last executing test programs:

5m44.065770272s ago: executing program 0 (id=1376):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/258], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

5m43.660184054s ago: executing program 0 (id=1377):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000480)={0x40, 0xf, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x2d, {0x2d, 0x3, "27eaf3d88fe59706435d3681546dc2e0249171ed99f0bcbd4549b313bc60d84d2dc13bc90ce9f67f41bfc1"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x20, 0xe, 0xa6, "c59d674e16b9d10f737f7824d198ab474cd1994839f8f02c166ce27279d13f6e8805927b5a228f19cbc72d008e78b4e0b9911cc24277b46f9b6b22411d5a7e37ab0f3873680201e32bffb8185b5d53984d3118aefd343f552da3eeea030097b30fdf8c56e324cc63e7d0632deaa706ab4b667f8a32b7103006d416da6fe3dd73a2b7ff5d1315eb14f69564eb80c848623788cefa37a03d36bcc071bb4a8e4a573dd2da3f91e4"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000200)={0x20, 0x0, 0x8d, {0x8b, "22c0b0b4a785f828c18155f3583fbc25efffcff1de1817a30756dc3896b04b56fa5fd243140b903048958b8554f7b959abc26246860519ab27db0ad7c4f51b05795b8cdb0513b7e82f4786a3b7b95c29ca2031c9963eea9504977104ae957bb55fcba83ea7800e6a73f2ca745cc50aafb18ac3483aad2b6844b9ab6240343c0663a62d158bf0a4b3433e18"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xf}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0xc}})

5m41.379270649s ago: executing program 0 (id=1385):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/258], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

5m40.975928458s ago: executing program 0 (id=1386):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
ioctl(r5, 0x8b2a, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4000000000000000})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setresuid(0xee01, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0, 0x0)

5m40.792411644s ago: executing program 0 (id=1387):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x101, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0)

5m40.610448256s ago: executing program 0 (id=1388):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fsync(r0)

5m40.391965803s ago: executing program 32 (id=1388):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fsync(r0)

9.821082262s ago: executing program 4 (id=2637):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3)

9.024193262s ago: executing program 4 (id=2643):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
accept$inet6(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001440)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="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"], 0x0)

7.556387032s ago: executing program 1 (id=2653):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

7.485314755s ago: executing program 1 (id=2654):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2004c8, 0x6, 0xb96b, 0x0, 0x0, 0x20000000000000, 0x0, 0xff, 0xfffffffffffffffe, 0x7], 0x100000, 0x100})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.078322316s ago: executing program 1 (id=2657):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, 0x0)

6.396897075s ago: executing program 2 (id=2660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000380)={0x44, r1, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdfc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x4, 0x1, 0x7f30}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x34040814}, 0x8844) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0xa, 0x3, 0x36314d59, 0x3, 0x2, [{0xd49, 0x8}, {0x2, 0x7ffe}, {0xfffffff9, 0x6}, {0x8, 0x1ff}, {0x714, 0x8000}, {0x8, 0xffffffff}, {0xa, 0x3ff}, {0x8, 0x7}], 0x6, 0x9, 0x7, 0x2}})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_usb_connect(0x2, 0xc81, &(0x7f0000000a80)={{0x12, 0x1, 0x300, 0xdd, 0xb5, 0xec, 0x40, 0x582, 0x40, 0x92a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6f, 0x4, 0x2, 0xd, 0x90, 0x7, [{{0x9, 0x4, 0x16, 0x9, 0x8, 0xe0, 0x9f, 0x61, 0x7f, [], [{{0x9, 0x5, 0x8, 0x8, 0x40, 0x1, 0xd5, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x397, 0x3c, 0xf6, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x17, 0x40, 0x81, [@generic={0xbf, 0x2, "7cd09fde6c112d6f58ebd7a986f3f888fdf86821c83e1dba2ee9694e95b7de3ed097ab20bed0843cf8e6bfd263538dba6e070509211b1e1799d2257b0bd6ab324e0ff9f8c2cdaedf37fd8e9200db70200616885b483c3e49908dea43dabe064aa068b331e4343b896614f378afbc7ff7c2de97ebf225f96d579490cf6be59a3f80d0a8971d6c4d616eca67679952b3d9ded595bea6ca5c07c2548bd34a2908152ee728df4bddb64f77563e068edbf38980cce4fd796e23d9cd69405adc"}, @generic={0x5a, 0xb, "906df3e2463c382f244537d279b42a958a331ec8d2a0c5e083295d41f9110bae21784034ae87d90eaa7d6ca4e69b45f7def1a6ddc616bde7888eb479a12df6c039a1d0e11193b858336ed894f7a6b40ea56bce3bda8f4466"}]}}, {{0x9, 0x5, 0x0, 0x65ccb74c66ae28f5, 0x10, 0x9, 0x6, 0x8, [@generic={0xd1, 0xc, "e288a10d29ced73b1fe13d384fd489f59811b70db50eb83a3376e67680865c130a45c3e5425377bcac1759e19e2e087028a93b4afd8e910678d8ce678b1af23c5f4c37d2c50b16abd29bcaefa032f424b261f797a9e249c3cba8c5bffedc749a1549f18aaa20dba7351d58516075062c7ceaa74ff6dda44c3a92e5a1a18ee94b21022a2e4639b26b7f07c51945908a44b66671e436505d081beef702341e080156c70e6f9ec09ebcf6e0cc8127f7c055363ac4e292a3a0aefebcd2a67b094d046b71a9f7f5587072d48d728756f146"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xd7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x31, 0x1, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x930960f65b6b0997, 0x6, 0xe8}, @generic={0x62, 0x10, "0ef98fe4b969defe7e7fc535d283e0a0713de00b42cf38206fc6b391e679bf87f57451d9db2c5b22fa21f846806755e95fde3b27de717621ef42ee1d742fa577e0e0d856cb8435e004f2fdf55d8630d33baec6ea0fdc5f9b01ddba5d611ee2d8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x1, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x8, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xe, 0x2, 0x3, [@generic={0x62, 0x31, "24b7260d6e90669859bd9523cacae9fda213821d555d343b7dbecbabd7f2227ac7cabe48ae44b39e6784411fcb25442b5263baa9475627ee51d687b9f51aa4b66f061dda8361296c0480e78e9123c19bfd1c6517c14babe5daffd482e5b32f1b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}]}}]}}, {{0x9, 0x4, 0x5a, 0x7, 0x2, 0x29, 0xf5, 0x22, 0x9, [], [{{0x9, 0x5, 0x7, 0x3, 0x3ff, 0xf7, 0x1, 0x6b, [@generic={0x69, 0x6, "5634719a2f39541847f7342c132507822e42b893ca7f692d53e4416d4b14c6ebfc0ec55ec659325fbbe3809b66d61bd2292d33128e538eb59de81b9801788e74d43fff1fb95000428d71db48a863ea7d8826b12aad6360d752191b12cd8650ad6d7b8befaab39c"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x8, 0x40}}]}}, {{0x9, 0x4, 0x6f, 0x3, 0x7, 0x30, 0x6f, 0xfe, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xac3}}, @uac_control={{0xa, 0x24, 0x1, 0xfff9, 0xd3}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x2, 0x3, [0x9, 0x8, 0x5], 0x1}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0xe4, "d43a0888c4"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0x3, 0x8, 0x6, 0x1], 0x81}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x6, 0x0, "90"}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x65, "6e3ee8"}]}], [{{0x9, 0x5, 0xa, 0x2, 0x8, 0x8, 0x2, 0x2}}, {{0x9, 0x5, 0x4, 0xb, 0x200, 0x9, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x800}, @generic={0xf4, 0xd, "bc353c7225571f265e29f61e20bc27eb99068ea50ec84cc86d93858bfaac216e7489bd16675ff322a4878eee91be2765148ebe47f4d339d8a52e8aa6d273d7c855c25a2021509c42a405cedcc6e791e80b0cd79711c6a863af3add0aa92d127894b7fbf2f827925c77905aa93666a66f94f7374c9fd7d1de2dba79680d3115cfb4e0af6e9b7c543d8f65ecf14a80630c76a56f0834856f31ddf5032291cd2023c71fa0384590f2172fe52e694d9130407b44a200a932c12cca70af3d416b0bd8bcc524fcd13a0093cea8bd6adf1efc55efe7e9a16a6c7dc673f3bbcb0e4f4776514933060a3561280d1a15140e656e233faf"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x5, 0x4, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x4, 0xff, 0xc0, [@generic={0xdf, 0x31, "91239e2839e6dfebf41325e684f6b51060cfc4265b92c8502798270c56debb7a20d8af5609a39e5bbf1ab4de84f493c542af9fb77d1d8f5d97089ddad177627016327c6495a94756f38d7027d17432a4b45e892c28e21a98d29b1f18d20cfa7e9de2701cd824dd9ab0c1978e537ef6f5eb04b25aaa3a66b97c04ee4e88e279120b8d890a40b9955211c4c5ca4933d569eb2e155a190c87616fe8adb57af3da8522c46efc9912d9040d1aa2f3c2bf1d8ddcc5b037ddf62a08e75cc831f8e2154f3ca8755c5fa5ef2c1bf146956bddadede1737d2e1dc53bf8c5171b6403"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x5, 0x9, [@generic={0x41, 0x5, "f83ac6d541b42ea5cc8b13e650a8e448575a7885d252c800392f5ef9512e9b2c88f7e09be51bfd5905d0a0cdc88b1a2d9f77f8d6b43399bd7b7c41a0778a83"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x1, 0x10, 0x9, [@generic={0x45, 0x30, "ad1509e5177062a91767e240dd6c0a3320e582d0143f89786a355f406a2208c2fff488d386f06fa0fd7d695ba349219f18ab8cfeffca4f8e7eaf6a672f25c16234e115"}]}}]}}, {{0x9, 0x4, 0x0, 0x3, 0xf, 0x1a, 0xa4, 0x96, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xf85, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0x80}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x5, 0x0, 0x1], 0x4}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "9704ac9a"}, {0x5, 0x24, 0x0, 0x459d}, {0xd, 0x24, 0xf, 0x1, 0x388a, 0x8e2, 0x101, 0xfb}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x7f, [0x1]}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xfffd, 0x80, 0x4, 0x40, 0x5}]}], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0x2, 0x80}}, {{0x9, 0x5, 0xd90cfa9f1e0cdeff, 0x4, 0x200, 0xfc, 0x8, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x34, 0x3, 0x4f}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x6, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x54, 0x8}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x1c, 0xa, 0x8, [@generic={0x61, 0xf, "14d3ed84a79a47f7309190c9c4b579e128eebfa53f095021ae83d3449f68f04c183d8e4e3d4c3a872ad7a3347c81a0d541af7178f75855f3e917385e1c481469941260d72114fc71b24de9415ba807eb68681ef98a2af8930ff2f4ad65f85e"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x4, 0x1, 0x96, [@generic={0xa5, 0x11, "d2c6000fb982d0dc9ddb0b7da61af4c0804363d69e00762665f07e7a2fab447ccfc223fa48df67b63084ef64ced788c6c533ebef2069efe647abde34c2fa035aac5b61205e8774d6ac2409222edda1f7223c715f845e654ff98a446f8fbaee70dfbac14b88a3879cb35f7e8b0e3f541b68ffff771866373e76fa671da7f2e41540682a01925681d81594828499dd444085a509c9fae7a89ba9f6cb938d86b26e199a8d"}, @generic={0xff, 0x22, "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"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0x80, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0xd}, @generic={0x3d, 0x21, "1d4b7e5860e677a4ab42a94136df8f23a6102c8014cc60ca0141ea2e6dfc5aad50cd47570f582b8131de75234b4c9afd6dfb7bd6f8721c4ef2243d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x0, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x3899}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xd}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x7b, 0xc}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x5, 0x6, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xff, 0x5, 0x5, [@generic={0x102, 0x3, "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"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0xd, 0xfc, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x81, 0x1, 0x3, [@generic={0xe3, 0x1, "32d072126ca5f92c1214452734157fe2c1ed9e311d0eb12d44a2683b4d89081e4dd48311e1c8823e694421f63ef026a60a473444627da27aa0a229f134543891945b2a213e35762d4d58b97fb1f1bdaf7d8f3d83f57b9a6223ad939097796049bd26cf6b8a84d2709432e7bf582ecd020bdb406b9e4098034821fb4c894915809b46bfd304925cedceb29fa2152e5b4f71a0712b23300678ff87f5cbbe0f8ef8b02cca069842003029ae8ae516a1e068b1884d04bb3344a22e1e6f563bb02a2d6501d02c56ca6b80a33fd6600c2f5fa72db9ee3e16a13f4ccc181604b813592fde"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x0, 0xff, 0x8}}, {{0x9, 0x5, 0x8d, 0x1, 0x200, 0xfd, 0x7f, 0x7c, [@generic={0x9a, 0x22, "50c2d8764baf6f9d3ea9ddd15abc55275094889b37bc825679289bf2358b84f10ede663713117b7bb79dcb13cb76ebee227c5c9318f8987bb7746d21204a1eab6d50549048c25729e8b73b715d43179f50fecb59f5d7cb0f2853ad2cc9c800013f830216f66257b06fb6fc23d077932f76e68931663387f8ccab4166799b531026f8cb60943cbabb4fb8922cd0f9b1b6b785a55e6aad5531"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0xc1a}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x5, 0x9, 0x40, 0x8e}, 0x74, &(0x7f0000000140)={0x5, 0xf, 0x74, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0xb585, 0xf00f, 0x0, [0xff0000, 0x3f00, 0xff0000, 0x3f00, 0xff00]}, @generic={0x45, 0x10, 0x3, "e6923ff328bc8d4a0f5da3847dce6bff3e2d4e983c81c8e81f062dfef380194b12f653237a19c8e093d1b5f27badf1fe6ec3a458e08ab8c209bdc72bf8feca1091b5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x59, 0x7, 0x5}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80c}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "1e2ec8d8a36e9ba53c3ea53d9da71e03b00c39b8cbe17581c67d463251405ba04dd4165517117ff4e378e39856db89ab824dc68f7675e4aa8e2f3cf4d0a8f4ad785d79c4a3ea9e74f4c783b4e8f5969a4f2217a87f7aa2f7a6f0e02e78bfdbdbe3cdac2a8928ce0a5226b6a916699d410a0a5fef6d63356b9788e8efbb3a9b2ffc39f93198bdfeb7e98178302df395571c32e661048f464904a597526bea"}}, {0xfe, &(0x7f0000000440)=@string={0xfe, 0x3, "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"}}]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r4, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x1, 0x0, 0x0, {0x400000000000000, 0xc, 0x0, 0xff, 0x0, 0x1, 0x1, 0x3}, 0x0, 0xd8, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, 0x6c}}, 0x4000010)

