last executing test programs:

2m33.558042347s ago: executing program 0 (id=1054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x1, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x9, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m33.305318796s ago: executing program 0 (id=1056):
r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f01000000000000000000090581032000000000090582022000000000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400908000000080000255a3eae01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m30.293316878s ago: executing program 0 (id=1065):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x82, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020}, 0x2020)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1a200, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007add1520450580800103000000010902120001000000000904"], 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x3f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c)
ioctl(r2, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="060f00000200000000000000ffdbdf25"], 0x10}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000200)=0xc)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r9})

2m28.820947272s ago: executing program 0 (id=1069):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180))

2m28.729153652s ago: executing program 0 (id=1070):
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@loopback, @in6=@local}}, {{@in=@dev}}}, &(0x7f00000002c0)=0xe8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x22a000, 0x2000, &(0x7f0000fe8000/0x2000)=nil})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6], 0x7c}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
setns(0xc9, 0xd48277d2ae15ee98)
r7 = socket(0x2a, 0x2, 0x9)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m28.464276892s ago: executing program 0 (id=1072):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1, 0x88240)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
write(r0, &(0x7f00000002c0)='snd_aloop.0', 0xb)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340)=0xfffffffe, 0x4)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000500)=0x95, 0x4)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
connect$unix(r3, &(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0x4, 0x2}, @cond=[{0x8, 0xc272, 0x8, 0x6, 0x0, 0x6}, {0x3, 0x5, 0x800, 0xd, 0x4, 0x2}]})
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000e80)=0x3)
readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/52}, {&(0x7f00000003c0)=""/164}, {&(0x7f0000000480)=""/31}], 0x10000000000002cb)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
r7 = fanotify_init(0x0, 0x0)
readv(r7, &(0x7f0000000680)=[{&(0x7f0000000380)=""/100, 0x64}], 0x1)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r8, 0xe)
socket$kcm(0xa, 0x3, 0x87)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

2m13.082917001s ago: executing program 32 (id=1072):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1, 0x88240)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
write(r0, &(0x7f00000002c0)='snd_aloop.0', 0xb)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340)=0xfffffffe, 0x4)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000500)=0x95, 0x4)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
connect$unix(r3, &(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0x4, 0x2}, @cond=[{0x8, 0xc272, 0x8, 0x6, 0x0, 0x6}, {0x3, 0x5, 0x800, 0xd, 0x4, 0x2}]})
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000e80)=0x3)
readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/52}, {&(0x7f00000003c0)=""/164}, {&(0x7f0000000480)=""/31}], 0x10000000000002cb)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
r7 = fanotify_init(0x0, 0x0)
readv(r7, &(0x7f0000000680)=[{&(0x7f0000000380)=""/100, 0x64}], 0x1)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r8, 0xe)
socket$kcm(0xa, 0x3, 0x87)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

5.069128817s ago: executing program 1 (id=1715):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x8301, 0x0)
write$sequencer(r1, &(0x7f0000000400)=[@t={0x81, 0x8, 0x3, 0x1d, @generic=0x6}], 0x8)
ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000000)={0x100000000, 0x1})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x58, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}})

4.863000857s ago: executing program 4 (id=1718):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c0000002500"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)

4.84670128s ago: executing program 4 (id=1719):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x23ac, @rand_addr=' \x01\x00', 0x8}}, [0xfff, 0x4bfe, 0x9, 0xffffffff, 0x8, 0x3, 0x7, 0xffffffff, 0x1, 0xfff, 0xdb, 0x3, 0xffffffffffff410a, 0x3, 0xfffffffffffffff2]}, &(0x7f0000000340)=0x100)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000440)={0x7000, 0x5000})
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000380)={r4, 0x1}, &(0x7f00000003c0)=0x8)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001e40)='source\x00', &(0x7f0000001e80)='#\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x9000, 0x6, 0x0, 0x81, 0x2, 0x9, 0x0, 0x6, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x0, 0xf, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3, 0xff}, {0xeeee0000, 0x41000, 0xc, 0x0, 0xb, 0x7, 0x8, 0x40, 0x26, 0x7f, 0x3, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddfcffe7, 0x0, 0x0, 0x78, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]})

4.699337363s ago: executing program 4 (id=1720):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f00000002c0)="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", 0xfc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0xfffe, @empty}, {0x0, @broadcast}, 0x0, {0x440, 0x1, @multicast1=0xe000cc02}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1})
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x23, 0x163101)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
syz_usb_connect$uac2(0x5, 0xb8, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x103d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x1, 0x70, 0x6, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xc, 0x15, 0x34}, [@extension_unit={0xc, 0x24, 0x9, 0x3, 0x6, 0x0, "aaace88a8e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe7, 0x4, 0x4e, 0x3, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0xf, 0xe, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0xe9ef, 0x6, "d76b4d08e789"}, @as_header={0x10, 0x24, 0x1, 0x7, 0xcf, 0x3, 0x1, 0x6, 0xc426, 0xfd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x5, 0x10, 0xd, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xb7, 0xff, {0x8, 0x25, 0x1, 0x1, 0x33, 0x1, 0x3}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xd7, 0x6, 0x10, 0x40, 0x8}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x455}}, {0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1003ab7878cbad4bfb92759029b71b2c"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}]})

3.562002413s ago: executing program 1 (id=1724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000015c0)={0xd, 0x0, [{0x6e89, 0x0, 0x1}, {0x3, 0x0, 0x807f}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffff9, 0x0, 0x5365}, {0x80, 0x0, 0x499}, {0xa, 0x0, 0x3f}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x47, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x10000000, 0xffffffffffffffff}, {0x40, 0x0, 0x7}]})

3.429185982s ago: executing program 1 (id=1725):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)=0x2e)
r1 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003580)=ANY=[@ANYBLOB="1000000017142d"], 0x10}}, 0x80)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x0}, {0x5, 0x6010, 0x0, 0x0}, {0xb19, 0x5a01, 0x23, 0x0}, {0x7, 0x4810, 0x0, 0xfffffffffffffffe}], 0x4})

3.410218374s ago: executing program 2 (id=1726):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x80, 0x70802)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10808}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0xfee7a7ef90b488ed)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}}, 0xc000)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x806, 0x0)
ioctl$UI_DEV_DESTROY(r5, 0x5502)
close(r0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e21, 0x1, @loopback, 0x3ff}, 0x1c)
r7 = socket$pppoe(0x18, 0x1, 0x0)
sendfile(r7, r5, &(0x7f0000000480)=0x7, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000500)='-1\x00', 0x3)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r8, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c890)
r9 = syz_open_dev$evdev(&(0x7f0000000680), 0x1, 0x400400)
socket$inet6_icmp(0xa, 0x2, 0x3a)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x200004, 0x0)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f0000000740)={{@local, 0xfffffff4}, @hyper, 0x2, 0x0, 0x5dc8e3f2, 0x4, 0xd480, 0xb3e7, 0x81e})
ioctl$F2FS_IOC_DECOMPRESS_FILE(r9, 0xf517, 0x0)
r11 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r11, 0xc0445624, &(0x7f00000007c0)={0xfffffdcf, 0x252, "37a2789f1c0e83640d616a36c4dae1e5afefd6c4e670020dd37e8e1e0c5dd154", 0x3, 0x0, 0x8, 0x7, 0x844})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r11, 0xc0345641, &(0x7f0000000840)={0x71ad9b88, "29ddfb1f7ad9a2968be0890628b004406d9bde4547bd990209334f5d6979cfcd", 0x1, 0x1})
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000880), &(0x7f00000008c0)=0x4)

3.368505634s ago: executing program 2 (id=1727):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c0000002500"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)

3.325445373s ago: executing program 2 (id=1728):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x1, 0xff, 0x0, 0xfffffffc}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0xd2}]}]}, 0x23c}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_mreq(r3, 0x29, 0x13, &(0x7f0000001300)={@remote}, 0x14)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x200480c0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/95)

3.113138212s ago: executing program 4 (id=1729):
r0 = socket(0xa, 0x3, 0x3a)
prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x0, 0x1}, 0xc) (async)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x0, 0x1}, 0xc)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xceb8, 0x4000)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x10002, 0x0, &(0x7f0000fff000/0x1000)=nil})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000200)=0x66)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000018000103010c7002fadbdf2501"], 0x14}}, 0x8854)
syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000100)="8102") (async)
syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000100)="8102")

2.530335352s ago: executing program 2 (id=1730):
r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

1.987376362s ago: executing program 1 (id=1731):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040804}, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x7fffffff, &(0x7f0000000000)="030000000000000001")

1.849107268s ago: executing program 1 (id=1732):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0)
clock_adjtime(0x0, &(0x7f0000000900)={0x280, 0x20000000e, 0x89, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x5, 0xa9, 0x3, 0x7, 0x9, 0x8, 0x7, 0x8, 0x80000000, 0xffffffffffbffffe, 0x1000000005, 0x23, 0x7, 0x6, 0x6})
syz_usb_connect$uac2(0x2, 0xb8, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x7, 0x10, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x7, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8f, 0x7, 0x13, 0x6}, [@extension_unit={0xa, 0x24, 0x9, 0x4, 0x8, 0x24, "075a0f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x2, "13", "cb5b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x5af, 0x0, 0xfd, 0x3, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x9, 0x6, 0x1, 0x3, 0x9b, 0x9a25}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x48}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8d}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x8, 'Q', "e03315"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x8, 0x0, {0x8, 0x25, 0x1, 0x0, 0x30, 0x5, 0xb6f0}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x4, 0x9, 0x0, 0x5}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xa4, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x39, &(0x7f0000000300)=@string={0x39, 0x3, "5b701f6f4b225bf76e4036906bdad0369671d2ed782154f301c275aad84e518a36c4b97f51a92233e0b7bc3ab71ff4ffe6fb44cdfa4af1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4ff}}]})
r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x6a4040)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x3, 0xe000, 0x0, 0x0}], 0x1})

1.658123705s ago: executing program 2 (id=1733):
mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x200, @remote, 0x3}, 0x1c)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write(r1, &(0x7f0000000500)="4d2e95a079d76acb4f95f7", 0xb)
write$proc_mixer(r0, &(0x7f0000000140)=ANY=[], 0xfdcf)
socket$rxrpc(0x21, 0x2, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180))

1.611469993s ago: executing program 3 (id=1734):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x40) (fail_nth: 4)

1.54901166s ago: executing program 2 (id=1735):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x40, 0x31, 0x4c, {0x4c, 0x2, "cabfdafd3c9e23d391a0676bd98ffeeaa587229a4dd0db30c98e78a73918046de47fac98f85c1b5d6f810ea23e68721ad6b2be14adf11fa0f10ce41164427e280991d0e63ff17b2d7b2d"}}, &(0x7f00000005c0)={0x0, 0x3, 0xa, @string={0xa, 0x3, "7328a5fd4fdda907"}}}, &(0x7f0000000800)={0x34, &(0x7f0000000640)={0x40, 0xf, 0x76, "edb976a1d446d796283fdca6a5feabb6dafe3ee47fb58ceecd99d0ba1be9d68293bc9bdc3b48147a8cac2076872ccca2a811652418ab6130cc36a1d8054eaaf063309d48e3e04e93fefa79c1c8892bac5c6a9171693ac4e71585c448a98a780f0a0c9a510325e5f5a23bbe19bfef25e424709642e497"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000780)={0x40, 0xa0, 0x4}, &(0x7f00000007c0)={0xc0, 0xa2, 0x2f, "8f4ad59c88b86ae69aac805221cb2720c51290756598123267874917905b72ef0c2b8fff0032bd89209844f37261e6"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x9, 0x83, {0x83, 0x3, "d83cf17db922d332ec6c27a1d29425893060384c9f9ff300ede2156561f5940215bbbddda52c28e5297097a630cca8a2c9222705d9c21a26c170919e5a6bc2adef2bec1d6380fb2b8b506b206a805017d609a4a755da63d5059c5779ad2556d80e651544df67a287b0a2fe1ba0fa225cd234bb28647a7e26a0b60d5aca2957bb36"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x7, 0xd6, "b6a70ccc254bb9f14938254d5191c2620fe9f88031d819e362fc026f0400c5c28ad9bfd8539dfc941997bb46e0f7d59e61fe141879ac4ac4dd4f5f0616608ff898d9967212c709d8a93efd859e4d2b1b1edbe7aa1d60bbb993b062626d563880761fff69dc9634fb84cc4a8c2405fc0ef22a106d756814bfcc5ff747dac96a6c536531338e065e03562401e21b79032c1a76069bd32bcdae6015e93c3f164e67cfb46056ac4559107726f77c1d03c419e93115a2d50ac23df33e0a774e9fdda6789a711377fd872f7daee0c12876520be8db2eec0c2c"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x4, 0x5, 0x5, 0x8, 0xd, 0x7, 0x8, 0xa3c, 0x7, 0x650e, 0x3, 0xa}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2}, &(0x7f0000000480)={0x20, 0x89, 0x2}})
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13)
close(r2)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.151283178s ago: executing program 4 (id=1736):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup(r0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="980000000209010100000000000000000a0000040900010073797a300000000008000340000000050800034000000006040002000c00407fffffff5000020006000340000000000c00028005000100210000000c00028005000100840000002c00018014000300fe800000000000000000000000000013140004000000aa000000000000000000000000010800064000000001fe734f95a5867fae4ac400d5c3d27b502fdafcc552"], 0x98}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064d2, &(0x7f0000000140)={0x7, 0x6576, 0xfffffffd})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
writev(r6, &(0x7f0000001640)=[{&(0x7f0000000000)="69e2", 0x2}, {0x0, 0xfed5}], 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
r10 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x10, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761})
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)

1.139650118s ago: executing program 3 (id=1737):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) (async)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r2, 0x8)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)

933.262652ms ago: executing program 3 (id=1738):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000003980)=""/4092, 0xffc}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f00000009c0)=""/137, 0x89}], 0x6, 0x0, 0x0, 0x8000000}, 0x12000)

806.235973ms ago: executing program 3 (id=1739):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) (async)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x3e, "", [{{0x9, 0x4, 0x0, 0x9, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB=' 1%'], 0x0, 0x0, 0x0, 0x0}, 0x0)

182.539429ms ago: executing program 3 (id=1740):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x80000001, 0x2000)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d0403048708487b05beb72666696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669630000000000000008666963617428a2e0861e1ae90d412073656c662d74657374696e67206b657930b8ece1852be1042deb5eeeabba59301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301683142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c000000005de9705cb4022073b7c77a5adb670a964219cf4f674f356aee29ef25f24fc810149d7969", 0x1d8, 0xfffffffffffffffd)
ioctl$FS_IOC_GETFSLABEL(r2, 0x8946, 0x0)
connect$inet(r1, &(0x7f0000001200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

1.289529ms ago: executing program 4 (id=1741):
r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

