last executing test programs:

10m11.677814369s ago: executing program 4 (id=9151):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
sendfile(r2, r0, 0x0, 0x40008)

10m11.167521464s ago: executing program 4 (id=9152):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xc46c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

10m10.992103484s ago: executing program 4 (id=9153):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000004d0400000000000006000000000000005504030001ed0a0025000000170000001c0080ff000000007b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379d00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a607c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a59234ed56bc83987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d06c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292cfbe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d700ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec52d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d105800f000000000000ef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f6845b6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd51015dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d0800bf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3aee1ff8c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9000080ac970cc4fd0847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000000000000000000000000000be9ab5e329e962d96a283b6182c1cf6c8e350a7784ca39ecb9178f4118559f1eccb0b738a255146ebbc4357c16f94cd4"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @time={0x85}, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x2, 0x0, 0x0, 0x50, @time={0x367f, 0xfffffffd}, {}, {0x82}, @time=@time={0x180, 0xffffffff}}], 0x38)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000300))

10m10.819234686s ago: executing program 4 (id=9155):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x68, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 4)

10m10.241780236s ago: executing program 4 (id=9156):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, 0x0, 0x180)
sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x48814}, 0x14000012)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newchain={0x514, 0x64, 0x100, 0x70bd09, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x4e4, 0x2, [@TCA_RSVP_ACT={0x4ac, 0x6, [@m_skbedit={0x114, 0x1f, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5bf}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xc8, 0x6, "e6055be03849c4be7662a13ab0c867a2b6b06bac60c1add004140b2359f04ade51b4316aa886b46d02878bb48581afed721c17acf1bada73feafda2f805885d7e9a8896f15aad06a5698b328e3abb6d2bb5c7aef80227f8698e943e3399130f8d2c93a782a7dec34b99796fe30c0dc4c16063cb65c11c8afd55c103e5b362871c4be15fbe26c7c2c8b918c7695bf0d02860f315200311f879d51fdc54840149ada38a6782183a035126249111aef7eca2589dd8ace7cf43f843ecd2e52ebf3439f049830"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x168, 0xd, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xe}, @TCA_IFE_TYPE={0x6, 0x5, 0xf}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x3ff, 0x2, 0x7, 0xfffffff8}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0xc1, 0x6, "290fe7b8f1dd0a478b9736692a3b5ee53f12dc3caa90e4305c16e9e092fa8029e687f2a2b2cdb2b7e39ddd8259824c879f56fb8dc3d7eaed91cd4f74bd0b00f39323fb0d6d39d8b910c5887060d7ee8cf2d024a77276b5e12573e4d7985fbb774a2b6970aa1760390ea8ef3f8b3fca7a4da48d5ddf68653277cc0a5358f6a5faa37c5ff0030d414dc2608cc67ddfd05f0cb2eec2b273823cb7fe7446943f41de0134bdee8efe376069685216b5a396bd6137579d791ed4bc50f320e278"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x14c, 0xe, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x79aa5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff7, 0x8, 0x20000000, 0x2b, 0x6}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbf436}]}, {0xeb, 0x6, "dae15407f8aab07be57e0d3428e4e5eec0eec4d1d60f851cd7a49cb1399421a851efe5ef1e2e20fe818779c1309661587bb8932501d24eac7426411169cc3455e13c818cd4224e10253e71ade3c3f56ea2dfd40cdce3469e98e5560aad19a6f5fe2a9c3de64ec61a0d9ae340d96a74793ed3434fa0bb93c27f61c7b8a25bb101852c217652c9bf7ef8c0653873dd47530e263197b64f8b942c40e1129ec4e676155a6c2e8238c86730acbcfa7e80a6bdf7f107679630fb147a8bf9183b0848921b29f0e2f5a505e2535664c4634ea11685cd6f75be8a92cd475699cbdf7ea62e38b5a2728b31b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xe0, 0x0, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x408b}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xd, 0xb, 0x3, 0x11}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x62, 0x6, "bccafb08d1ff655163e5bd4e71272c973b75e775cf59fa72278ec3d6e73b60615275d2361ac2372dc2dcc6f3001de779f08a0b401c78f9761421bd87ee3032cda4faa6861b44b0714dacc0cfe34fccdc71817809eb3b6db1ba0274d88442"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_RSVP_ACT={0x34, 0x6, [@m_simple={0x30, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x514}, 0x1, 0x0, 0x0, 0x1}, 0x40881)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

10m10.080140641s ago: executing program 4 (id=9159):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)
pselect6(0x40, &(0x7f0000000080)={0xc}, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380), 0x42c42, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000240)="17a02a4a8f", 0x5}], 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
write$UHID_CREATE2(r1, &(0x7f0000002340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
gettid()
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file2\x00', 0x2, 0x1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103)
r5 = getpid()
r6 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
read(r4, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12)
close(r6)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'vxcan1\x00', 0x8000})
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe)
writev(r7, &(0x7f0000000200)=[{&(0x7f00000001c0)="684671aa3699cf0cc37efd222214b373e60c67c5fef4ce55f513ab0c394a8c3f451fcb7d86", 0x25}, {&(0x7f0000000280)="e27b86ef10d347cd74805913ec2ce34c11481eb1a5e942f9e637fb6db813907dbae5a5a8efa88a91aa680dc312b1f87768c7c9a69a66350164ed98ee9636400d5b609f3ce6cf9eecf73ffa0859a7bf1e444e6935b9d4a47f350e34183b16161cb9f3ce3c9ec5d00181f8e599de0aee26034764366c388b84e44817d7f921b677f3fe6654c7e83d975f1055e39a58537ca4122ca150f9d293abdce2d1fac7b98eabf2bc970593b53adc11dc0d63404759ab099839b3bc8eb30e7a0cae3ce79e6b9254fbbb2ec8a78e478b", 0xca}, {&(0x7f0000000380)="01f9bf1d3d5a0c10f53e4f3cd4856bd58df9539bbd86948b121a72db4f7538ba2ba374afaa8eb3b07222685c4ee24221ea0b3fc11cd02a6122a2658839b2cbc5f66d45c2d3c7b5e7b5ed232b3ca48f5f62644b7c48f427f7dcfaa3030cc4", 0x5e}, {&(0x7f0000000a80)="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", 0x695}], 0x4)

9m54.692364134s ago: executing program 32 (id=9159):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)
pselect6(0x40, &(0x7f0000000080)={0xc}, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380), 0x42c42, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000240)="17a02a4a8f", 0x5}], 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
write$UHID_CREATE2(r1, &(0x7f0000002340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
gettid()
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file2\x00', 0x2, 0x1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103)
r5 = getpid()
r6 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
read(r4, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12)
close(r6)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'vxcan1\x00', 0x8000})
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe)
writev(r7, &(0x7f0000000200)=[{&(0x7f00000001c0)="684671aa3699cf0cc37efd222214b373e60c67c5fef4ce55f513ab0c394a8c3f451fcb7d86", 0x25}, {&(0x7f0000000280)="e27b86ef10d347cd74805913ec2ce34c11481eb1a5e942f9e637fb6db813907dbae5a5a8efa88a91aa680dc312b1f87768c7c9a69a66350164ed98ee9636400d5b609f3ce6cf9eecf73ffa0859a7bf1e444e6935b9d4a47f350e34183b16161cb9f3ce3c9ec5d00181f8e599de0aee26034764366c388b84e44817d7f921b677f3fe6654c7e83d975f1055e39a58537ca4122ca150f9d293abdce2d1fac7b98eabf2bc970593b53adc11dc0d63404759ab099839b3bc8eb30e7a0cae3ce79e6b9254fbbb2ec8a78e478b", 0xca}, {&(0x7f0000000380)="01f9bf1d3d5a0c10f53e4f3cd4856bd58df9539bbd86948b121a72db4f7538ba2ba374afaa8eb3b07222685c4ee24221ea0b3fc11cd02a6122a2658839b2cbc5f66d45c2d3c7b5e7b5ed232b3ca48f5f62644b7c48f427f7dcfaa3030cc4", 0x5e}, {&(0x7f0000000a80)="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", 0x695}], 0x4)

8.116982365s ago: executing program 0 (id=10379):
openat$null(0xffffffffffffff9c, 0x0, 0x200800, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
socket$unix(0x1, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3081, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
socket$inet(0x2, 0x2, 0xfff)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x83)

4.900089707s ago: executing program 0 (id=10427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="a80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400fe800000000000000000000000004cbb0c00028005004f69980000001c0003800c00028005000100890000000c00028005000100170000003c0002802c00018014000300ff02000000000000000000000000000114000400000000000000af000000ffffe00020020c000280040001"], 0xa8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)

4.601483796s ago: executing program 0 (id=10433):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
pipe(&(0x7f0000000300))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0, <r3=>0x0})
ptrace$setsig(0x4203, r3, 0x3, &(0x7f0000000240)={0x1e, 0x5, 0x5})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)

4.212314103s ago: executing program 0 (id=10438):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

3.943390288s ago: executing program 0 (id=10442):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x60, 0xc, 0x2b, {0x2b, 0x23, "1e698ddf77fc9efb90743977fdbbe04deeecfdeedc6880428f70952ed041b0f735d80e2fc69c86ca17"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x40014)

2.883308028s ago: executing program 1 (id=10462):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x20000)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/142)

2.842001622s ago: executing program 1 (id=10463):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
clock_gettime(0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2})
close_range(r0, 0xffffffffffffffff, 0x0)

2.808065234s ago: executing program 3 (id=10464):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x19}, @flat=@handle={0x73682a85, 0x1101, 0x2}}, 0x0}}], 0x0, 0x0, 0x0})

2.624643677s ago: executing program 1 (id=10465):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0xe, {0xbd7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)="e1", 0x1}, {&(0x7f0000000300)}], 0x2)
close(r0)

2.292018969s ago: executing program 1 (id=10466):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x97, 0x0)

2.248420587s ago: executing program 1 (id=10467):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mdstat\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef)

2.124039395s ago: executing program 1 (id=10469):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.884007194s ago: executing program 3 (id=10472):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1.723691108s ago: executing program 3 (id=10474):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x4}}, 0x20)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000380)={0xbc, 0x0, 0x3})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x4376ea830d45549b, 0x0, [0xffffffffffffffff, 0x8d, 0x20000006, 0x7fff, 0x8c45, 0x3, 0xfffffffffffffffc, 0x800000]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x12, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.671420196s ago: executing program 2 (id=10475):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x40)

1.639280637s ago: executing program 0 (id=10476):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="790100006b527a20af0bf6004aa80102030109021b0001000000080904"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

1.292051041s ago: executing program 2 (id=10477):
msgsnd(0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x800)

1.071998s ago: executing program 2 (id=10478):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

622.496826ms ago: executing program 5 (id=10480):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@blksize={'blksize', 0x3d, 0x1000}}]}})

574.645326ms ago: executing program 3 (id=10481):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)

573.728439ms ago: executing program 5 (id=10482):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)

484.003173ms ago: executing program 3 (id=10483):
syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744ca46439ef57")
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000090"])
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

483.825893ms ago: executing program 5 (id=10484):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)=':', 0x1, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
shutdown(r0, 0x1)

410.090779ms ago: executing program 5 (id=10485):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x14000)

389.912105ms ago: executing program 2 (id=10486):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)

291.955989ms ago: executing program 3 (id=10487):
socket(0x1000000000000010, 0x80802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_clone(0xb00b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x80000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x80000009, 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x0, 0x0)

270.538395ms ago: executing program 2 (id=10488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000040)=""/233, 0xe9}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/210, 0xd2}], 0x6}, 0x101}], 0x4, 0x40000020, 0x0)

179.737977ms ago: executing program 2 (id=10489):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x10000902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)

122.058408ms ago: executing program 5 (id=10490):
socket$rds(0x15, 0x5, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x4000004)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

0s ago: executing program 5 (id=10491):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x203)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x56, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0xf)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})
pwritev2(r2, &(0x7f0000001600)=[{&(0x7f0000000280)="f880", 0x2}], 0x1, 0x739, 0xe2, 0x1f)

kernel console output (not intermixed with test programs):