5.678967041s ago: executing program 4 (id=2661):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x13000)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

5.230290921s ago: executing program 4 (id=2662):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

5.168936815s ago: executing program 4 (id=2663):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
syz_usb_connect$uac1(0x2, 0xb2, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "339cef1518"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
r1 = gettid()
r2 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000480)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7e, 0xffffffff})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c07, 0xffffffffffffffff)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
r4 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1)
r5 = dup2(r4, r4)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000040)='source', 0x0, r4)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x40, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5c00fcb2dd432791913bff356cc199d076070004130025cc9e3be35c6e17aa31050000000cc008f92c00070025c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786", 0x4a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x844)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r0, 0x3)
accept4(r0, 0x0, 0x0, 0x0)

4.784294779s ago: executing program 2 (id=2664):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @default, @netrom={'nr', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.001429873s ago: executing program 1 (id=2665):
syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
syz_clone(0x2200, 0x0, 0xfffffdfa, 0x0, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000080))
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_DO_IT(r0, 0xab03)

3.332245803s ago: executing program 3 (id=2667):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x5, 0x109000)
ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000240))
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/102) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r3=>0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0x401c5820, 0x8000000000000001) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "48891eedd1bd2dbdc48c83d262405ed5"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x22}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x48051}, 0x80) (async, rerun: 32)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x1400)
fchownat(r5, &(0x7f0000000100)='./file0\x00', r6, 0xffffffffffffffff, 0x800) (async)
syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)

3.2836814s ago: executing program 3 (id=2668):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
write$cgroup_devices(r5, &(0x7f00000003c0)={'a', ' *:* ', 'r\x00'}, 0x8)
r7 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r8=>0x0})
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
sendto$packet(r9, 0x0, 0x0, 0x20008040, &(0x7f00000000c0)={0x11, 0x8100, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016", 0x33}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e", 0x2b}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33)
setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040)=0x2, 0x4)
getpid()
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="fe000000", @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRESDEC=r2, @ANYBLOB="080026006c0900000800b7007c000000"], 0x2c}}, 0x30020880)

3.127122876s ago: executing program 3 (id=2669):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = dup3(r1, r0, 0x80000)
ioctl$NBD_DO_IT(r3, 0xab03)

3.004147104s ago: executing program 1 (id=2670):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b9b66040ac0501b300e401020301fc8112000100000000090400006cdf0c"], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r4, 0x8b1b, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r5 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, &(0x7f0000000740)=""/247, &(0x7f0000000600)=""/100, &(0x7f00000006c0)=""/90, 0xdddd0000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000004c0))
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000)
mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x1)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_usb_connect$cdc_ncm(0x4, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x3, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5a972de8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x4c07, 0x10}, {0x6, 0x24, 0x1a, 0x7fff, 0x1b}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x26}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xf9, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xff, 0x43}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x5, 0x71, 0xff, 0x85}, 0xce, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x2, [{0xdb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}]})
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x4)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000480))
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000980)={0x0, 0x9, 0x1, {0x8, @raw_data="0b41093e180b2ffbea5c3432ad68e9b8466e7ebe67d8eb341e36fcc5ef0988cc900baa38f25f6191bb5771b05a5c176471a8a18479a1401cdc94825b24415ffacad25918bb2b6ee9de71edbbd25696f8e3e1a93fe8b68bf0a13eb85b8f325e3b4a747e2c4a11e9e9e60d4cd8450bc3885f0d5a53c54c251b2d1fa2762841c1e7517bb12f3f279febb35a38c3b11c0f0a3fe8733e11f3c95b282e0608c72cb38eecb20198830e4fd06c33335679a5d8e500f8ada02186cf9487b402ae79e5e7039337a4cd9e8d29af"}, 0x19})

2.733148614s ago: executing program 3 (id=2671):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.630950929s ago: executing program 3 (id=2672):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x40, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x4040040)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0285628, &(0x7f0000000040)={0x3, 0x2})
dup3(r0, r1, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0])
read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, <r4=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50)
read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
dup3(r6, r3, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0)

2.340295499s ago: executing program 3 (id=2673):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, 0x0)

2.098125233s ago: executing program 4 (id=2674):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b0f2b5aa40bf85edaca83"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB="b3129f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.727902715s ago: executing program 2 (id=2675):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
fsync(r1)
syz_usb_disconnect(r0)

177.603875ms ago: executing program 2 (id=2676):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x1)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, 0x0, 0x20008045)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000200a01020000000000000000010000000900010073797a3000000000090002"], 0xe4}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x35, 0x107, 0xfffffffb, 0x0, {0x17, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x8, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
fsmount(0xffffffffffffffff, 0x0, 0x1) (async)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, 0x0, 0x20008045) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000200a01020000000000000000010000000900010073797a3000000000090002"], 0xe4}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x35, 0x107, 0xfffffffb, 0x0, {0x17, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x8, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async)

80.391142ms ago: executing program 2 (id=2677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) (fail_nth: 3)