377.303µs ago: executing program 1 (id=1742):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x1, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000099473089911216859980000000109023f0001000020000904"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x5f0d, 0x10000, 0x2, 0x2aa}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1f4, 0x20, 0x2, 0x1a5}}, {0x0, 0x0, <r1=>0xffffffffffffffff, {0x0, 0xd12f, 0x1, 0x2, 0x3c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6f6, 0x4000, 0x3, 0x28}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1d9, 0x10000, 0x0, 0x1bd}}], 0x4, &(0x7f00000014c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x200}, 0x0, 0x0, '\x00', {0x3, 0x811, 0x0, &(0x7f00000004c0)=@buf_max_buf="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"}}, &(0x7f0000001540))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000015c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001580)=@new_dev={0x1, 0x83, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000001640)=<r2=>0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001680)={0x7, <r3=>r0, 'id1\x00'})
r4 = syz_ublk_setup_io_uring(0x5433, &(0x7f0000001780)={0x0, 0x6774, 0x2000, 0x3, 0x220}, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880))
r5 = syz_ublk_setup_io_uring(0x3f0b, &(0x7f00000018c0)={0x0, 0xa24, 0x200, 0x1, 0x2d9}, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0))
r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001a00)='.log\x00', 0x40000, 0x102)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
write$UHID_INPUT(r8, &(0x7f0000000640)={0x8, {"560c3ba4b46a1a6830cd57742cb71e04eadedf287c37cd73ba73d61aaeb6dd3b08b983d64a9b82a9f72276a9a53c2e538588a27c5f6f2c7db8e2b162845129684de1f250a23156c2b009125cb9c1be419958d2984126dabdb204319adb6f94752d9f20d4e44fa1904fec13fd91d00998117bdbbc5775e3aa462a1ced37e68771105d5da9e7bfb4ff8ade409772377709dee8403d2cd0f676f0fa5e89de8acfa1b92f33cb85137e0f9a62e0ddc0af5f7bb0e55f211a1b9c6bb3ba1807416ba00095429923c81cb77257eb3f9feb1551959e0e6c05b69185b3b0eae0b25b77d53a1029d12949d196b1c4ea3f457cc63e3077e22ce382aff654a9dc625ddc0f9f4e167a93a8a353a1cba76b004f3771ca725da8a055137deb41ef21fc94d78322934cde3857e04b64cd3058389973d93cfacb98ce48466b08a4fd971d1f690f52aeedccfdb59312733d5facc75547da1d9d87b83da3c2a8dd2b7b567b9236e0cb28963b0cc91abcba50453b29ba09626ced3880e884071a4e87827a4dbe849784688877bfb99a68e90c13088f53da55cfb034098519dfe6c99f8bfdb946763e875ee17789d662d2b2aa3ecd325824b9814d8c5bdec9b609904ccc0c89e83fbba2ae528ecf9c209d64972b7b612ab467955336655b407303652bda2443731ef012916833d6dd45d8989a349225a958fcd45f64d0e95b35ceb22c1ef352fb5e3c6d4d64c95e66a05e32df0917bca3eb02d08a3bd5e3dcf32aab850f0376b8c9141f34c0b85f2759d686f01398947c16bd7abc0ba046f002ab672fea378875de51f5921cfb98396d1092979715d49324d98ec139cc9989042a7523f533be2fba20f773aac25df20edd100df9d3caa84954e5b60775638900e73075c41b55d870e69e75a6bc57331f8ac346a9f923f3fbb3ea09f12af31f28c6e6a1efc56b14a404bd1c912759274b36a879a99e597307348020b7b30fcafc3c9064af70670dc8b82faeecad30c319589ae038e00a1bb94953b4292d4b27110347abc1476998103cd8a6b0930e43002702f00a1bbbb6ab96f9f179a87102ae3b4e8995921c0434289d8e8e979c6e6eb4dd4d8fffd012aabdb71e33c4eb79823dcae59a221ffd0f8b0266cdd5f9acf9ab9d03714ea362ce1aa9bd422dbd16b9df8a37dbf34af0f3ecf88ae6ddca8fc1995c2c1a297c053c1d826d7448df1be964653c73fa72b1a3c328a43bcc753ddda6f51c8ef682f5a18592551c4a187170fa1fff2ef667a12b6ce731953fcc44d464b561cefcb4c9b1ade1690e75059d9f282ec0dec6188c034d61d7d5eee087319b03464eb61ab2eec1a145d5cfcb1bd0286124d025308f53d35d165cc47c2a87b78dd5a0d82a716f35a6682fd53138dd67df1d5a869f8eb23db2db2ce9e6e58ffa105bb3519b43eedfec0daf36aded29c9c68eedc46132f532f4da68027ed3d560e68d56c7ea40beb5752aea6c615378ff01aa5a18e710ce4c6c09ad03600c16e6d4f661fc4cd464a4de38cb28166cb05fd67827b4c1c152e0ab11f1180a03ee517abec9009da3ecc84b5c5bcf38ff5e74c57a1f6c24db42a96be737d3af807a1b446e53309d5eb3734e637a1fa96868892b042005af4c09c0b9530d7b717247f7ea3298c2727e5ea528f2d2db30cfef3c949f985671931ba73ffd65a6af72ae31c0c5d5b25a3d66910e9aa36f78e4b1a7bff97a0ce6d5d3e6354b0732c2d9f9e0355af79acd7ae33889658cbf4d7d12b72c51f1f6b19b570daa4c24870851c2a1ad89167e7a9a419d47a3061f080eab769c00201e654047acfc7d34085df924d243702d463769677553ac8e78cd7b1065c595febed4b3f9ed6462d71a307aac13e03a8a6434a05a21019637f82a710f5e92963dca955c103d4a8fccda6b1693b250e193e36b6d584cd225ba621bb83f3dda0f50e604d1cc8a56d9f3f83da7b33bc25579f07fcf99fac89fab224c32be4501de90722dadeab5d91b3974cca313068c9c53c3677d66b27efb80cb912b51d22ec626e3b3666a56300ecf9c6bf1684b68afc9155cadb19e15b44644c298d6136e33bf4863fd018e364a6719ad558aa7c34deffc02875a663b529520a332d418e064515e3bf9e7cb6a1ea4580322e2c718fb4ea6c063483976b8c22925a879f0628c502f0b7de8a3741d92e6a73aaaafbdeab63bd15402e8f1d14d00242d2285f613955dd68b3dc48caf700ba254339e3b666e282f43e89f56933809520ee28b303ac129f3e7de0dfd2d801dddba6b20b945e7d80e833cfc4af9c57ac895e05a413da6f516619f4c273a283836f11925ca31d73b26c38741b44146554cb6a6b4e51c6e61014d1b050475a20b2e6219933b62dadd469151c8eda5444fe07c03ea7eb4511585ba5e12c46f148bcf807dcb90f8c7c4879f2fb5b38cde089bc9662ec5871ceef09e571d854c88f6c53cb41b81c1635da7177150f2b16a108116deb6ace3539e490b4713b949ce0792eb2abe4a7926c4dc9a9e10bd3cf9d428f25e7767b051bf3adb0b8837db5f719cd3da39b5383eaa6c710ef63e188c0bcb58e169a837f69d10a43b3734f9040fda1d0e58e0edad62d8bac4c729186ebd89b40b60ef2c5c1fc4875193ec7a1a405a14b0901447b93bc4348425b1044d882c89310820d9644d18553038797f022373ec6723ca6e84de5f7dd7f3f9b6b2f5b44756dfbac8efabee20b0eba48c5b77d0f8c986ef7081a2015b6f1c9c3b6dcd7d3ec1ab29782d6f3956cf9c58ba80b065742f53cc1298bd82dd0630387ed230440ebd58dae1decc96532a868fa6851baf4f0528833f779bbd89981fbc316fd4288381b5f91234910a91cc4b6b2c2536b3941c6a52ffa6ba1bb0bec50f3a156033e3bd5985715cd92a46f1cf1f8dd865c6903ec62630c5ae6deb7a203d7d20210a73e6486d7581a2a86e004541a5313a615600a4b79734f8246a0a778aca19a842ae36eebc314be95cbf852ee5ce7172df6b7c235b3ed31d820dc0c84baea43fe9d404121c6476c4b8acd8f94244ebf4c3d739eef2d71535a11b3e220ac77f265195725d375fcc5a699d4263a269c1554ae7e5924528f11eefd7bf077edc96ad85b283f9c1b09a7489df686d4a1c594b87e95f7af011513bf3765319961d34484546ce70907208ae1e222a2e6b61b708215e348889b11c058f1d95dfc7d5fcd1d25604eb44f1a079e9d88f9d955e3d9e374116bc18d4ef7b225c5abaf1b07b05b2b67f9b1fa4152c747ac2833524c5e4e0b0af4e514c35e47959fca45bfd95742e2dbf044e421eb64dc508ff6dc574e55ebe8e680ad1d228b919bef3f6abb6b3503f0cad880a367d046c7ec3c058d1ac936c6c8068e2f52884fad0426bdfa39a653ee2e3d4adfd0df98e95f7a3ab204112c30dba4a5b0fe336c6a31611cf4fb64da540e125e97425d9dd53731b0ed659445fed524ae5c2a4142d646b7c11274a0a5547d5bea248b5a6416aac81991df1c2354398407beb5fa90e051a7197a586d5b8f18054555e6a9123aecc999841a735ad6a99df1450682bf51523e41e576b4f783def51795d0b263f08396c224cccc99bddf35bc694a2d458f52cd8032cbaddf8ed3f35464429d2f1f8b2747160e179e20a4badb76197097baafb01075409f39e098a2f3018cb37a4e08b4be01945c433554243c5dedb40e6e4c531dc9a9c68df74877a3e62dcb986652a1f1be16a476daa5fad2fc4512dc3328dfdd6b8058f51c5f2f1c5bc206e75caefd044446a2aa4040913995b6bf973aed375c4cd2ab4f90b7a2fcbfdb751370be4bb4309b00c4d49f7795ae2998fe354dd3d35b618077a4ea98496cf1e64995c493aee8307b68679a31392bfcbc26609b65a26d806c5c64760fdb73fa30b8107475e5c8b685d0ea6e457698a0085cf46b99419bf923da70ba1f9ab6eb9056e58b78ca673a153350a831743984de2e547871502d0d27f4d959fa3f63a1d823dc54049314fb3a33d73de508682379f250b8ed0a8baa52748529abeb6657fb933a9155cb81076672726933b4b36a7e8cc83a76147b2eb9cc81e9a34e43ec7b4cf837a246e7bd2de7f9c8d5c6aba8538134056da9a219420c708c903c25b39ccf04667b1c3bb99b53f9f173e26a9367a6b1926ec66b97397eaa8524c3250a83002731c99e9a92be94261154b02f4b7d1102a028f72f65af018fad202b0d8e7060da715350fe14a8574fbb68c7abe531934dcc729de88e94599694e50119fb959585eac617a67ebc9d28192bb0c9a766aae981917ad13d80d9df0cccdcc8f63ddd84261c76a7304f12bf95687bb4f83e769d9d5c8b4f07df79b0ac92560f83e8e4c92c82132f39207c3e6d61b8e55e32c875737d7eeb7246c94bdc733aff0135b4ef2a5271150ef5391e132ae0e1e9175cf568e33b3245feea516770c99565ce7f106efc9ae147c867abb7a60c8861320aafc5b7e502959cbcbbed2d3a0938d7731c6b5c83a7c9b762a12b681655965b576ec486f06ccae37bfc9ce4756f2e1da5af7650706ab7da7ec2cec182a0e908e15c7a4f93386120b5ecadb54addfad3d363a4a1d71dc3ec79a77a801c70205aa389ba4ebee14719b4b67ed7b499a2dc8e324ac0c6e48b38d49a27de8ab7c982c082cd3702ea51be4d44db05eb9c3ecad7593545d215d1f2657956a27b0661f4731b580977e837b7f40d57eec56dab41c43b314c34cbba704713e1d5be52bbba59703eceff938b8594f23e38d5a31616533cfb5946257143313781531bdaf76e3a10786bfe7a48e975e33dbdd1dc824ffcd86e334a7557895f9282ebaa5e739422e791bf1998093ca1c195e709ae60851e6eb458dcd03cc963ea90f5856d732b383bf965e82e0a3e3c9c5d06ce7e413985f8c48007f7c34d65d52051a7efddbad5d0159acb9f14845c68761d057f2c360118feb1274056491a8eb26450f3318c17e8d15e53e05fd05d0647b6a5d00cef6f1a04d68a687cab03b62a51425801599e20a1112c5e2e09d369ceeb03854ac9a9f24c5bd1a5a8f5e45ea98b2527094fcd77722c6537b4e38202a971aff976c2dee47eb8f79c808f07af762f8aba9f4e9f80addf24b3600406dbf8e2efa9e85140344646756e5028bdae2deef27d19b10fd4de663a73a65b224df46e1c0218d4e2503cef132eb95ba90b4bb962da0af8dd9a34f9825254c139fc24d8fb3e47586d4f79a4ee52c8856b0f234edc67e128fa81dc23444f270615306dcbe49693381a528e7a8af723335c5fb74df8b7959e3efedc0fc25df6bdaecd55f9e71dae4ccb34dcb07c03678c20040e729576a126e5c6d0d3b3bcdd030507abfc7d99caa498734564f61d97c281886e6e0c4c2b644e23910533555bf897909aafb06065b6f90471117be4289cdc922b419bec8e2c261431df9432d65ed29213e469100aecb37229593a29243e9b0c82c5f1c0542a5c89332daa3ea6453576772ac93d872d80da5174b3bfec44ae2eba73aab93ca8d40d7b5930d72cad6d88a4098b2147e11a351aa07c1c760bd488e06f648df68be03a69a4d74ad6ad6900fa01171e1bdf241ee669c53cc29bd52bd1d33ba6f890d89c1e694869e85d87a937f8f1e27e3465f5eb1248b592583da69379a6ebf4cd4882ce7ce4c3e099169a0d992a7af78276ad32168529d7464021b900585aa1d1246cf3e6588540094db5fb182105fbcf859a2fadb3f08630fda5fd3159e0c4f2d091e92d93004bd46ede9f3cdc5d85b15d12b3a8fd0692b1ddb7e2328f8e1b3b971e9f4ca0806884f542bf20c0b8228f4524d5691fe", 0x1000}}, 0x1006)
openat(r8, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff)
syz_ublk_setup_queues(r1, r2, &(0x7f0000001700)={0x0, 0x10d6, 0x2, 0x0, 0x343, 0x0, r3}, &(0x7f0000001a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x904e, 0x8000, 0x0, 0x87, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c8a, 0x8, 0x0, 0x2aa, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa57a, 0x2000, 0x2, 0x2dd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b3e, 0x80000, 0x2, 0x3d9, 0x0, r7}}], 0x4, &(0x7f0000002cc0)={0x2e, 0x56, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1fe}, 0x0, 0x0, '\x00', {0x0, 0xd68, 0x0, &(0x7f0000001cc0)=@buf_1k="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"}}, &(0x7f0000002d40))