1][T15581] usb 4-1: Manufacturer: syz
[ 3380.845708][ T9696] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 3380.859030][T15581] cdc_wdm 4-1:1.0: skipping garbage
[ 3380.864911][T15581] cdc_wdm 4-1:1.0: skipping garbage
[ 3380.917228][T15581] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 3380.924750][T15581] cdc_wdm 4-1:1.0: Unknown control protocol
[ 3380.942132][ T9696] usb 6-1: config 0 has no interface number 0
[ 3380.943811][T11018] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3380.948497][ T8635] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3380.948555][ T8635] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3380.950910][ T8635] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[ 3380.985500][ T8635] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3380.994061][ T8635] usb 2-1: Product: syz
[ 3380.998457][ T8635] usb 2-1: SerialNumber: syz
[ 3381.004075][ T9696] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3381.013289][ T9696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3381.021401][ T9696] usb 6-1: Product: syz
[ 3381.030120][ T9696] usb 6-1: Manufacturer: syz
[ 3381.035482][ T8635] usb 2-1: config 0 descriptor??
[ 3381.041070][T11018] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3381.047658][ T9696] usb 6-1: SerialNumber: syz
[ 3381.055730][ T8635] cm109 2-1:0.8: invalid payload size 0, expected 4
[ 3381.064039][ T9696] usb 6-1: config 0 descriptor??
[ 3381.072514][ T8635] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input184
[ 3381.084323][ T9696] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3381.088483][T11018] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3381.128144][T11018] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3381.149455][T11018] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3381.320011][    C0] cm109_urb_ctl_callback: 60 callbacks suppressed
[ 3381.320036][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 3381.322049][T15581] usb 2-1: USB disconnect, device number 14
[ 3381.326655][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 3381.580099][T15581] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 3381.956859][T11029] netlink: 'syz.3.9776': attribute type 4 has an invalid length.
[ 3382.418490][ T8635] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 3382.488587][ T9696] gspca_spca1528: reg_w err -110
[ 3382.493692][ T9696] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110
[ 3382.591318][ T8635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3382.606328][ T8635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3382.616719][ T8635] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3382.632760][ T8635] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3382.643971][ T8635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3382.652781][T15581] usb 6-1: USB disconnect, device number 19
[ 3382.661513][ T8635] usb 1-1: config 0 descriptor??
[ 3382.719344][ T9978] Bluetooth: hci4: command 0x0405 tx timeout
[ 3383.118414][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3383.124638][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3383.252675][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3383.258893][ T9978] Bluetooth: hci2: command 0x040f tx timeout
[ 3383.289045][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9781'.
[ 3383.495397][ T8635] plantronics 0003:047F:FFFF.0080: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 3383.551280][T15581] usb 4-1: USB disconnect, device number 46
[ 3383.611299][T11051] loop6: detected capacity change from 0 to 524287999
[ 3384.221676][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9779'.
[ 3384.231015][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9779'.
[ 3386.157417][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9786'.
[ 3386.356144][ T8635] usb 1-1: USB disconnect, device number 17
[ 3386.907944][T11079] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3386.922907][T11079] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3386.939320][T11079] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3386.957208][T11079] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3386.968717][T11079] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3387.899586][T11088] netlink: 'syz.1.9791': attribute type 4 has an invalid length.
[ 3387.907493][T11088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9791'.
[ 3388.318277][T15581] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 3388.380961][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3388.397063][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3388.411694][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3388.422943][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3388.471767][T15581] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3388.480836][T15581] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 3388.606966][T15581] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3388.625880][T15581] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 3388.665322][T15581] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 3388.680838][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9795'.
[ 3388.691026][T15581] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3388.714080][T15581] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3388.715572][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3388.733571][T15581] usb 6-1: Product: syz
[ 3388.742670][T15581] usb 6-1: Manufacturer: syz
[ 3388.760513][T15581] cdc_wdm 6-1:1.0: skipping garbage
[ 3388.767404][T15581] cdc_wdm 6-1:1.0: skipping garbage
[ 3388.777957][T15581] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device
[ 3388.784642][T15581] cdc_wdm 6-1:1.0: Unknown control protocol
[ 3388.915501][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3388.962070][ T9978] Bluetooth: hci2: command 0x040f tx timeout
[ 3388.969025][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3388.975632][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3388.975649][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3389.039224][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3389.206270][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 3389.212712][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 3389.644832][T11112] netlink: 'syz.5.9793': attribute type 4 has an invalid length.
[ 3390.715791][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3390.746851][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3391.109777][T11130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9800'.
[ 3391.119226][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9800'.
[ 3391.335896][T15581] usb 6-1: USB disconnect, device number 20
[ 3392.651683][T11139] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3392.661326][T11139] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3392.667614][T11139] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3392.676937][T11139] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3392.683611][T11139] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3392.980215][T11152] netlink: 'syz.0.9806': attribute type 4 has an invalid length.
[ 3392.988123][T11152] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9806'.
[ 3393.101686][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9804'.
[ 3394.640498][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3394.718537][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3394.718570][ T7988] Bluetooth: hci0: command 0x0405 tx timeout
[ 3394.724605][T25820] Bluetooth: hci5: command 0x040f tx timeout
[ 3394.731138][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3395.412228][ T8635] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 3395.672324][ T8635] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3395.682619][ T8635] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 3395.708429][ T8635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3395.793063][ T8635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 3395.829030][ T8635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 3396.289035][ T8635] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3396.324738][ T8635] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3396.334583][ T8635] usb 2-1: Product: syz
[ 3396.340218][ T8635] usb 2-1: Manufacturer: syz
[ 3396.371832][ T8635] cdc_wdm 2-1:1.0: skipping garbage
[ 3396.385261][ T8635] cdc_wdm 2-1:1.0: skipping garbage
[ 3396.405459][ T8635] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[ 3396.426129][ T8635] cdc_wdm 2-1:1.0: Unknown control protocol
[ 3397.222614][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3397.326582][T11199] netlink: 'syz.1.9812': attribute type 4 has an invalid length.
[ 3397.391574][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3397.414516][T11203] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[ 3397.421180][T11203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 3397.498472][T11203] vhci_hcd vhci_hcd.0: Device attached
[ 3397.507849][T11206] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2
[ 3397.520135][T11206] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits
[ 3397.686527][T11204] vhci_hcd: connection closed
[ 3397.771873][T15581] usb 33-1: new low-speed USB device number 4 using vhci_hcd
[ 3397.784559][T19720] vhci_hcd: stop threads
[ 3397.982711][T19720] vhci_hcd: release socket
[ 3398.005193][T19720] vhci_hcd: disconnect device
[ 3398.192307][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9818'.
[ 3398.201874][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9818'.
[ 3398.556394][ T8635] usb 2-1: USB disconnect, device number 15
[ 3399.011706][T11216] netlink: 'syz.1.9819': attribute type 4 has an invalid length.
[ 3399.367404][T11216] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9819'.
[ 3400.247325][T11226] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3400.257587][T11226] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3400.271282][T11226] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3400.301455][T11226] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3400.379033][T11226] geneve2: left promiscuous mode
[ 3400.384306][T11226] geneve2: entered allmulticast mode
[ 3401.051310][ T9696] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 3401.245677][ T9696] usb 2-1: Using ep0 maxpacket: 8
[ 3401.302051][ T9696] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 3401.311766][ T9696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3401.328361][ T9696] usb 2-1: Product: syz
[ 3401.525462][ T9696] usb 2-1: Manufacturer: syz
[ 3401.553534][ T9696] usb 2-1: SerialNumber: syz
[ 3401.683332][ T9696] usb 2-1: config 0 descriptor??
[ 3402.000482][ T9696] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3402.878988][T11253] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3402.886530][T11253] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3402.901867][T11253] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3402.921927][T11253] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3403.100359][T11253] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3403.158329][T15581] vhci_hcd: vhci_device speed not set
[ 3403.449557][ T9696] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3403.484852][ T9696] usb 2-1: USB disconnect, device number 16
[ 3404.057190][T11262] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3404.087571][T11262] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3404.156929][T11262] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3404.205709][T11262] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3404.235708][T11262] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3406.148367][ T7988] Bluetooth: hci4: command 0x0405 tx timeout
[ 3406.158454][ T7988] Bluetooth: hci0: command 0x0405 tx timeout
[ 3406.164533][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3406.238332][ T9978] Bluetooth: hci2: command 0x040f tx timeout
[ 3406.238493][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3406.288308][T15581] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 3406.481645][T15581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3406.501538][T15581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3406.526209][T15581] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3406.550456][T15581] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3406.566202][T15581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3406.611452][T15581] usb 1-1: config 0 descriptor??
[ 3407.362573][T15581] plantronics 0003:047F:FFFF.0081: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 3407.888539][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9839'.
[ 3407.897685][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9839'.
[ 3408.335269][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3409.369255][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9843'.
[ 3410.290504][ T9696] usb 1-1: USB disconnect, device number 18
[ 3411.131990][T11331] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3411.138176][T11331] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3411.144802][T11331] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3411.153233][T11331] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3411.165322][T11331] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3412.256155][T11344] macsec1: entered promiscuous mode
[ 3412.267226][T11344] dummy0: entered promiscuous mode
[ 3412.374702][T11344] dummy0: left promiscuous mode
[ 3413.235137][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3413.348316][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3413.348353][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3413.354386][ T9978] Bluetooth: hci4: command 0x0405 tx timeout
[ 3413.368318][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3413.475880][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9854'.
[ 3414.820154][ T9698] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 3414.982856][ T9698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3415.071346][ T9698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3415.097274][ T9698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3415.430968][ T9698] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3415.515045][ T9698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3415.912579][ T9698] usb 4-1: config 0 descriptor??
[ 3416.531463][ T9698] plantronics 0003:047F:FFFF.0082: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 3417.152385][T11406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9856'.
[ 3417.161631][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9856'.
[ 3417.318095][T11402] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3417.324424][T11402] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3417.338641][T11402] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3417.349392][T11402] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3417.362985][T11402] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3418.543264][T15581] usb 4-1: USB disconnect, device number 47
[ 3419.358874][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3419.365669][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3419.438517][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3419.444738][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3419.451110][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3422.634673][T11447] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3422.671445][T11447] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3422.784168][T11447] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3422.817618][T11447] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3422.896818][T11447] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3424.120872][T11459] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3424.129688][T11459] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3424.224219][T11459] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3424.267954][T11459] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3424.303560][T11464] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3424.324457][T11459] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3424.341847][T11464] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3424.354247][T11464] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3424.367399][T11464] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3424.381171][T11464] geneve2: left promiscuous mode
[ 3424.392085][T11464] geneve2: entered allmulticast mode
[ 3424.758704][T11473] netlink: 'syz.2.9881': attribute type 4 has an invalid length.
[ 3424.766653][T11473] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9881'.
[ 3424.792776][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3424.821264][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3426.158373][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3426.164536][ T7988] Bluetooth: hci4: command 0x0405 tx timeout
[ 3426.241058][ T5847] Bluetooth: hci0: command 0x0405 tx timeout
[ 3426.319346][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3426.398378][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3427.671790][T11503] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3427.678154][T11503] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3427.686791][T11503] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3427.693526][T11503] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3427.702273][T11503] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3428.412748][T11507] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3428.565579][T11507] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3428.596485][T11507] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3428.624194][T11507] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3428.681781][T11507] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3429.819085][T11531] netlink: 'syz.3.9896': attribute type 4 has an invalid length.
