1: config 3 interface 144 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  438.641109][ T5909] usb 5-1: config 3 interface 144 altsetting 6 has an endpoint descriptor with address 0x18, changing to 0x8
[  438.652908][ T5909] usb 5-1: config 3 interface 144 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  438.663701][ T5909] usb 5-1: config 3 interface 144 altsetting 6 endpoint 0xB has an invalid bInterval 81, changing to 4
[  438.674968][ T5909] usb 5-1: config 3 interface 144 altsetting 6 endpoint 0xB has invalid wMaxPacketSize 0
[  438.685496][ T5909] usb 5-1: config 3 interface 152 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  438.696566][ T5909] usb 5-1: config 3 interface 152 altsetting 8 endpoint 0xF has an invalid bInterval 0, changing to 4
[  438.707613][ T5909] usb 5-1: config 3 interface 144 has no altsetting 0
[  438.714420][ T5909] usb 5-1: config 3 interface 152 has no altsetting 0
[  438.728524][T14942] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  438.738701][ T5909] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=ef.8a
[  438.748803][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.756918][ T5909] usb 5-1: Product: ࠓ
[  438.761111][ T5909] usb 5-1: Manufacturer: ͏肮Ⴕ䨭뱼糘ⲽ
[  438.767806][ T5909] usb 5-1: SerialNumber: 椭渠ꠃ⽁ﷶꂱિ㣗ｖ蚐괅瀧
[  438.781692][ T5909] r8152-cfgselector 5-1: Unknown version 0x0000
[  438.938108][ T5892] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  438.958781][ T5892] asix 2-1:0.191: probe with driver asix failed with error -61
[  438.999221][T14944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.017670][T14944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.039938][ T5909] r8152-cfgselector 5-1: Unknown version 0x0000
[  439.047323][ T5909] r8152-cfgselector 5-1: bad CDC descriptors
[  439.072312][ T5909] r8152-cfgselector 5-1: USB disconnect, device number 95
[  439.170813][T14951] netlink: 800 bytes leftover after parsing attributes in process `syz.0.3203'.
[  439.194501][T14951] openvswitch: netlink: Flow key attr not present in new flow.
[  439.318716][ T5909] usb 3-1: USB disconnect, device number 18
[  439.318870][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  439.333555][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  439.435676][   T30] audit: type=1800 audit(1764240023.772:67): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3207" name="bus" dev="overlay" ino=727 res=0 errno=0
[  439.706095][ T5909] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  439.836454][ T5909] usb 3-1: device descriptor read/64, error -71
[  439.856086][ T5892] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  439.966090][   T49] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  439.986090][ T5892] usb 5-1: device descriptor read/64, error -71
[  440.001337][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  440.087431][ T5909] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  440.096784][   T49] usb 1-1: device descriptor read/64, error -71
[  440.226099][ T5909] usb 3-1: device descriptor read/64, error -71
[  440.232473][ T5892] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  440.336130][   T49] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  440.356416][ T5909] usb usb3-port1: attempt power cycle
[  440.366169][ T5892] usb 5-1: device descriptor read/64, error -71
[  440.486100][   T49] usb 1-1: device descriptor read/64, error -71
[  440.492885][ T5892] usb usb5-port1: attempt power cycle
[  440.606775][   T49] usb usb1-port1: attempt power cycle
[  440.716084][ T5909] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  440.736823][ T5909] usb 3-1: device descriptor read/8, error -71
[  440.846170][ T5892] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  440.866824][ T5892] usb 5-1: device descriptor read/8, error -71
[  440.949038][ T6242] usb 2-1: USB disconnect, device number 8
[  440.960393][   T49] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  440.987538][ T5909] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  440.995511][   T49] usb 1-1: device descriptor read/8, error -71
[  440.997773][T14978] FAULT_INJECTION: forcing a failure.