0s ago: executing program 3 (id=1743):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x19d)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 -4
[  406.965562][ T5772] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  406.977534][ T5772] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  406.977570][ T5772] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  406.977594][ T5772] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  407.017797][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  407.017821][ T5772] usb 2-1: SerialNumber: syz
[  407.042777][T10247] No control pipe specified
[  407.239357][ T5772] rndis_host 2-1:253.0: RNDIS init failed, -71
[  407.239549][ T5772] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71
[  407.278179][ T5772] usb 2-1: USB disconnect, device number 12
[  407.448166][  T189] gspca_stk1135: reg_w 0x352 err -71
[  407.449201][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449218][  T189] gspca_stk1135: Sensor write failed
[  407.449233][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449241][  T189] gspca_stk1135: Sensor write failed
[  407.449257][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449265][  T189] gspca_stk1135: Sensor read failed
[  407.449281][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449288][  T189] gspca_stk1135: Sensor read failed
[  407.449294][  T189] gspca_stk1135: Detected sensor type unknown (0x0)
[  407.449314][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449321][  T189] gspca_stk1135: Sensor read failed
[  407.449337][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449344][  T189] gspca_stk1135: Sensor read failed
[  407.449358][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449366][  T189] gspca_stk1135: Sensor write failed
[  407.449381][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  407.449387][  T189] gspca_stk1135: Sensor write failed
[  407.449430][  T189] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  407.463551][  T189] usb 3-1: USB disconnect, device number 120
[  407.578117][ T2253] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  407.744288][ T2253] usb 5-1: unable to get BOS descriptor or descriptor too short
[  407.744327][ T2253] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  407.763419][ T2253] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  407.763442][ T2253] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  407.784034][ T5772] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  407.795427][ T2253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.795451][ T2253] usb 5-1: Product: syz
[  407.795467][ T2253] usb 5-1: Manufacturer: syz
[  407.795476][ T2253] usb 5-1: SerialNumber: syz
[  407.829016][ T2253] usb 5-1: selecting invalid altsetting 1
[  407.829443][ T2253] usb 5-1: unit 6 not found!
[  407.934725][ T5772] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  407.947666][ T5772] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  407.947702][ T5772] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  407.947720][ T5772] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  407.987721][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  407.987746][ T5772] usb 2-1: SerialNumber: syz
[  408.144298][T10274] autofs: Bad value for 'fd'
[  408.187785][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'.
[  408.210296][    C0] raw-gadget.4 gadget.1: ignoring, device is not running
[  408.221199][ T5772] rndis_host 2-1:253.0: RNDIS init failed, -71
[  408.221363][ T5772] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71
[  408.242757][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  408.253317][ T5772] usb 2-1: USB disconnect, device number 13
[  408.403907][   T10] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  408.415337][   T10] usb 4-1: config index 0 descriptor too short (expected 123, got 89)
[  408.415364][   T10] usb 4-1: config 18 has too many interfaces: 42, using maximum allowed: 32
[  408.415401][   T10] usb 4-1: config 18 has an invalid descriptor of length 212, skipping remainder of the config
[  408.415415][   T10] usb 4-1: config 18 has 1 interface, different from the descriptor's value: 42
[  408.415445][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.543584][  T189] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  408.693743][  T189] usb 3-1: Using ep0 maxpacket: 32
[  408.702819][  T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  408.715139][  T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.715167][  T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.715197][  T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.758240][  T189] usb 3-1: config 0 descriptor??
[  408.774448][  T189] hub 3-1:0.0: USB hub found
[  408.853853][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  408.879547][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1453'.
[  408.905156][   T10] rndis_host 4-1:18.0: skipping garbage
[  408.905198][   T10] rndis_host 4-1:18.0: skipping garbage
[  408.905216][   T10] rndis_host 4-1:18.0: rndis: master #0/ffff88807b687000 slave #1/0000000000000000
[  408.934392][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  408.934643][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  408.934670][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  408.961279][   T10] usb 4-1: USB disconnect, device number 15
[  408.985699][  T189] hub 3-1:0.0: 1 port detected
[  409.040999][ T2253] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  409.066858][ T2253] usb 5-1: USB disconnect, device number 17
[  409.094744][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  409.222079][  T189] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  409.243191][  T189] usbhid 3-1:0.0: can't add hid device: -71
[  409.243261][  T189] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  409.274947][  T189] usb 3-1: USB disconnect, device number 121
[  409.366433][T10298] autofs: Bad value for 'fd'
[  409.413008][T10300] netlink: 'syz.2.1465': attribute type 11 has an invalid length.
[  409.574658][ T2253] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  409.729036][ T2253] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  409.750549][ T2253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.750575][ T2253] usb 2-1: Product: syz
[  409.750593][ T2253] usb 2-1: Manufacturer: syz
[  409.750603][ T2253] usb 2-1: SerialNumber: syz
[  409.769688][ T2253] usb 2-1: config 0 descriptor??
[  409.781614][ T2253] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  410.309027][T10303] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  410.309169][T10303] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  410.309265][T10303] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  410.309366][T10303] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  410.435142][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1468'.
[  410.511758][T10312] Bluetooth: MGMT ver 1.23
[  410.626925][T10316] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in;
[  410.626925][T10316]    program syz.4.1471 not setting count and/or reply_len properly
[  410.681996][T10316] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  411.204996][T10322] autofs: Bad value for 'fd'
[  411.295048][ T5772] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  411.447187][ T5772] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  411.459176][ T5772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  411.459205][ T5772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  411.490663][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.490687][ T5772] usb 5-1: Product: syz
[  411.490705][ T5772] usb 5-1: Manufacturer: syz
[  411.490715][ T5772] usb 5-1: SerialNumber: syz
[  411.554833][    T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  411.587009][T10326] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  411.655393][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  411.716728][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  411.716786][    T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  411.741001][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.741026][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  411.768525][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.768550][    T9] usb 3-1: Product: syz
[  411.768580][    T9] usb 3-1: Manufacturer: syz
[  411.768591][    T9] usb 3-1: SerialNumber: syz
[  411.800817][    T9] usb 3-1: selecting invalid altsetting 1
[  411.810458][    T9] usb 3-1: unit 6 not found!
[  411.841828][ T5772] kaweth 5-1:1.0: Firmware present in device.
[  412.029857][ T5772] kaweth 5-1:1.0: Error reading configuration (-32), no net device created
[  412.030019][ T5772] kaweth 5-1:1.0: probe with driver kaweth failed with error -5
[  412.281265][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  412.293885][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  412.303186][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  412.313143][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  412.323824][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  412.374453][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  412.374486][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  412.374510][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  412.753471][   T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  412.843753][    T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  412.862885][    T9] usb 3-1: USB disconnect, device number 122
[  412.886325][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  412.905500][   T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  412.919078][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.919101][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  412.940485][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.940509][   T10] usb 4-1: Product: syz
[  412.940524][   T10] usb 4-1: Manufacturer: syz
[  412.940533][   T10] usb 4-1: SerialNumber: syz
[  412.967819][   T10] usb 4-1: config 0 descriptor??
[  413.179250][ T2253] gspca_stk1135: reg_w 0x353 err -71
[  413.180284][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180302][ T2253] gspca_stk1135: Sensor write failed
[  413.180317][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180324][ T2253] gspca_stk1135: Sensor write failed
[  413.180346][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180354][ T2253] gspca_stk1135: Sensor read failed
[  413.180370][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180377][ T2253] gspca_stk1135: Sensor read failed
[  413.180383][ T2253] gspca_stk1135: Detected sensor type unknown (0x0)
[  413.180402][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180409][ T2253] gspca_stk1135: Sensor read failed
[  413.180425][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180432][ T2253] gspca_stk1135: Sensor read failed
[  413.180446][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180453][ T2253] gspca_stk1135: Sensor write failed
[  413.180468][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  413.180475][ T2253] gspca_stk1135: Sensor write failed
[  413.180517][ T2253] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  413.184208][ T2253] usb 2-1: USB disconnect, device number 14
[  413.492077][T10345] fuse: Bad value for 'user_id'
[  413.492101][T10345] fuse: Bad value for 'user_id'
[  413.763403][ T2253] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  413.914750][ T2253] usb 3-1: Using ep0 maxpacket: 32
[  413.923174][ T2253] usb 3-1: unable to get BOS descriptor or descriptor too short
[  413.923219][ T2253] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40
[  413.943283][ T2253] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 253, changing to 11
[  413.943309][ T2253] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64
[  413.967624][ T2253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.967646][ T2253] usb 3-1: Product: syz
[  413.967663][ T2253] usb 3-1: Manufacturer: syz
[  413.967673][ T2253] usb 3-1: SerialNumber: syz
[  413.993890][T10345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  414.071655][    T9] usb 5-1: USB disconnect, device number 18
[  414.138229][T10355] autofs: Unknown parameter '0x0000000000000000'
[  414.214493][ T2253] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  414.214537][ T2253] usb 3-1: MIDIStreaming interface descriptor not found
[  414.214557][ T2253] usb 3-1: too many endpoints
[  414.271433][ T2253] usb 3-1: USB disconnect, device number 123
[  414.453497][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout
[  414.523467][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  414.673418][    T9] usb 5-1: Using ep0 maxpacket: 8
[  414.678966][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  414.690585][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.690608][    T9] usb 5-1: Product: syz
[  414.690625][    T9] usb 5-1: Manufacturer: syz
[  414.690635][    T9] usb 5-1: SerialNumber: syz
[  414.717413][    T9] usb 5-1: config 0 descriptor??
[  414.725158][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  414.926442][T10357] usb usb8: usbfs: process 10357 (syz.4.1484) did not claim interface 0 before use
[  415.033497][ T5772] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  415.041237][ T2253] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[  415.196361][ T5772] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  415.205752][ T2253] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  415.216234][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  415.216263][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  415.216285][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8196, setting to 1024
[  415.250820][ T2253] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  415.250857][ T2253] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  415.250882][ T2253] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  415.263312][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.263326][ T5772] usb 2-1: Product: syz
[  415.263372][ T5772] usb 2-1: Manufacturer: syz
[  415.263380][ T5772] usb 2-1: SerialNumber: syz
[  415.318001][ T2253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  415.318041][ T2253] usb 3-1: SerialNumber: syz
[  415.339968][ T5772] usb 2-1: config 0 descriptor??
[  415.347391][ T5772] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  415.361707][ T5772] usb 2-1: Detected SIO
[  415.361728][ T5772] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  415.377714][ T5772] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  415.546858][ T2253] rndis_host 3-1:253.0: RNDIS init failed, -71
[  415.547026][ T2253] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  415.580955][ T2253] usb 3-1: USB disconnect, device number 124
[  415.617899][    T9] usb 4-1: USB disconnect, device number 16
[  415.683814][T10369] netlink: 'syz.3.1487': attribute type 1 has an invalid length.
[  415.683850][T10369] netlink: 'syz.3.1487': attribute type 1 has an invalid length.
[  415.700029][T10369] sg_write: data in/out 270300/136 bytes for SCSI command 0x0-- guessing data in;
[  415.700029][T10369]    program syz.3.1487 not setting count and/or reply_len properly
[  415.818160][    T9] usb 5-1: USB disconnect, device number 19
[  415.837842][ T5772] usb 2-1: USB disconnect, device number 15
[  415.855407][ T5772] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  415.855730][ T5772] ftdi_sio 2-1:0.0: device disconnected
[  416.043433][ T2253] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[  416.203642][ T2253] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.214131][ T2253] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  416.214156][ T2253] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  416.214171][ T2253] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  416.222872][ T2253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  416.222887][ T2253] usb 3-1: SerialNumber: syz
[  416.481925][ T2253] rndis_host 3-1:253.0: RNDIS init failed, -71
[  416.482104][ T2253] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  416.505206][ T2253] usb 3-1: USB disconnect, device number 125
[  416.636949][T10386] autofs: Unknown parameter '0x0000000000000000'
[  416.752741][T10390] FAULT_INJECTION: forcing a failure.
[  416.752741][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.752776][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.1.1494 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  416.752792][T10390] Tainted: [L]=SOFTLOCKUP
[  416.752796][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  416.752803][T10390] Call Trace:
[  416.752808][T10390]  <TASK>
[  416.752813][T10390]  dump_stack_lvl+0xe8/0x150
[  416.752833][T10390]  should_fail_ex+0x3eb/0x540
[  416.752851][T10390]  _copy_to_user+0x31/0xb0
[  416.752864][T10390]  simple_read_from_buffer+0xe1/0x170
[  416.752879][T10390]  proc_fail_nth_read+0x1bb/0x230
[  416.752893][T10390]  ? common_file_perm+0x20e/0x2b0
[  416.752910][T10390]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  416.752925][T10390]  ? rw_verify_area+0x24a/0x4c0
[  416.752940][T10390]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  416.752953][T10390]  vfs_read+0x213/0xa80
[  416.752976][T10390]  ? __pfx___mutex_lock+0x10/0x10
[  416.752988][T10390]  ? __pfx_vfs_read+0x10/0x10
[  416.753002][T10390]  ? __fget_files+0x2a/0x420
[  416.753018][T10390]  ? __fget_files+0x3a2/0x420
[  416.753029][T10390]  ? __fget_files+0x2a/0x420
[  416.753045][T10390]  ksys_read+0x150/0x270
[  416.753059][T10390]  ? __pfx_ksys_read+0x10/0x10
[  416.753078][T10390]  do_syscall_64+0x166/0x520
[  416.753088][T10390]  ? trace_irq_disable+0x3b/0x140
[  416.753104][T10390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.753114][T10390]  ? clear_bhb_loop+0x70/0xc0
[  416.753127][T10390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.753138][T10390] RIP: 0033:0x7fa4a355e90e
[  416.753149][T10390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  416.753158][T10390] RSP: 002b:00007fa4a448ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  416.753170][T10390] RAX: ffffffffffffffda RBX: 00007fa4a44906c0 RCX: 00007fa4a355e90e
[  416.753178][T10390] RDX: 000000000000000f RSI: 00007fa4a44900a0 RDI: 0000000000000004
[  416.753185][T10390] RBP: 00007fa4a4490090 R08: 0000000000000000 R09: 0000000000000000
[  416.753192][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.753199][T10390] R13: 00007fa4a3826038 R14: 00007fa4a3825fa0 R15: 00007ffff81db628
[  416.753215][T10390]  </TASK>
[  418.499745][T10397] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  418.517451][T10400] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  418.724005][ T2253] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  418.865446][ T5772] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  418.883629][   T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  418.892166][ T2253] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  418.902398][ T2253] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  418.914990][ T2253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.915015][ T2253] usb 2-1: Product: syz
[  418.915031][ T2253] usb 2-1: Manufacturer: syz
[  418.915041][ T2253] usb 2-1: SerialNumber: syz
[  418.940049][ T2253] usb 2-1: config 0 descriptor??
[  419.034559][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[  419.047914][ T5772] usb 4-1: unable to get BOS descriptor or descriptor too short
[  419.057823][ T5772] usb 4-1: not running at top speed; connect to a high speed hub
[  419.057852][ T5772] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  419.076336][ T5772] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 4
[  419.076361][ T5772] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1552, setting to 1023
[  419.101992][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.102051][ T5772] usb 4-1: Product: syz
[  419.102068][ T5772] usb 4-1: Manufacturer: syz