[ 3429.844683][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3429.859030][T11531] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9896'.
[ 3429.955315][T11531] wlan1: mtu less than device minimum
[ 3429.980214][ T9698] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 3430.183027][ T9698] usb 1-1: Using ep0 maxpacket: 8
[ 3430.188307][T15581] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[ 3430.213378][ T9698] usb 1-1: config 64 has an invalid interface number: 19 but max is 0
[ 3430.221722][ T9698] usb 1-1: config 64 has no interface number 0
[ 3430.239857][ T9698] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3430.267580][ T9698] usb 1-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3430.338465][ T9698] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[ 3430.341079][T15581] usb 4-1: device descriptor read/64, error -71
[ 3430.358731][ T9698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3430.484404][ T9698] usb 1-1: probing VID:PID(2201:012C)   
[ 3430.491634][ T9698] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02
[ 3430.512701][ T9698] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[ 3430.550482][ T9698] vub300 1-1:64.19: probe with driver vub300 failed with error -22
[ 3430.588788][T15581] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[ 3430.638551][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3430.640983][ T7988] Bluetooth: hci0: command 0x0405 tx timeout
[ 3430.644730][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3430.704796][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9895'.
[ 3430.722232][ T9698] usb 1-1: USB disconnect, device number 19
[ 3430.729205][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3430.758512][T15581] usb 4-1: device descriptor read/64, error -71
[ 3430.918760][T15581] usb usb4-port1: attempt power cycle
[ 3431.082473][T11538] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3431.090232][T11544] fuse: Bad value for 'fd'
[ 3431.109537][T11538] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3431.129309][T11538] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3431.162274][T11538] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3431.177169][T11538] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3431.288328][T15581] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 3431.561717][T15581] usb 4-1: device descriptor read/8, error -71
[ 3431.860694][T15581] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[ 3431.888989][T15581] usb 4-1: device descriptor read/8, error -71
[ 3431.999150][T15581] usb usb4-port1: unable to enumerate USB device
[ 3433.118324][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3433.124770][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3433.198539][ T7988] Bluetooth: hci0: command 0x0405 tx timeout
[ 3433.204826][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3433.218523][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3435.278576][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3435.785215][T11580] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3435.809957][T11580] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3435.843953][T11580] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3435.904618][T11580] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3435.948444][T11599] fuse: Bad value for 'fd'
[ 3435.965911][T11580] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3437.679373][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3437.888264][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3437.914487][T11618] netlink: 'syz.3.9914': attribute type 4 has an invalid length.
[ 3437.922807][ T7988] Bluetooth: hci0: command 0x0405 tx timeout
[ 3437.929115][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3437.944746][T11618] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9914'.
[ 3438.076845][ T9698] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 3438.084896][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3438.097490][T11618] wlan1: mtu less than device minimum
[ 3438.279980][ T9698] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3438.307021][ T9698] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 3438.344591][ T9698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3438.368314][ T9696] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 3438.383522][ T9698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 3438.424714][ T9698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 3438.473283][ T9698] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3438.493673][ T9698] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3438.502132][ T9698] usb 2-1: Product: syz
[ 3438.507236][ T9698] usb 2-1: Manufacturer: syz
[ 3438.512497][ T9696] usb 4-1: device descriptor read/64, error -71
[ 3438.545652][ T9698] cdc_wdm 2-1:1.0: skipping garbage
[ 3438.553868][ T9698] cdc_wdm 2-1:1.0: skipping garbage
[ 3438.570595][ T9698] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[ 3438.584742][ T9698] cdc_wdm 2-1:1.0: Unknown control protocol
[ 3438.758711][ T9696] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[ 3438.906917][T11625] macsec1: entered promiscuous mode
[ 3438.916080][T11625] dummy0: entered promiscuous mode
[ 3438.918411][ T9696] usb 4-1: device descriptor read/64, error -71
[ 3438.929031][T11625] dummy0: left promiscuous mode
[ 3439.041364][ T9696] usb usb4-port1: attempt power cycle
[ 3439.334876][T11633] netlink: 'syz.1.9913': attribute type 4 has an invalid length.
[ 3439.459157][ T9696] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[ 3439.619055][ T9696] usb 4-1: device descriptor read/8, error -71
[ 3440.201527][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3440.207697][ T9696] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[ 3440.339780][ T9696] usb 4-1: device descriptor read/8, error -71
[ 3440.448861][ T9696] usb usb4-port1: unable to enumerate USB device
[ 3440.563396][T15581] usb 2-1: USB disconnect, device number 17
[ 3441.658056][T11650] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3441.664767][T11650] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3441.678327][T11650] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3441.698296][T11650] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3441.715035][T11650] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3443.678398][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3443.678453][ T9978] Bluetooth: hci5: command 0x040f tx timeout
[ 3443.758389][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3443.758409][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3443.758470][ T5847] Bluetooth: hci0: command 0x0405 tx timeout
[ 3444.145673][T11683] macsec1: entered promiscuous mode
[ 3444.221947][T11683] dummy0: entered promiscuous mode
[ 3444.253050][T11683] dummy0: left promiscuous mode
[ 3446.096883][T11701] netlink: 'syz.0.9933': attribute type 4 has an invalid length.
[ 3446.108029][T11701] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9933'.
[ 3446.257589][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9934'.
[ 3446.360381][ T9696] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 3446.555132][ T9696] usb 1-1: device descriptor read/64, error -71
[ 3446.938753][ T9696] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 3447.098702][ T9696] usb 1-1: device descriptor read/64, error -71
[ 3447.218738][ T9696] usb usb1-port1: attempt power cycle
[ 3447.701265][ T9696] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[ 3447.759008][ T9696] usb 1-1: device descriptor read/8, error -71
[ 3448.008646][ T9696] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[ 3448.078369][ T9696] usb 1-1: device descriptor read/8, error -71
[ 3448.138581][ T9698] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 3448.188862][ T9696] usb usb1-port1: unable to enumerate USB device
[ 3448.339244][ T9698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3448.475207][ T9698] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 3448.487687][ T9698] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 3448.496537][ T9698] usb 2-1: Product: syz
[ 3448.503316][ T9698] usb 2-1: Manufacturer: syz
[ 3448.508120][ T9698] usb 2-1: SerialNumber: syz
[ 3448.541779][ T9698] usb 2-1: config 0 descriptor??
[ 3448.593830][ T9698] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 3448.623170][T11016] udevd[11016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3449.316487][ T9698] usb 2-1: USB disconnect, device number 18
[ 3450.645586][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 3450.652898][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 3452.316365][T11764] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3452.353203][T11764] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3452.393006][T11764] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3452.488483][T11764] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3452.519756][T11764] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3452.810982][T11780] netlink: 'syz.5.9953': attribute type 4 has an invalid length.
[ 3452.819216][T11780] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9953'.
[ 3453.108376][ T9698] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[ 3453.250195][ T9698] usb 6-1: device descriptor read/64, error -71
[ 3453.498530][ T9698] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[ 3453.798813][ T9698] usb 6-1: device descriptor read/64, error -71
[ 3453.949016][ T9698] usb usb6-port1: attempt power cycle
[ 3454.117780][T11793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9955'.
[ 3454.288379][ T9698] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[ 3454.318293][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3454.324746][ T9698] usb 6-1: device descriptor read/8, error -71
[ 3454.400536][ T5847] Bluetooth: hci0: command 0x0405 tx timeout
[ 3454.406685][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3454.406755][ T9696] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 3454.645282][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3454.645332][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3454.673163][ T9696] usb 2-1: Using ep0 maxpacket: 8
[ 3454.737982][ T9696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3454.783033][ T9696] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 3454.838457][ T9698] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[ 3454.872190][ T9696] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 3454.901015][ T9696] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 3454.909301][ T9698] usb 6-1: device descriptor read/8, error -71
[ 3454.935532][ T9696] usb 2-1: Product: syz
[ 3454.944963][ T9696] usb 2-1: Manufacturer: syz
[ 3454.974364][ T9696] usb 2-1: SerialNumber: syz
[ 3454.982818][ T9696] usb 2-1: config 0 descriptor??
[ 3455.038626][ T9698] usb usb6-port1: unable to enumerate USB device
[ 3456.198716][T11814] macsec1: entered promiscuous mode
[ 3456.204244][T11814] dummy0: entered promiscuous mode
[ 3456.362219][T11814] dummy0: left promiscuous mode
[ 3456.718733][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3457.135850][ T9696] usb 2-1: USB disconnect, device number 19
[ 3457.360680][T11825] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3457.377633][T11825] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3457.396809][T11825] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3457.432842][T11825] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3457.448268][T11825] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3459.118465][ T9978] Bluetooth: hci4: command 0x0405 tx timeout
[ 3459.438663][ T7988] Bluetooth: hci0: command 0x0405 tx timeout
[ 3459.438737][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3459.518478][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3459.524577][ T9978] Bluetooth: hci2: command 0x040f tx timeout
[ 3459.565933][T11854] netlink: 'syz.5.9970': attribute type 4 has an invalid length.
[ 3459.575408][T11854] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9970'.
[ 3459.593225][T11846] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3459.604274][T11846] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3459.616100][T11846] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3459.638601][T11846] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3459.654342][T11846] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3460.048587][T15581] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 3460.058958][T15798] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[ 3460.208286][T15798] usb 6-1: device descriptor read/64, error -71
[ 3460.218495][T15581] usb 2-1: Using ep0 maxpacket: 8
[ 3460.231318][T15581] usb 2-1: config 64 has an invalid interface number: 19 but max is 0
[ 3460.250349][T15581] usb 2-1: config 64 has no interface number 0
[ 3460.280146][T15581] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3460.290545][T15581] usb 2-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3460.313856][T15581] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[ 3460.324778][T15581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3460.366685][T15581] usb 2-1: probing VID:PID(2201:012C)   
[ 3460.385747][T15581] usb 2-1: vub300 testing BULK OUT EndPoint(0) 02
[ 3460.397955][T15581] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[ 3460.430989][T15581] vub300 2-1:64.19: probe with driver vub300 failed with error -22
[ 3460.494056][T15798] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[ 3460.602068][T11856] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 3460.640342][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9971'.
[ 3460.658294][T15798] usb 6-1: device descriptor read/64, error -71
[ 3460.679687][ T9696] usb 2-1: USB disconnect, device number 20
[ 3460.768818][T15798] usb usb6-port1: attempt power cycle
[ 3461.139183][T15798] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[ 3461.169804][T15798] usb 6-1: device descriptor read/8, error -71
[ 3461.429207][T15798] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[ 3461.512940][T11877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3461.521852][ T7988] Bluetooth: hci4: command 0x0405 tx timeout
[ 3461.529231][T15798] usb 6-1: device descriptor read/8, error -71
[ 3461.616209][T11877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3461.649488][T15798] usb usb6-port1: unable to enumerate USB device
[ 3461.688801][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3461.697246][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3461.700364][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3461.703739][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3462.973593][T11889] FAULT_INJECTION: forcing a failure.
[ 3462.973593][T11889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3463.039049][T11889] CPU: 1 UID: 0 PID: 11889 Comm: syz.3.9981 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3463.039075][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3463.039084][T11889] Call Trace:
[ 3463.039092][T11889]  <TASK>
[ 3463.039102][T11889]  dump_stack_lvl+0x189/0x250
[ 3463.039140][T11889]  ? __pfx____ratelimit+0x10/0x10
[ 3463.039160][T11889]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3463.039178][T11889]  ? __pfx__printk+0x10/0x10
[ 3463.039200][T11889]  ? __might_fault+0xb0/0x130
[ 3463.039234][T11889]  should_fail_ex+0x414/0x560
[ 3463.039257][T11889]  _copy_from_user+0x2d/0xb0
[ 3463.039283][T11889]  kstrtouint_from_user+0xc4/0x170
[ 3463.039307][T11889]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 3463.039344][T11889]  proc_fail_nth_write+0x88/0x240
[ 3463.039364][T11889]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 3463.039388][T11889]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 3463.039408][T11889]  vfs_write+0x27e/0xa90
[ 3463.039450][T11889]  ? __pfx_vfs_write+0x10/0x10
[ 3463.039475][T11889]  ? __fget_files+0x2a/0x420
[ 3463.039497][T11889]  ? __fget_files+0x3a0/0x420
[ 3463.039513][T11889]  ? __fget_files+0x2a/0x420
[ 3463.039538][T11889]  ksys_write+0x145/0x250
[ 3463.039564][T11889]  ? __pfx_ksys_write+0x10/0x10
[ 3463.039590][T11889]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 3463.039611][T11889]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3463.039633][T11889]  __do_fast_syscall_32+0xb6/0x2b0
[ 3463.039654][T11889]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3463.039677][T11889]  do_fast_syscall_32+0x34/0x80
[ 3463.039697][T11889]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3463.039718][T11889] RIP: 0023:0xf708e539
[ 3463.039739][T11889] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3463.039755][T11889] RSP: 002b:00000000f507e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 3463.039781][T11889] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f507e620
[ 3463.039795][T11889] RDX: 0000000000000001 RSI: 00000000f73f4ff4 RDI: 0000000000000000
[ 3463.039806][T11889] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 3463.039817][T11889] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3463.039828][T11889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3463.039859][T11889]  </TASK>
[ 3463.977716][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9985'.
[ 3464.071584][T11904] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9985'.
[ 3464.348016][T11906] macsec1: entered promiscuous mode
[ 3464.358451][T11906] dummy0: entered promiscuous mode
[ 3464.366700][T11906] dummy0: left promiscuous mode
[ 3465.270138][ T9696] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 3465.419587][T11917] netlink: 'syz.0.9990': attribute type 4 has an invalid length.