[  440.997773][T14978] name failslab, interval 1, probability 0, space 0, times 0
[  441.014719][T14978] CPU: 0 UID: 0 PID: 14978 Comm: syz.1.3213 Not tainted syzkaller #0 PREEMPT(full) 
[  441.014736][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  441.014743][T14978] Call Trace:
[  441.014748][T14978]  <TASK>
[  441.014753][T14978]  dump_stack_lvl+0x189/0x250
[  441.014771][T14978]  ? __pfx____ratelimit+0x10/0x10
[  441.014789][T14978]  ? __pfx_dump_stack_lvl+0x10/0x10
[  441.014802][T14978]  ? __pfx__printk+0x10/0x10
[  441.014813][T14978]  ? save_netdev_trace_buffer+0x4b5/0x5a0
[  441.014837][T14978]  should_fail_ex+0x414/0x560
[  441.014855][T14978]  should_failslab+0xa8/0x100
[  441.014870][T14978]  kmem_cache_alloc_noprof+0x88/0x710
[  441.014887][T14978]  ? __netlink_lookup+0xbd/0x8a0
[  441.014901][T14978]  ? skb_clone+0x212/0x3a0
[  441.014916][T14978]  skb_clone+0x212/0x3a0
[  441.014931][T14978]  __netlink_deliver_tap+0x424/0x8b0
[  441.014950][T14978]  ? netlink_deliver_tap+0x2e/0x1b0
[  441.014964][T14978]  netlink_deliver_tap+0x19c/0x1b0
[  441.014977][T14978]  netlink_unicast+0x7fa/0x9e0
[  441.014993][T14978]  ? __pfx_netlink_unicast+0x10/0x10
[  441.015005][T14978]  ? netlink_sendmsg+0x642/0xb30
[  441.015017][T14978]  ? skb_put+0x11b/0x210
[  441.015030][T14978]  netlink_sendmsg+0x805/0xb30
[  441.015041][T14978]  ? aa_sk_perm+0x15f/0x920
[  441.015061][T14978]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.015075][T14978]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  441.015091][T14978]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.015104][T14978]  sock_sendmsg_nosec+0x18f/0x1d0
[  441.015120][T14978]  __sys_sendto+0x3ce/0x540
[  441.015132][T14978]  ? __pfx___sys_sendto+0x10/0x10
[  441.015141][T14978]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  441.015159][T14978]  ? __fget_files+0x3a0/0x420
[  441.015179][T14978]  ? ksys_write+0x22a/0x250
[  441.015191][T14978]  ? __pfx_ksys_write+0x10/0x10
[  441.015204][T14978]  __x64_sys_sendto+0xde/0x100
[  441.015216][T14978]  do_syscall_64+0xfa/0xf80
[  441.015227][T14978]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.015237][T14978]  ? clear_bhb_loop+0x60/0xb0
[  441.015249][T14978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.015259][T14978] RIP: 0033:0x7f3c2c5915dc
[  441.015270][T14978] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  441.015279][T14978] RSP: 002b:00007f3c2d39bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  441.015292][T14978] RAX: ffffffffffffffda RBX: 00007f3c2d39bfc0 RCX: 00007f3c2c5915dc
[  441.015300][T14978] RDX: 0000000000000020 RSI: 00007f3c2d39c010 RDI: 0000000000000003
[  441.015310][T14978] RBP: 0000000000000000 R08: 00007f3c2d39bf14 R09: 000000000000000c
[  441.015316][T14978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  441.015323][T14978] R13: 00007f3c2d39bf68 R14: 00007f3c2d39c010 R15: 0000000000000000
[  441.015339][T14978]  </TASK>
[  441.106110][ T5892] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  441.304663][ T5909] usb 3-1: device descriptor read/8, error -71
[  441.329190][ T5892] usb 5-1: device descriptor read/8, error -71
[  441.350498][T14984] siw: device registration error -23
[  441.416470][ T5909] usb usb3-port1: unable to enumerate USB device
[  441.427287][   T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  441.437222][ T5892] usb usb5-port1: unable to enumerate USB device
[  441.442333][T14988] loop6: detected capacity change from 0 to 2560
[  441.450445][   T49] usb 1-1: device descriptor read/8, error -71
[  441.450841][T14988] buffer_io_error: 11 callbacks suppressed
[  441.450856][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.470764][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.478922][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.486929][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.494868][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.503419][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.511477][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.520899][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.528990][T14988] ldm_validate_partition_table(): Disk read failed.
[  441.535639][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.544110][T14988] Buffer I/O error on dev loop6, logical block 0, async page read
[  441.558074][T14988] Dev loop6: unable to read RDB block 0
[  441.563928][T14988]  loop6: unable to read partition table
[  441.566652][   T49] usb usb1-port1: unable to enumerate USB device
[  441.577907][T14988] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  441.816320][  T108] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  441.966168][  T108] usb 2-1: Invalid ep0 maxpacket: 64
[  442.096116][  T108] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  442.246077][  T108] usb 2-1: Invalid ep0 maxpacket: 64
[  442.251654][  T108] usb usb2-port1: attempt power cycle
[  442.596214][  T108] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  442.616927][  T108] usb 2-1: Invalid ep0 maxpacket: 64
[  442.687798][T15002] binder: 15001:15002 unknown command 0
[  442.693606][T15002] binder: 15001:15002 ioctl c0306201 200000000080 returned -22
[  442.703768][T15002] binder: 15001:15002 ioctl c0306201 2000000003c0 returned -14
[  442.756204][  T108] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  442.776939][  T108] usb 2-1: Invalid ep0 maxpacket: 64
[  442.782796][  T108] usb usb2-port1: unable to enumerate USB device
[  442.796316][ T5892] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  442.921417][T15011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  442.932150][T15011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  442.966126][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  442.973020][ T5892] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  442.983222][ T5892] usb 3-1: config 0 has no interface number 0
[  442.991257][ T5892] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  443.003925][ T5892] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  443.013130][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.021217][ T5892] usb 3-1: Product: syz
[  443.025390][ T5892] usb 3-1: Manufacturer: syz
[  443.030037][ T5892] usb 3-1: SerialNumber: syz
[  443.050849][ T5892] usb 3-1: config 0 descriptor??