76.633106ms ago: executing program 2 (id=2678):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0])
read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50)
read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r3, r0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) (fail_nth: 3)

0s ago: executing program 1 (id=2679):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = socket(0x17, 0x800, 0xfbfffffe)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001040)={0x1, "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"}) (rerun: 64)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006)
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000075000000d54e6555a82b08ef5aa5cb64b0a1e11cd8e562c8109cda942cfe924f138adb4833df9cc2e1646b3b4148cb9b2a9deb315b2be0a3405b1637345b97f73681c6103f4bdaa20ccb8b70b6b80560fc7ea29c64ebcbff4795fabc747735843e1fb23e9b81f9ac18e693a23f6a0cb8f9a30d3ad8a88efb529897fec264"]) (async, rerun: 32)
lseek(r1, 0x1, 0x0) (async, rerun: 32)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x11, 0x48a, &(0x7f0000000040)={0x5, 0x1, 0x40}, 0xc)
syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000779460900000000000000fc3900000004cb4a0000000000004b94ec6209900bb6a9f27f30a904dae7650deb288c39e02e072fdfab3641a5dca0c1736578a4e1331783acb241e9eb5f139ff65e024699f6b52fb8e95fc576f1b7711dd20dd55ef6244da8cfb45c817e9aef416916425c4adaa36e7500be11319c9c8d655e"], 0x0) (async)
getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) (async)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) (async)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) (async)
getsockname$ax25(r1, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @remote, @bcast, @netrom, @bcast, @null, @netrom, @rose]}, &(0x7f0000000080)=0x48)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000fbf04cad40c732640000170a001700000000040037000f00130025332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

kernel console output (not intermixed with test programs):