[  419.102077][ T5772] usb 4-1: SerialNumber: syz
[  419.129228][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.129252][   T10] usb 3-1: Product: syz
[  419.129267][   T10] usb 3-1: Manufacturer: syz
[  419.129277][   T10] usb 3-1: SerialNumber: syz
[  419.169135][T10414] autofs: Unknown parameter '0x0000000000000000'
[  419.324026][   T10] usb 3-1: reset high-speed USB device number 126 using dummy_hcd
[  419.363797][ T5772] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  419.370827][ T5772] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  419.431214][ T5772] usb 4-1: USB disconnect, device number 17
[  419.533766][ T2253] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  419.566748][    T9] usb 3-1: driver   API: 1.9.9 2016-02-15 [1-1]
[  419.566814][    T9] usb 3-1: firmware API: 1.9.6 2012-07-07
[  419.684217][ T2253] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  419.694456][ T2253] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  419.694485][ T2253] usb 5-1: config 0 interface 0 has no altsetting 0
[  419.694512][ T2253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.728440][ T2253] usb 5-1: config 0 descriptor??
[  419.736128][T10418] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  419.792354][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.792650][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.833717][ T5772] usb 3-1: USB disconnect, device number 126
[  419.834328][    C0] device 3-1 is not registered
[  420.149145][T10425] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  420.161963][ T2253] hid_parser_main: 49 callbacks suppressed
[  420.162025][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x7
[  420.162098][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.162120][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.195792][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.206158][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.206194][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.206212][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.206230][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.206247][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.206264][ T2253] itetech 0003:06CB:73F5.001A: unknown main item tag 0x0
[  420.254691][ T2253] itetech 0003:06CB:73F5.001A: hidraw0: USB HID v0.81 Device [HID 06cb:73f5] on usb-dummy_hcd.4-1/input0
[  420.348921][ T2253] usb 5-1: USB disconnect, device number 20
[  420.615495][    T9] usb 3-1: firmware upload failed (-110).
[  420.923672][ T5772] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  421.076879][ T5772] usb 3-1: unable to get BOS descriptor or descriptor too short
[  421.076923][ T5772] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  421.097768][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  421.097793][ T5772] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  421.118952][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.118978][ T5772] usb 3-1: Product: syz
[  421.118995][ T5772] usb 3-1: Manufacturer: syz
[  421.119005][ T5772] usb 3-1: SerialNumber: syz
[  421.149419][ T5772] usb 3-1: selecting invalid altsetting 1
[  421.155619][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  421.165802][ T5772] usb 3-1: unit 6 not found!
[  421.193446][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  421.314808][    T9] usb 5-1: Using ep0 maxpacket: 8
[  421.320256][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  421.330880][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  421.330905][    T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  421.330955][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.362235][   T10] usb 4-1: Using ep0 maxpacket: 8
[  421.367798][   T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  421.382020][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  421.382055][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  421.411040][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.411081][   T10] usb 4-1: Product: syz
[  421.411098][   T10] usb 4-1: Manufacturer: syz
[  421.411108][   T10] usb 4-1: SerialNumber: syz
[  421.498572][    T9] usb 2-1: USB disconnect, device number 16
[  421.644567][T10442] autofs: Unknown parameter '0x0000000000000000'
[  421.715183][T10434] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  421.983490][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  422.054629][ T5772] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  422.097881][ T5772] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  422.108316][   T10] usb 4-1: invalid UAC_HEADER (v1)
[  422.129974][ T5772] usb 3-1: USB disconnect, device number 127
[  422.136496][    T9] usb 2-1: Using ep0 maxpacket: 8
[  422.138043][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[  422.153521][    T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  422.153547][    T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  422.153566][    T9] usb 2-1: config 0 has no interface number 0
[  422.153591][    T9] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  422.153607][    T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  422.153623][    T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  422.191059][    T9] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[  422.191076][    T9] usb 2-1: Product: syz
[  422.191083][    T9] usb 2-1: Manufacturer: syz
[  422.248395][    T9] usb 2-1: config 0 descriptor??
[  422.254558][T10446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  422.275125][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  422.330226][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  422.352577][   T10] usb 4-1: USB disconnect, device number 18
[  422.379534][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  422.466599][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.466882][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.773714][   T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  422.889923][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.890234][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.927549][   T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  422.945042][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.945068][   T10] usb 4-1: Product: syz
[  422.945085][   T10] usb 4-1: Manufacturer: syz
[  422.945095][   T10] usb 4-1: SerialNumber: syz
[  422.968876][   T10] usb 4-1: config 0 descriptor??
[  422.980730][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  422.999002][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1517'.
[  423.113218][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.124166][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.135713][    T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input129
[  423.273511][ T2253] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  423.352403][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.352787][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.424903][ T2253] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  423.437307][ T2253] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  423.437389][ T2253] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  423.437415][ T2253] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  423.478413][ T2253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  423.478439][ T2253] usb 3-1: SerialNumber: syz
[  423.547490][    T9] usb 2-1: USB disconnect, device number 17
[  423.547551][    C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  423.721045][ T2253] rndis_host 3-1:253.0: RNDIS init failed, -71
[  423.721233][ T2253] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  423.747004][ T2253] usb 3-1: USB disconnect, device number 2
[  423.910569][  T189] usb 5-1: USB disconnect, device number 21
[  424.035501][T10468] jffs2: notice: (10468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  424.057470][T10468] FAULT_INJECTION: forcing a failure.
[  424.057470][T10468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  424.057500][T10468] CPU: 0 UID: 0 PID: 10468 Comm: syz.4.1520 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  424.057518][T10468] Tainted: [L]=SOFTLOCKUP
[  424.057522][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.057528][T10468] Call Trace:
[  424.057533][T10468]  <TASK>
[  424.057538][T10468]  dump_stack_lvl+0xe8/0x150
[  424.057558][T10468]  should_fail_ex+0x3eb/0x540
[  424.057577][T10468]  strncpy_from_user+0x36/0x2c0
[  424.057593][T10468]  do_getname+0x77/0x250
[  424.057606][T10468]  path_listxattrat+0xd9/0x3f0
[  424.057623][T10468]  ? __pfx_path_listxattrat+0x10/0x10
[  424.057643][T10468]  do_syscall_64+0x166/0x520
[  424.057655][T10468]  ? trace_irq_disable+0x3b/0x140
[  424.057671][T10468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.057682][T10468]  ? clear_bhb_loop+0x70/0xc0
[  424.057694][T10468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.057705][T10468] RIP: 0033:0x7f7b69d9e0d9
[  424.057716][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.057725][T10468] RSP: 002b:00007f7b6ad42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2
[  424.057737][T10468] RAX: ffffffffffffffda RBX: 00007f7b6a025fa0 RCX: 00007f7b69d9e0d9
[  424.057745][T10468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[  424.057752][T10468] RBP: 00007f7b6ad42090 R08: 0000000000000000 R09: 0000000000000000
[  424.057759][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.057765][T10468] R13: 00007f7b6a026038 R14: 00007f7b6a025fa0 R15: 00007ffd90640308
[  424.057781][T10468]  </TASK>
[  424.194141][ T2253] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  424.356386][ T2253] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  424.367413][ T2253] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  424.367465][ T2253] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  424.367491][ T2253] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  424.412278][ T2253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  424.412321][ T2253] usb 3-1: SerialNumber: syz
[  424.475047][T10475] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1521'.
[  424.775569][T10484] FAULT_INJECTION: forcing a failure.
[  424.775569][T10484] name failslab, interval 1, probability 0, space 0, times 0
[  424.775601][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.1.1525 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  424.775617][T10484] Tainted: [L]=SOFTLOCKUP
[  424.775621][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.775628][T10484] Call Trace:
[  424.775632][T10484]  <TASK>
[  424.775637][T10484]  dump_stack_lvl+0xe8/0x150
[  424.775659][T10484]  should_fail_ex+0x3eb/0x540
[  424.775677][T10484]  should_failslab+0xa8/0x100
[  424.775688][T10484]  ? alloc_empty_file+0x5b/0x1d0
[  424.775700][T10484]  kmem_cache_alloc_noprof+0xa1/0x600
[  424.775714][T10484]  ? stack_depot_save_flags+0x33/0x7f0
[  424.775729][T10484]  ? alloc_empty_file+0x5b/0x1d0
[  424.775739][T10484]  ? kmem_cache_alloc_noprof+0x156/0x600
[  424.775753][T10484]  alloc_empty_file+0x5b/0x1d0
[  424.775764][T10484]  path_openat+0xa2/0x1d60
[  424.775782][T10484]  ? __lock_acquire+0x6df/0x2e50
[  424.775801][T10484]  do_file_open+0x23e/0x4a0
[  424.775817][T10484]  ? __pfx_do_file_open+0x10/0x10
[  424.775841][T10484]  ? _raw_spin_unlock+0x28/0x50
[  424.775857][T10484]  ? alloc_fd+0x651/0x6c0
[  424.775873][T10484]  do_sys_openat2+0x115/0x200
[  424.775885][T10484]  ? __pfx_do_sys_openat2+0x10/0x10
[  424.775896][T10484]  ? ksys_write+0x242/0x270
[  424.775910][T10484]  ? __pfx_ksys_write+0x10/0x10
[  424.775925][T10484]  __x64_sys_openat+0x138/0x170
[  424.775938][T10484]  do_syscall_64+0x166/0x520
[  424.775948][T10484]  ? trace_irq_disable+0x3b/0x140
[  424.775963][T10484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.775974][T10484]  ? clear_bhb_loop+0x70/0xc0
[  424.775986][T10484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.775997][T10484] RIP: 0033:0x7fa4a359e0d9
[  424.776008][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.776017][T10484] RSP: 002b:00007fa4a4490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  424.776029][T10484] RAX: ffffffffffffffda RBX: 00007fa4a3825fa0 RCX: 00007fa4a359e0d9
[  424.776037][T10484] RDX: 0000000000022242 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  424.776045][T10484] RBP: 00007fa4a4490090 R08: 0000000000000000 R09: 0000000000000000
[  424.776052][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.776058][T10484] R13: 00007fa4a3826038 R14: 00007fa4a3825fa0 R15: 00007ffff81db628
[  424.776073][T10484]  </TASK>
[  424.911989][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  424.950923][ T2253] rndis_host 3-1:253.0: RNDIS init failed, -71
[  424.951088][ T2253] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  425.091911][ T2253] usb 3-1: USB disconnect, device number 3
[  425.101060][    T9] usb 5-1: Using ep0 maxpacket: 16
[  425.110396][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  425.110434][    T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  425.128671][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 150, changing to 7
[  425.144008][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.144046][    T9] usb 5-1: Product: syz
[  425.144063][    T9] usb 5-1: Manufacturer: syz
[  425.144073][    T9] usb 5-1: SerialNumber: syz
[  425.226037][T10487] jffs2: notice: (10487) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  425.395047][    T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  425.402638][    T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  425.442406][    T9] usb 5-1: USB disconnect, device number 22
[  425.476083][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  425.514491][ T5772] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  425.663574][ T5772] usb 2-1: Using ep0 maxpacket: 32
[  425.669984][ T5772] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  425.680234][ T5772] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  425.680257][ T5772] usb 2-1: config 2 has no interface number 0
[  425.680303][ T5772] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  425.680320][ T5772] usb 2-1: config 2 interface 88 has no altsetting 0
[  425.716455][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  425.716480][ T5772] usb 2-1: Product: syz
[  425.716513][ T5772] usb 2-1: Manufacturer: syz
[  425.716524][ T5772] usb 2-1: SerialNumber: syz
[  425.746682][T10490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  425.793436][ T2253] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  425.944407][ T2253] usb 3-1: Using ep0 maxpacket: 8
[  425.949882][ T2253] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  425.960325][ T2253] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  425.960340][ T2253] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  425.960384][ T2253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.003856][T10490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  426.673406][    T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  426.824211][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  426.835670][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  426.835698][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.835728][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.871036][    T9] usb 5-1: config 0 descriptor??
[  426.876637][   T10] gspca_stk1135: reg_w 0x353 err -110
[  426.877692][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877701][   T10] gspca_stk1135: Sensor write failed
[  426.877729][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877737][   T10] gspca_stk1135: Sensor write failed
[  426.877754][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877761][   T10] gspca_stk1135: Sensor read failed
[  426.877777][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877784][   T10] gspca_stk1135: Sensor read failed
[  426.877790][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[  426.877809][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877828][   T10] gspca_stk1135: Sensor read failed
[  426.877856][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877864][   T10] gspca_stk1135: Sensor read failed
[  426.877878][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877885][   T10] gspca_stk1135: Sensor write failed
[  426.877899][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  426.877906][   T10] gspca_stk1135: Sensor write failed
[  426.877961][   T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110
[  427.222642][ T5772] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  427.222673][ T5772] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  427.222824][ T5772] asix 2-1:2.88: probe with driver asix failed with error -71
[  427.262377][ T5772] usb 2-1: USB disconnect, device number 18
[  427.426252][    T9] hid_parser_main: 4 callbacks suppressed
[  427.426284][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426305][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426322][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426340][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426357][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426374][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426391][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.426408][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.494860][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.494890][    T9] wacom 0003:056A:5000.001B: unknown main item tag 0x0
[  427.619824][    T9] usb 5-1: USB disconnect, device number 23
[  427.648668][ T5772] usb 4-1: USB disconnect, device number 19
[  427.832606][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'.
[  427.847611][T10513] smc: net device lo applied user defined pnetid SYZ0
[  427.847779][T10513] smc: smcd device lo applied user defined pnetid SYZ0
[  428.023497][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  428.103457][ T5772] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  428.154812][   T10] usb 2-1: device descriptor read/64, error -71
[  428.193656][T10517] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1536'.
[  428.202921][T10517] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1536'.
[  428.254739][ T5772] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  428.267015][ T5772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  428.267049][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.394169][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  428.534690][   T10] usb 2-1: device descriptor read/64, error -71
[  428.566328][    T9] usb 3-1: USB disconnect, device number 4
[  428.647088][   T10] usb usb2-port1: attempt power cycle
[  428.700498][ T5772] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -22
[  428.702610][ T5772] usb 4-1: USB disconnect, device number 20
[  428.735156][T10525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  428.748644][T10525] binder: binder_mmap: 10524 200000000000-200000b36000 bad vm_flags failed -1
[  428.762358][T10525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  428.983525][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  429.007002][   T10] usb 2-1: device descriptor read/8, error -71
[  429.084842][ T2253] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  429.245241][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  429.253214][ T2253] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  429.265970][   T10] usb 2-1: device descriptor read/8, error -71
[  429.276114][ T2253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.276137][ T2253] usb 5-1: Product: syz
[  429.276154][ T2253] usb 5-1: Manufacturer: syz
[  429.276164][ T2253] usb 5-1: SerialNumber: syz
[  429.302521][ T2253] usb 5-1: config 0 descriptor??
[  429.309516][ T2253] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  429.374920][   T10] usb usb2-port1: unable to enumerate USB device