[ 3465.427407][T11917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9990'.
[ 3465.428333][ T9696] usb 4-1: Using ep0 maxpacket: 8
[ 3465.472515][ T9696] usb 4-1: config 64 has an invalid interface number: 19 but max is 0
[ 3465.481580][ T9696] usb 4-1: config 64 has no interface number 0
[ 3465.488057][ T9696] usb 4-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3465.507316][ T9696] usb 4-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3465.525554][ T9696] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[ 3465.592320][ T9696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3465.671847][ T9696] usb 4-1: probing VID:PID(2201:012C)   
[ 3465.682317][ T9696] usb 4-1: vub300 testing BULK OUT EndPoint(0) 02
[ 3465.705624][ T9696] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[ 3465.718384][T15798] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[ 3465.861167][ T9696] vub300 4-1:64.19: probe with driver vub300 failed with error -22
[ 3465.875206][T11909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9988'.
[ 3465.909066][T15798] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 3465.916885][T15798] usb 1-1: can't read configurations, error -61
[ 3465.983888][ T9696] usb 4-1: USB disconnect, device number 56
[ 3466.098334][T15798] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[ 3466.374645][T15798] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 3466.483715][T15798] usb 1-1: can't read configurations, error -61
[ 3466.538426][T15798] usb usb1-port1: attempt power cycle
[ 3467.088527][T15798] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[ 3467.382364][T15798] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 3467.437865][T15798] usb 1-1: can't read configurations, error -61
[ 3467.595711][T15798] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[ 3467.641777][T15798] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 3467.649607][T15798] usb 1-1: can't read configurations, error -61
[ 3467.661935][T15798] usb usb1-port1: unable to enumerate USB device
[ 3467.998540][T15798] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 3468.238314][T15798] usb 2-1: Using ep0 maxpacket: 16
[ 3468.247550][T15798] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 3468.326594][T15798] usb 2-1: config 0 has no interface number 0
[ 3468.371382][T15798] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3468.380883][T15798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3468.392545][T15798] usb 2-1: Product: syz
[ 3468.409758][T15798] usb 2-1: Manufacturer: syz
[ 3468.427088][T15798] usb 2-1: SerialNumber: syz
[ 3468.456771][T15798] usb 2-1: config 0 descriptor??
[ 3468.476868][T15798] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3469.781754][T11957] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3469.800239][T11957] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3469.825525][T11957] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3469.835884][T11957] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3469.859119][T11957] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3470.128413][T15581] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 3470.238580][T15798] gspca_spca1528: reg_w err -110
[ 3470.243684][T15798] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[ 3470.284525][T15581] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3470.311235][T15581] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3470.338166][T15581] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3470.504856][ T9696] usb 2-1: USB disconnect, device number 21
[ 3470.577284][T15581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3470.982051][T15581] usb 1-1: usb_control_msg returned -32
[ 3470.987911][T15581] usbtmc 1-1:16.0: can't read capabilities
[ 3471.373081][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10001'.
[ 3471.404406][T11972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 3471.439082][T15581] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 3471.598328][T15581] usb 6-1: Using ep0 maxpacket: 8
[ 3471.610575][T15581] usb 6-1: config 64 has an invalid interface number: 19 but max is 0
[ 3471.633975][T15581] usb 6-1: config 64 has no interface number 0
[ 3471.640467][T15581] usb 6-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3471.651597][T15581] usb 6-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3471.661784][T15581] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[ 3471.676469][T15581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3471.679754][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3471.707095][T15581] usb 6-1: probing VID:PID(2201:012C)   
[ 3471.712973][T15798] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 3471.744476][T15581] usb 6-1: vub300 testing BULK OUT EndPoint(0) 02
[ 3471.777891][T15581] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[ 3471.822370][T15581] vub300 6-1:64.19: probe with driver vub300 failed with error -22
[ 3471.840758][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3471.848330][ T5847] Bluetooth: hci0: command 0x0405 tx timeout
[ 3471.879747][T15798] usb 4-1: Using ep0 maxpacket: 32
[ 3471.911073][T15798] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 3471.928785][ T5847] Bluetooth: hci1: command 0x040f tx timeout
[ 3471.934965][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3471.947839][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10004'.
[ 3471.957148][T15798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3471.965852][T15798] usb 4-1: Product: syz
[ 3472.013954][T15798] usb 4-1: Manufacturer: syz
[ 3472.045675][T15798] usb 4-1: SerialNumber: syz
[ 3472.072928][T15798] usb 4-1: config 0 descriptor??
[ 3472.102839][T15798] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 3472.110262][ T9696] usb 6-1: USB disconnect, device number 29
[ 3472.819478][ T9696] usb 1-1: USB disconnect, device number 28
[ 3472.921835][T11991] netlink: 'syz.5.10009': attribute type 4 has an invalid length.
[ 3473.004936][T11991] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10009'.
[ 3473.276871][ T9698] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 3473.451769][ T9698] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 3473.462165][ T9698] usb 6-1: can't read configurations, error -61
[ 3473.598403][ T9698] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 3473.613348][T15798] gspca_stk1135: reg_w 0xf err -71
[ 3473.619679][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.627000][T15798] gspca_stk1135: Sensor write failed
[ 3473.632512][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.683896][T15798] gspca_stk1135: Sensor write failed
[ 3473.701306][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.727105][T15798] gspca_stk1135: Sensor read failed
[ 3473.747405][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.768272][T15798] gspca_stk1135: Sensor read failed
[ 3473.773188][ T9698] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 3473.781716][T15798] gspca_stk1135: Detected sensor type unknown (0x0)
[ 3473.782390][ T9698] usb 6-1: can't read configurations, error -61
[ 3473.806272][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.891398][ T9698] usb usb6-port1: attempt power cycle
[ 3473.892706][T15798] gspca_stk1135: Sensor read failed
[ 3473.904533][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.911154][T15798] gspca_stk1135: Sensor read failed
[ 3473.923095][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3473.930766][T15798] gspca_stk1135: Sensor write failed
[ 3474.036120][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 3474.079744][T15798] gspca_stk1135: Sensor write failed
[ 3474.108314][T15798] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[ 3474.232527][T15798] usb 4-1: USB disconnect, device number 57
[ 3474.310917][ T9698] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[ 3474.342539][ T9698] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 3474.352454][ T9698] usb 6-1: can't read configurations, error -61
[ 3474.488500][ T9698] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[ 3474.523920][ T9698] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 3474.560664][ T9698] usb 6-1: can't read configurations, error -61
[ 3474.571672][ T9698] usb usb6-port1: unable to enumerate USB device
[ 3475.428429][T15798] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 3475.443625][T12011] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3475.488753][T12011] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3475.516400][T12011] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3475.534777][T12011] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3475.545913][T12011] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3475.588333][T15798] usb 4-1: Using ep0 maxpacket: 32
[ 3475.596935][T15798] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3475.640679][T15798] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3475.651770][T15798] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3475.660601][T15798] usb 4-1: Product: syz
[ 3475.688847][T15798] usb 4-1: Manufacturer: syz
[ 3475.693505][T15798] usb 4-1: SerialNumber: syz
[ 3475.709401][T15798] usb 4-1: config 0 descriptor??
[ 3475.716832][T12010] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 3475.858340][T15581] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 3476.008599][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10013'.
[ 3476.018343][T15581] usb 1-1: Using ep0 maxpacket: 16
[ 3476.026614][T15581] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 3476.036603][T15581] usb 1-1: config 0 has no interface number 0
[ 3476.046761][T15581] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3476.059713][T15798] usb 4-1: USB disconnect, device number 58
[ 3476.081367][T15581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3476.100560][T15581] usb 1-1: Product: syz
[ 3476.111812][T15581] usb 1-1: Manufacturer: syz
[ 3476.116987][T15581] usb 1-1: SerialNumber: syz
[ 3476.127555][T15581] usb 1-1: config 0 descriptor??
[ 3476.146580][T15581] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3476.784890][T15798] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 3476.978611][T15798] usb 6-1: Using ep0 maxpacket: 8
[ 3476.989629][T15798] usb 6-1: config 64 has an invalid interface number: 19 but max is 0
[ 3476.998374][T15798] usb 6-1: config 64 has no interface number 0
[ 3477.007382][T15798] usb 6-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3477.033657][T15798] usb 6-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3477.057198][T15798] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[ 3477.080075][T15798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3477.123072][T15798] usb 6-1: probing VID:PID(2201:012C)   
[ 3477.148004][T15798] usb 6-1: vub300 testing BULK OUT EndPoint(0) 02
[ 3477.170546][T15798] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[ 3477.271551][T15798] vub300 6-1:64.19: probe with driver vub300 failed with error -22
[ 3477.288375][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[ 3477.375607][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10019'.
[ 3477.520467][ T5847] Bluetooth: hci0: command 0x0405 tx timeout
[ 3477.526720][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3477.548962][T15581] gspca_spca1528: reg_w err -110
[ 3477.554042][T15581] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[ 3477.598459][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[ 3477.604314][T15798] usb 6-1: USB disconnect, device number 34
[ 3477.604665][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3477.922697][T15581] usb 1-1: USB disconnect, device number 29
[ 3478.840688][T12049] lo: entered promiscuous mode
[ 3478.855839][T12049] lo: left allmulticast mode
[ 3478.876911][T12049] tunl0: entered promiscuous mode
[ 3478.891010][T12049] tunl0: left allmulticast mode
[ 3478.936120][T12049] gre0: entered promiscuous mode
[ 3478.995024][T12049] gre0: left allmulticast mode
[ 3479.016481][T12049] gretap0: entered promiscuous mode
[ 3479.035664][T12049] gretap0: left allmulticast mode
[ 3479.082024][T12049] erspan0: entered promiscuous mode
[ 3479.118403][T12049] erspan0: left allmulticast mode
[ 3479.182147][T12049] ip_vti0: entered promiscuous mode
[ 3479.203367][T12049] ip_vti0: left allmulticast mode
[ 3479.222979][T12049] ip6_vti0: entered promiscuous mode
[ 3479.228853][T12049] ip6_vti0: left allmulticast mode
[ 3479.236118][T12049] sit0: entered promiscuous mode
[ 3479.244855][T12049] sit0: left allmulticast mode
[ 3479.256259][T12049] ip6tnl0: entered promiscuous mode
[ 3479.270359][T12049] ip6tnl0: left allmulticast mode
[ 3479.277617][T12049] ip6gre0: entered promiscuous mode
[ 3479.293088][T12049] ip6gre0: left allmulticast mode
[ 3479.305256][T12049] syz_tun: entered promiscuous mode
[ 3479.314141][T12049] syz_tun: left allmulticast mode
[ 3479.323580][T12049] ip6gretap0: entered promiscuous mode
[ 3479.329687][T12049] ip6gretap0: left allmulticast mode
[ 3479.339241][T12049] bridge0: entered promiscuous mode
[ 3479.344594][T12049] bridge0: left allmulticast mode
[ 3479.352025][T12049] vcan0: entered promiscuous mode
[ 3479.357219][T12049] vcan0: left allmulticast mode
[ 3479.364120][T12049] bond0: entered promiscuous mode
[ 3479.370569][T12049] bond_slave_0: entered promiscuous mode
[ 3479.378065][T12049] bond_slave_1: entered promiscuous mode
[ 3479.385836][T12049] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode
[ 3479.393614][T12049] bond0: left allmulticast mode
[ 3479.402765][T12049] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3479.413385][T12049] team0: entered promiscuous mode
[ 3479.419698][T12049] team_slave_0: entered promiscuous mode
[ 3479.425733][T12049] team_slave_1: entered promiscuous mode
[ 3479.442169][T12049] team0: left allmulticast mode
[ 3479.448709][T12049] 8021q: adding VLAN 0 to HW filter on device team0
[ 3479.456491][T12049] dummy0: entered promiscuous mode
[ 3479.462156][T12049] dummy0: left allmulticast mode
[ 3479.470903][T12049] nlmon0: entered promiscuous mode
[ 3479.476681][T12049] nlmon0: left allmulticast mode
[ 3479.589247][T12049] caif0: entered promiscuous mode
[ 3479.602129][T12049] caif0: left allmulticast mode
[ 3479.609869][T12059] netlink: 'syz.2.10027': attribute type 4 has an invalid length.
[ 3479.617974][T12059] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10027'.
[ 3479.627565][T12049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 3479.666105][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3479.675168][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3480.241803][T12066] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3480.247973][T12066] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3480.271736][T12066] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3480.299137][T12066] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3480.342394][T12066] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3480.532394][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3480.556881][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3480.906904][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10032'.
[ 3480.919289][T12083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10032'.
[ 3480.994777][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10034'.
[ 3481.624862][T12091] lo: left promiscuous mode
[ 3481.628453][ T9696] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 3481.629517][T12091] lo: entered allmulticast mode
[ 3481.663012][T12091] tunl0: left promiscuous mode
[ 3481.675039][T12091] tunl0: entered allmulticast mode
[ 3481.691412][T12091] gre0: left promiscuous mode
[ 3481.705491][T12091] gre0: entered allmulticast mode
[ 3481.758305][T12091] gretap0: left promiscuous mode
[ 3481.763361][T12091] gretap0: entered allmulticast mode
[ 3481.917749][T12091] erspan0: left promiscuous mode
[ 3481.948453][ T9696] usb 1-1: Using ep0 maxpacket: 16
[ 3481.992815][ T9696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 3482.056563][T12091] erspan0: entered allmulticast mode
[ 3482.068381][ T9696] usb 1-1: config 0 has no interface number 0
[ 3482.089052][T12091] ip_vti0: left promiscuous mode
[ 3482.130372][ T9696] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3482.143484][T12091] ip_vti0: entered allmulticast mode
[ 3482.163032][ T7988] Bluetooth: hci4: command 0x0405 tx timeout
[ 3482.192199][ T9696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3482.210477][T12091] ip6_vti0: left promiscuous mode
[ 3482.235172][T12091] ip6_vti0: entered allmulticast mode
[ 3482.244365][ T9696] usb 1-1: Product: syz
[ 3482.248963][ T9696] usb 1-1: Manufacturer: syz
[ 3482.272650][T12091] sit0: left promiscuous mode
[ 3482.277435][ T9696] usb 1-1: SerialNumber: syz
[ 3482.309269][T12091] sit0: entered allmulticast mode
[ 3482.320263][ T9696] usb 1-1: config 0 descriptor??
[ 3482.321225][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3482.325459][T25820] Bluetooth: hci0: command 0x0405 tx timeout
[ 3482.325506][T25820] Bluetooth: hci5: command 0x040f tx timeout
[ 3482.375390][ T9696] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3482.385299][T12091] ip6tnl0: left promiscuous mode
[ 3482.403868][T12091] ip6tnl0: entered allmulticast mode
[ 3482.411679][T25820] Bluetooth: hci1: command 0x040f tx timeout
[ 3482.457439][T12091] ip6gre0: left promiscuous mode
[ 3482.589962][T12091] ip6gre0: entered allmulticast mode
[ 3482.625702][T12091] syz_tun: left promiscuous mode
[ 3482.636117][T12091] syz_tun: entered allmulticast mode
[ 3482.646979][T12091] ip6gretap0: left promiscuous mode
[ 3482.708584][T12091] ip6gretap0: entered allmulticast mode
[ 3482.789007][T12091] bridge0: left promiscuous mode
[ 3482.797243][T12091] bridge0: entered allmulticast mode
[ 3482.816724][T12091] vcan0: left promiscuous mode