sb 4-1: SerialNumber: syz
[  658.751096][T13534] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  658.761385][ T1210] usb 4-1: config 0 descriptor??
[  658.779816][ T1210] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  658.786818][T13534] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  658.950652][T13534] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.997467][T13534] 8021q: adding VLAN 0 to HW filter on device team0
[  659.017156][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.024540][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.049786][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.057099][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.438627][T13534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.520547][T13534] veth0_vlan: entered promiscuous mode
[  659.555029][T13534] veth1_vlan: entered promiscuous mode
[  659.679651][T13534] veth0_macvtap: entered promiscuous mode
[  659.706020][T13534] veth1_macvtap: entered promiscuous mode
[  659.770718][T13534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  659.780404][ T1210] gspca_ov534_9: reg_w failed -71
[  659.816081][T13534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  659.874992][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  659.900529][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  659.926225][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  659.947169][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.055655][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.072249][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.112082][ T1210] gspca_ov534_9: Unknown sensor 0000
[  660.112180][ T1210] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  660.135597][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.149997][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.161128][ T1210] usb 4-1: USB disconnect, device number 61
[  660.181467][T12731] usb 5-1: USB disconnect, device number 6
[  660.269516][T13649] binder: 13648:13649 ioctl c0306201 0 returned -14
[  660.314894][T13649] binder: 13648:13649 ioctl c0306201 200000000240 returned -11
[  660.433901][    T9] usb 3-1: USB disconnect, device number 97
[  660.482593][T13159] Bluetooth: hci0: command tx timeout
[  660.601517][    T9] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  660.779019][T13665] loop6: detected capacity change from 0 to 63
[  660.793280][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  660.821539][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  660.859570][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  660.873966][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.890942][ T5951] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  660.935566][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'.
[  661.035169][ T1210] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[  661.082993][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  661.105213][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  661.133660][    T9] usb 3-1: usb_control_msg returned -32
[  661.145044][    T9] usbtmc 3-1:16.0: can't read capabilities
[  661.154174][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  661.175715][    T9] usb 3-1: USB disconnect, device number 98
[  661.183638][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  661.205195][ T5951] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  661.219093][ T1210] usb 2-1: config 0 has an invalid interface number: 7 but max is 0
[  661.232828][ T1210] usb 2-1: config 0 has no interface number 0
[  661.239168][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.248381][ T1210] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  661.263373][ T5951] usb 4-1: config 0 descriptor??
[  661.268653][ T1210] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.283172][ T1210] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  661.292633][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.303654][ T1210] usb 2-1: config 0 descriptor??
[  661.400541][ T5912] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  661.550620][ T5912] usb 5-1: Using ep0 maxpacket: 8
[  661.558399][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.569780][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.579759][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  661.592896][ T5912] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  661.602349][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.613856][ T5912] usb 5-1: config 0 descriptor??
[  661.717540][ T5951] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  661.751467][ T1210] bigben 0003:146B:0902.0097: unexpected rdesc, please submit for review
[  661.785577][ T1210] bigben 0003:146B:0902.0097: unknown main item tag 0x0
[  661.801012][ T1210] bigben 0003:146B:0902.0097: unknown main item tag 0x0
[  661.813052][ T1210] bigben 0003:146B:0902.0097: unknown main item tag 0x0
[  661.830167][ T1210] bigben 0003:146B:0902.0097: unknown main item tag 0x0
[  661.848064][ T1210] bigben 0003:146B:0902.0097: unknown main item tag 0x0
[  661.865976][ T1210] bigben 0003:146B:0902.0097: hidraw1: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input7
[  661.919452][ T1210] bigben 0003:146B:0902.0097: missing HID_OUTPUT_REPORT 0
[  661.933276][ T1210] bigben 0003:146B:0902.0097: no output report found
[  661.985986][ T1210] usb 2-1: USB disconnect, device number 77
[  662.051994][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.053848][T13676] fido_id[13676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  662.076149][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.132078][ T5912] nzxt-kraken2 0003:1E71:170E.0098: hidraw1: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0
[  662.350812][ T5912] usb 5-1: USB disconnect, device number 7
[  662.399615][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  662.411427][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  662.420668][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  662.434021][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  662.445811][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  662.555460][   T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.560254][T13159] Bluetooth: hci0: command tx timeout
[  662.678223][   T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.745726][   T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.797786][   T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.949453][ T5912] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  662.975174][T13679] chnl_net:caif_netlink_parms(): no params data found
[  663.055777][   T50] batadv0: left promiscuous mode
[  663.067613][   T50] bridge0: port 3(batadv0) entered disabled state
[  663.078244][   T50] bridge_slave_1: left allmulticast mode
[  663.091719][   T50] bridge_slave_1: left promiscuous mode
[  663.097662][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.111953][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  663.130809][   T50] bridge_slave_0: left allmulticast mode
[  663.136654][   T50] bridge_slave_0: left promiscuous mode
[  663.146822][ T5912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  663.160467][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.172169][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.202545][ T5912] usb 2-1: config 0 descriptor??
[  663.235000][ T5912] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  663.445407][T13695] FAULT_INJECTION: forcing a failure.
[  663.445407][T13695] name failslab, interval 1, probability 0, space 0, times 0
[  663.458271][T13695] CPU: 1 UID: 0 PID: 13695 Comm: syz.4.2409 Not tainted syzkaller #0 PREEMPT(full) 
[  663.458316][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  663.458337][T13695] Call Trace:
[  663.458353][T13695]  <TASK>
[  663.458369][T13695]  dump_stack_lvl+0x189/0x250
[  663.458409][T13695]  ? __pfx____ratelimit+0x10/0x10
[  663.458438][T13695]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.458470][T13695]  ? __pfx__printk+0x10/0x10
[  663.458507][T13695]  ? __pfx___might_resched+0x10/0x10
[  663.458538][T13695]  should_fail_ex+0x414/0x560
[  663.458567][T13695]  should_failslab+0xa8/0x100
[  663.458593][T13695]  __kmalloc_noprof+0xcb/0x7f0
[  663.458615][T13695]  ? do_sys_poll+0x2ac/0x1070
[  663.458648][T13695]  do_sys_poll+0x2ac/0x1070
[  663.458692][T13695]  ? __pfx_do_sys_poll+0x10/0x10
[  663.458795][T13695]  ? rcu_read_lock_any_held+0xb3/0x120
[  663.458828][T13695]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  663.458859][T13695]  ? vfs_write+0x956/0xb30
[  663.458908][T13695]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  663.458938][T13695]  ? set_user_sigmask+0xc7/0x1b0
[  663.458964][T13695]  ? __pfx_set_user_sigmask+0x10/0x10
[  663.458990][T13695]  ? __fget_files+0x3a0/0x420
[  663.459026][T13695]  __se_sys_ppoll+0x1ff/0x260
[  663.459055][T13695]  ? __pfx___se_sys_ppoll+0x10/0x10
[  663.459081][T13695]  ? __pfx_ksys_write+0x10/0x10
[  663.459110][T13695]  ? do_syscall_64+0xbe/0xfa0
[  663.459136][T13695]  ? __x64_sys_ppoll+0x20/0xc0
[  663.459164][T13695]  do_syscall_64+0xfa/0xfa0
[  663.459192][T13695]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.459242][T13695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.459262][T13695]  ? clear_bhb_loop+0x60/0xb0
[  663.459299][T13695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.459317][T13695] RIP: 0033:0x7f743bf8ebe9
[  663.459344][T13695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  663.459358][T13695] RSP: 002b:00007f743ce7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  663.459377][T13695] RAX: ffffffffffffffda RBX: 00007f743c1c5fa0 RCX: 00007f743bf8ebe9
[  663.459390][T13695] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  663.459402][T13695] RBP: 00007f743ce7c090 R08: 0000000000000000 R09: 0000000000000000
[  663.459413][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.459425][T13695] R13: 00007f743c1c6038 R14: 00007f743c1c5fa0 R15: 00007ffdae118a58
[  663.459455][T13695]  </TASK>
[  663.702693][ T5912] usb 4-1: reset high-speed USB device number 62 using dummy_hcd
[  663.833064][T13705] binder: 13704:13705 ioctl c0306201 200000000240 returned -11
[  664.097292][   T50] team0: Port device bond0 removed
[  664.105786][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.119609][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.130354][   T50] bond0 (unregistering): Released all slaves
[  664.138855][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  664.226778][T13679] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.234244][T13679] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.241990][T13679] bridge_slave_0: entered allmulticast mode
[  664.253454][T13679] bridge_slave_0: entered promiscuous mode
[  664.261832][   T50] : left promiscuous mode
[  664.279089][T13679] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.286431][T13679] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.288361][ T5925] usb 5-1: Using ep0 maxpacket: 32
[  664.294818][T13679] bridge_slave_1: entered allmulticast mode
[  664.311533][T13679] bridge_slave_1: entered promiscuous mode
[  664.314608][ T5925] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  664.327096][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.338526][ T5925] usb 5-1: Product: syz
[  664.342829][ T5925] usb 5-1: Manufacturer: syz
[  664.347533][ T5925] usb 5-1: SerialNumber: syz
[  664.377721][ T5925] usb 5-1: config 0 descriptor??
[  664.404147][ T5925] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  664.484212][T13679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.505174][T13679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.558228][T13159] Bluetooth: hci3: command tx timeout
[  664.645383][T13679] team0: Port device team_slave_0 added
[  664.656966][T13679] team0: Port device team_slave_1 added
[  664.727985][ T5912] usb 4-1: device descriptor read/64, error -71
[  664.744638][T13679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.757004][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  664.789360][T13679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  664.813383][   T50] hsr_slave_0: left promiscuous mode
[  664.823909][   T50] hsr_slave_1: left promiscuous mode
[  664.831712][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.844519][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.854029][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.863113][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.888974][   T50] veth1_macvtap: left promiscuous mode
[  664.895627][   T50] veth0_macvtap: left promiscuous mode
[  664.901787][   T50] veth1_vlan: left promiscuous mode
[  664.907623][   T50] veth0_vlan: left promiscuous mode
[  664.967834][ T5912] usb 4-1: reset high-speed USB device number 62 using dummy_hcd
[  665.119867][ T5912] usb 4-1: device descriptor read/64, error -71
[  665.357975][ T5912] usb 4-1: reset high-speed USB device number 62 using dummy_hcd
[  665.386257][ T5912] usb 4-1: device descriptor read/8, error -71
[  665.409595][ T5925] gspca_ov534_9: reg_w failed -71
[  665.596197][   T50] team0 (unregistering): Port device team_slave_1 removed
[  665.630252][ T5912] usb 4-1: reset high-speed USB device number 62 using dummy_hcd
[  665.650216][   T50] team0 (unregistering): Port device team_slave_0 removed
[  665.659698][ T5912] usb 4-1: device descriptor read/8, error -71
[  665.709518][ T5925] gspca_ov534_9: Unknown sensor 0000
[  665.709644][ T5925] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  665.741386][ T5925] usb 5-1: USB disconnect, device number 8
[  665.767419][ T1210] usb 2-1: USB disconnect, device number 78
[  665.775648][   T24] usb 4-1: USB disconnect, device number 62