[  429.583946][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  429.713415][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  429.743408][    T9] usb 4-1: Using ep0 maxpacket: 16
[  429.748987][    T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  429.759386][    T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  429.759410][    T9] usb 4-1: config 0 has no interface number 0
[  429.759456][    T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  429.759472][    T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  429.759487][    T9] usb 4-1: config 0 interface 41 has no altsetting 0
[  429.806293][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.806336][    T9] usb 4-1: Product: syz
[  429.806355][    T9] usb 4-1: Manufacturer: syz
[  429.806365][    T9] usb 4-1: SerialNumber: syz
[  429.831854][    T9] usb 4-1: config 0 descriptor??
[  429.841921][T10535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  429.842015][T10535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  429.875040][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  429.875083][   T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  429.895178][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  429.895212][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  429.917630][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.917670][   T10] usb 3-1: Product: syz
[  429.917687][   T10] usb 3-1: Manufacturer: syz
[  429.917697][   T10] usb 3-1: SerialNumber: syz
[  429.949866][   T10] usb 3-1: selecting invalid altsetting 1
[  429.956779][   T10] usb 3-1: unit 6 not found!
[  430.058201][T10535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  430.065899][T10535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  430.678823][    T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  430.754165][   T10] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  430.802847][   T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  430.819944][   T10] usb 3-1: USB disconnect, device number 5
[  430.858832][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  431.070833][    T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  431.070863][    T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  431.071012][    T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  431.112332][    T9] usb 4-1: USB disconnect, device number 21
[  431.293427][   T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  431.444234][   T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  431.454729][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  431.465870][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.465894][   T10] usb 2-1: Product: syz
[  431.465927][   T10] usb 2-1: Manufacturer: syz
[  431.465937][   T10] usb 2-1: SerialNumber: syz
[  431.492354][   T10] usb 2-1: config 0 descriptor??
[  431.613422][  T189] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  431.765632][  T189] usb 3-1: Using ep0 maxpacket: 8
[  431.774555][  T189] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  431.785146][  T189] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  431.785171][  T189] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  431.785218][  T189] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  431.785245][  T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.851432][  T189] usbtmc 3-1:16.0: bulk endpoints not found
[  431.881273][T10555] autofs: Unknown parameter 'fd0x0000000000000000'
[  432.015576][T10561] comedi comedi0: Minor -4 is invalid!
[  432.477818][T10578] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  432.993629][ T2253] gspca_stk1135: reg_w 0x353 err -110
[  432.994666][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994683][ T2253] gspca_stk1135: Sensor write failed
[  432.994699][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994707][ T2253] gspca_stk1135: Sensor write failed
[  432.994724][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994731][ T2253] gspca_stk1135: Sensor read failed
[  432.994747][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994754][ T2253] gspca_stk1135: Sensor read failed
[  432.994759][ T2253] gspca_stk1135: Detected sensor type unknown (0x0)
[  432.994778][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994785][ T2253] gspca_stk1135: Sensor read failed
[  432.994801][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994807][ T2253] gspca_stk1135: Sensor read failed
[  432.994822][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994829][ T2253] gspca_stk1135: Sensor write failed
[  432.994844][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  432.994851][ T2253] gspca_stk1135: Sensor write failed
[  432.994897][ T2253] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[  433.309681][T10587] autofs: Unknown parameter 'fd0x0000000000000000'
[  433.526252][T10594] FAULT_INJECTION: forcing a failure.
[  433.526252][T10594] name failslab, interval 1, probability 0, space 0, times 0
[  433.526285][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.3.1561 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  433.526300][T10594] Tainted: [L]=SOFTLOCKUP
[  433.526304][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  433.526311][T10594] Call Trace:
[  433.526315][T10594]  <TASK>
[  433.526321][T10594]  dump_stack_lvl+0xe8/0x150
[  433.526341][T10594]  should_fail_ex+0x3eb/0x540
[  433.526366][T10594]  should_failslab+0xa8/0x100
[  433.526379][T10594]  __kmalloc_cache_noprof+0xa3/0x600
[  433.526394][T10594]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  433.526412][T10594]  ? io_uring_alloc_task_context+0x17d/0x6c0
[  433.526449][T10594]  ? io_uring_alloc_task_context+0x17d/0x6c0
[  433.526463][T10594]  io_uring_alloc_task_context+0x17d/0x6c0
[  433.526476][T10594]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  433.526489][T10594]  ? alloc_file_pseudo+0x156/0x1e0
[  433.526502][T10594]  __io_uring_add_tctx_node+0x48d/0x630
[  433.526599][T10594]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  433.526614][T10594]  ? __anon_inode_getfile+0x169/0x200
[  433.526659][T10594]  io_uring_create+0x596/0x990
[  433.526671][T10594]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  433.526708][T10594]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  433.526720][T10594]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  433.526741][T10594]  ? __pfx_ksys_write+0x10/0x10
[  433.526761][T10594]  do_syscall_64+0x166/0x520
[  433.526771][T10594]  ? trace_irq_disable+0x3b/0x140
[  433.526786][T10594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.526797][T10594]  ? clear_bhb_loop+0x70/0xc0
[  433.526810][T10594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.526820][T10594] RIP: 0033:0x7f5dc179e0d9
[  433.526831][T10594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.526840][T10594] RSP: 002b:00007f5dc26f3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  433.526853][T10594] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f5dc179e0d9
[  433.526861][T10594] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  433.526869][T10594] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  433.526876][T10594] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  433.526883][T10594] R13: 0000200000000b10 R14: 00007f5dc26f3fd8 R15: 0000000000000000
[  433.526899][T10594]  </TASK>
[  433.918576][    T9] usb 5-1: USB disconnect, device number 24
[  434.088626][  T189] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  434.116521][T10603] FAULT_INJECTION: forcing a failure.
[  434.116521][T10603] name failslab, interval 1, probability 0, space 0, times 0
[  434.116554][T10603] CPU: 0 UID: 0 PID: 10603 Comm: syz.4.1565 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  434.116570][T10603] Tainted: [L]=SOFTLOCKUP
[  434.116574][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  434.116581][T10603] Call Trace:
[  434.116586][T10603]  <TASK>
[  434.116591][T10603]  dump_stack_lvl+0xe8/0x150
[  434.116610][T10603]  should_fail_ex+0x3eb/0x540
[  434.116628][T10603]  should_failslab+0xa8/0x100
[  434.116640][T10603]  __kmalloc_cache_noprof+0xa3/0x600
[  434.116656][T10603]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  434.116672][T10603]  ? io_uring_alloc_task_context+0x17d/0x6c0
[  434.116683][T10603]  ? io_uring_alloc_task_context+0x17d/0x6c0
[  434.116697][T10603]  io_uring_alloc_task_context+0x17d/0x6c0
[  434.116709][T10603]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  434.116723][T10603]  ? alloc_file_pseudo+0x156/0x1e0
[  434.116735][T10603]  __io_uring_add_tctx_node+0x48d/0x630
[  434.116753][T10603]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  434.116767][T10603]  ? __anon_inode_getfile+0x169/0x200
[  434.116781][T10603]  io_uring_create+0x596/0x990
[  434.116793][T10603]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  434.116807][T10603]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  434.116819][T10603]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  434.116840][T10603]  ? __pfx_ksys_write+0x10/0x10
[  434.116859][T10603]  do_syscall_64+0x166/0x520
[  434.116869][T10603]  ? trace_irq_disable+0x3b/0x140
[  434.116884][T10603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.116895][T10603]  ? clear_bhb_loop+0x70/0xc0
[  434.116908][T10603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.116918][T10603] RIP: 0033:0x7f7b69d9e0d9
[  434.116929][T10603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.116938][T10603] RSP: 002b:00007f7b6ad41ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  434.116951][T10603] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f7b69d9e0d9
[  434.116962][T10603] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  434.116969][T10603] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  434.116976][T10603] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  434.116982][T10603] R13: 0000200000000b10 R14: 00007f7b6ad41fd8 R15: 0000000000000000
[  434.116998][T10603]  </TASK>
[  434.232421][  T189] usb 4-1: device descriptor read/64, error -71
[  434.391150][    T9] usb 3-1: USB disconnect, device number 6
[  434.463492][  T189] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  434.476441][ T2253] usb 2-1: USB disconnect, device number 23
[  434.571070][T10610] autofs: Unknown parameter 'fd0x0000000000000000'
[  434.594894][  T189] usb 4-1: device descriptor read/64, error -71
[  434.639382][T10609] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1567'.
[  434.697047][   T31] audit: type=1326 audit(1787863845.338:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10607 comm="syz.1.1567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4a359e0d9 code=0x0
[  434.722889][  T189] usb usb4-port1: attempt power cycle
[  434.734668][T10605] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  435.024398][ T2253] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  435.063468][  T189] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  435.083822][  T189] usb 4-1: device descriptor read/8, error -71
[  435.173476][ T2253] usb 3-1: Using ep0 maxpacket: 32
[  435.179078][ T2253] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  435.191051][ T2253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.191075][ T2253] usb 3-1: Product: syz
[  435.191092][ T2253] usb 3-1: Manufacturer: syz
[  435.191101][ T2253] usb 3-1: SerialNumber: syz
[  435.217288][ T2253] usb 3-1: config 0 descriptor??
[  435.323521][  T189] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  435.344427][  T189] usb 4-1: device descriptor read/8, error -71
[  435.455498][  T189] usb usb4-port1: unable to enumerate USB device
[  435.630914][ T2253] airspy 3-1:0.0: Board ID: 00
[  435.630941][ T2253] airspy 3-1:0.0: Firmware version: 
[  435.649253][    T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  435.803915][    T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  435.815871][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.815897][    T9] usb 2-1: Product: syz
[  435.815929][    T9] usb 2-1: Manufacturer: syz
[  435.815940][    T9] usb 2-1: SerialNumber: syz
[  435.844969][    T9] usb 2-1: config 0 descriptor??
[  435.852711][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  436.464814][ T2253] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f
[  436.475153][ T2253] airspy 3-1:0.0: Registered as swradio24
[  436.475179][ T2253] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  436.496731][ T2253] usb 3-1: USB disconnect, device number 7
[  436.633493][ T5772] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  436.794591][ T5772] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  436.806768][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.806793][ T5772] usb 5-1: Product: syz
[  436.806810][ T5772] usb 5-1: Manufacturer: syz
[  436.806820][ T5772] usb 5-1: SerialNumber: syz
[  436.830676][ T5772] usb 5-1: config 0 descriptor??
[  436.841790][ T5772] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  436.854700][ T2253] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  437.014832][ T2253] usb 3-1: Using ep0 maxpacket: 8
[  437.022980][ T2253] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  437.033148][ T2253] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  437.033173][ T2253] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  437.033223][ T2253] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  437.033249][ T2253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.086152][ T2253] usbtmc 3-1:16.0: bulk endpoints not found
[  438.158326][T10657] nvme_fcloop: unknown parameter or missing value 'roles='
[  438.166664][T10657] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  439.015096][T10662] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1583'.
[  439.128878][T10666] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1585'.
[  439.534564][    T9] gspca_stk1135: reg_w 0x353 err -110
[  439.535598][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535628][    T9] gspca_stk1135: Sensor write failed
[  439.535645][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535653][    T9] gspca_stk1135: Sensor write failed
[  439.535670][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535677][    T9] gspca_stk1135: Sensor read failed
[  439.535694][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535700][    T9] gspca_stk1135: Sensor read failed
[  439.535706][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  439.535725][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535732][    T9] gspca_stk1135: Sensor read failed
[  439.535748][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535772][    T9] gspca_stk1135: Sensor read failed
[  439.535787][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535794][    T9] gspca_stk1135: Sensor write failed
[  439.535808][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  439.535815][    T9] gspca_stk1135: Sensor write failed
[  439.535859][    T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110
[  439.672127][  T189] usb 3-1: USB disconnect, device number 8
[  439.915914][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  439.960256][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'.
[  439.960297][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'.
[  439.960314][T10677] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  439.960351][T10677] iwpm_hello_cb: Unable to parse nlmsg
[  440.272665][T10682] nvme_fcloop: unknown parameter or missing value 'roles='
[  440.282229][T10682] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  440.430194][ T2253] usb 2-1: USB disconnect, device number 24
[  440.546300][ T5772] gspca_stk1135: reg_w 0x19 err -71
[  440.547335][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547352][ T5772] gspca_stk1135: Sensor write failed
[  440.547367][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547374][ T5772] gspca_stk1135: Sensor write failed
[  440.547391][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547398][ T5772] gspca_stk1135: Sensor read failed
[  440.547414][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547421][ T5772] gspca_stk1135: Sensor read failed
[  440.547426][ T5772] gspca_stk1135: Detected sensor type unknown (0x0)
[  440.547445][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547452][ T5772] gspca_stk1135: Sensor read failed
[  440.547468][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547475][ T5772] gspca_stk1135: Sensor read failed
[  440.547489][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547496][ T5772] gspca_stk1135: Sensor write failed
[  440.547511][ T5772] gspca_stk1135: serial bus timeout: status=0x00
[  440.547518][ T5772] gspca_stk1135: Sensor write failed
[  440.547560][ T5772] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  440.550285][ T5772] usb 5-1: USB disconnect, device number 25
[  440.812514][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  440.883593][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  440.922405][T10696] netlink: 'syz.1.1595': attribute type 12 has an invalid length.
[  440.943532][    T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  440.951269][    C0] raw-gadget.3 gadget.0: ignoring, device is not running
[  440.959736][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  441.034605][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  441.093693][    T9] usb 1-1: device descriptor read/64, error -32
[  441.203924][    T9] raw-gadget.3 gadget.0: failed to queue suspend event
[  441.204129][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  441.274435][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  441.312072][T10706] netlink: 'syz.2.1599': attribute type 2 has an invalid length.
[  441.312097][T10706] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1599'.
[  441.330534][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1599'.
[  441.344018][    T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  441.351772][    C0] raw-gadget.3 gadget.0: ignoring, device is not running
[  441.351951][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  441.409376][   T31] audit: type=1326 audit(1787863852.048:22): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10707 comm="syz.2.1600" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcbe59e0d9 code=0x0
[  441.434908][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  441.494000][    T9] usb 1-1: device descriptor read/64, error -32
[  441.523449][ T5772] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  441.604800][    T9] raw-gadget.3 gadget.0: failed to queue suspend event
[  441.611919][    T9] usb usb1-port1: attempt power cycle
[  441.612000][    T9] raw-gadget.3 gadget.0: failed to queue disconnect event
[  441.626060][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  441.693554][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  441.693828][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  441.725346][ T5772] usb 5-1: unable to get BOS descriptor or descriptor too short
[  441.725386][ T5772] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  441.746348][ T5772] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  441.746373][ T5772] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  441.768356][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.768379][ T5772] usb 5-1: Product: syz
[  441.768396][ T5772] usb 5-1: Manufacturer: syz
[  441.768406][ T5772] usb 5-1: SerialNumber: syz
[  441.797291][ T5772] usb 5-1: selecting invalid altsetting 1
[  441.797704][ T5772] usb 5-1: unit 6 not found!
[  441.883433][ T2253] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  441.903472][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  441.963450][    T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  441.983626][    C0] raw-gadget.3 gadget.0: ignoring, device is not running
[  441.991333][    T9] usb 1-1: device descriptor read/8, error -32
[  442.035282][ T2253] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  442.047296][ T2253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.047320][ T2253] usb 4-1: Product: syz