[ 3482.822826][T12091] vcan0: entered allmulticast mode
[ 3482.869597][T12091] bond0: left promiscuous mode
[ 3482.877596][T12091] bond_slave_0: left promiscuous mode
[ 3482.886963][T12091] bond_slave_1: left promiscuous mode
[ 3482.898934][T12091] mac80211_hwsim hwsim46 wlan1: left promiscuous mode
[ 3482.919760][T12091] bond0: entered allmulticast mode
[ 3482.949315][T12091] team0: left promiscuous mode
[ 3482.963885][T12091] team_slave_0: left promiscuous mode
[ 3482.977710][T12091] team_slave_1: left promiscuous mode
[ 3483.309606][T12091] team0: entered allmulticast mode
[ 3483.331009][T12091] dummy0: left promiscuous mode
[ 3483.346130][T12091] dummy0: entered allmulticast mode
[ 3483.464388][T12091] nlmon0: left promiscuous mode
[ 3483.472924][T12091] nlmon0: entered allmulticast mode
[ 3483.482691][T12091] caif0: left promiscuous mode
[ 3483.487517][T12091] caif0: entered allmulticast mode
[ 3483.790211][ T9696] gspca_spca1528: reg_w err -110
[ 3483.796584][ T9696] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[ 3483.975409][ T9698] usb 1-1: USB disconnect, device number 30
[ 3484.082802][T12115] netlink: 'syz.5.10043': attribute type 4 has an invalid length.
[ 3484.098252][T12115] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10043'.
[ 3484.388284][T15798] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[ 3484.551766][T15798] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 3484.566561][T15798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3484.694016][T15798] usb 6-1: config 0 has no interface number 0
[ 3484.743348][T15798] usb 6-1: config 0 interface 255 has no altsetting 0
[ 3484.792846][T15798] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[ 3484.814622][T15798] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3484.857545][T15798] usb 6-1: Product: syz
[ 3484.870185][T15798] usb 6-1: SerialNumber: syz
[ 3484.922415][T15798] usb 6-1: config 0 descriptor??
[ 3485.138546][T15798] usb 6-1: USB disconnect, device number 35
[ 3485.148723][ T9698] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 3485.350746][ T9698] usb 1-1: config 0 has an invalid interface number: 241 but max is 0
[ 3485.368400][ T9698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3485.414820][ T9698] usb 1-1: config 0 has no interface number 0
[ 3485.424686][ T9698] usb 1-1: config 0 interface 241 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 3485.503927][ T9698] usb 1-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60
[ 3485.532017][ T9698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3485.562960][ T9698] usb 1-1: Product: syz
[ 3485.567831][ T9698] usb 1-1: Manufacturer: syz
[ 3485.573597][ T9698] usb 1-1: SerialNumber: syz
[ 3485.585747][ T9698] usb 1-1: config 0 descriptor??
[ 3485.595129][ T9698] usb 1-1: bad CDC descriptors
[ 3485.849716][ T9696] usb 1-1: USB disconnect, device number 31
[ 3485.912014][T12130] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3485.945541][T12130] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3485.952063][T12130] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3485.963231][T12130] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3485.972227][T12130] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3486.008857][T12137] macsec1: entered promiscuous mode
[ 3486.027059][T12137] dummy0: entered promiscuous mode
[ 3486.039000][T12137] dummy0: left promiscuous mode
[ 3486.231324][T15798] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 3486.320108][ T9698] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 3486.335720][T12144] ALSA: mixer_oss: invalid OSS volume ''
[ 3486.388443][T15798] usb 2-1: Using ep0 maxpacket: 32
[ 3486.396442][T15798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3486.411491][T15798] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3486.422206][T15798] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3486.431817][T15798] usb 2-1: Product: syz
[ 3486.436588][T15798] usb 2-1: Manufacturer: syz
[ 3486.441859][T15798] usb 2-1: SerialNumber: syz
[ 3486.458712][T15798] usb 2-1: config 0 descriptor??
[ 3486.482336][T12135] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 3486.520688][ T9698] usb 6-1: Using ep0 maxpacket: 32
[ 3486.536665][ T9698] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3486.557777][ T9698] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3486.570296][ T9698] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3486.583362][ T9698] usb 6-1: Product: syz
[ 3486.595615][ T9698] usb 6-1: Manufacturer: syz
[ 3486.599032][T12146] gretap1: entered allmulticast mode
[ 3486.623090][ T9698] usb 6-1: SerialNumber: syz
[ 3486.634638][ T9698] usb 6-1: config 0 descriptor??
[ 3486.661001][T12139] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 3486.716951][ T9698] chaoskey 6-1:0.0: Unable to register with hwrng
[ 3486.773569][T15798] usb 2-1: USB disconnect, device number 22
[ 3486.928489][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10050'.
[ 3487.060495][T15798] usb 6-1: USB disconnect, device number 36
[ 3487.920604][T25820] Bluetooth: hci4: command 0x0405 tx timeout
[ 3488.008688][T15798] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 3488.024622][T25820] Bluetooth: hci1: command 0x040f tx timeout
[ 3488.025779][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3488.036481][T25820] Bluetooth: hci0: command 0x0405 tx timeout
[ 3488.036997][ T5847] Bluetooth: hci5: command 0x040f tx timeout
[ 3488.281297][T15798] usb 2-1: Using ep0 maxpacket: 16
[ 3488.359586][T15798] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 3488.367951][T15798] usb 2-1: config 0 has no interface number 0
[ 3488.392800][T15798] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3488.412591][T15798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3488.434107][T15798] usb 2-1: Product: syz
[ 3488.445106][T15798] usb 2-1: Manufacturer: syz
[ 3488.456645][T15798] usb 2-1: SerialNumber: syz
[ 3488.509045][T15798] usb 2-1: config 0 descriptor??
[ 3488.593054][T15798] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3488.873478][T12176] netlink: 'syz.0.10060': attribute type 4 has an invalid length.
[ 3488.885769][T12176] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10060'.
[ 3489.168362][ T9696] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[ 3489.331562][ T9696] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 3489.375470][ T9696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3489.418888][ T9696] usb 1-1: config 0 has no interface number 0
[ 3489.425544][ T9696] usb 1-1: config 0 interface 255 has no altsetting 0
[ 3489.663451][ T9696] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[ 3489.678325][ T9696] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3489.686610][ T9696] usb 1-1: Product: syz
[ 3489.723230][ T9696] usb 1-1: SerialNumber: syz
[ 3489.968560][T15798] gspca_spca1528: reg_w err -110
[ 3489.969256][ T9696] usb 1-1: config 0 descriptor??
[ 3489.973607][T15798] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[ 3490.267661][T15798] usb 1-1: USB disconnect, device number 32
[ 3490.500039][T15798] usb 2-1: USB disconnect, device number 23
[ 3490.829334][T12187] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3490.836019][T12187] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3490.842778][T12187] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3490.850518][T12187] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3490.856979][T12187] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3491.198624][ T9696] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 3491.358315][ T9696] usb 4-1: Using ep0 maxpacket: 32
[ 3491.376288][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10070'.
[ 3491.394512][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10070'.
[ 3491.425315][T15798] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[ 3491.481419][ T9696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3491.527217][ T9696] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3491.545439][ T9696] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3491.566494][ T9696] usb 4-1: Product: syz
[ 3491.576338][ T9696] usb 4-1: Manufacturer: syz
[ 3491.591155][ T9696] usb 4-1: SerialNumber: syz
[ 3491.608131][ T9696] usb 4-1: config 0 descriptor??
[ 3491.617946][T12198] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 3491.671491][T15798] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 3491.690039][T15798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3491.712572][T15798] usb 2-1: Product: syz
[ 3491.724593][T15798] usb 2-1: Manufacturer: syz
[ 3491.736077][T15798] usb 2-1: SerialNumber: syz
[ 3491.755514][T15798] usb 2-1: config 0 descriptor??
[ 3492.687019][T15798] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3492.704057][ T9696] usb 4-1: USB disconnect, device number 59
[ 3492.803116][ T7988] Bluetooth: hci4: command 0x0405 tx timeout
[ 3492.878524][ T7988] Bluetooth: hci1: command 0x040f tx timeout
[ 3492.884624][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3492.891512][ T5847] Bluetooth: hci0: command 0x0405 tx timeout
[ 3492.891583][T25820] Bluetooth: hci5: command 0x040f tx timeout
[ 3493.287247][T12220] FAULT_INJECTION: forcing a failure.
[ 3493.287247][T12220] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3493.304200][T12220] CPU: 1 UID: 0 PID: 12220 Comm: syz.0.10075 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3493.304231][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3493.304243][T12220] Call Trace:
[ 3493.304252][T12220]  <TASK>
[ 3493.304261][T12220]  dump_stack_lvl+0x189/0x250
[ 3493.304288][T12220]  ? __pfx____ratelimit+0x10/0x10
[ 3493.304308][T12220]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3493.304330][T12220]  ? __pfx__printk+0x10/0x10
[ 3493.304355][T12220]  ? fs_reclaim_acquire+0x7d/0x100
[ 3493.304384][T12220]  should_fail_ex+0x414/0x560
[ 3493.304409][T12220]  prepare_alloc_pages+0x213/0x610
[ 3493.304436][T12220]  __alloc_frozen_pages_noprof+0x123/0x370
[ 3493.304461][T12220]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3493.304491][T12220]  ? policy_nodemask+0x27c/0x720
[ 3493.304513][T12220]  ? __lock_acquire+0xab9/0xd20
[ 3493.304537][T12220]  alloc_pages_mpol+0x232/0x4a0
[ 3493.304568][T12220]  vma_alloc_folio_noprof+0xe4/0x200
[ 3493.304597][T12220]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 3493.304636][T12220]  folio_prealloc+0x30/0x180
[ 3493.304663][T12220]  __handle_mm_fault+0x2c88/0x5620
[ 3493.304706][T12220]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3493.304750][T12220]  ? find_vma+0xe7/0x160
[ 3493.304774][T12220]  ? __pfx_find_vma+0x10/0x10
[ 3493.304799][T12220]  handle_mm_fault+0x40a/0x8e0
[ 3493.304834][T12220]  do_user_addr_fault+0x764/0x1390
[ 3493.304868][T12220]  exc_page_fault+0x76/0xf0
[ 3493.304891][T12220]  asm_exc_page_fault+0x26/0x30
[ 3493.304909][T12220] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 3493.304933][T12220] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 3493.304949][T12220] RSP: 0018:ffffc9000c6874b8 EFLAGS: 00050206
[ 3493.304966][T12220] RAX: ffffffff84bde901 RBX: ffff888081d0c000 RCX: 00000000000005dc
[ 3493.304980][T12220] RDX: 0000000000000000 RSI: ffff888081d0c8c0 RDI: 0000000080003000
[ 3493.304993][T12220] RBP: ffffc9000c687610 R08: ffff888081d0ce9b R09: 1ffff110103a19d3
[ 3493.305006][T12220] R10: dffffc0000000000 R11: ffffed10103a19d4 R12: dffffc0000000000
[ 3493.305020][T12220] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e9c
[ 3493.305041][T12220]  ? _copy_to_iter+0x411/0x16f0
[ 3493.305070][T12220]  _copy_to_iter+0x484/0x16f0
[ 3493.305103][T12220]  ? __pfx__copy_to_iter+0x10/0x10
[ 3493.305128][T12220]  ? __skb_try_recv_from_queue+0x58f/0x730
[ 3493.305154][T12220]  ? __skb_try_recv_datagram+0x3da/0x4e0
[ 3493.305178][T12220]  __skb_datagram_iter+0xf8/0x990
[ 3493.305198][T12220]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 3493.305227][T12220]  skb_copy_datagram_iter+0xc5/0x230
[ 3493.305251][T12220]  netlink_recvmsg+0x2ab/0xa30
[ 3493.305285][T12220]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 3493.305315][T12220]  ? aa_sock_msg_perm+0x94/0x160
[ 3493.305337][T12220]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 3493.305356][T12220]  ? security_socket_recvmsg+0x7e/0x2e0
[ 3493.305380][T12220]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 3493.305404][T12220]  sock_recvmsg+0x22c/0x270
[ 3493.305429][T12220]  ____sys_recvmsg+0x1c9/0x460
[ 3493.305465][T12220]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 3493.305488][T12220]  ? get_compat_msghdr+0x37e/0x4a0
[ 3493.305538][T12220]  ___sys_recvmsg+0x1b5/0x510
[ 3493.305570][T12220]  ? __pfx____sys_recvmsg+0x10/0x10
[ 3493.305623][T12220]  ? __fget_files+0x3a0/0x420
[ 3493.305652][T12220]  do_recvmmsg+0x36a/0x770
[ 3493.305680][T12220]  ? __pfx_do_recvmmsg+0x10/0x10
[ 3493.305710][T12220]  ? __pfx_vfs_write+0x10/0x10
[ 3493.305751][T12220]  __sys_recvmmsg+0x19d/0x280
[ 3493.305770][T12220]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 3493.305785][T12220]  ? ksys_write+0x22a/0x250
[ 3493.305818][T12220]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 3493.305847][T12220]  __do_fast_syscall_32+0xb6/0x2b0
[ 3493.305867][T12220]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3493.305888][T12220]  do_fast_syscall_32+0x34/0x80
[ 3493.305908][T12220]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3493.305929][T12220] RIP: 0023:0xf712e539
[ 3493.305945][T12220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3493.305961][T12220] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 3493.305978][T12220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f80
[ 3493.305990][T12220] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 0000000000000000
[ 3493.306001][T12220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3493.306012][T12220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3493.306021][T12220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3493.306048][T12220]  </TASK>
[ 3494.332293][T12235] netlink: 'syz.5.10079': attribute type 4 has an invalid length.
[ 3494.343925][T12235] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10079'.
[ 3494.443337][T12237] macsec1: entered promiscuous mode
[ 3494.649841][T12237] dummy0: entered promiscuous mode
[ 3494.708521][T12237] dummy0: left promiscuous mode
[ 3495.128302][ T5930] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[ 3495.311717][ T5930] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 3495.340646][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3495.398296][ T5930] usb 6-1: config 0 has no interface number 0
[ 3495.445050][ T5930] usb 6-1: config 0 interface 255 has no altsetting 0
[ 3495.484692][ T5930] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[ 3495.507956][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3495.535312][ T5930] usb 6-1: Product: syz
[ 3495.548263][ T5930] usb 6-1: SerialNumber: syz
[ 3495.569453][ T5930] usb 6-1: config 0 descriptor??
[ 3495.654889][T12242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3495.740078][T15798] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3495.745746][T12242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3495.774490][T15798] usb 2-1: USB disconnect, device number 24
[ 3495.829244][ T5930] usb 6-1: USB disconnect, device number 37
[ 3496.158370][T15581] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 3496.318443][T15581] usb 1-1: Using ep0 maxpacket: 16
[ 3496.329189][T15581] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 3496.390475][T15581] usb 1-1: config 0 has no interface number 0
[ 3496.434270][T15581] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3496.463499][T15581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3496.474133][T15581] usb 1-1: Product: syz
[ 3496.515182][T15581] usb 1-1: Manufacturer: syz
[ 3496.535881][T15581] usb 1-1: SerialNumber: syz
[ 3496.959410][T15581] usb 1-1: config 0 descriptor??
[ 3496.976881][T15581] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3497.008504][ T9696] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 3497.381211][ T9696] usb 6-1: Using ep0 maxpacket: 16
[ 3497.389281][ T9696] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[ 3497.419405][ T9696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 3497.464408][ T9696] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 3497.474594][ T9696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3497.485887][ T9696] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3497.528436][ T9696] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 3497.560042][ T9696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3497.568936][ T9696] usb 6-1: Product: syz
[ 3497.573229][ T9696] usb 6-1: Manufacturer: syz
[ 3497.578872][ T9696] usb 6-1: SerialNumber: syz
[ 3497.606162][ T9696] usb 6-1: config 0 descriptor??
[ 3497.617953][ T9696] port100 6-1:0.0: NFC: Could not get supported command types
[ 3497.888304][ T5930] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 3497.905660][T15798] usb 6-1: USB disconnect, device number 38
[ 3497.924567][T12262] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3497.934104][T12262] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3497.944135][T12262] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3497.952779][T12262] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3497.961244][T12262] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3498.068289][ T5930] usb 4-1: Using ep0 maxpacket: 32
[ 3498.075355][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3498.088451][ T5930] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3498.097667][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3498.106370][ T5930] usb 4-1: Product: syz
[ 3498.111229][ T5930] usb 4-1: Manufacturer: syz