[  665.969727][   T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  666.086178][T13736] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2416'.
[  666.121376][   T24] usb 4-1: device descriptor read/64, error -71
[  666.286838][ T5925] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  666.295602][T13679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.304710][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.331948][T13679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.386765][   T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  666.432276][T13679] hsr_slave_0: entered promiscuous mode
[  666.442439][T13679] hsr_slave_1: entered promiscuous mode
[  666.446439][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  666.449679][T13679] debugfs: 'hsr0' already exists in 'hsr'
[  666.467066][T13679] Cannot create hsr debugfs directory
[  666.482360][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  666.513549][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  666.527066][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.537952][   T24] usb 4-1: device descriptor read/64, error -71
[  666.636876][T13159] Bluetooth: hci3: command tx timeout
[  666.647114][   T24] usb usb4-port1: attempt power cycle
[  666.741753][   T50] IPVS: stop unused estimator thread 0...
[  666.764145][ T5925] usb 5-1: usb_control_msg returned -32
[  666.790753][ T5925] usbtmc 5-1:16.0: can't read capabilities
[  666.837158][ T5925] usb 5-1: USB disconnect, device number 9
[  666.998563][   T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  667.029177][   T24] usb 4-1: device descriptor read/8, error -71
[  667.228196][T13679] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  667.240029][T13679] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  667.252009][T13679] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  667.266506][   T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  667.271385][T13679] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  667.308486][   T24] usb 4-1: device descriptor read/8, error -71
[  667.369805][T13762] binder: 13761:13762 ioctl c0306201 200000000240 returned -11
[  667.426415][   T24] usb usb4-port1: unable to enumerate USB device
[  667.572633][T13679] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.626394][T13679] 8021q: adding VLAN 0 to HW filter on device team0
[  667.647054][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.654289][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.708599][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.715841][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.725788][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  667.896058][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  667.915789][ T5951] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  667.917793][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  667.960215][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  667.981516][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  668.007108][T13786] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  668.025571][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  668.047512][T13786] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  668.048891][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.082560][   T24] usb 5-1: config 0 descriptor??
[  668.100845][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  668.133647][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  668.178064][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  668.195875][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  668.212998][ T5951] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  668.245811][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.268457][ T5951] usb 2-1: config 0 descriptor??
[  668.351268][T13679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.452525][T13679] veth0_vlan: entered promiscuous mode
[  668.458315][ T5925] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  668.491834][T13679] veth1_vlan: entered promiscuous mode
[  668.523283][   T24] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  668.583709][T13679] veth0_macvtap: entered promiscuous mode
[  668.607664][T13679] veth1_macvtap: entered promiscuous mode
[  668.635357][ T5925] usb 4-1: Using ep0 maxpacket: 32
[  668.651487][ T5925] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  668.668224][T13679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  668.679125][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.686461][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  668.693002][T13679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.695311][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  668.709741][ T5951] usbhid 2-1:0.0: can't add hid device: -32
[  668.711049][ T5925] usb 4-1: Product: syz
[  668.722978][T13159] Bluetooth: hci3: command tx timeout
[  668.725104][ T5951] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  668.736262][ T5925] usb 4-1: Manufacturer: syz
[  668.736286][ T5925] usb 4-1: SerialNumber: syz
[  668.760414][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.773167][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.779611][ T5925] usb 4-1: config 0 descriptor??
[  668.790708][ T5925] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  668.808630][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.828933][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  668.857407][ T5951] usb 2-1: USB disconnect, device number 79
[  668.988419][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.001904][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.067710][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.078539][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.305551][T13813] loop3: detected capacity change from 0 to 1
[  669.324953][T13813] Dev loop3: unable to read RDB block 1
[  669.343151][T13813]  loop3: unable to read partition table
[  669.355830][T13813] loop3: partition table beyond EOD, truncated
[  669.373595][T13813] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  669.551198][T13821] binder: 13819:13821 ioctl c0306201 200000000240 returned -11
[  669.654368][T12731] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  669.795299][ T5925] gspca_ov534_9: reg_w failed -71
[  669.817473][T12731] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  669.827734][T12731] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.843081][T12731] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  669.852490][T12731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.072414][T12731] usb 2-1: usb_control_msg returned -32
[  670.093186][ T5925] gspca_ov534_9: Unknown sensor 0000
[  670.093300][ T5925] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  670.111271][T12731] usbtmc 2-1:16.0: can't read capabilities
[  670.149222][T12731] usb 2-1: USB disconnect, device number 80
[  670.165714][ T5925] usb 4-1: USB disconnect, device number 67
[  670.293984][    T9] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  670.643954][ T5853] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  670.688398][T13851] netlink: 'syz.1.2430': attribute type 1 has an invalid length.
[  670.698343][T13851] netlink: 'syz.1.2430': attribute type 2 has an invalid length.
[  670.771717][T13853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  670.778424][T13853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  670.789895][T13853] vhci_hcd vhci_hcd.0: Device attached
[  670.793686][T13159] Bluetooth: hci3: command tx timeout
[  670.817379][ T5853] usb 4-1: unable to get BOS descriptor or descriptor too short
[  670.826140][ T5853] usb 4-1: not running at top speed; connect to a high speed hub
[  670.835694][ T5853] usb 4-1: config 5 has an invalid interface number: 215 but max is 0
[  670.844666][ T5853] usb 4-1: config 5 has no interface number 0
[  670.850829][ T5853] usb 4-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  670.863179][ T5853] usb 4-1: config 5 interface 215 has no altsetting 0
[  670.872351][ T5853] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  670.882467][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.890565][ T5853] usb 4-1: Product: syz
[  670.895497][ T5853] usb 4-1: Manufacturer: syz
[  670.900115][ T5853] usb 4-1: SerialNumber: syz
[  670.910240][T13846] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  671.033723][T10355] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  671.034067][T12731] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  671.127445][ T5853] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected
[  671.139640][ T5853] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  671.156895][ T5853] usb 4-1: USB disconnect, device number 68
[  671.173818][T12731] usb 2-1: device descriptor read/64, error -71
[  671.183847][ T5853] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  671.211728][ T5853] cypress_m8 4-1:5.215: device disconnected
[  671.320416][T13859] netlink: 'syz.2.2433': attribute type 10 has an invalid length.
[  671.334939][T13859] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.343847][T13859] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.360967][T13859] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.368257][T13859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.375695][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'.
[  671.375863][T13859] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.391751][T13859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.405866][T13859] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  671.416804][T13860] bridge_slave_1: left allmulticast mode
[  671.422491][T13860] bridge_slave_1: left promiscuous mode
[  671.431328][T13860] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.446203][T13860] bridge_slave_0: left allmulticast mode
[  671.454041][T13860] bridge_slave_0: left promiscuous mode
[  671.460944][T13860] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.473316][T12731] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  671.499034][T13860] bond0: (slave bridge0): Releasing backup interface
[  671.615679][T12731] usb 2-1: device descriptor read/64, error -71
[  671.701522][T13865] binder: 13864:13865 ioctl c0306201 200000000240 returned -11
[  671.723313][T12731] usb usb2-port1: attempt power cycle
[  671.834250][    T9] usb 5-1: device descriptor read/64, error -71
[  671.962754][   T24] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  672.045159][   T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  672.082702][    T9] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  672.086181][T12731] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  672.114622][T12731] usb 2-1: device descriptor read/8, error -71
[  672.121596][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  672.131924][   T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5
[  672.141028][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.152064][   T24] usb 4-1: config 0 descriptor??
[  672.202538][   T10] usb 3-1: Using ep0 maxpacket: 32
[  672.212234][   T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  672.221937][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.231215][   T10] usb 3-1: Product: syz
[  672.235488][   T10] usb 3-1: Manufacturer: syz
[  672.240123][   T10] usb 3-1: SerialNumber: syz
[  672.249877][   T10] usb 3-1: config 0 descriptor??
[  672.259202][   T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  672.352672][T12731] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  672.377279][T12731] usb 2-1: device descriptor read/8, error -71
[  672.383888][   T24] usb 4-1: string descriptor 0 read error: -71
[  672.391359][   T24] hub 4-1:0.0: bad descriptor, ignoring hub
[  672.400566][   T24] hub 4-1:0.0: probe with driver hub failed with error -5
[  672.416701][   T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  672.425712][ T1163] usb 4-1: Failed to submit usb control message: -71
[  672.433655][ T1163] usb 4-1: unable to send the bmi data to the device: -71
[  672.440880][ T1163] usb 4-1: unable to get target info from device
[  672.443948][   T24] usb 4-1: USB disconnect, device number 69
[  672.448247][ T1163] usb 4-1: could not get target info (-71)
[  672.459275][ T1163] usb 4-1: could not probe fw (-71)
[  672.498324][ T5912] usb 5-1: USB disconnect, device number 10
[  672.506078][T12731] usb usb2-port1: unable to enumerate USB device
[  673.211978][ T5912] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  673.277359][   T10] gspca_ov534_9: reg_w failed -71
[  673.373282][ T5912] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  673.384663][ T5912] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  673.398108][ T5912] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  673.407293][T12731] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  673.414973][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.573555][T12731] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  673.585290][T12731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  673.591455][   T10] gspca_ov534_9: Unknown sensor 0000
[  673.596423][   T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  673.600838][T12731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  673.614822][   T10] usb 3-1: USB disconnect, device number 99
[  673.634765][ T5912] usb 4-1: usb_control_msg returned -32
[  673.640445][ T5912] usbtmc 4-1:16.0: can't read capabilities
[  673.647074][T12731] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  673.660964][T12731] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  673.670706][T12731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.691638][T12731] usb 5-1: config 0 descriptor??
[  673.708454][ T5912] usb 4-1: USB disconnect, device number 70