[  442.047354][ T2253] usb 4-1: Manufacturer: syz
[  442.047364][ T2253] usb 4-1: SerialNumber: syz
[  442.072127][ T2253] usb 4-1: config 0 descriptor??
[  442.086189][ T2253] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  442.094203][    T9] raw-gadget.3 gadget.0: failed to queue suspend event
[  442.101332][    T9] raw-gadget.3 gadget.0: failed to queue reset event
[  442.173551][    T9] raw-gadget.3 gadget.0: failed to queue resume event
[  442.199500][ T5772] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2)
[  442.234283][    T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  442.256121][    C0] raw-gadget.3 gadget.0: ignoring, device is not running
[  442.264032][    T9] usb 1-1: device descriptor read/8, error -32
[  442.271053][ T5772] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  442.338693][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  442.369064][T10717] netlink: 'syz.2.1603': attribute type 10 has an invalid length.
[  442.369090][T10717] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1603'.
[  442.380740][    T9] raw-gadget.3 gadget.0: failed to queue suspend event
[  442.380878][    T9] usb usb1-port1: unable to enumerate USB device
[  442.407269][T10695] usb usb1: usbfs: process 10695 (syz.1.1595) did not claim interface 0 before use
[  442.472538][T10717] binder: 10716:10717 ioctl c0306201 2000000001c0 returned -14
[  442.482745][T10717] binder: 10716:10717 ioctl c0306201 200000000180 returned -14
[  442.495185][T10717] binder: 10716:10717 ioctl c0306201 200000000480 returned -14
[  442.595299][T10725] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1605'.
[  442.678682][T10723] nvme_fcloop: unknown parameter or missing value 'roles='
[  442.686986][T10723] nvme_fabrics: unknown parameter or missing value 'urþƨ´Œo¡Á�ansport=fc' in ctrl creation request
[  443.653526][  T189] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  443.783411][  T189] usb 2-1: device descriptor read/64, error -71
[  443.933565][    T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  444.023391][  T189] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  444.083890][    T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  444.095575][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.095601][    T9] usb 3-1: Product: syz
[  444.095618][    T9] usb 3-1: Manufacturer: syz
[  444.095628][    T9] usb 3-1: SerialNumber: syz
[  444.119974][    T9] usb 3-1: config 0 descriptor??
[  444.138293][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  444.173473][  T189] usb 2-1: device descriptor read/64, error -71
[  444.262598][ T5772] usb 5-1: USB disconnect, device number 26
[  444.287021][  T189] usb usb2-port1: attempt power cycle
[  444.633502][  T189] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  444.653814][  T189] usb 2-1: device descriptor read/8, error -71
[  444.663425][ T5772] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  444.815276][ T5772] usb 5-1: unable to get BOS descriptor or descriptor too short
[  444.824734][ T5772] usb 5-1: not running at top speed; connect to a high speed hub
[  444.824780][ T5772] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  444.843012][ T5772] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  444.843035][ T5772] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  444.843074][ T5772] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  444.881156][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.881183][ T5772] usb 5-1: Product: syz
[  444.881200][ T5772] usb 5-1: Manufacturer: syz
[  444.881210][ T5772] usb 5-1: SerialNumber: syz
[  444.905342][  T189] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  444.935088][  T189] usb 2-1: device descriptor read/8, error -71
[  445.045279][  T189] usb usb2-port1: unable to enumerate USB device
[  445.184768][ T5772] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  445.184808][ T5772] cdc_ncm 5-1:1.0: bind() failure
[  445.206064][ T5772] usb 5-1: USB disconnect, device number 27
[  445.725137][ T2253] gspca_stk1135: reg_w 0x353 err -110
[  445.726179][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726197][ T2253] gspca_stk1135: Sensor write failed
[  445.726212][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726220][ T2253] gspca_stk1135: Sensor write failed
[  445.726237][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726244][ T2253] gspca_stk1135: Sensor read failed
[  445.726274][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726281][ T2253] gspca_stk1135: Sensor read failed
[  445.726287][ T2253] gspca_stk1135: Detected sensor type unknown (0x0)
[  445.726306][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726313][ T2253] gspca_stk1135: Sensor read failed
[  445.726329][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726336][ T2253] gspca_stk1135: Sensor read failed
[  445.726351][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726358][ T2253] gspca_stk1135: Sensor write failed
[  445.726373][ T2253] gspca_stk1135: serial bus timeout: status=0x00
[  445.726380][ T2253] gspca_stk1135: Sensor write failed
[  445.726438][ T2253] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110
[  446.343385][ T5772] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  446.464878][ T5617] usb 4-1: USB disconnect, device number 26
[  446.496518][ T5772] usb 5-1: Using ep0 maxpacket: 32
[  446.502340][ T5772] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  446.522277][ T5772] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  446.522302][ T5772] usb 5-1: config 2 has no interface number 0
[  446.522334][ T5772] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  446.522352][ T5772] usb 5-1: config 2 interface 88 has no altsetting 0
[  446.562182][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  446.562207][ T5772] usb 5-1: Product: syz
[  446.562233][ T5772] usb 5-1: Manufacturer: syz
[  446.562243][ T5772] usb 5-1: SerialNumber: syz
[  446.595294][T10747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  446.805570][T10747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  446.963435][ T2253] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  447.115435][ T2253] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  447.125527][ T2253] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  447.125562][ T2253] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  447.125585][ T2253] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  447.164621][ T2253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  447.164650][ T2253] usb 4-1: SerialNumber: syz
[  447.402127][ T2253] rndis_host 4-1:253.0: RNDIS init failed, -71
[  447.402315][ T2253] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71
[  447.429884][ T2253] usb 4-1: USB disconnect, device number 27
[  447.479182][T10759] ieee802154 phy1 wpan1: encryption failed: -22
[  447.874400][    T9] gspca_stk1135: reg_w 0x19 err -71
[  447.875436][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875468][    T9] gspca_stk1135: Sensor write failed
[  447.875484][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875492][    T9] gspca_stk1135: Sensor write failed
[  447.875508][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875515][    T9] gspca_stk1135: Sensor read failed
[  447.875532][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875539][    T9] gspca_stk1135: Sensor read failed
[  447.875544][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  447.875563][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875570][    T9] gspca_stk1135: Sensor read failed
[  447.875601][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875608][    T9] gspca_stk1135: Sensor read failed
[  447.875623][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875630][    T9] gspca_stk1135: Sensor write failed
[  447.875645][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  447.875651][    T9] gspca_stk1135: Sensor write failed
[  447.875696][    T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  447.954789][ T2253] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  448.004357][    T9] usb 3-1: USB disconnect, device number 9
[  448.032108][ T5772] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  448.032137][ T5772] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  448.032273][ T5772] asix 5-1:2.88: probe with driver asix failed with error -71
[  448.074301][ T5772] usb 5-1: USB disconnect, device number 28
[  448.174979][ T2253] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  448.185803][ T2253] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  448.185841][ T2253] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  448.185866][ T2253] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  448.227515][ T2253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  448.227540][ T2253] usb 4-1: SerialNumber: syz
[  448.630459][T10769] netlink: 'syz.4.1621': attribute type 2 has an invalid length.
[  448.630484][T10769] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1621'.
[  448.652974][    C0] raw-gadget.1 gadget.3: ignoring, device is not running
[  448.662401][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1621'.
[  448.676072][ T2253] rndis_host 4-1:253.0: RNDIS init failed, -71
[  448.676218][ T2253] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71
[  448.705797][ T2253] usb 4-1: USB disconnect, device number 28
[  449.033428][  T189] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  449.186481][  T189] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  449.203568][ T2253] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  449.212626][  T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.212657][  T189] usb 5-1: Product: syz
[  449.212667][  T189] usb 5-1: Manufacturer: syz
[  449.212677][  T189] usb 5-1: SerialNumber: syz
[  449.223874][  T189] usb 5-1: config 0 descriptor??
[  449.248448][  T189] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  449.263664][    T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  449.356855][ T2253] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  449.366848][ T2253] usb 3-1: config index 0 descriptor too short (expected 69, got 51)
[  449.366898][ T2253] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8270, setting to 64
[  449.390240][ T2253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.390263][ T2253] usb 3-1: Product: syz
[  449.390295][ T2253] usb 3-1: Manufacturer: syz
[  449.390305][ T2253] usb 3-1: SerialNumber: syz
[  449.424637][ T2253] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  449.440959][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  449.440990][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  449.461373][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  449.473063][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.473087][    T9] usb 2-1: Product: syz
[  449.473103][    T9] usb 2-1: Manufacturer: syz
[  449.473112][    T9] usb 2-1: SerialNumber: syz
[  449.511871][    T9] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  449.533830][    T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  449.552405][    T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  449.570379][    T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  449.588010][    T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  449.804724][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.805033][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.823429][    T9] usb 2-1: USB disconnect, device number 29
[  449.847080][    T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  449.868937][    T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  449.897677][    T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  449.917135][    T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  449.934806][    T9] keyspan 2-1:1.0: device disconnected
[  450.421210][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.421501][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.512558][T10796] netlink: 'syz.1.1632': attribute type 2 has an invalid length.
[  450.512602][T10796] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1632'.
[  450.532752][T10796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1632'.
[  451.066432][ T5772] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  451.084475][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  451.223875][ T5772] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  451.233924][    T9] usb 2-1: Using ep0 maxpacket: 32
[  451.239620][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  451.250441][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  451.250455][ T5772] usb 4-1: Product: syz
[  451.250463][ T5772] usb 4-1: Manufacturer: syz
[  451.270088][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  451.270114][    T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  451.270128][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  451.304302][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.304345][    T9] usb 2-1: Product: syz
[  451.304362][    T9] usb 2-1: Manufacturer: syz
[  451.304372][    T9] usb 2-1: SerialNumber: syz
[  451.338240][    T9] usb 2-1: config 0 descriptor??
[  451.347291][ T5772] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input130
[  451.550284][ T5772] usb 4-1: USB disconnect, device number 29
[  451.676698][T10821] netlink: 'syz.2.1643': attribute type 2 has an invalid length.
[  451.676725][T10821] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1643'.
[  451.694967][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'.
[  451.745248][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.745549][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.766210][    T9] gs_usb 2-1:0.0: Configuring for 2 interfaces
[  452.112154][T10826] ieee802154 phy1 wpan1: encryption failed: -22
[  452.321106][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.321417][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.422016][T10807] net_ratelimit: 384 callbacks suppressed
[  452.422048][T10807] netlink: zone id is out of range
[  452.422097][T10807] netlink: zone id is out of range
[  452.422151][T10807] netlink: zone id is out of range
[  452.422158][T10807] netlink: zone id is out of range
[  452.422164][T10807] netlink: zone id is out of range
[  452.422170][T10807] netlink: zone id is out of range
[  452.422176][T10807] netlink: zone id is out of range
[  452.422182][T10807] netlink: zone id is out of range
[  452.422188][T10807] netlink: zone id is out of range
[  452.422195][T10807] netlink: zone id is out of range
[  452.523500][ T5772] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  452.683653][ T5772] usb 4-1: Using ep0 maxpacket: 32
[  452.689227][ T5772] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  452.704856][ T5772] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  452.704879][ T5772] usb 4-1: config 2 has no interface number 0
[  452.704916][ T5772] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  452.704933][ T5772] usb 4-1: config 2 interface 88 has no altsetting 0
[  452.740930][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  452.740974][ T5772] usb 4-1: Product: syz
[  452.740990][ T5772] usb 4-1: Manufacturer: syz
[  452.741000][ T5772] usb 4-1: SerialNumber: syz
[  452.766490][T10830] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  452.983409][T10830] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  452.990845][  T189] gspca_stk1135: reg_w 0x353 err -110
[  452.991895][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.991904][  T189] gspca_stk1135: Sensor write failed
[  452.991920][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.991929][  T189] gspca_stk1135: Sensor write failed
[  452.991967][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.991976][  T189] gspca_stk1135: Sensor read failed
[  452.991992][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.991999][  T189] gspca_stk1135: Sensor read failed
[  452.992005][  T189] gspca_stk1135: Detected sensor type unknown (0x0)
[  452.992023][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.992031][  T189] gspca_stk1135: Sensor read failed
[  452.992047][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.992053][  T189] gspca_stk1135: Sensor read failed
[  452.992091][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.992099][  T189] gspca_stk1135: Sensor write failed
[  452.992113][  T189] gspca_stk1135: serial bus timeout: status=0x00
[  452.992120][  T189] gspca_stk1135: Sensor write failed
[  452.992178][  T189] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[  453.708712][ T5617] usb 5-1: USB disconnect, device number 29
[  453.791421][    T9] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[  453.864046][    T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  453.881616][    T9] usb 2-1: USB disconnect, device number 30
[  454.004403][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'.
[  454.014280][T10843] FAULT_INJECTION: forcing a failure.
[  454.014280][T10843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.014334][T10843] CPU: 0 UID: 0 PID: 10843 Comm: syz.4.1652 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  454.014350][T10843] Tainted: [L]=SOFTLOCKUP
[  454.014354][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  454.014361][T10843] Call Trace:
[  454.014366][T10843]  <TASK>
[  454.014371][T10843]  dump_stack_lvl+0xe8/0x150
[  454.014391][T10843]  should_fail_ex+0x3eb/0x540
[  454.014409][T10843]  _copy_to_user+0x31/0xb0
[  454.014421][T10843]  simple_read_from_buffer+0xe1/0x170
[  454.014437][T10843]  proc_fail_nth_read+0x1bb/0x230
[  454.014454][T10843]  ? common_file_perm+0x20e/0x2b0
[  454.014471][T10843]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  454.014486][T10843]  ? rw_verify_area+0x24a/0x4c0
[  454.014500][T10843]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  454.014513][T10843]  vfs_read+0x213/0xa80
[  454.014528][T10843]  ? __pfx___mutex_lock+0x10/0x10
[  454.014541][T10843]  ? __pfx_vfs_read+0x10/0x10
[  454.014554][T10843]  ? __fget_files+0x2a/0x420
[  454.014568][T10843]  ? __fget_files+0x3a2/0x420
[  454.014579][T10843]  ? __fget_files+0x2a/0x420
[  454.014595][T10843]  ksys_read+0x150/0x270
[  454.014609][T10843]  ? __pfx_ksys_read+0x10/0x10
[  454.014627][T10843]  do_syscall_64+0x166/0x520
[  454.014637][T10843]  ? trace_irq_disable+0x3b/0x140
[  454.014652][T10843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.014663][T10843]  ? clear_bhb_loop+0x70/0xc0
[  454.014676][T10843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.014686][T10843] RIP: 0033:0x7f7b69d5e90e
[  454.014698][T10843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  454.014707][T10843] RSP: 002b:00007f7b6ad41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  454.014719][T10843] RAX: ffffffffffffffda RBX: 00007f7b6ad426c0 RCX: 00007f7b69d5e90e
[  454.014727][T10843] RDX: 000000000000000f RSI: 00007f7b6ad420a0 RDI: 0000000000000004
[  454.014734][T10843] RBP: 00007f7b6ad42090 R08: 0000000000000000 R09: 0000000000000000
[  454.014741][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  454.014747][T10843] R13: 00007f7b6a026038 R14: 00007f7b6a025fa0 R15: 00007ffd90640308
[  454.014763][T10843]  </TASK>
[  454.299812][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  454.389627][ T5772] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  454.389657][ T5772] asix 4-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  454.389809][ T5772] asix 4-1:2.88: probe with driver asix failed with error -71
[  454.428831][ T5772] usb 4-1: USB disconnect, device number 30
[  454.458032][ T2253] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -110
[  454.467495][    T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  454.483792][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  454.483817][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  454.483845][    T9] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  454.522043][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.522067][    T9] usb 2-1: Product: syz