[ 3498.115871][ T5930] usb 4-1: SerialNumber: syz
[ 3498.124106][ T5930] usb 4-1: config 0 descriptor??
[ 3498.130084][T12260] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 3498.511970][T15581] gspca_spca1528: reg_w err -110
[ 3498.517268][T15581] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[ 3498.648758][ T9696] usb 1-1: USB disconnect, device number 33
[ 3499.332607][T12281] ALSA: mixer_oss: invalid OSS volume ''
[ 3499.821764][T25820] Bluetooth: hci4: command 0x0405 tx timeout
[ 3499.998500][T25820] Bluetooth: hci1: command 0x040f tx timeout
[ 3500.004622][T25820] Bluetooth: hci2: command 0x040f tx timeout
[ 3500.011018][T25820] Bluetooth: hci0: command 0x0405 tx timeout
[ 3500.017088][T25820] Bluetooth: hci5: command 0x040f tx timeout
[ 3500.255497][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10093'.
[ 3500.266837][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10093'.
[ 3500.702990][T12298] tipc: Started in network mode
[ 3500.729345][   T30] audit: type=1326 audit(1752858135.153:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3500.737863][T12298] tipc: Node identity 86ed783dece8, cluster identity 4711
[ 3500.813428][   T30] audit: type=1326 audit(1752858135.173:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3500.813491][T12298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3500.843214][ T9696] usb 4-1: USB disconnect, device number 60
[ 3500.902574][   T30] audit: type=1326 audit(1752858135.203:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3500.944749][T12303] syzkaller0: entered promiscuous mode
[ 3500.994102][T12303] syzkaller0: entered allmulticast mode
[ 3501.021039][   T30] audit: type=1326 audit(1752858135.203:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3501.050641][   T30] audit: type=1326 audit(1752858135.203:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3501.077354][   T30] audit: type=1326 audit(1752858135.203:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3501.108967][   T30] audit: type=1326 audit(1752858135.203:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000
[ 3501.146566][   T30] audit: type=1326 audit(1752858135.443:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.5.10094" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x0
[ 3501.297234][T12302] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3501.323493][T12316] fuse: Bad value for 'fd'
[ 3501.328817][T12302] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3501.351076][T12302] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3501.381281][T12302] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3501.395998][T12302] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3501.477491][T12297] tipc: Resetting bearer <eth:syzkaller0>
[ 3501.574049][T12297] tipc: Disabling bearer <eth:syzkaller0>
[ 3501.834373][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10099'.
[ 3501.851510][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10099'.
[ 3502.172899][T12323] macsec1: entered promiscuous mode
[ 3502.203071][T12323] dummy0: entered promiscuous mode
[ 3502.226288][T12323] dummy0: left promiscuous mode
[ 3502.469473][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10102'.
[ 3502.530088][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3502.594725][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3502.736153][T15581] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 3502.861783][T12331] FAULT_INJECTION: forcing a failure.
[ 3502.861783][T12331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3502.908000][T12331] CPU: 1 UID: 0 PID: 12331 Comm: syz.5.10103 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3502.908029][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3502.908041][T12331] Call Trace:
[ 3502.908049][T12331]  <TASK>
[ 3502.908058][T12331]  dump_stack_lvl+0x189/0x250
[ 3502.908078][T12331]  ? __pfx____ratelimit+0x10/0x10
[ 3502.908090][T12331]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3502.908101][T12331]  ? __pfx__printk+0x10/0x10
[ 3502.908124][T12331]  should_fail_ex+0x414/0x560
[ 3502.908148][T12331]  _copy_to_user+0x31/0xb0
[ 3502.908184][T12331]  simple_read_from_buffer+0xe1/0x170
[ 3502.908212][T12331]  proc_fail_nth_read+0x1df/0x250
[ 3502.908233][T12331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3502.908253][T12331]  ? rw_verify_area+0x258/0x650
[ 3502.908274][T12331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3502.908292][T12331]  vfs_read+0x200/0x980
[ 3502.908320][T12331]  ? __pfx___mutex_lock+0x10/0x10
[ 3502.908340][T12331]  ? __pfx_vfs_read+0x10/0x10
[ 3502.908363][T12331]  ? __fget_files+0x2a/0x420
[ 3502.908377][T12331]  ? __fget_files+0x3a0/0x420
[ 3502.908385][T12331]  ? __fget_files+0x2a/0x420
[ 3502.908399][T12331]  ksys_read+0x145/0x250
[ 3502.908413][T12331]  ? __pfx_ksys_read+0x10/0x10
[ 3502.908439][T12331]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 3502.908461][T12331]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3502.908483][T12331]  __do_fast_syscall_32+0xb6/0x2b0
[ 3502.908504][T12331]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3502.908523][T12331]  do_fast_syscall_32+0x34/0x80
[ 3502.908534][T12331]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3502.908546][T12331] RIP: 0023:0xf7f15539
[ 3502.908557][T12331] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3502.908566][T12331] RSP: 002b:00000000f5036590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 3502.908581][T12331] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5036620
[ 3502.908594][T12331] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000
[ 3502.908605][T12331] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 3502.908616][T12331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3502.908626][T12331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3502.908656][T12331]  </TASK>
[ 3503.148013][T15581] usb 4-1: Using ep0 maxpacket: 32
[ 3503.154494][ T9978] Bluetooth: hci4: command 0x0405 tx timeout
[ 3503.162095][T15581] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 3503.170415][T15581] usb 4-1: config 0 has no interface number 0
[ 3503.176574][T15581] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 3503.240456][T15581] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 3503.249637][T15581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3503.257655][T15581] usb 4-1: Product: syz
[ 3503.261894][T15581] usb 4-1: Manufacturer: syz
[ 3503.266512][T15581] usb 4-1: SerialNumber: syz
[ 3503.282793][T15581] usb 4-1: config 0 descriptor??
[ 3503.297859][T15581] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 3503.307693][T15581] em28xx 4-1:0.132: Video interface 132 found:
[ 3503.358783][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3503.364909][ T9978] Bluetooth: hci5: command 0x040f tx timeout
[ 3503.440620][T25820] Bluetooth: hci1: command 0x040f tx timeout
[ 3503.440629][ T9978] Bluetooth: hci2: command 0x040f tx timeout
[ 3503.668348][ T5930] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 3503.694310][T15581] em28xx 4-1:0.132: chip ID is em2840
[ 3503.818314][ T5930] usb 1-1: Using ep0 maxpacket: 32
[ 3503.886936][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3503.906005][T12325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3503.921854][T12325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3503.949863][ T5930] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3503.970643][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3503.984905][ T5930] usb 1-1: Product: syz
[ 3503.991240][ T5930] usb 1-1: Manufacturer: syz
[ 3503.995872][ T5930] usb 1-1: SerialNumber: syz
[ 3504.027315][T15581] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 3504.048467][ T5930] usb 1-1: config 0 descriptor??
[ 3504.054297][T12342] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 3504.055484][T15581] em28xx 4-1:0.132: board has no eeprom
[ 3504.085804][T25820] Bluetooth: hci1: SCO packet for unknown connection handle 200
[ 3504.138413][T15581] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 3504.158638][T15581] em28xx 4-1:0.132: analog set to bulk mode.
[ 3504.187234][ T5930] em28xx 4-1:0.132: Registering V4L2 extension
[ 3504.220400][T15581] usb 4-1: USB disconnect, device number 61
[ 3504.252210][T15581] em28xx 4-1:0.132: Disconnecting em28xx
[ 3504.624459][ T5930] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 3504.633860][ T5930] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 3504.677248][ T5930] em28xx 4-1:0.132: No AC97 audio processor
[ 3504.721973][ T5930] usb 4-1: Decoder not found
[ 3504.727036][ T5930] em28xx 4-1:0.132: failed to create media graph
[ 3504.744071][ T5930] em28xx 4-1:0.132: V4L2 device video103 deregistered
[ 3504.760934][ T5930] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 3504.772226][T15581] em28xx 4-1:0.132: Closing input extension
[ 3504.802656][T15581] em28xx 4-1:0.132: Freeing device
[ 3505.102815][T12362] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3505.109364][T12362] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3505.116937][T12362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3505.129894][T12362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3505.152524][T12362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3505.451908][T12372] ptrace attach of "./syz-executor exec"[8172] was attempted by "./syz-executor exec"[12372]
[ 3505.712602][T12375] FAULT_INJECTION: forcing a failure.
[ 3505.712602][T12375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3505.814584][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz.5.10114 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3505.814613][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3505.814625][T12375] Call Trace:
[ 3505.814633][T12375]  <TASK>
[ 3505.814640][T12375]  dump_stack_lvl+0x189/0x250
[ 3505.814657][T12375]  ? __pfx____ratelimit+0x10/0x10
[ 3505.814669][T12375]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3505.814680][T12375]  ? __pfx__printk+0x10/0x10
[ 3505.814697][T12375]  ? __might_fault+0xb0/0x130
[ 3505.814732][T12375]  should_fail_ex+0x414/0x560
[ 3505.814757][T12375]  _copy_from_user+0x2d/0xb0
[ 3505.814782][T12375]  ip6_tnl_siocdevprivate+0x1b6/0xad0
[ 3505.814803][T12375]  ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10
[ 3505.814814][T12375]  ? rcu_is_watching+0x15/0xb0
[ 3505.814836][T12375]  ? full_name_hash+0x92/0xe0
[ 3505.814851][T12375]  ? netdev_name_node_lookup+0xdf/0x120
[ 3505.814887][T12375]  dev_ifsioc+0xb54/0xf00
[ 3505.814919][T12375]  dev_ioctl+0x84c/0x1150
[ 3505.814943][T12375]  sock_ioctl+0x719/0x790
[ 3505.814957][T12375]  ? __pfx_sock_ioctl+0x10/0x10
[ 3505.814976][T12375]  compat_sock_ioctl+0x285/0xc80
[ 3505.814990][T12375]  ? __pfx_compat_sock_ioctl+0x10/0x10
[ 3505.815006][T12375]  ? __fget_files+0x3a0/0x420
[ 3505.815023][T12375]  ? __fget_files+0x2a/0x420
[ 3505.815043][T12375]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 3505.815069][T12375]  __ia32_compat_sys_ioctl+0x540/0x840
[ 3505.815095][T12375]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 3505.815108][T12375]  ? __fget_files+0x3a0/0x420
[ 3505.815121][T12375]  ? fput+0xa0/0xd0
[ 3505.815135][T12375]  ? ksys_write+0x22a/0x250
[ 3505.815154][T12375]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 3505.815175][T12375]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3505.815197][T12375]  __do_fast_syscall_32+0xb6/0x2b0
[ 3505.815219][T12375]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3505.815241][T12375]  do_fast_syscall_32+0x34/0x80
[ 3505.815254][T12375]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3505.815267][T12375] RIP: 0023:0xf7f15539
[ 3505.815277][T12375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3505.815286][T12375] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 3505.815298][T12375] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000089f3
[ 3505.815310][T12375] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 3505.815321][T12375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3505.815332][T12375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3505.815343][T12375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3505.815373][T12375]  </TASK>
[ 3506.095876][T12368] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3506.107730][T12368] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3506.124471][T12368] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3506.131455][T12368] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3506.160111][T12368] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3506.489850][T15581] usb 1-1: USB disconnect, device number 34
[ 3506.530221][T12381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10115'.
[ 3506.850699][T12391] fuse: Unknown parameter ''
[ 3506.857226][T12391] fuse: blksize only supported for fuseblk
[ 3506.949423][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10117'.
[ 3506.964184][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10117'.
[ 3507.061296][T12398] FAULT_INJECTION: forcing a failure.
[ 3507.061296][T12398] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3507.074787][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.1.10120 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3507.074809][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3507.074820][T12398] Call Trace:
[ 3507.074830][T12398]  <TASK>
[ 3507.074839][T12398]  dump_stack_lvl+0x189/0x250
[ 3507.074869][T12398]  ? __pfx____ratelimit+0x10/0x10
[ 3507.074889][T12398]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3507.074911][T12398]  ? __pfx__printk+0x10/0x10
[ 3507.074936][T12398]  ? fs_reclaim_acquire+0x7d/0x100
[ 3507.074963][T12398]  should_fail_ex+0x414/0x560
[ 3507.074988][T12398]  prepare_alloc_pages+0x213/0x610
[ 3507.075014][T12398]  __alloc_frozen_pages_noprof+0x123/0x370
[ 3507.075038][T12398]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3507.075074][T12398]  alloc_pages_bulk_noprof+0x560/0x710
[ 3507.075102][T12398]  ? rcu_is_watching+0x15/0xb0
[ 3507.075123][T12398]  ? trace_kmalloc+0x1f/0xd0
[ 3507.075144][T12398]  ? __kmalloc_noprof+0x29b/0x4f0
[ 3507.075166][T12398]  ? copy_splice_read+0x143/0x9b0
[ 3507.075196][T12398]  copy_splice_read+0x173/0x9b0
[ 3507.075231][T12398]  ? __pfx_copy_splice_read+0x10/0x10
[ 3507.075254][T12398]  ? look_up_lock_class+0x74/0x170
[ 3507.075275][T12398]  ? register_lock_class+0x51/0x320
[ 3507.075298][T12398]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 3507.075329][T12398]  ? alloc_pipe_info+0x374/0x4d0
[ 3507.075354][T12398]  ? __pfx_shmem_file_splice_read+0x10/0x10
[ 3507.075446][T12398]  splice_direct_to_actor+0x4d0/0xcc0
[ 3507.075490][T12398]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3507.075515][T12398]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3507.075541][T12398]  ? __pfx_aa_file_perm+0x10/0x10
[ 3507.075569][T12398]  do_splice_direct+0x181/0x270
[ 3507.075597][T12398]  ? __pfx_do_splice_direct+0x10/0x10
[ 3507.075622][T12398]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3507.075642][T12398]  ? bpf_lsm_file_permission+0x9/0x20
[ 3507.075662][T12398]  ? security_file_permission+0x75/0x290
[ 3507.075689][T12398]  ? rw_verify_area+0x258/0x650
[ 3507.075715][T12398]  do_sendfile+0x4da/0x7e0
[ 3507.075744][T12398]  ? __pfx_do_sendfile+0x10/0x10
[ 3507.075767][T12398]  ? __ia32_compat_sys_sendfile+0x180/0x1d0
[ 3507.075790][T12398]  __do_fast_syscall_32+0xb6/0x2b0
[ 3507.075812][T12398]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3507.075833][T12398]  do_fast_syscall_32+0x34/0x80
[ 3507.075852][T12398]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3507.075873][T12398] RIP: 0023:0xf7f51539
[ 3507.075890][T12398] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3507.075906][T12398] RSP: 002b:00000000f503455c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb
[ 3507.075926][T12398] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000000a
[ 3507.075938][T12398] RDX: 0000000000000000 RSI: 000000001d00c0d1 RDI: 0000000000000000
[ 3507.075950][T12398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3507.075960][T12398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3507.075971][T12398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3507.075998][T12398]  </TASK>
[ 3507.578313][T25820] Bluetooth: hci4: command 0x0405 tx timeout
[ 3508.168653][T25820] Bluetooth: hci2: command 0x040f tx timeout
[ 3508.168673][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3508.180805][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3508.227270][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10122'.
[ 3508.238409][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3508.498409][T15581] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 3508.698381][T15581] usb 2-1: Using ep0 maxpacket: 16
[ 3508.715610][T15581] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 3508.749442][T15581] usb 2-1: config 0 has no interface number 0
[ 3508.867478][T15581] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3508.877083][T15581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3508.895586][T15581] usb 2-1: Product: syz
[ 3508.905674][T15581] usb 2-1: Manufacturer: syz
[ 3508.929885][T15581] usb 2-1: SerialNumber: syz
[ 3508.954854][T15581] usb 2-1: config 0 descriptor??
[ 3508.974523][T15581] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3509.248290][ T5930] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 3509.424397][ T5930] usb 4-1: Using ep0 maxpacket: 8
[ 3509.456980][ T5930] usb 4-1: config 64 has an invalid interface number: 19 but max is 0
[ 3509.480199][ T5930] usb 4-1: config 64 has no interface number 0