[  673.760031][T13854] vhci_hcd: connection reset by peer
[  673.775072][   T50] vhci_hcd: stop threads
[  673.784117][   T50] vhci_hcd: release socket
[  673.789985][   T50] vhci_hcd: disconnect device
[  673.816093][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'.
[  673.885839][T13882] netlink: 'syz.2.2442': attribute type 4 has an invalid length.
[  673.900843][T13882] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2442'.
[  674.039002][T13888] binder: BINDER_SET_CONTEXT_MGR already set
[  674.062030][T13888] binder: 13887:13888 ioctl 4018620d 2000000002c0 returned -16
[  674.072196][T13888] binder: 13887:13888 ioctl c0306201 200000000240 returned -11
[  674.114878][T13890] comedi comedi3: pcl816: I/O port conflict (0x1,16)
[  674.147741][T12731] plantronics 0003:047F:FFFF.009A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  674.450917][T12731] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  674.602650][T12731] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  674.614825][   T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  674.622467][T12731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  674.635530][T12731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  674.645454][T12731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  674.659458][T12731] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  674.668674][T12731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.679055][T12731] usb 4-1: config 0 descriptor??
[  674.800781][   T24] usb 2-1: Using ep0 maxpacket: 32
[  674.810620][   T24] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  674.819934][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.829334][   T24] usb 2-1: Product: syz
[  674.833909][   T24] usb 2-1: Manufacturer: syz
[  674.838548][   T24] usb 2-1: SerialNumber: syz
[  674.845946][   T24] usb 2-1: config 0 descriptor??
[  674.856402][   T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  675.096710][T12731] usbhid 4-1:0.0: can't add hid device: -71
[  675.115463][T12731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  675.134579][T12731] usb 4-1: USB disconnect, device number 71
[  675.411127][T13922] binder: 13921:13922 ioctl c0306201 200000000240 returned -11
[  675.719923][T12731] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[  675.864235][   T24] gspca_ov534_9: reg_w failed -71
[  675.903312][T12731] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  675.909902][   T10] usb 5-1: reset high-speed USB device number 11 using dummy_hcd
[  675.913572][T12731] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  675.934379][T12731] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  675.943537][T12731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.142885][T10355] vhci_hcd: vhci_device speed not set
[  676.157218][T12731] usb 3-1: usb_control_msg returned -32
[  676.164457][T12731] usbtmc 3-1:16.0: can't read capabilities
[  676.180769][   T24] gspca_ov534_9: Unknown sensor 0000
[  676.180870][   T24] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  676.199853][T12731] usb 3-1: USB disconnect, device number 100
[  676.223176][   T24] usb 2-1: USB disconnect, device number 85
[  676.312696][T13159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  676.323607][T13159] CPU: 1 UID: 0 PID: 13159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  676.323637][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  676.323652][T13159] Workqueue: hci1 hci_rx_work
[  676.323681][T13159] Call Trace:
[  676.323692][T13159]  <TASK>
[  676.323701][T13159]  dump_stack_lvl+0x189/0x250
[  676.323740][T13159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  676.323770][T13159]  ? __pfx__printk+0x10/0x10
[  676.323802][T13159]  ? kernfs_path_from_node+0x250/0x290
[  676.323816][T13159]  ? kernfs_path_from_node+0x2f/0x290
[  676.323834][T13159]  sysfs_create_dir_ns+0x259/0x280
[  676.323869][T13159]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  676.323903][T13159]  ? do_raw_spin_unlock+0x122/0x240
[  676.323955][T13159]  kobject_add_internal+0x59f/0xb40
[  676.323999][T13159]  kobject_add+0x155/0x220
[  676.324036][T13159]  ? __pfx_kobject_add+0x10/0x10
[  676.324083][T13159]  ? _raw_spin_unlock+0x28/0x50
[  676.324127][T13159]  ? get_device_parent+0x366/0x3a0
[  676.324144][T13159]  device_add+0x408/0xb50
[  676.324167][T13159]  hci_conn_add_sysfs+0xd5/0x1e0
[  676.324211][T13159]  le_conn_complete_evt+0xc3a/0x1220
[  676.324257][T13159]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  676.324292][T13159]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  676.324317][T13159]  ? __asan_memcpy+0x40/0x70
[  676.324352][T13159]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  676.324378][T13159]  ? skb_pull_data+0xfb/0x200
[  676.324403][T13159]  hci_le_conn_complete_evt+0x187/0x450
[  676.324428][T13159]  hci_event_packet+0x78c/0x1200
[  676.324447][T13159]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  676.324478][T13159]  ? __pfx_hci_event_packet+0x10/0x10
[  676.324504][T13159]  ? kcov_remote_start+0x4d3/0x7f0
[  676.324522][T13159]  ? local_clock_noinstr+0xe0/0xe0
[  676.324550][T13159]  ? hci_send_to_monitor+0xe2/0x570
[  676.324574][T13159]  hci_rx_work+0x46a/0xe80
[  676.324596][T13159]  ? process_scheduled_works+0x9ef/0x17b0
[  676.324623][T13159]  process_scheduled_works+0xae1/0x17b0
[  676.324676][T13159]  ? __pfx_process_scheduled_works+0x10/0x10
[  676.324711][T13159]  worker_thread+0x8a0/0xda0
[  676.324731][T13159]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  676.324756][T13159]  ? __kthread_parkme+0x7b/0x200
[  676.324795][T13159]  kthread+0x70e/0x8a0
[  676.324826][T13159]  ? __pfx_worker_thread+0x10/0x10
[  676.324850][T13159]  ? __pfx_kthread+0x10/0x10
[  676.324871][T13159]  ? _raw_spin_unlock_irq+0x23/0x50
[  676.324889][T13159]  ? lockdep_hardirqs_on+0x9c/0x150
[  676.324907][T13159]  ? __pfx_kthread+0x10/0x10
[  676.324951][T13159]  ret_from_fork+0x47c/0x820
[  676.324977][T13159]  ? __pfx_ret_from_fork+0x10/0x10
[  676.325008][T13159]  ? __switch_to_asm+0x39/0x70
[  676.325023][T13159]  ? __switch_to_asm+0x33/0x70
[  676.325036][T13159]  ? __pfx_kthread+0x10/0x10
[  676.325058][T13159]  ret_from_fork_asm+0x1a/0x30
[  676.325096][T13159]  </TASK>
[  676.325127][T13159] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  676.566325][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'.
[  676.569879][T13159] Bluetooth: hci1: failed to register connection device
[  676.574842][    T9] IPVS: starting estimator thread 0...
[  676.584273][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'.
[  676.682291][T13934] FAULT_INJECTION: forcing a failure.
[  676.682291][T13934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  676.700822][T13934] CPU: 1 UID: 0 PID: 13934 Comm: syz.3.2460 Not tainted syzkaller #0 PREEMPT(full) 
[  676.700848][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  676.700861][T13934] Call Trace:
[  676.700869][T13934]  <TASK>
[  676.700878][T13934]  dump_stack_lvl+0x189/0x250
[  676.700912][T13934]  ? __pfx____ratelimit+0x10/0x10
[  676.700939][T13934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  676.700968][T13934]  ? __pfx__printk+0x10/0x10
[  676.700995][T13934]  ? __might_fault+0xb0/0x130
[  676.701026][T13934]  should_fail_ex+0x414/0x560
[  676.701051][T13934]  _copy_from_user+0x2d/0xb0
[  676.701081][T13934]  core_sys_select+0x549/0xa20
[  676.701115][T13934]  ? __pfx_core_sys_select+0x10/0x10
[  676.701169][T13934]  ? __pfx_set_user_sigmask+0x10/0x10
[  676.701203][T13934]  __se_sys_pselect6+0x27a/0x300
[  676.701233][T13934]  ? __pfx___se_sys_pselect6+0x10/0x10
[  676.701256][T13934]  ? __pfx_ksys_write+0x10/0x10
[  676.701282][T13934]  ? __x64_sys_pselect6+0x21/0xf0
[  676.701308][T13934]  do_syscall_64+0xfa/0xfa0
[  676.701333][T13934]  ? lockdep_hardirqs_on+0x9c/0x150
[  676.701360][T13934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.701378][T13934]  ? clear_bhb_loop+0x60/0xb0
[  676.701401][T13934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.701419][T13934] RIP: 0033:0x7fb776f8ebe9
[  676.701436][T13934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  676.701453][T13934] RSP: 002b:00007fb777e06038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  676.701473][T13934] RAX: ffffffffffffffda RBX: 00007fb7771c5fa0 RCX: 00007fb776f8ebe9
[  676.701488][T13934] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000040
[  676.701500][T13934] RBP: 00007fb777e06090 R08: 0000000000000000 R09: 0000000000000000
[  676.701512][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.701524][T13934] R13: 00007fb7771c6038 R14: 00007fb7771c5fa0 R15: 00007ffd449fe068
[  676.701554][T13934]  </TASK>
[  676.709398][T13932] IPVS: using max 34 ests per chain, 81600 per kthread
[  676.960160][T13940] loop2: detected capacity change from 0 to 7
[  676.977313][ T5877] Dev loop2: unable to read RDB block 7
[  676.995834][ T5877]  loop2: unable to read partition table
[  677.006518][ T5877] loop2: partition table beyond EOD, truncated
[  677.014345][T13940] Dev loop2: unable to read RDB block 7
[  677.023318][T13940]  loop2: unable to read partition table
[  677.031654][T13940] loop2: partition table beyond EOD, truncated
[  677.043280][T13940] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  677.208870][ T5951] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  677.358907][ T5951] usb 3-1: Using ep0 maxpacket: 16
[  677.365827][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.377414][ T5951] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  677.387050][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.398169][ T5951] usb 3-1: config 0 descriptor??
[  677.439214][T10355] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  677.538677][   T10] usb 5-1: device descriptor read/64, error -71
[  677.578815][    T9] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  677.598614][T10355] usb 2-1: Using ep0 maxpacket: 32
[  677.607075][T10355] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  677.617767][T10355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.627695][T10355] usb 2-1: Product: syz
[  677.632258][T10355] usb 2-1: Manufacturer: syz
[  677.637037][T10355] usb 2-1: SerialNumber: syz
[  677.642129][ T5951] usbhid 3-1:0.0: can't add hid device: -71
[  677.648125][ T5951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  677.658839][T10355] usb 2-1: config 0 descriptor??
[  677.667933][T10355] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  677.682321][ T5951] usb 3-1: USB disconnect, device number 101
[  677.718665][    T9] usb 4-1: device descriptor read/64, error -71
[  677.798769][   T10] usb 5-1: reset high-speed USB device number 11 using dummy_hcd
[  677.958292][    T9] usb 4-1: new full-speed USB device number 73 using dummy_hcd
[  678.088255][    T9] usb 4-1: device descriptor read/64, error -71
[  678.168904][ T5853] usb 5-1: USB disconnect, device number 11
[  678.209825][    T9] usb usb4-port1: attempt power cycle
[  678.243539][T13952] cgroup: Unknown subsys name 'appraise'
[  678.473667][T10355] gspca_ov534_9: reg_w failed -71
[  678.548136][    T9] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  678.548136][   T24] usb 3-1: new full-speed USB device number 102 using dummy_hcd
[  678.578837][    T9] usb 4-1: device descriptor read/8, error -71
[  678.701287][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  678.714479][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  678.733534][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  678.746712][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.788082][T10355] gspca_ov534_9: Unknown sensor 0000
[  678.788198][T10355] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  678.805283][T10355] usb 2-1: USB disconnect, device number 86
[  678.817760][    T9] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[  678.848281][    T9] usb 4-1: device descriptor read/8, error -71
[  678.960781][    T9] usb usb4-port1: unable to enumerate USB device
[  678.964425][   T24] usb 3-1: usb_control_msg returned -32
[  678.967900][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  678.988035][   T24] usbtmc 3-1:16.0: can't read capabilities
[  679.005691][   T24] usb 3-1: USB disconnect, device number 102
[  679.140640][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  679.153979][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  679.168146][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  679.179495][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  679.193395][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  679.202580][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.213696][   T10] usb 5-1: config 0 descriptor??
[  679.650238][   T10] plantronics 0003:047F:FFFF.009B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  680.215331][T13980] netlink: 'syz.2.2479': attribute type 4 has an invalid length.
[  680.516472][   T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  680.670526][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  680.682505][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  680.695449][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  680.697077][   T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  680.705854][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  680.731306][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  680.741254][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.758371][   T10] usb 3-1: config 0 descriptor??
[  680.796559][T13986] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2482'.
[  680.896341][   T24] usb 4-1: Using ep0 maxpacket: 32
[  680.905471][   T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  680.914769][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.924214][   T24] usb 4-1: Product: syz