[  454.522084][    T9] usb 2-1: Manufacturer: syz
[  454.522094][    T9] usb 2-1: SerialNumber: syz
[  454.597522][T10852] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1657'.
[  454.641998][ T2253] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -110
[  454.690722][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  454.728391][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.728677][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.762158][    T9] speedtch 2-1:1.0: speedtch_bind: data interface not found!
[  454.762198][    T9] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19!
[  454.784628][    T9] usb 2-1: USB disconnect, device number 31
[  454.863437][ T5613] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  454.994023][ T5613] usb 5-1: device descriptor read/64, error -71
[  455.233540][ T5613] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  455.244520][T10866] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in;
[  455.244520][T10866]    program syz.3.1663 not setting count and/or reply_len properly
[  455.363470][ T5613] usb 5-1: device descriptor read/64, error -71
[  455.454557][T10872] No control pipe specified
[  455.474140][ T5613] usb usb5-port1: attempt power cycle
[  455.813539][ T5613] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  455.834308][ T5613] usb 5-1: device descriptor read/8, error -71
[  455.953724][ T5772] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  456.073955][ T5613] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  456.088278][T10881] Config c/1 of g_uac2 needs at least one function.
[  456.088539][T10881] udc usbip-vudc.0: failed to start g_uac2: -22
[  456.088564][T10881] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22
[  456.103506][ T5772] usb 2-1: Using ep0 maxpacket: 32
[  456.115397][ T5772] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  456.116602][ T5613] usb 5-1: device descriptor read/8, error -71
[  456.142466][ T5772] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  456.142492][ T5772] usb 2-1: config 2 has no interface number 0
[  456.142525][ T5772] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  456.142541][ T5772] usb 2-1: config 2 interface 88 has no altsetting 0
[  456.179998][T10881] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  456.191529][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  456.191564][ T5772] usb 2-1: Product: syz
[  456.191580][ T5772] usb 2-1: Manufacturer: syz
[  456.191590][ T5772] usb 2-1: SerialNumber: syz
[  456.219419][T10879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  456.227104][ T5613] usb usb5-port1: unable to enumerate USB device
[  456.440075][T10879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  456.583432][ T2253] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  456.735332][ T2253] usb 4-1: unable to get BOS descriptor or descriptor too short
[  456.735388][ T2253] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  456.753459][ T2253] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.753483][ T2253] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  456.775712][ T2253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.775737][ T2253] usb 4-1: Product: syz
[  456.775753][ T2253] usb 4-1: Manufacturer: syz
[  456.775764][ T2253] usb 4-1: SerialNumber: syz
[  456.806243][ T2253] usb 4-1: selecting invalid altsetting 1
[  456.806717][ T2253] usb 4-1: unit 6 not found!
[  457.203905][ T2253] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2)
[  457.238840][ T2253] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  457.279829][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  457.657874][ T5772] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  457.657904][ T5772] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  457.658048][ T5772] asix 2-1:2.88: probe with driver asix failed with error -71
[  457.695439][ T5772] usb 2-1: USB disconnect, device number 32
[  458.525632][T10904] base or size exceeds the MTRR width
[  458.628028][ T2253] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  459.677317][    T9] usb 4-1: USB disconnect, device number 31
[  459.744546][ T2253] usb 2-1: Using ep0 maxpacket: 8
[  459.750603][ T2253] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  459.761865][ T2253] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  459.761890][ T2253] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  459.761922][ T2253] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  459.761937][ T2253] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  459.761951][ T2253] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  459.761976][ T2253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.834415][ T2253] usbtmc 2-1:16.0: bulk endpoints not found
[  460.273439][    T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  460.423967][    T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  460.436017][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.436042][    T9] usb 4-1: Product: syz
[  460.436059][    T9] usb 4-1: Manufacturer: syz
[  460.436069][    T9] usb 4-1: SerialNumber: syz
[  460.460783][    T9] usb 4-1: config 0 descriptor??
[  460.470436][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  460.551732][T10918] vivid-000: =================  START STATUS  =================
[  460.551805][T10918] vivid-000: Generate PTS: true
[  460.551843][T10918] vivid-000: Generate SCR: true
[  460.551885][T10918] tpg source WxH: 320x180 (Luma)
[  460.551894][T10918] tpg field: 1
[  460.551900][T10918] tpg crop: (0,0)/320x180
[  460.551909][T10918] tpg compose: (0,0)/320x180
[  460.551918][T10918] tpg colorspace: 11
[  460.551925][T10918] tpg transfer function: 0/5
[  460.551932][T10918] tpg quantization: 0/1
[  460.551939][T10918] tpg RGB range: 0/2
[  460.551946][T10918] vivid-000: ==================  END STATUS  ==================
[  460.780017][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.780302][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.903427][ T2253] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  461.002951][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.003260][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.055961][ T2253] usb 5-1: Using ep0 maxpacket: 32
[  461.061584][ T2253] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  461.072041][ T2253] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  461.072066][ T2253] usb 5-1: config 2 has no interface number 0
[  461.072097][ T2253] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  461.072113][ T2253] usb 5-1: config 2 interface 88 has no altsetting 0
[  461.106016][ T2253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  461.106043][ T2253] usb 5-1: Product: syz
[  461.106060][ T2253] usb 5-1: Manufacturer: syz
[  461.106070][ T2253] usb 5-1: SerialNumber: syz
[  461.134324][T10920] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  461.346427][T10920] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  461.635899][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.636186][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.958185][ T5617] usb 2-1: USB disconnect, device number 33
[  462.087614][T10944] Config c/1 of g_uac2 needs at least one function.
[  462.087718][T10944] udc usbip-vudc.0: failed to start g_uac2: -22
[  462.087752][T10944] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22
[  462.088201][T10944] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  462.574940][ T2253] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  462.574969][ T2253] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  462.575119][ T2253] asix 5-1:2.88: probe with driver asix failed with error -71
[  462.614192][ T2253] usb 5-1: USB disconnect, device number 34
[  463.015391][T10976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1693'.
[  463.089392][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.101071][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.316336][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.316658][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.463421][ T2253] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  463.613409][ T2253] usb 5-1: Using ep0 maxpacket: 16
[  463.619110][ T2253] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  463.629405][ T2253] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  463.629450][ T2253] usb 5-1: config 0 interface 0 has no altsetting 0
[  463.629480][ T2253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.661963][ T2253] usb 5-1: config 0 descriptor??
[  463.943720][T10992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'.
[  464.063419][ T5613] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  464.147995][ T2253] hid_parser_main: 411 callbacks suppressed
[  464.148027][ T2253] lenovo 0003:17EF:60FE.001C: unknown main item tag 0x6
[  464.148088][ T2253] lenovo 0003:17EF:60FE.001C: ignoring exceeding usage max
[  464.169386][    T9] gspca_stk1135: reg_w 0x353 err -110
[  464.170408][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170414][    T9] gspca_stk1135: Sensor write failed
[  464.170427][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170432][    T9] gspca_stk1135: Sensor write failed
[  464.170447][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170453][    T9] gspca_stk1135: Sensor read failed
[  464.170467][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170472][    T9] gspca_stk1135: Sensor read failed
[  464.170476][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  464.170492][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170498][    T9] gspca_stk1135: Sensor read failed
[  464.170511][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170516][    T9] gspca_stk1135: Sensor read failed
[  464.170528][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170534][    T9] gspca_stk1135: Sensor write failed
[  464.170547][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  464.170551][    T9] gspca_stk1135: Sensor write failed
[  464.170601][    T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110
[  464.250615][ T5613] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  464.308861][ T5613] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  464.308890][ T5613] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  464.308913][ T5613] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  464.351498][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  464.351525][ T5613] usb 2-1: Product: syz
[  464.351541][ T5613] usb 2-1: Manufacturer: syz
[  464.351551][ T5613] usb 2-1: SerialNumber: syz
[  464.380096][ T2253] lenovo 0003:17EF:60FE.001C: hidraw0: USB HID v0.05 Device [HID 17ef:60fe] on usb-dummy_hcd.4-1/input0
[  464.598110][ T5613] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  464.885855][ T2253] usb 4-1: USB disconnect, device number 32
[  465.052965][T11002] overlayfs: missing 'lowerdir'
[  465.451486][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.451746][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.043691][T11014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'.
[  466.115847][T11018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.116100][T11018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.163557][    T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  466.314024][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  466.325081][    T9] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  466.325117][    T9] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  466.325141][    T9] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  466.366208][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  466.366235][    T9] usb 4-1: SerialNumber: syz
[  466.448504][ T2253] usb 5-1: USB disconnect, device number 35
[  466.591934][    T9] rndis_host 4-1:253.0: RNDIS init failed, -71
[  466.592091][    T9] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71
[  466.614741][    T9] usb 4-1: USB disconnect, device number 33
[  466.778642][ T2253] usb 2-1: USB disconnect, device number 34
[  466.789418][ T2253] usblp0: removed
[  466.836020][T11024] jffs2: notice: (11024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  466.856592][T11024] FAULT_INJECTION: forcing a failure.
[  466.856592][T11024] name failslab, interval 1, probability 0, space 0, times 0
[  466.856622][T11024] CPU: 0 UID: 0 PID: 11024 Comm: syz.1.1712 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  466.856637][T11024] Tainted: [L]=SOFTLOCKUP
[  466.856641][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.856648][T11024] Call Trace:
[  466.856653][T11024]  <TASK>
[  466.856658][T11024]  dump_stack_lvl+0xe8/0x150
[  466.856678][T11024]  should_fail_ex+0x3eb/0x540
[  466.856697][T11024]  should_failslab+0xa8/0x100
[  466.856709][T11024]  __kmalloc_noprof+0xfe/0x720
[  466.856723][T11024]  ? stack_trace_save+0xa9/0x100
[  466.856739][T11024]  ? jffs2_do_read_inode_internal+0x15c/0x6790
[  466.856754][T11024]  ? jffs2_do_read_inode_internal+0x15c/0x6790
[  466.856771][T11024]  jffs2_do_read_inode_internal+0x15c/0x6790
[  466.856784][T11024]  ? security_inode_alloc+0x39/0x310
[  466.856801][T11024]  ? kmem_cache_alloc_noprof+0x156/0x600
[  466.856815][T11024]  ? kasan_save_track+0x4f/0x80
[  466.856829][T11024]  ? kasan_save_track+0x3e/0x80
[  466.856843][T11024]  ? __kasan_slab_alloc+0x6c/0x80
[  466.856857][T11024]  ? kmem_cache_alloc_noprof+0x2b9/0x600
[  466.856869][T11024]  ? security_inode_alloc+0x39/0x310
[  466.856884][T11024]  ? inode_init_always_gfp+0x97e/0xd30
[  466.856895][T11024]  ? alloc_inode+0x82/0x1b0
[  466.856905][T11024]  ? lookup_open+0x9e1/0x1a40
[  466.856925][T11024]  ? __lock_acquire+0x6df/0x2e50
[  466.856946][T11024]  ? __pfx_jffs2_do_read_inode_internal+0x10/0x10
[  466.856962][T11024]  ? __mutex_trylock_common+0x15f/0x270
[  466.856983][T11024]  ? do_raw_spin_unlock+0xf5/0x200
[  466.856998][T11024]  jffs2_do_read_inode+0x4b4/0x6a0
[  466.857017][T11024]  ? __pfx_jffs2_do_read_inode+0x10/0x10
[  466.857034][T11024]  ? _raw_spin_unlock+0x28/0x50
[  466.857053][T11024]  jffs2_iget+0x228/0xcc0
[  466.857069][T11024]  ? __pfx_jffs2_iget+0x10/0x10
[  466.857095][T11024]  ? generic_permission+0x2bf/0x670
[  466.857105][T11024]  ? full_name_hash+0x92/0xe0
[  466.857118][T11024]  jffs2_lookup+0x377/0x430
[  466.857133][T11024]  lookup_open+0x9e1/0x1a40
[  466.857162][T11024]  path_openat+0x677/0x1d60
[  466.857185][T11024]  do_file_open+0x23e/0x4a0
[  466.857202][T11024]  ? __pfx_do_file_open+0x10/0x10
[  466.857234][T11024]  ? _raw_spin_unlock+0x28/0x50
[  466.857248][T11024]  ? alloc_fd+0x651/0x6c0
[  466.857265][T11024]  do_sys_openat2+0x115/0x200
[  466.857277][T11024]  ? __pfx_do_sys_openat2+0x10/0x10
[  466.857289][T11024]  ? ksys_write+0x242/0x270
[  466.857303][T11024]  ? __pfx_ksys_write+0x10/0x10
[  466.857318][T11024]  __x64_sys_openat+0x138/0x170
[  466.857332][T11024]  do_syscall_64+0x166/0x520
[  466.857342][T11024]  ? trace_irq_disable+0x3b/0x140
[  466.857357][T11024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.857368][T11024]  ? clear_bhb_loop+0x70/0xc0
[  466.857381][T11024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.857391][T11024] RIP: 0033:0x7fa4a359e0d9
[  466.857402][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.857412][T11024] RSP: 002b:00007fa4a4490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  466.857424][T11024] RAX: ffffffffffffffda RBX: 00007fa4a3825fa0 RCX: 00007fa4a359e0d9
[  466.857432][T11024] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  466.857440][T11024] RBP: 00007fa4a4490090 R08: 0000000000000000 R09: 0000000000000000
[  466.857447][T11024] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000002
[  466.857453][T11024] R13: 00007fa4a3826038 R14: 00007fa4a3825fa0 R15: 00007ffff81db628
[  466.857470][T11024]  </TASK>
[  466.857501][T11024] jffs2: error: (11024) jffs2_do_read_inode_internal: cannot read nodes for ino 2, returned error is -12
[  466.857548][T11024] jffs2: iget() failed for ino #2
[  467.083770][    T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  467.295966][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  467.307273][    T9] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  467.307328][    T9] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  467.307354][    T9] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  467.346908][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  467.346932][    T9] usb 4-1: SerialNumber: syz
[  467.589259][T11039] jffs2: notice: (11039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  467.663171][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1718'.
[  467.705630][ T2253] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  467.863863][ T2253] usb 2-1: Using ep0 maxpacket: 8
[  467.870484][ T2253] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  467.882686][ T2253] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  467.882711][ T2253] usb 2-1: config 179 has no interface number 0
[  467.882759][ T2253] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  467.882776][ T2253] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  467.882792][ T2253] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  467.882807][ T2253] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  467.882823][ T2253] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  467.882847][ T2253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.972017][T11035] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  468.200303][ T5613] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input131
[  468.243646][ T2253] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  468.392701][ T5613] usb 2-1: USB disconnect, device number 35
[  468.392787][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  468.392815][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  468.418457][ T2253] usb 5-1: Using ep0 maxpacket: 16
[  468.425384][ T2253] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  468.441572][ T2253] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  468.441598][ T2253] usb 5-1: config 1 has no interface number 0
[  468.441630][ T2253] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  468.441647][ T2253] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  468.441661][ T2253] usb 5-1: config 1 interface 105 has no altsetting 0
[  468.493849][ T2253] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  468.493874][ T2253] usb 5-1: Product: syz
[  468.493891][ T2253] usb 5-1: Manufacturer: syz
[  468.493908][ T2253] usb 5-1: SerialNumber: syz
[  468.526830][T11046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  468.526932][T11046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  468.545155][    T9] rndis_host 4-1:253.0: RNDIS init failed, -110
[  468.545321][    T9] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -110
[  468.590586][    T9] usb 4-1: USB disconnect, device number 34
[  468.796722][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.797037][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.827434][ T2253] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71
[  468.844247][ T2253] usb 5-1: USB disconnect, device number 36
[  469.075061][    T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  469.187986][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1727'.
[  469.229505][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.229804][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.250969][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  469.251009][    T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  469.273528][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.273551][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  469.294999][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.295023][    T9] usb 4-1: Product: syz
[  469.295040][    T9] usb 4-1: Manufacturer: syz