[ 3509.537784][ T5930] usb 4-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3509.572506][ T5930] usb 4-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3509.606464][ T5930] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[ 3509.624323][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3509.646027][ T5930] usb 4-1: probing VID:PID(2201:012C)   
[ 3509.676669][ T5930] usb 4-1: vub300 testing BULK OUT EndPoint(0) 02
[ 3509.724166][ T5930] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[ 3509.781061][ T5930] vub300 4-1:64.19: probe with driver vub300 failed with error -22
[ 3509.861833][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10126'.
[ 3509.994934][ T9696] usb 4-1: USB disconnect, device number 62
[ 3510.319000][ T9978] Bluetooth: hci1: command 0x040f tx timeout
[ 3510.328484][T15581] gspca_spca1528: reg_w err -110
[ 3510.333691][T15581] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[ 3510.588915][ T9696] usb 2-1: USB disconnect, device number 25
[ 3510.964505][T12431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10130'.
[ 3512.098535][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 3512.104958][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 3512.817433][T12456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3512.938694][T12456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3513.616409][T15581] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 3513.667161][T12477] netlink: 344 bytes leftover after parsing attributes in process `syz.5.10147'.
[ 3513.788638][T15581] usb 2-1: Using ep0 maxpacket: 8
[ 3513.815077][T15581] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3513.838413][T15581] usb 2-1: too many configurations: 255, using maximum allowed: 8
[ 3513.888352][T15581] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 3513.921000][T15581] usb 2-1: can't read configurations, error -71
[ 3514.658509][ T9696] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 3514.820957][ T9696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 3514.839668][ T9696] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 3514.849969][ T9696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 3514.861524][ T9696] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 3514.871959][ T9696] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 3514.883291][ T9696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3514.897329][ T9696] usb 6-1: config 0 descriptor??
[ 3514.915511][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3514.934220][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3514.968435][T15581] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 3515.118864][ T9696] hdpvr 6-1:0.0: firmware version 0x0 dated 
[ 3515.136642][T15581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3515.151689][ T9696] hdpvr 6-1:0.0: untested firmware, the driver might not work.
[ 3515.153637][T15581] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3515.172793][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10171'.
[ 3515.190464][T15581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3515.225464][T15581] usb 2-1: config 0 descriptor??
[ 3515.252253][T15581] pwc: Askey VC010 type 2 USB webcam detected.
[ 3515.515946][T12545] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10176'.
[ 3515.583799][ T9696] hdpvr 6-1:0.0: Could not setup controls
[ 3515.599174][ T9696] hdpvr 6-1:0.0: registering videodev failed
[ 3515.623095][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3515.631701][ T9696] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71
[ 3515.636663][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3515.654514][ T9696] usb 6-1: USB disconnect, device number 39
[ 3515.661225][T15581] pwc: recv_control_msg error -32 req 02 val 2b00
[ 3515.669554][ T9698] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[ 3515.673873][T15581] pwc: recv_control_msg error -32 req 02 val 2700
[ 3515.685806][T15581] pwc: recv_control_msg error -32 req 02 val 2c00
[ 3515.696709][T15581] pwc: recv_control_msg error -32 req 04 val 1000
[ 3515.704656][T15581] pwc: recv_control_msg error -32 req 04 val 1300
[ 3515.714850][T15581] pwc: recv_control_msg error -32 req 04 val 1400
[ 3515.722205][T15581] pwc: recv_control_msg error -32 req 02 val 2000
[ 3515.820801][ T9698] usb 1-1: config 4 has an invalid interface number: 29 but max is 0
[ 3515.829777][ T9698] usb 1-1: config 4 has no interface number 0
[ 3515.835976][ T9698] usb 1-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 3515.849340][ T9698] usb 1-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[ 3515.860609][ T9698] usb 1-1: config 4 interface 29 has no altsetting 0
[ 3515.870287][ T9698] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[ 3515.879490][ T9698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3515.887631][ T9698] usb 1-1: Product: syz
[ 3515.893007][ T9698] usb 1-1: Manufacturer: syz
[ 3515.897973][ T9698] usb 1-1: SerialNumber: syz
[ 3515.912369][T12543] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 3515.932749][T15581] pwc: recv_control_msg error -71 req 04 val 1500
[ 3515.943751][T15581] pwc: recv_control_msg error -71 req 02 val 2500
[ 3515.951283][T15581] pwc: recv_control_msg error -71 req 02 val 2400
[ 3515.958602][T15581] pwc: recv_control_msg error -71 req 02 val 2600
[ 3515.965649][T15581] pwc: recv_control_msg error -71 req 02 val 2900
[ 3515.974109][T15581] pwc: recv_control_msg error -71 req 02 val 2800
[ 3515.988816][T15581] pwc: recv_control_msg error -71 req 04 val 1100
[ 3516.003482][T15581] pwc: recv_control_msg error -71 req 04 val 1200
[ 3516.031100][T15581] pwc: Registered as video103.
[ 3516.038125][T15581] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input193
[ 3516.096580][T15581] usb 2-1: USB disconnect, device number 27
[ 3516.197777][ T9698] usb 1-1: USB disconnect, device number 35
[ 3516.407663][T12556] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10180'.
[ 3517.004224][   T30] audit: type=1326 audit(1752858151.423:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.0.10186" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e539 code=0x0
[ 3517.045559][   T30] audit: type=1326 audit(1752858151.463:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.102657][   T30] audit: type=1326 audit(1752858151.463:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.130787][   T30] audit: type=1326 audit(1752858151.473:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=108 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.159770][   T30] audit: type=1326 audit(1752858151.473:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.185419][   T30] audit: type=1326 audit(1752858151.473:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.213268][   T30] audit: type=1326 audit(1752858151.473:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.240359][   T30] audit: type=1326 audit(1752858151.473:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.5.10185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[ 3517.335678][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10190'.
[ 3517.992298][T12611] netlink: 'syz.0.10203': attribute type 12 has an invalid length.
[ 3518.288353][ T9698] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 3518.441333][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3518.468328][ T9698] usb 6-1: Using ep0 maxpacket: 32
[ 3518.474334][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3518.498037][ T9698] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 3518.513133][ T9698] usb 6-1: config 0 has no interface number 0
[ 3518.521244][ T9698] usb 6-1: config 0 interface 12 has no altsetting 0
[ 3518.533829][ T9698] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 3518.544802][ T9698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3518.556309][ T9698] usb 6-1: Product: syz
[ 3518.567624][ T9698] usb 6-1: Manufacturer: syz
[ 3518.574847][ T9698] usb 6-1: SerialNumber: syz
[ 3518.592515][ T9698] usb 6-1: config 0 descriptor??
[ 3519.148720][ T9696] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 3519.298275][T15581] usb 1-1: new low-speed USB device number 36 using dummy_hcd
[ 3519.320487][ T9696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3519.341892][ T9696] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 3519.359508][ T9696] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 3519.371867][ T9696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3519.386833][ T9696] usb 4-1: config 0 descriptor??
[ 3519.491593][T15581] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 3519.501110][T15581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3519.519012][T15581] usb 1-1: config 0 descriptor??
[ 3519.598463][T15798] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 3519.758500][T15798] usb 2-1: Using ep0 maxpacket: 16
[ 3519.766060][T15798] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[ 3519.774341][T15798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3519.785506][T15798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3519.798403][T15798] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 3519.807482][T15798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3519.814397][ T9696] ath6kl: Failed to read usb control message: -71
[ 3519.827118][T15798] usb 2-1: config 0 descriptor??
[ 3519.827524][ T9696] ath6kl: Unable to read the bmi data from the device: -71
[ 3519.840573][T15798] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input194
[ 3519.856955][ T9696] ath6kl: Unable to recv target info: -71
[ 3519.880330][ T9696] ath6kl: Failed to init ath6kl core: -71
[ 3519.886780][ T9696] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 3519.942423][ T9696] usb 4-1: USB disconnect, device number 63
[ 3520.047349][ T8635] usb 2-1: USB disconnect, device number 28
[ 3520.949398][T15581] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 3520.977065][T15581] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[ 3521.003946][T15581] asix 1-1:0.0: probe with driver asix failed with error -71
[ 3521.021497][T15581] usb 1-1: USB disconnect, device number 36
[ 3521.073270][ T9698] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 58 failed: -71
[ 3521.299925][ T9698] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 3521.307362][ T9698] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 3521.356273][ T9698] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 3521.414025][ T9698] usb 6-1: USB disconnect, device number 40
[ 3521.953911][T12695] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3521.971810][T12695] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3521.989563][T12695] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3521.999126][T12695] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3522.005509][T12695] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3522.919667][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3522.968984][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3523.069169][T12719] random: crng reseeded on system resumption
[ 3523.117623][ T9978] Bluetooth: hci1: unexpected event for opcode 0x1003
[ 3523.998808][ T9978] Bluetooth: hci0: command 0x0405 tx timeout
[ 3523.998827][ T7988] Bluetooth: hci5: command 0x040f tx timeout
[ 3523.998878][ T7988] Bluetooth: hci4: command 0x0405 tx timeout
[ 3524.078396][ T7988] Bluetooth: hci2: command 0x040f tx timeout
[ 3524.255771][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10253'.
[ 3524.768760][ T7988] Bluetooth: hci5: unexpected event for opcode 0x2023
[ 3524.828812][ T9698] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 3525.008670][ T9698] usb 1-1: Using ep0 maxpacket: 32
[ 3525.028581][ T9698] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 3525.041840][ T9698] usb 1-1: config 0 has no interface number 0
[ 3525.069936][ T9698] usb 1-1: config 0 interface 89 has no altsetting 0
[ 3525.090673][ T9698] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 3525.256560][ T9698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3525.265386][ T9698] usb 1-1: Product: syz
[ 3525.269996][ T9698] usb 1-1: Manufacturer: syz
[ 3525.278196][ T9698] usb 1-1: SerialNumber: syz
[ 3525.293794][ T9698] usb 1-1: config 0 descriptor??
[ 3525.322169][ T9698] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 3525.426245][ T9698] em28xx 1-1:0.89: Video interface 89 found: bulk
[ 3525.637534][T12756] random: crng reseeded on system resumption
[ 3525.753115][T12747] syz.3.10261 (12747): drop_caches: 2
[ 3525.765730][T12747] syz.3.10261 (12747): drop_caches: 2
[ 3525.922037][ T9698] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 3526.142709][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10268'.
[ 3526.778368][T15798] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 3527.006024][T15798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3527.050190][T15798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 3527.065964][T15798] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 3527.104963][T15798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3527.121226][ T7988] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 3527.134114][ T7988] Bluetooth: hci1: Injecting HCI hardware error event
[ 3527.134167][T15798] usb 4-1: config 0 descriptor??
[ 3527.144373][ T7988] Bluetooth: hci1: hardware error 0x00
[ 3527.445308][ T9698] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 3527.467158][ T9698] em28xx 1-1:0.89: board has no eeprom
[ 3527.538450][ T9698] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 3527.549727][ T9698] em28xx 1-1:0.89: analog set to bulk mode.
[ 3527.555936][ T8635] em28xx 1-1:0.89: Registering V4L2 extension
[ 3527.657665][ T8635] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[ 3527.686775][ T8635] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[ 3527.701326][ T8635] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[ 3527.714842][ T8635] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[ 3527.740742][T15798] kovaplus 0003:1E7D:2D50.0083: unbalanced collection at end of report description
[ 3527.766729][ T8635] em28xx 1-1:0.89: Config register raw data: 0xfffffffb
[ 3527.770664][T15798] kovaplus 0003:1E7D:2D50.0083: parse failed
[ 3527.777969][ T8635] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 3527.785804][T15798] kovaplus 0003:1E7D:2D50.0083: probe with driver kovaplus failed with error -22
[ 3527.815490][ T8635] em28xx 1-1:0.89: No AC97 audio processor
[ 3527.849298][ T8635] usb 1-1: Decoder not found
[ 3527.854045][ T8635] em28xx 1-1:0.89: failed to create media graph
[ 3527.890511][ T8635] em28xx 1-1:0.89: V4L2 device video103 deregistered
[ 3527.903238][ T8635] em28xx 1-1:0.89: Registering snapshot button...
[ 3527.920744][ T8635] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input195
[ 3527.952112][ T8635] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 3527.985014][ T8635] usb 4-1: USB disconnect, device number 64
[ 3528.065219][ T9696] usb 1-1: USB disconnect, device number 37
[ 3528.074153][ T9696] em28xx 1-1:0.89: Disconnecting em28xx
[ 3528.080524][ T9696] em28xx 1-1:0.89: Closing input extension
[ 3528.091947][ T9696] em28xx 1-1:0.89: Deregistering snapshot button
[ 3528.108377][ T9698] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 3528.158878][ T9696] em28xx 1-1:0.89: Freeing device
[ 3528.278410][ T9698] usb 2-1: Using ep0 maxpacket: 8
[ 3528.290598][ T9698] usb 2-1: config 5 has an invalid interface number: 245 but max is 0
[ 3528.299416][ T9698] usb 2-1: config 5 has an invalid interface descriptor of length 2, skipping
[ 3528.309181][ T9698] usb 2-1: config 5 has no interface number 0
[ 3528.315524][ T9698] usb 2-1: config 5 interface 245 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3528.331886][ T9698] usb 2-1: config 5 interface 245 has no altsetting 0
[ 3528.343590][ T9698] usb 2-1: New USB device found, idVendor=9ad2, idProduct=61d4, bcdDevice=91.10
[ 3528.353174][ T9698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3528.361720][ T9698] usb 2-1: Product: syz
[ 3528.366211][ T9698] usb 2-1: Manufacturer: syz
[ 3528.371958][ T9698] usb 2-1: SerialNumber: syz
[ 3528.595609][ T9698] usb-storage 2-1:5.245: USB Mass Storage device detected
[ 3528.670918][ T9698] usb 2-1: USB disconnect, device number 29
[ 3529.200710][ T7988] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 3529.804908][T15798] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 3529.866766][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10313'.
[ 3529.963354][T15798] usb 2-1: Using ep0 maxpacket: 32
[ 3529.974467][T15798] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 3530.008312][T15798] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 3530.016976][T15798] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 3530.026404][T15798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3530.036462][T15798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3530.046845][T15798] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 3530.061856][T15798] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3530.071394][T15798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3530.104242][T15798] usb 2-1: config 0 descriptor??
[ 3530.107432][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10319'.
[ 3530.339091][T15798] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3530.392683][T15798] usb 2-1: USB disconnect, device number 30
[ 3530.421413][T15798] usblp1: removed
[ 3530.625586][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10329'.
[ 3530.839691][T12922] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 3530.848824][T12922] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 3530.858636][T15798] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 3530.991376][T12924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3531.038282][T15798] usb 2-1: Using ep0 maxpacket: 32