[  680.928617][   T24] usb 4-1: Manufacturer: syz
[  680.933239][   T24] usb 4-1: SerialNumber: syz
[  680.940803][   T24] usb 4-1: config 0 descriptor??
[  680.952739][   T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  681.046138][T12731] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  681.173133][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  681.181941][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  681.201386][   T10] usb 3-1: USB disconnect, device number 103
[  681.221214][T12731] usb 2-1: unable to get BOS descriptor or descriptor too short
[  681.232804][T12731] usb 2-1: config 7 has an invalid interface number: 3 but max is 1
[  681.242870][T12731] usb 2-1: config 7 has an invalid interface number: 232 but max is 1
[  681.251209][T12731] usb 2-1: config 7 has no interface number 0
[  681.257515][T12731] usb 2-1: config 7 has no interface number 1
[  681.263698][T12731] usb 2-1: config 7 interface 3 has no altsetting 0
[  681.271771][T12731] usb 2-1: config 7 interface 232 has no altsetting 0
[  681.283663][T12731] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0
[  681.293015][T12731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.302028][T12731] usb 2-1: Product: syz
[  681.306585][T12731] usb 2-1: Manufacturer: syz
[  681.311220][T12731] usb 2-1: SerialNumber: syz
[  681.415875][ T5853] usb 5-1: reset high-speed USB device number 12 using dummy_hcd
[  681.538300][T12731] usb 2-1: unknown number of interfaces: 2
[  681.548629][T12731] usb 2-1: USB disconnect, device number 87
[  681.758242][   T24] gspca_ov534_9: reg_w failed -71
[  681.986949][   T10] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[  682.065700][   T24] gspca_ov534_9: Unknown sensor 0000
[  682.065795][   T24] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  682.089524][   T24] usb 4-1: USB disconnect, device number 76
[  682.151987][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  682.162161][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  682.175861][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  682.185414][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.418508][   T10] usb 3-1: usb_control_msg returned -32
[  682.438404][   T10] usbtmc 3-1:16.0: can't read capabilities
[  682.495415][   T10] usb 3-1: USB disconnect, device number 104
[  682.530699][T14003] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2489'.
[  682.704996][T13159] Bluetooth: hci1: command 0x0406 tx timeout
[  682.818687][T14015] binder: 14014:14015 ioctl 4018620d 0 returned -22
[  682.827510][T14015] binder: 14014:14015 ioctl c0306201 200000000240 returned -11
[  683.017142][ T5853] usb 5-1: device descriptor read/64, error -71
[  683.134611][   T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  683.254628][ T5853] usb 5-1: reset high-speed USB device number 12 using dummy_hcd
[  683.264616][   T10] usb 2-1: device descriptor read/64, error -71
[  683.324419][   T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  683.476095][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  683.487755][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  683.499015][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  683.504432][   T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  683.509496][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  683.531056][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  683.540175][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.551989][   T24] usb 3-1: config 0 descriptor??
[  683.613591][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  683.621880][ T5912] usb 5-1: USB disconnect, device number 12
[  683.655076][   T10] usb 2-1: device descriptor read/64, error -71
[  683.764634][   T10] usb usb2-port1: attempt power cycle
[  683.973211][   T24] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  684.104341][   T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  684.134530][   T10] usb 2-1: device descriptor read/8, error -71
[  684.352735][T14035] loop3: detected capacity change from 0 to 1
[  684.360921][   T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  684.372185][ T5877] Dev loop3: unable to read RDB block 1
[  684.378588][   T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  684.381478][ T5877]  loop3: unable to read partition table
[  684.392761][ T5877] loop3: partition table beyond EOD, truncated
[  684.403093][T14035] FAULT_INJECTION: forcing a failure.
[  684.403093][T14035] name failslab, interval 1, probability 0, space 0, times 0
[  684.416204][T14035] CPU: 0 UID: 0 PID: 14035 Comm: syz.4.2502 Not tainted syzkaller #0 PREEMPT(full) 
[  684.416230][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  684.416243][T14035] Call Trace:
[  684.416252][T14035]  <TASK>
[  684.416261][T14035]  dump_stack_lvl+0x189/0x250
[  684.416301][T14035]  ? __pfx____ratelimit+0x10/0x10
[  684.416337][T14035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  684.416367][T14035]  ? __pfx__printk+0x10/0x10
[  684.416399][T14035]  ? __pfx___might_resched+0x10/0x10
[  684.416424][T14035]  ? fs_reclaim_acquire+0x7d/0x100
[  684.416452][T14035]  should_fail_ex+0x414/0x560
[  684.416480][T14035]  should_failslab+0xa8/0x100
[  684.416505][T14035]  __kmalloc_cache_noprof+0x6f/0x6f0
[  684.416527][T14035]  ? bdev_disk_changed+0x4aa/0x14b0
[  684.416562][T14035]  bdev_disk_changed+0x4aa/0x14b0
[  684.416600][T14035]  ? __pfx___mutex_lock+0x10/0x10
[  684.416637][T14035]  ? __pfx_bdev_disk_changed+0x10/0x10
[  684.416669][T14035]  ? kobject_uevent_env+0x36b/0x8c0
[  684.416695][T14035]  loop_reread_partitions+0x5f/0xf0
[  684.416724][T14035]  loop_configure+0xbd2/0xe50
[  684.416762][T14035]  ? __pfx_loop_configure+0x10/0x10
[  684.416821][T14035]  lo_ioctl+0x810/0x1c10
[  684.416855][T14035]  ? __pfx_lo_ioctl+0x10/0x10
[  684.416878][T14035]  ? ima_match_policy+0x10b/0x2150
[  684.416901][T14035]  ? look_up_lock_class+0x74/0x170
[  684.416932][T14035]  ? register_lock_class+0x51/0x320
[  684.416960][T14035]  ? __lock_acquire+0xab9/0xd20
[  684.416994][T14035]  ? process_measurement+0x3d8/0x1a40
[  684.417018][T14035]  ? ima_match_policy+0x10b/0x2150
[  684.417046][T14035]  ? __lock_acquire+0xab9/0xd20
[  684.417075][T14035]  ? __lock_acquire+0xab9/0xd20
[  684.417111][T14035]  ? __lock_acquire+0xab9/0xd20
[  684.417146][T14035]  ? __lock_acquire+0xab9/0xd20
[  684.417189][T14035]  ? is_bpf_text_address+0x26/0x2b0
[  684.417218][T14035]  ? is_bpf_text_address+0x292/0x2b0
[  684.417239][T14035]  ? is_bpf_text_address+0x26/0x2b0
[  684.417265][T14035]  ? kernel_text_address+0xa5/0xe0
[  684.417286][T14035]  ? __kernel_text_address+0xd/0x40
[  684.417305][T14035]  ? unwind_get_return_address+0x4d/0x90
[  684.417338][T14035]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  684.417368][T14035]  ? arch_stack_walk+0xfc/0x150
[  684.417407][T14035]  ? stack_trace_save+0x9c/0xe0
[  684.417438][T14035]  ? stack_depot_save_flags+0x40/0x860
[  684.417468][T14035]  ? kasan_save_track+0x4f/0x80
[  684.417487][T14035]  ? kasan_save_track+0x3e/0x80
[  684.417504][T14035]  ? __kasan_save_free_info+0x46/0x50
[  684.417530][T14035]  ? __kasan_slab_free+0x5b/0x80
[  684.417549][T14035]  ? kfree+0x199/0x6d0
[  684.417564][T14035]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  684.417588][T14035]  ? security_file_ioctl+0xcb/0x2d0
[  684.417608][T14035]  ? __se_sys_ioctl+0x47/0x170
[  684.417627][T14035]  ? do_syscall_64+0xfa/0xfa0
[  684.417646][T14035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.417677][T14035]  ? __asan_memset+0x22/0x50
[  684.417699][T14035]  ? blk_get_meta_cap+0x140/0x710
[  684.417724][T14035]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  684.417748][T14035]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.417770][T14035]  ? blkdev_common_ioctl+0xff7/0x2550
[  684.417786][T14035]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  684.417804][T14035]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  684.417818][T14035]  ? do_vfs_ioctl+0xbe8/0x1430
[  684.417832][T14035]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  684.417877][T14035]  ? __pfx_lo_ioctl+0x10/0x10
[  684.417895][T14035]  blkdev_ioctl+0x5ac/0x6d0
[  684.417910][T14035]  ? __pfx_blkdev_ioctl+0x10/0x10
[  684.417921][T14035]  ? __fget_files+0x3a0/0x420
[  684.417939][T14035]  ? __fget_files+0x2a/0x420
[  684.417961][T14035]  ? bpf_lsm_file_ioctl+0x9/0x20
[  684.417982][T14035]  ? __pfx_blkdev_ioctl+0x10/0x10
[  684.417995][T14035]  __se_sys_ioctl+0xfc/0x170
[  684.418012][T14035]  do_syscall_64+0xfa/0xfa0
[  684.418031][T14035]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.418051][T14035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.418070][T14035]  ? clear_bhb_loop+0x60/0xb0
[  684.418087][T14035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.418120][T14035] RIP: 0033:0x7f743bf8ebe9
[  684.418133][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  684.418146][T14035] RSP: 002b:00007f743ce7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  684.418163][T14035] RAX: ffffffffffffffda RBX: 00007f743c1c5fa0 RCX: 00007f743bf8ebe9
[  684.418173][T14035] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003
[  684.418183][T14035] RBP: 00007f743ce7c090 R08: 0000000000000000 R09: 0000000000000000
[  684.418193][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  684.418202][T14035] R13: 00007f743c1c6038 R14: 00007f743c1c5fa0 R15: 00007ffdae118a58
[  684.418226][T14035]  </TASK>
[  684.418674][   T10] usb 2-1: device descriptor read/8, error -71
[  684.529332][   T24] usb 4-1: Using ep0 maxpacket: 32
[  684.631871][T14038] binder: 14036:14038 ioctl 4018620d 0 returned -22
[  684.646514][   T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  684.649911][   T10] usb usb2-port1: unable to enumerate USB device
[  684.659057][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.664415][T14038] binder: 14036:14038 ioctl c0306201 200000000240 returned -11
[  684.665708][   T24] usb 4-1: Product: syz
[  684.954713][   T24] usb 4-1: Manufacturer: syz
[  684.959346][   T24] usb 4-1: SerialNumber: syz
[  684.967544][   T24] usb 4-1: config 0 descriptor??
[  684.976965][   T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  685.053227][   T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  685.207867][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  685.217955][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  685.232452][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  685.241657][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.457706][   T10] usb 5-1: usb_control_msg returned -32
[  685.463515][   T10] usbtmc 5-1:16.0: can't read capabilities
[  685.479237][   T10] usb 5-1: USB disconnect, device number 13
[  685.757111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  685.764274][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  685.776806][   T24] gspca_ov534_9: reg_w failed -71
[  685.782892][ T5853] usb 3-1: reset high-speed USB device number 105 using dummy_hcd
[  686.083321][   T24] gspca_ov534_9: Unknown sensor 0000
[  686.083420][   T24] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  686.119659][   T24] usb 4-1: USB disconnect, device number 77
[  686.441751][T14059] binder: 14058:14059 ioctl 4018620d 0 returned -22
[  686.451957][T14059] binder: 14058:14059 ioctl c0306201 200000000240 returned -11
[  686.472407][T13644] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  686.532199][   T24] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  686.624045][T13644] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  686.635798][T13644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  686.649078][T13644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  686.679868][T13644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  686.714924][T13644] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  686.716732][   T24] usb 5-1: config 0 has no interfaces?
[  686.730901][T13644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.746160][T13644] usb 2-1: config 0 descriptor??
[  686.761007][   T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  686.784472][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.804897][   T24] usb 5-1: config 0 descriptor??
[  687.019856][T14055] netlink: 'syz.4.2510': attribute type 10 has an invalid length.
[  687.028975][T10355] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  687.034068][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  687.047433][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2518'.
[  687.056883][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  687.059796][T14055] team0: Device ipvlan1 failed to register rx_handler
[  687.074935][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  687.096524][   T24] usb 5-1: USB disconnect, device number 14
[  687.181028][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  687.188941][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  687.202926][T13644] usbhid 2-1:0.0: can't add hid device: -32
[  687.209059][T13644] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  687.221316][T10355] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  687.241784][T10355] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  687.258037][T13644] usb 2-1: USB disconnect, device number 92
[  687.264790][T10355] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  687.279460][T10355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.492698][   T10] usb 3-1: USB disconnect, device number 105
[  687.505520][T10355] usb 4-1: usb_control_msg returned -32
[  687.511544][T10355] usbtmc 4-1:16.0: can't read capabilities
[  687.532839][T10355] usb 4-1: USB disconnect, device number 78
[  687.666134][T14080] binder: 14079:14080 ioctl c0306201 0 returned -14
[  687.676355][T14080] binder: 14079:14080 ioctl c0306201 200000000240 returned -11