[  443.056875][T14998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  443.276840][T14998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  443.489773][ T5892] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  443.516614][ T5892] asix 3-1:0.191: probe with driver asix failed with error -61
[  444.260410][T15035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  444.398209][T15041] ------------[ cut here ]------------
[  444.403720][T15041] WARNING: arch/x86/kvm/lapic.c:3501 at kvm_apic_accept_events+0x341/0x490, CPU#1: syz.0.3236/15041
[  444.414619][T15041] Modules linked in:
[  444.419029][T15041] CPU: 1 UID: 0 PID: 15041 Comm: syz.0.3236 Not tainted syzkaller #0 PREEMPT(full) 
[  444.428551][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  444.438672][T15041] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[  444.444865][T15041] Code: eb 0c e8 b2 c2 72 00 eb 05 e8 ab c2 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c2 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[  444.464809][T15041] RSP: 0018:ffffc90010e5fbf0 EFLAGS: 00010287
[  444.471161][T15041] RAX: ffffffff814f1e70 RBX: 0000000000000002 RCX: 0000000000080000
[  444.479295][T15041] RDX: ffffc9000bee9000 RSI: 0000000000000395 RDI: 0000000000000396
[  444.487319][T15041] RBP: 0000000000000000 R08: ffffffff81475af2 R09: ffff888024ca1838
[  444.495493][T15041] R10: dffffc0000000000 R11: ffffed10060ab530 R12: 0000000000000002
[  444.503534][T15041] R13: dffffc0000000000 R14: ffff8880602bc000 R15: ffff88803055ac18
[  444.511575][T15041] FS:  00007fb63a75c6c0(0000) GS:ffff888125b3b000(0000) knlGS:0000000000000000
[  444.520814][T15041] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  444.527586][T15041] CR2: 000000000005fff8 CR3: 000000006a9a0000 CR4: 00000000003526f0
[  444.535572][T15041] Call Trace:
[  444.538885][T15041]  <TASK>
[  444.541824][T15041]  kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450
[  444.548069][T15041]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[  444.554329][T15041]  kvm_vcpu_ioctl+0x663/0xed0
[  444.559065][T15041]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  444.564291][T15041]  ? do_futex+0x333/0x420
[  444.568704][T15041]  ? __fget_files+0x2a/0x420
[  444.573326][T15041]  ? __fget_files+0x3a0/0x420
[  444.578102][T15041]  ? __fget_files+0x2a/0x420
[  444.582719][T15041]  ? bpf_lsm_file_ioctl+0x9/0x20
[  444.587707][T15041]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  444.592942][T15041]  __se_sys_ioctl+0xfc/0x170
[  444.597698][T15041]  do_syscall_64+0xfa/0xf80
[  444.602221][T15041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.608383][T15041]  ? clear_bhb_loop+0x60/0xb0
[  444.613082][T15041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.619065][T15041] RIP: 0033:0x7fb63998f749
[  444.623499][T15041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.643378][T15041] RSP: 002b:00007fb63a75c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  444.651863][T15041] RAX: ffffffffffffffda RBX: 00007fb639be5fa0 RCX: 00007fb63998f749
[  444.659924][T15041] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005
[  444.667964][T15041] RBP: 00007fb639a13f91 R08: 0000000000000000 R09: 0000000000000000
[  444.676050][T15041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.684035][T15041] R13: 00007fb639be6038 R14: 00007fb639be5fa0 R15: 00007ffd1678e998
[  444.692093][T15041]  </TASK>
[  444.695134][T15041] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  444.702405][T15041] CPU: 1 UID: 0 PID: 15041 Comm: syz.0.3236 Not tainted syzkaller #0 PREEMPT(full) 
[  444.711761][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  444.721828][T15041] Call Trace:
[  444.725100][T15041]  <TASK>
[  444.728030][T15041]  dump_stack_lvl+0x99/0x250
[  444.732639][T15041]  ? __asan_memcpy+0x40/0x70