[ 3531.050465][T15798] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 3531.065732][T15798] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 3531.075821][T15798] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 3531.093814][T15798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3531.105504][T15798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3531.131274][T15798] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 3531.158277][T15798] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3531.167615][T15798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3531.205937][T15798] usb 2-1: config 0 descriptor??
[ 3531.320887][T12939] netlink: 200 bytes leftover after parsing attributes in process `syz.3.10340'.
[ 3531.381756][T12940] netlink: 'syz.5.10339': attribute type 11 has an invalid length.
[ 3531.437907][T15798] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3531.544557][   T30] audit: type=1326 audit(1752858165.963:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.3.10343" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0
[ 3531.652474][ T9698] usb 2-1: USB disconnect, device number 31
[ 3531.677370][ T9698] usblp1: removed
[ 3532.005955][T15798] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 3532.161104][T15798] usb 6-1: Using ep0 maxpacket: 32
[ 3532.173786][T15798] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 3532.186747][T15798] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 3532.196346][T15798] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 3532.223486][T15798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3532.233608][T15798] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3532.243487][T15798] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 3532.256797][T15798] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3532.266001][T15798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3532.298907][T15798] usb 6-1: config 0 descriptor??
[ 3532.410780][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10357'.
[ 3532.459544][T12980] binder: 12976:12980 ioctl c0306201 0 returned -14
[ 3532.518678][T15798] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3532.551554][T15798] usb 6-1: USB disconnect, device number 41
[ 3532.572466][T15798] usblp1: removed
[ 3532.692906][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10362'.
[ 3532.717404][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10362'.
[ 3532.836295][T12996] fuseblk: Bad value for 'fd'
[ 3533.028654][T15798] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 3533.033027][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10369'.
[ 3533.228440][T15798] usb 6-1: Using ep0 maxpacket: 32
[ 3533.248070][T15798] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 3533.273721][T15798] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 3533.283391][T15798] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 3533.293838][T15798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3533.306977][T15798] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3533.317291][T15798] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 3533.335751][T15581] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[ 3533.344288][T15798] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3533.357914][T15798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3533.371974][T15798] usb 6-1: config 0 descriptor??
[ 3533.510601][T15581] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 3533.524195][T15581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3533.536641][T13004] binder: 13001:13004 ioctl c00c620f 80002980 returned -22
[ 3533.549471][T15581] usb 2-1: config 0 descriptor??
[ 3533.605699][T15798] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3533.630128][T13015] binder: 13001:13015 ioctl c0306201 0 returned -14
[ 3533.880752][ T9698] usb 6-1: USB disconnect, device number 42
[ 3533.906317][ T9698] usblp1: removed
[ 3534.788261][T15798] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 3534.968290][T15798] usb 1-1: Using ep0 maxpacket: 32
[ 3534.983832][T15798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3535.008236][T15798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3535.018023][T15798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 3535.054288][T15798] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 3535.064391][T15798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3535.091952][T15798] usb 1-1: config 0 descriptor??
[ 3535.202104][T15581] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 3535.221800][T15581] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 3535.250931][T15581] asix 2-1:0.0: probe with driver asix failed with error -71
[ 3535.285671][T15581] usb 2-1: USB disconnect, device number 32
[ 3535.497418][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10387'.
[ 3535.514520][T15798] hid (null): bogus close delimiter
[ 3535.560714][T15798] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0084/input/input197
[ 3535.608085][T15798] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0084/input/input198
[ 3535.653411][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10390'.
[ 3535.751043][T15798] kye 0003:0458:5011.0084: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[ 3536.741817][T13096] ÿÿÿÿÿÿ: renamed from bridge0
[ 3537.493436][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10422'.
[ 3537.629878][T15798] usb 1-1: USB disconnect, device number 38
[ 3537.844796][T13137] netlink: 'syz.0.10427': attribute type 1 has an invalid length.
[ 3538.260833][T13147] binder: 13146:13147 ioctl 4018620d 0 returned -22
[ 3538.397168][T13159] netlink: 'syz.1.10439': attribute type 16 has an invalid length.
[ 3538.405636][T13159] netlink: 'syz.1.10439': attribute type 3 has an invalid length.
[ 3538.414632][T13159] netlink: 64058 bytes leftover after parsing attributes in process `syz.1.10439'.
[ 3538.926537][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10447'.
[ 3538.958750][ T9698] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[ 3538.982309][T13180] input: syz1 as /devices/virtual/input/input201
[ 3539.113217][ T9698] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 3539.126294][ T9698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3539.130589][T13186] netlink: 'syz.3.10451': attribute type 4 has an invalid length.
[ 3539.160848][ T9698] usb 1-1: config 0 descriptor??
[ 3539.533432][T13204] random: crng reseeded on system resumption
[ 3539.583311][T13202] mmap: syz.1.10459 (13202): VmData 37502976 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 3540.410318][ T9698] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 3540.474897][ T9698] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 3540.501481][ T9698] asix 1-1:0.0: probe with driver asix failed with error -71
[ 3540.542557][ T9698] usb 1-1: USB disconnect, device number 39
[ 3540.739760][ T9696] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 3540.898945][ T9696] usb 2-1: Using ep0 maxpacket: 32
[ 3540.912396][ T9696] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 3540.931792][ T9696] usb 2-1: config 0 has no interface number 0
[ 3540.954912][ T9696] usb 2-1: config 0 interface 12 has no altsetting 0
[ 3540.981570][ T9696] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 3540.991425][ T9696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3541.001686][ T9696] usb 2-1: Product: syz
[ 3541.011234][ T9696] usb 2-1: Manufacturer: syz
[ 3541.021387][ T9696] usb 2-1: SerialNumber: syz
[ 3541.041168][ T9696] usb 2-1: config 0 descriptor??
[ 3541.338616][ T8635] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[ 3541.531067][ T8635] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3541.567442][ T8635] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a
[ 3541.594926][T13256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3541.601119][ T8635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3541.621097][T13256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3541.632251][ T8635] usb 1-1: Product: syz
[ 3541.636713][ T8635] usb 1-1: Manufacturer: syz
[ 3541.652607][ T8635] usb 1-1: SerialNumber: syz
[ 3541.679158][ T8635] usb 1-1: config 0 descriptor??
[ 3541.700876][ T8635] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[ 3541.771139][T13258] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 3541.850643][ T8635] usb 1-1: reset full-speed USB device number 40 using dummy_hcd
[ 3541.975559][T13262] fuseblk: Bad value for 'fd'
[ 3542.226966][T13273] netlink: 'syz.5.10485': attribute type 29 has an invalid length.
[ 3542.295323][T13273] netlink: 'syz.5.10485': attribute type 29 has an invalid length.
[ 3542.470638][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10490'.
[ 3542.486064][T13284] netlink: 'syz.5.10490': attribute type 10 has an invalid length.
[ 3542.494609][T13284] mac80211_hwsim hwsim52 wlan1: left allmulticast mode
[ 3542.505024][T13284] wlan1: mtu less than device minimum
[ 3542.511906][T13284] : (slave wlan1): Error -22 calling dev_set_mtu
[ 3542.537759][ T8635] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 3542.545763][ T8635] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 3542.546850][   T55] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[ 3542.579327][ T8635] usb 1-1: USB disconnect, device number 40
[ 3542.586080][   T55] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[ 3542.606067][   T55] ------------[ cut here ]------------
[ 3542.612185][   T55] WARNING: CPU: 0 PID: 55 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90
[ 3542.620584][   T55] Modules linked in:
[ 3542.625207][   T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/0:2 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3542.637242][   T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3542.647462][   T55] Workqueue: events request_firmware_work_func
[ 3542.652089][T13287] loop4: detected capacity change from 0 to 7
[ 3542.653908][   T55] RIP: 0010:kernfs_get+0x72/0x90
[ 3542.664925][   T55] Code: e8 33 34 64 ff 48 89 df be 04 00 00 00 e8 46 48 c6 ff f0 ff 03 eb 05 e8 1c 34 64 ff 5b 5d e9 c5 6e 14 09 cc e8 0f 34 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 45
[ 3542.669992][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.684907][   T55] RSP: 0018:ffffc9000130f5e0 EFLAGS: 00010293
[ 3542.694192][    C1] buffer_io_error: 13 callbacks suppressed
[ 3542.694209][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.706492][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.714171][   T55] 
[ 3542.723235][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.729600][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.733492][   T55] RAX: ffffffff825bf4e1 RBX: ffff8880697d0870 RCX: ffff88801abfda00
[ 3542.742612][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.750621][   T55] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3542.766645][   T55] RBP: 0000000000000000 R08: ffff8880697d0873 R09: 1ffff1100d2fa10e
[ 3542.774760][   T55] R10: dffffc0000000000 R11: ffffed100d2fa10f R12: ffff8880569d8628
[ 3542.777144][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.782972][   T55] R13: 1ffff1100ad3b0c6 R14: ffff8880569d8630 R15: 1ffff1100ad3b0c5
[ 3542.791988][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.800373][   T55] FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
[ 3542.809036][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.816802][   T55] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3542.825926][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.832567][   T55] CR2: 00000000efcda778 CR3: 0000000034532000 CR4: 00000000003526f0
[ 3542.841062][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.848482][   T55] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000
[ 3542.857634][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.865674][   T55] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3542.874037][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.881675][   T55] Call Trace:
[ 3542.890935][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.894277][   T55]  <TASK>
[ 3542.902317][T13287] ldm_validate_partition_table(): Disk read failed.
[ 3542.905104][   T55]  kobject_add_internal+0x632/0xb40
[ 3542.917316][   T55]  kobject_add+0x155/0x220
[ 3542.922045][   T55]  ? __pfx_kobject_add+0x10/0x10
[ 3542.927026][   T55]  ? kobject_init+0x83/0x1e0
[ 3542.931718][   T55]  get_device_parent+0x316/0x3a0
[ 3542.936947][   T55]  device_add+0x2e1/0xb50
[ 3542.941391][   T55]  firmware_fallback_sysfs+0x2e4/0x9b0
[ 3542.946922][   T55]  _request_firmware+0xf83/0x15b0
[ 3542.952194][   T55]  ? __pfx__request_firmware+0x10/0x10
[ 3542.957712][   T55]  ? process_scheduled_works+0x9ef/0x17b0
[ 3542.958530][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.963570][   T55]  request_firmware_work_func+0xaf/0x1c0
[ 3542.972640][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.974062][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3542.978383][   T55]  ? process_scheduled_works+0x9ef/0x17b0
[ 3542.986287][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3542.995421][   T55]  process_scheduled_works+0xae1/0x17b0
[ 3543.002342][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 3543.009176][   T55]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3543.014653][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3543.023997][   T55]  worker_thread+0x8a0/0xda0
[ 3543.034184][T13287] Dev loop4: unable to read RDB block 0
[ 3543.037981][   T55]  kthread+0x70e/0x8a0
[ 3543.052534][   T55]  ? __pfx_worker_thread+0x10/0x10
[ 3543.057679][   T55]  ? __pfx_kthread+0x10/0x10
[ 3543.062539][   T55]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3543.067846][   T55]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3543.073194][   T55]  ? __pfx_kthread+0x10/0x10
[ 3543.077851][   T55]  ret_from_fork+0x3fc/0x770
[ 3543.082556][   T55]  ? __pfx_ret_from_fork+0x10/0x10
[ 3543.087913][   T55]  ? __switch_to_asm+0x39/0x70
[ 3543.092781][   T55]  ? __switch_to_asm+0x33/0x70
[ 3543.097801][   T55]  ? __pfx_kthread+0x10/0x10
[ 3543.102525][   T55]  ret_from_fork_asm+0x1a/0x30
[ 3543.107360][   T55]  </TASK>
[ 3543.110477][   T55] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 3543.117765][   T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/0:2 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 3543.129658][   T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3543.139717][   T55] Workqueue: events request_firmware_work_func
[ 3543.145896][   T55] Call Trace:
[ 3543.149224][   T55]  <TASK>
[ 3543.152159][   T55]  dump_stack_lvl+0x99/0x250
[ 3543.156789][   T55]  ? __asan_memcpy+0x40/0x70
[ 3543.161380][   T55]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3543.166587][   T55]  ? __pfx__printk+0x10/0x10
[ 3543.171214][   T55]  panic+0x2db/0x790
[ 3543.175132][   T55]  ? __pfx_panic+0x10/0x10
[ 3543.179547][   T55]  ? show_trace_log_lvl+0x4fb/0x550
[ 3543.184762][   T55]  ? ret_from_fork_asm+0x1a/0x30
[ 3543.190068][   T55]  __warn+0x31b/0x4b0
[ 3543.194060][   T55]  ? kernfs_get+0x72/0x90
[ 3543.198389][   T55]  ? kernfs_get+0x72/0x90
[ 3543.202717][   T55]  report_bug+0x2be/0x4f0
[ 3543.207204][   T55]  ? kernfs_get+0x72/0x90
[ 3543.211527][   T55]  ? kernfs_get+0x72/0x90
[ 3543.215871][   T55]  ? kernfs_get+0x74/0x90
[ 3543.220216][   T55]  handle_bug+0x84/0x160
[ 3543.224478][   T55]  exc_invalid_op+0x1a/0x50
[ 3543.228981][   T55]  asm_exc_invalid_op+0x1a/0x20
[ 3543.233826][   T55] RIP: 0010:kernfs_get+0x72/0x90
[ 3543.238765][   T55] Code: e8 33 34 64 ff 48 89 df be 04 00 00 00 e8 46 48 c6 ff f0 ff 03 eb 05 e8 1c 34 64 ff 5b 5d e9 c5 6e 14 09 cc e8 0f 34 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 45
[ 3543.258469][   T55] RSP: 0018:ffffc9000130f5e0 EFLAGS: 00010293
[ 3543.264537][   T55] RAX: ffffffff825bf4e1 RBX: ffff8880697d0870 RCX: ffff88801abfda00
[ 3543.272507][   T55] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3543.280473][   T55] RBP: 0000000000000000 R08: ffff8880697d0873 R09: 1ffff1100d2fa10e
[ 3543.288442][   T55] R10: dffffc0000000000 R11: ffffed100d2fa10f R12: ffff8880569d8628
[ 3543.296435][   T55] R13: 1ffff1100ad3b0c6 R14: ffff8880569d8630 R15: 1ffff1100ad3b0c5
[ 3543.304414][   T55]  ? kernfs_get+0x71/0x90
[ 3543.308752][   T55]  kobject_add_internal+0x632/0xb40
[ 3543.314051][   T55]  kobject_add+0x155/0x220
[ 3543.318560][   T55]  ? __pfx_kobject_add+0x10/0x10
[ 3543.323499][   T55]  ? kobject_init+0x83/0x1e0
[ 3543.328088][   T55]  get_device_parent+0x316/0x3a0
[ 3543.333030][   T55]  device_add+0x2e1/0xb50
[ 3543.337364][   T55]  firmware_fallback_sysfs+0x2e4/0x9b0
[ 3543.343010][   T55]  _request_firmware+0xf83/0x15b0
[ 3543.348056][   T55]  ? __pfx__request_firmware+0x10/0x10
[ 3543.353517][   T55]  ? process_scheduled_works+0x9ef/0x17b0
[ 3543.359237][   T55]  request_firmware_work_func+0xaf/0x1c0
[ 3543.364869][   T55]  ? process_scheduled_works+0x9ef/0x17b0
[ 3543.370599][   T55]  process_scheduled_works+0xae1/0x17b0
[ 3543.376250][   T55]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3543.382237][   T55]  worker_thread+0x8a0/0xda0
[ 3543.386875][   T55]  kthread+0x70e/0x8a0
[ 3543.391239][   T55]  ? __pfx_worker_thread+0x10/0x10
[ 3543.396496][   T55]  ? __pfx_kthread+0x10/0x10
[ 3543.401280][   T55]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3543.406567][   T55]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3543.411759][   T55]  ? __pfx_kthread+0x10/0x10
[ 3543.416350][   T55]  ret_from_fork+0x3fc/0x770
[ 3543.420944][   T55]  ? __pfx_ret_from_fork+0x10/0x10
[ 3543.426054][   T55]  ? __switch_to_asm+0x39/0x70
[ 3543.430824][   T55]  ? __switch_to_asm+0x33/0x70
[ 3543.435580][   T55]  ? __pfx_kthread+0x10/0x10
[ 3543.440167][   T55]  ret_from_fork_asm+0x1a/0x30
[ 3543.444939][   T55]  </TASK>
[ 3543.448212][   T55] Kernel Offset: disabled
[ 3543.452526][   T55] Rebooting in 86400 seconds..