[  469.295050][    T9] usb 4-1: SerialNumber: syz
[  469.323841][ T2253] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  469.338000][    T9] usb 4-1: selecting invalid altsetting 1
[  469.364501][    T9] usb 4-1: unit 6 not found!
[  469.483504][ T2253] usb 2-1: Using ep0 maxpacket: 8
[  469.488980][ T2253] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  469.499403][ T2253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.516470][ T2253] pvrusb2: Hardware description: Terratec Grabster AV400
[  469.516506][ T2253] pvrusb2: **********
[  469.516520][ T2253] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  469.516529][ T2253] pvrusb2: Important functionality might not be entirely working.
[  469.516536][ T2253] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  469.516543][ T2253] pvrusb2: **********
[  469.663431][ T5617] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  469.715742][ T2346] pvrusb2: Invalid write control endpoint
[  469.779434][ T2346] pvrusb2: Invalid write control endpoint
[  469.779456][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  469.779488][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  469.779496][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  469.779503][ T2346] pvrusb2: Device being rendered inoperable
[  469.779527][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  469.779558][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  469.839009][ T5617] usb 5-1: Using ep0 maxpacket: 16
[  469.849209][ T5617] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  469.858919][ T2346] pvrusb2: Attached sub-driver cx25840
[  469.858938][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  469.858946][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  469.886849][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.886878][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  469.886916][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  469.886943][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.935994][ T5617] usb 5-1: config 0 descriptor??
[  469.954638][ T2253] usb 2-1: USB disconnect, device number 36
[  470.048995][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.049306][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.279096][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.279398][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.358812][ T5617] nintendo 0003:057E:2019.001D: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0
[  470.470065][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  470.490679][    T9] usb 4-1: USB disconnect, device number 35
[  470.525238][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  470.784537][ T5617] nintendo 0003:057E:2019.001D: Failed to get joycon info; ret=-71
[  470.784566][ T5617] nintendo 0003:057E:2019.001D: Failed to retrieve controller info; ret=-71
[  470.784587][ T5617] nintendo 0003:057E:2019.001D: Failed to initialize controller; ret=-71
[  470.823494][ T5617] nintendo 0003:057E:2019.001D: probe - fail = -71
[  470.823635][ T5617] nintendo 0003:057E:2019.001D: probe with driver nintendo failed with error -71
[  470.858069][ T5617] usb 5-1: USB disconnect, device number 37
[  470.904601][ T5613] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  470.962510][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.962791][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.020633][T11083] FAULT_INJECTION: forcing a failure.
[  471.020633][T11083] name failslab, interval 1, probability 0, space 0, times 0
[  471.020673][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.3.1734 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  471.020689][T11083] Tainted: [L]=SOFTLOCKUP
[  471.020694][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  471.020701][T11083] Call Trace:
[  471.020706][T11083]  <TASK>
[  471.020711][T11083]  dump_stack_lvl+0xe8/0x150
[  471.020729][T11083]  should_fail_ex+0x3eb/0x540
[  471.020747][T11083]  should_failslab+0xa8/0x100
[  471.020758][T11083]  ? security_file_alloc+0x34/0x310
[  471.020772][T11083]  kmem_cache_alloc_noprof+0xa1/0x600
[  471.020786][T11083]  ? rcu_is_watching+0x16/0xb0
[  471.020797][T11083]  ? security_file_alloc+0x34/0x310
[  471.020812][T11083]  security_file_alloc+0x34/0x310
[  471.020825][T11083]  init_file+0x90/0x2b0
[  471.020836][T11083]  alloc_empty_file+0x74/0x1d0
[  471.020847][T11083]  path_openat+0xa2/0x1d60
[  471.020864][T11083]  ? __lock_acquire+0x6df/0x2e50
[  471.020884][T11083]  do_file_open+0x23e/0x4a0
[  471.020900][T11083]  ? __pfx_do_file_open+0x10/0x10
[  471.020923][T11083]  ? _raw_spin_unlock+0x28/0x50
[  471.020939][T11083]  ? alloc_fd+0x651/0x6c0
[  471.020955][T11083]  do_sys_openat2+0x115/0x200
[  471.020967][T11083]  ? __pfx_do_sys_openat2+0x10/0x10
[  471.020978][T11083]  ? ksys_write+0x242/0x270
[  471.020993][T11083]  ? __pfx_ksys_write+0x10/0x10
[  471.021007][T11083]  __x64_sys_openat+0x138/0x170
[  471.021020][T11083]  do_syscall_64+0x166/0x520
[  471.021030][T11083]  ? trace_irq_disable+0x3b/0x140
[  471.021046][T11083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.021056][T11083]  ? clear_bhb_loop+0x70/0xc0
[  471.021068][T11083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.021078][T11083] RIP: 0033:0x7f5dc179e0d9
[  471.021089][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.021099][T11083] RSP: 002b:00007f5dc26f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  471.021112][T11083] RAX: ffffffffffffffda RBX: 00007f5dc1a25fa0 RCX: 00007f5dc179e0d9
[  471.021120][T11083] RDX: 0000000000000001 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  471.021127][T11083] RBP: 00007f5dc26f4090 R08: 0000000000000000 R09: 0000000000000000
[  471.021134][T11083] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  471.021141][T11083] R13: 00007f5dc1a26038 R14: 00007f5dc1a25fa0 R15: 00007fffa9f57e58
[  471.021156][T11083]  </TASK>
[  471.069532][ T5613] usb 2-1: Using ep0 maxpacket: 16
[  471.077658][ T5613] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  471.084502][ T5613] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.084521][ T5613] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.084533][ T5613] usb 2-1: config 0 interface 0 has no altsetting 0
[  471.084551][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.213602][ T5613] usb 2-1: config 0 descriptor??
[  471.542429][T11088] gadgetfs: bound to dummy_udc driver
[  471.620056][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1738'.
[  471.630189][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1738'.
[  471.660005][ T5613] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0
[  471.660042][ T5613] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0
[  471.660068][ T5613] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0
[  471.660085][ T5613] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0
[  471.660102][ T5613] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0
[  471.700968][ T5613] mcp2221 0003:04D8:00DD.001E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  471.778074][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.778329][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.788038][ T2253] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  471.795908][    C0] gadgetfs: connected
[  471.796274][ T2253] gadgetfs: disconnected
[  471.822936][T11092] jffs2: notice: (11092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  471.867713][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.868000][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.920272][ T5613] usb 2-1: USB disconnect, device number 37
[  471.943891][    C0] gadgetfs: connected
[  471.949140][ T2253] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  471.958927][ T2253] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  471.958963][ T2253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.980428][    C0] gadgetfs: configuration #1
[  472.285655][T11086] gadgetfs: suspended from state 3
[  472.285764][T11086] gadgetfs: disconnected
[  472.298972][ T5613] usb 4-1: USB disconnect, device number 36
[  472.401270][T11102] vivid-000: =================  START STATUS  =================
[  472.401294][T11102] vivid-000: Generate PTS: true
[  472.401321][T11102] vivid-000: Generate SCR: true
[  472.401338][T11102] tpg source WxH: 320x180 (Luma)
[  472.401347][T11102] tpg field: 1
[  472.401353][T11102] tpg crop: (0,0)/320x180
[  472.401362][T11102] tpg compose: (0,0)/320x180
[  472.401370][T11102] tpg colorspace: 11
[  472.401377][T11102] tpg transfer function: 0/5
[  472.401384][T11102] tpg quantization: 0/1
[  472.401391][T11102] tpg RGB range: 0/2
[  472.401398][T11102] vivid-000: ==================  END STATUS  ==================
[  472.823471][ T5617] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[  472.833582][ T2253] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  472.841269][ T5613] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  472.974135][ T5617] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  472.985533][ T5617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.985575][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.006221][ T5617] usb 2-1: config 0 descriptor??
[  473.012203][ T5613] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  473.026510][ T5613] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  473.026568][ T5613] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  473.026593][ T5613] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  473.066859][ T2253] usb 4-1: unable to get BOS descriptor or descriptor too short
[  473.066934][ T2253] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  473.075124][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  473.075138][ T5613] usb 5-1: SerialNumber: syz
[  473.094402][ T2253] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  473.094417][ T2253] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  473.124077][ T5617] hub 2-1:0.0: bad descriptor, ignoring hub
[  473.124103][ T5617] hub 2-1:0.0: probe with driver hub failed with error -5
[  473.124784][ T5617] sierra 2-1:0.0: Sierra USB modem converter detected
[  473.150218][ T2253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.150243][ T2253] usb 4-1: Product: syz
[  473.150260][ T2253] usb 4-1: Manufacturer: syz
[  473.150270][ T2253] usb 4-1: SerialNumber: syz
[  473.190934][ T2253] usb 4-1: selecting invalid altsetting 1
[  473.191445][ T2253] usb 4-1: unit 6 not found!
[  473.421610][ T5613] rndis_host 5-1:253.0: RNDIS init failed, -71
[  473.421780][ T5613] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71
[  473.447373][ T5613] usb 5-1: USB disconnect, device number 38
[  473.825040][   T32] INFO: task syz.0.1072:9007 blocked for more than 143 seconds.
[  473.825067][   T32]       Tainted: G             L      syzkaller #0
[  473.825082][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  473.825090][   T32] task:syz.0.1072      state:D stack:26112 pid:9007  tgid:9006  ppid:5609   task_flags:0x400140 flags:0x00080002
[  473.825128][   T32] Call Trace:
[  473.825134][   T32]  <TASK>
[  473.825161][   T32]  __schedule+0x17db/0x58f0
[  473.825185][   T32]  ? __lock_acquire+0x6df/0x2e50
[  473.825216][   T32]  ? __pfx___schedule+0x10/0x10
[  473.825232][   T32]  ? lock_acquire+0x115/0x350
[  473.825254][   T32]  ? schedule+0x90/0x2b0
[  473.825288][   T32]  schedule+0x164/0x2b0
[  473.825307][   T32]  schedule_timeout+0xc0/0x2c0
[  473.825324][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  473.825341][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  473.825360][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.825377][   T32]  ? wait_for_completion+0x272/0x5e0
[  473.825390][   T32]  wait_for_completion+0x2ca/0x5e0
[  473.825402][   T32]  ? snd_refcount_sync+0x7f/0x240
[  473.825530][   T32]  ? __pfx_wait_for_completion+0x10/0x10
[  473.825542][   T32]  ? rcu_is_watching+0x16/0xb0
[  473.825558][   T32]  ? kobject_put+0x50f/0x550
[  473.825604][   T32]  trigger_card_free+0x147/0x1d0
[  473.825662][   T32]  ? __pfx_trigger_card_free+0x10/0x10
[  473.825679][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  473.825697][   T32]  ? rcu_is_watching+0x16/0xb0
[  473.825710][   T32]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  473.825730][   T32]  devres_release_all+0x1a8/0x260
[  473.825799][   T32]  ? __pfx_devres_release_all+0x10/0x10
[  473.825815][   T32]  ? iommu_device_unuse_default_domain+0xc0/0x130
[  473.825866][   T32]  device_release_driver_internal+0x5d9/0x880
[  473.825929][   T32]  unbind_store+0x1a1/0x1d0
[  473.825948][   T32]  ? __pfx_sysfs_kf_write+0x10/0x10
[  473.825987][   T32]  kernfs_fop_write_iter+0x3a4/0x540
[  473.826003][   T32]  vfs_write+0x612/0xba0
[  473.826024][   T32]  ? __pfx_vfs_write+0x10/0x10
[  473.826044][   T32]  ? __fget_files+0x2a/0x420
[  473.826080][   T32]  ksys_write+0x150/0x270
[  473.826097][   T32]  ? __pfx_ksys_write+0x10/0x10
[  473.826118][   T32]  do_syscall_64+0x166/0x520
[  473.826131][   T32]  ? trace_irq_disable+0x3b/0x140
[  473.826147][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.826160][   T32]  ? clear_bhb_loop+0x70/0xc0
[  473.826175][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.826188][   T32] RIP: 0033:0x7ff85c39e0d9
[  473.826217][   T32] RSP: 002b:00007ff85d1b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  473.826233][   T32] RAX: ffffffffffffffda RBX: 00007ff85c625fa0 RCX: 00007ff85c39e0d9
[  473.826243][   T32] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000004
[  473.826252][   T32] RBP: 00007ff85c435024 R08: 0000000000000000 R09: 0000000000000000
[  473.826261][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  473.826269][   T32] R13: 00007ff85c626038 R14: 00007ff85c625fa0 R15: 00007ffe51281238
[  473.826288][   T32]  </TASK>
[  473.826308][   T32] 
[  473.826308][   T32] Showing all locks held in the system:
[  473.826318][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  473.826398][   T32]  #0: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  473.826512][   T32] locks held by kworker/0:3/2253: 6, on CPU#0:
[  473.826540][   T32]  #0: ffff888022ec5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.826587][   T32]  #1: ffffc900069c7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.826623][   T32]  #2: ffff88802a3c51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  473.826719][   T32]  #3: ffff8880339961d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  473.826759][   T32]  #4: ffff88807b4ec1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  473.826797][   T32]  #5: ffffffff903cc0e0 (register_mutex#7){+.+.}-{4:4}, at: usb_audio_probe+0x5e6/0x2240
[  473.826938][   T32] locks held by getty/5372: 2, on CPU#1:
[  473.826948][   T32]  #0: ffff888034a5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  473.827004][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  473.827046][   T32] locks held by kworker/0:4/5613: 6, on CPU#0:
[  473.827056][   T32]  #0: ffff888022ec5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.827092][   T32]  #1: ffffc9000416fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.827143][   T32]  #2: ffff88802a4831d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  473.827179][   T32]  #3: ffff88802a480568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30
[  473.827215][   T32]  #4: ffff88802a3f8160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30
[  473.827250][   T32]  #5: ffffffff8fd10768 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810
[  473.827303][   T32] locks held by kworker/0:5/5617: 5, on CPU#0:
[  473.827313][   T32]  #0: ffff888022ec5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.827349][   T32]  #1: ffffc900041bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.827384][   T32]  #2: ffff88802a3471d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  473.827440][   T32]  #3: ffff88802337d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  473.827479][   T32]  #4: ffff88807f05a1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  473.827521][   T32] locks held by udevd/5940: 4, on CPU#0:
[  473.827548][   T32]  #0: ffff88803572d638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  473.827588][   T32]  #1: ffff888032743880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  473.827627][   T32]  #2: ffff888022b42f08 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  473.827681][   T32]  #3: ffff8880339961d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  473.827746][   T32] locks held by syz.0.1072/9007: 4, on CPU#0:
[  473.827756][   T32]  #0: ffff888076f577b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  473.827792][   T32]  #1: ffff888068052460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  473.827851][   T32]  #2: ffff88805675a880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  473.827885][   T32]  #3: ffff888032d08138 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  473.827926][   T32] locks held by syz.1.1742/11106: 4, last CPU#0:
[  473.827951][   T32]  #0: ffff88802cd20fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_stream_wait_memory+0x8d8/0xf80
[  473.827993][   T32]  #1: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0xf4/0x660
[  473.828060][   T32]  #2: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x273/0x1a60
[  473.829042][   T32]  #3: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540
[  473.829084][   T32] 
[  473.829090][   T32] =============================================
[  473.829090][   T32] 
[  473.829130][   T32] NMI backtrace for cpu 0
[  473.829141][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  473.829157][   T32] Tainted: [L]=SOFTLOCKUP
[  473.829161][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.829167][   T32] Call Trace:
[  473.829172][   T32]  <TASK>
[  473.829177][   T32]  dump_stack_lvl+0xe8/0x150
[  473.829192][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  473.829230][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  473.829247][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  473.829262][   T32]  sys_info+0x135/0x170
[  473.829275][   T32]  watchdog+0xfd7/0x1030
[  473.829293][   T32]  ? watchdog+0x1c7/0x1030
[  473.829310][   T32]  kthread+0x38b/0x480
[  473.829330][   T32]  ? __pfx_watchdog+0x10/0x10
[  473.829342][   T32]  ? __pfx_kthread+0x10/0x10
[  473.829357][   T32]  ret_from_fork+0x514/0xb70
[  473.829373][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  473.829387][   T32]  ? __switch_to+0xc89/0x1420
[  473.829406][   T32]  ? __pfx_kthread+0x10/0x10
[  473.829420][   T32]  ret_from_fork_asm+0x1a/0x30
[  473.829445][   T32]  </TASK>
[  473.829480][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  474.611216][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  474.621869][   T32] Tainted: [L]=SOFTLOCKUP
[  474.626169][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.636200][   T32] Call Trace:
[  474.639460][   T32]  <TASK>
[  474.642393][   T32]  vpanic+0x56d/0xa60
[  474.646362][   T32]  ? __pfx_vpanic+0x10/0x10
[  474.650871][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  474.656422][   T32]  panic+0xc5/0xd0
[  474.660125][   T32]  ? __pfx_panic+0x10/0x10
[  474.664523][   T32]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  474.669616][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  474.675772][   T32]  watchdog+0x1030/0x1030
[  474.680085][   T32]  ? watchdog+0x1c7/0x1030
[  474.684485][   T32]  kthread+0x38b/0x480
[  474.688540][   T32]  ? __pfx_watchdog+0x10/0x10
[  474.693195][   T32]  ? __pfx_kthread+0x10/0x10
[  474.697763][   T32]  ret_from_fork+0x514/0xb70
[  474.702338][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  474.707445][   T32]  ? __switch_to+0xc89/0x1420
[  474.712116][   T32]  ? __pfx_kthread+0x10/0x10
[  474.716687][   T32]  ret_from_fork_asm+0x1a/0x30
[  474.721445][   T32]  </TASK>
[  474.724514][   T32] Kernel Offset: disabled
[  474.728827][   T32] Rebooting in 86400 seconds..