[  444.737250][T15041]  ? __pfx_dump_stack_lvl+0x10/0x10
[  444.742462][T15041]  ? __pfx__printk+0x10/0x10
[  444.747065][T15041]  vpanic+0x237/0x6d0
[  444.751060][T15041]  ? __pfx_vpanic+0x10/0x10
[  444.755559][T15041]  ? is_bpf_text_address+0x292/0x2b0
[  444.760839][T15041]  ? is_bpf_text_address+0x26/0x2b0
[  444.766039][T15041]  panic+0xb9/0xc0
[  444.769770][T15041]  ? __pfx_panic+0x10/0x10
[  444.774193][T15041]  __warn+0x317/0x4b0
[  444.778161][T15041]  ? kvm_apic_accept_events+0x341/0x490
[  444.783708][T15041]  ? kvm_apic_accept_events+0x341/0x490
[  444.789258][T15041]  __report_bug+0x22e/0x4b0
[  444.793762][T15041]  ? kvm_apic_accept_events+0x341/0x490
[  444.799319][T15041]  ? __pfx___report_bug+0x10/0x10
[  444.804338][T15041]  ? __lock_acquire+0x6b6/0x2cf0
[  444.809312][T15041]  ? rcu_is_watching+0x15/0xb0
[  444.814075][T15041]  ? trace_contention_end+0x39/0x100
[  444.819366][T15041]  ? kvm_apic_accept_events+0x341/0x490
[  444.824912][T15041]  report_bug+0x16a/0x220
[  444.829232][T15041]  ? kvm_apic_accept_events+0x341/0x490
[  444.834777][T15041]  ? kvm_apic_accept_events+0x343/0x490
[  444.840320][T15041]  handle_bug+0x98/0x200
[  444.844555][T15041]  exc_invalid_op+0x1a/0x50
[  444.849049][T15041]  asm_exc_invalid_op+0x1a/0x20
[  444.853893][T15041] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[  444.860046][T15041] Code: eb 0c e8 b2 c2 72 00 eb 05 e8 ab c2 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c2 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[  444.879651][T15041] RSP: 0018:ffffc90010e5fbf0 EFLAGS: 00010287
[  444.885710][T15041] RAX: ffffffff814f1e70 RBX: 0000000000000002 RCX: 0000000000080000
[  444.893678][T15041] RDX: ffffc9000bee9000 RSI: 0000000000000395 RDI: 0000000000000396
[  444.901638][T15041] RBP: 0000000000000000 R08: ffffffff81475af2 R09: ffff888024ca1838
[  444.909601][T15041] R10: dffffc0000000000 R11: ffffed10060ab530 R12: 0000000000000002
[  444.917567][T15041] R13: dffffc0000000000 R14: ffff8880602bc000 R15: ffff88803055ac18
[  444.925542][T15041]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[  444.931774][T15041]  ? kvm_apic_accept_events+0x340/0x490
[  444.937335][T15041]  kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450
[  444.943487][T15041]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[  444.949722][T15041]  kvm_vcpu_ioctl+0x663/0xed0
[  444.954401][T15041]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  444.959593][T15041]  ? do_futex+0x333/0x420
[  444.963931][T15041]  ? __fget_files+0x2a/0x420
[  444.968518][T15041]  ? __fget_files+0x3a0/0x420
[  444.973187][T15041]  ? __fget_files+0x2a/0x420
[  444.977778][T15041]  ? bpf_lsm_file_ioctl+0x9/0x20
[  444.982714][T15041]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  444.987908][T15041]  __se_sys_ioctl+0xfc/0x170
[  444.992491][T15041]  do_syscall_64+0xfa/0xf80
[  444.996989][T15041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.003044][T15041]  ? clear_bhb_loop+0x60/0xb0
[  445.007713][T15041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.013591][T15041] RIP: 0033:0x7fb63998f749
[  445.018023][T15041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.037618][T15041] RSP: 002b:00007fb63a75c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.046028][T15041] RAX: ffffffffffffffda RBX: 00007fb639be5fa0 RCX: 00007fb63998f749
[  445.053991][T15041] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005
[  445.061981][T15041] RBP: 00007fb639a13f91 R08: 0000000000000000 R09: 0000000000000000
[  445.069943][T15041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.077907][T15041] R13: 00007fb639be6038 R14: 00007fb639be5fa0 R15: 00007ffd1678e998
[  445.085884][T15041]  </TASK>
[  445.089273][T15041] Kernel Offset: disabled
[  445.093606][T15041] Rebooting in 86400 seconds..