[  687.785997][T14086] syzkaller1: entered promiscuous mode
[  687.793142][T14086] syzkaller1: entered allmulticast mode
[  688.073923][T14098] random: crng reseeded on system resumption
[  688.119441][T14102] binder: 14100:14102 ioctl c0306201 0 returned -14
[  688.130540][T14102] binder: 14100:14102 ioctl c0306201 200000000240 returned -11
[  688.138708][ T5912] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  688.296229][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  688.322319][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  688.340876][T10355] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  688.342085][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  688.363623][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  688.378307][ T5912] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  688.391601][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.404672][ T5912] usb 3-1: config 0 descriptor??
[  688.422973][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'.
[  688.492844][T10355] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  688.508902][T10355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  688.558340][T10355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  688.569594][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  688.578727][T10355] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  688.592272][T10355] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  688.601389][T10355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.612943][T10355] usb 2-1: config 0 descriptor??
[  688.722344][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  688.734130][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  688.745467][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  688.755804][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  688.769796][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  688.778988][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.790310][   T10] usb 5-1: config 0 descriptor??
[  688.800688][   T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  688.837917][ T5912] plantronics 0003:047F:FFFF.009D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  688.960527][   T24] usb 4-1: Using ep0 maxpacket: 32
[  688.967532][   T24] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  688.976906][   T24] usb 4-1: config 0 has no interface number 0
[  688.983242][   T24] usb 4-1: config 0 interface 12 has no altsetting 0
[  688.992737][   T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  689.005378][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.013528][   T24] usb 4-1: Product: syz
[  689.017723][   T24] usb 4-1: Manufacturer: syz
[  689.024687][   T24] usb 4-1: SerialNumber: syz
[  689.035471][   T24] usb 4-1: config 0 descriptor??
[  689.121123][T10355] usbhid 2-1:0.0: can't add hid device: -71
[  689.127483][T10355] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  689.138964][T10355] usb 2-1: USB disconnect, device number 93
[  689.213217][    C0] raw-gadget.2 gadget.4: ignoring, device is not running
[  689.220920][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  689.226996][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  689.238487][   T10] usb 5-1: USB disconnect, device number 15
[  689.719423][T14120] 9pnet_fd: Insufficient options for proto=fd
[  689.842282][T14124] binder: 14123:14124 ioctl c0306201 0 returned -14
[  689.850594][T14124] binder: 14123:14124 ioctl c0306201 200000000240 returned -11
[  690.039719][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  690.179570][   T56] usb 3-1: reset high-speed USB device number 106 using dummy_hcd
[  690.203646][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  690.216956][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.231988][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  690.241175][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.309948][T10355] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  690.461714][   T10] usb 5-1: usb_control_msg returned -32
[  690.469661][   T10] usbtmc 5-1:16.0: can't read capabilities
[  690.470193][T10355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.489665][T10355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  690.503238][   T10] usb 5-1: USB disconnect, device number 16
[  690.517178][T10355] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  690.534160][T10355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.542957][T10355] usb 2-1: Product: syz
[  690.547230][T10355] usb 2-1: Manufacturer: syz
[  690.553389][T10355] usb 2-1: SerialNumber: syz
[  690.965474][T14136] FAULT_INJECTION: forcing a failure.
[  690.965474][T14136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.980147][T14136] CPU: 0 UID: 0 PID: 14136 Comm: syz.2.2544 Not tainted syzkaller #0 PREEMPT(full) 
[  690.980172][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  690.980184][T14136] Call Trace:
[  690.980193][T14136]  <TASK>
[  690.980201][T14136]  dump_stack_lvl+0x189/0x250
[  690.980237][T14136]  ? __pfx____ratelimit+0x10/0x10
[  690.980264][T14136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  690.980293][T14136]  ? __pfx__printk+0x10/0x10
[  690.980333][T14136]  should_fail_ex+0x414/0x560
[  690.980359][T14136]  _copy_to_user+0x31/0xb0
[  690.980389][T14136]  simple_read_from_buffer+0xe1/0x170
[  690.980416][T14136]  proc_fail_nth_read+0x1b3/0x220
[  690.980457][T14136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  690.980484][T14136]  ? rw_verify_area+0x2a6/0x4d0
[  690.980499][T14136]  ? __lock_acquire+0xab9/0xd20
[  690.980513][T14136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  690.980535][T14136]  vfs_read+0x200/0xa30
[  690.980550][T14136]  ? fdget_pos+0x247/0x320
[  690.980572][T14136]  ? __pfx___mutex_lock+0x10/0x10
[  690.980612][T14136]  ? __pfx_vfs_read+0x10/0x10
[  690.980630][T14136]  ? __fget_files+0x2a/0x420
[  690.980652][T14136]  ? __fget_files+0x3a0/0x420
[  690.980670][T14136]  ? __fget_files+0x2a/0x420
[  690.980696][T14136]  ksys_read+0x145/0x250
[  690.980715][T14136]  ? __pfx_ksys_read+0x10/0x10
[  690.980735][T14136]  ? do_syscall_64+0xbe/0xfa0
[  690.980758][T14136]  do_syscall_64+0xfa/0xfa0
[  690.980778][T14136]  ? lockdep_hardirqs_on+0x9c/0x150
[  690.980798][T14136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.980814][T14136]  ? clear_bhb_loop+0x60/0xb0
[  690.980832][T14136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.980846][T14136] RIP: 0033:0x7ff90898d5fc
[  690.980861][T14136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  690.980874][T14136] RSP: 002b:00007ff9097cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  690.980890][T14136] RAX: ffffffffffffffda RBX: 00007ff908bc5fa0 RCX: 00007ff90898d5fc
[  690.980901][T14136] RDX: 000000000000000f RSI: 00007ff9097cd0a0 RDI: 0000000000000004
[  690.980911][T14136] RBP: 00007ff9097cd090 R08: 0000000000000000 R09: 0000000000000000
[  690.980920][T14136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  690.980929][T14136] R13: 00007ff908bc6038 R14: 00007ff908bc5fa0 R15: 00007ffc6ed359a8
[  690.980953][T14136]  </TASK>
[  691.250455][T14138] syzkaller0: entered promiscuous mode
[  691.256227][T14139] syzkaller0: entered allmulticast mode
[  691.324255][T14138] syzkaller0 (unregistering): left promiscuous mode
[  691.334663][T14138] syzkaller0 (unregistering): left allmulticast mode
[  691.546791][T14147] binder: 14146:14147 ioctl c0306201 200000000240 returned -11
[  691.573069][   T24] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  691.590611][   T24] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  691.598015][   T24] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  691.619002][   T24] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  691.667937][   T24] usb 4-1: USB disconnect, device number 79
[  691.698830][   T56] usb 3-1: device descriptor read/64, error -71
[  691.762533][T14130] overlay: Unknown parameter 'dont_measure'
[  691.789691][T10355] cdc_ncm 2-1:1.0: bind() failure
[  691.803716][T10355] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  691.834056][T10355] cdc_ncm 2-1:1.1: bind() failure
[  691.859229][T10355] usb 2-1: USB disconnect, device number 94
[  691.938364][   T56] usb 3-1: reset high-speed USB device number 106 using dummy_hcd
[  692.088285][T12731] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  692.101104][   T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  692.238167][T12731] usb 5-1: Using ep0 maxpacket: 8
[  692.246046][T12731] usb 5-1: config index 0 descriptor too short (expected 3090, got 18)
[  692.255284][T12731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.265744][T12731] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  692.276576][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  692.288331][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  692.299696][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  692.309832][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  692.322881][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  692.332727][T12731] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  692.343372][T12731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.354512][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.362897][T12731] usb 5-1: Product: syz
[  692.366822][T10355] usb 3-1: USB disconnect, device number 106
[  692.373268][T12731] usb 5-1: Manufacturer: syz
[  692.373291][T12731] usb 5-1: SerialNumber: syz
[  692.389983][T12731] usb 5-1: config 0 descriptor??
[  692.411640][   T24] usb 4-1: config 0 descriptor??
[  692.625301][T10355] usb 5-1: USB disconnect, device number 17
[  692.697810][   T10] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  692.851575][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  692.851977][   T24] plantronics 0003:047F:FFFF.009E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  692.865628][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  692.903238][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  692.916583][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.016743][T14160] loop2: detected capacity change from 0 to 8
[  693.028987][T14160] Dev loop2: unable to read RDB block 8
[  693.034638][T14160]  loop2: unable to read partition table
[  693.043308][T14160] loop2: partition table beyond EOD, truncated
[  693.050985][T14160] loop_reread_partitions: partition scan of loop2 (�被x�^>��� ) failed (rc=-5)
[  693.136149][   T10] usb 2-1: usb_control_msg returned -32
[  693.148186][   T10] usbtmc 2-1:16.0: can't read capabilities
[  693.193058][T14163] netdevsim netdevsim2: Direct firmware load for ..� failed with error -2
[  693.214340][   T10] usb 2-1: USB disconnect, device number 95
[  693.222945][T14163] netdevsim netdevsim2: Falling back to sysfs fallback for: ..�
[  693.455136][T14174] binder: 14173:14174 ioctl c0306201 200000000240 returned -11
[  693.522336][T14176] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2560'.
[  693.686206][T14181] netlink: 'syz.4.2562': attribute type 1 has an invalid length.
[  693.695553][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2562'.
[  693.702055][T14181] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2562'.
[  694.017226][   T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  694.063108][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.074206][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.083192][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.099921][T14194] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  694.120411][T14194] infiniband �
: RDMA CMA: cma_listen_on_dev, error -98
[  694.173315][T14196] binder: 14195:14196 ioctl c0306201 200000000240 returned -11
[  694.181622][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.193564][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  694.212947][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.220278][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  694.240519][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.248568][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  694.254049][T14194] virt_wifi0 speed is unknown, defaulting to 1000
[  694.259771][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  694.279114][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  694.300760][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.328519][   T24] usb 2-1: config 0 descriptor??
[  694.383873][T14200] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  694.706640][   T10] usb 3-1: new full-speed USB device number 107 using dummy_hcd
[  694.744859][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  694.752672][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  694.758892][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  694.780058][   T24] usb 2-1: USB disconnect, device number 96
[  694.835208][ T5925] usb 4-1: USB disconnect, device number 80
[  694.871617][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  694.903561][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  694.932615][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  694.950427][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.169245][   T10] usb 3-1: usb_control_msg returned -32
[  695.176551][   T10] usbtmc 3-1:16.0: can't read capabilities
[  695.194018][   T10] usb 3-1: USB disconnect, device number 107
[  695.289738][ T5925] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  695.304267][T14217] binder: 14216:14217 ioctl c0306201 200000000240 returned -11
[  695.460885][ T5925] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  695.472091][ T5925] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  695.472290][T14220] netlink: 'syz.1.2578': attribute type 16 has an invalid length.
[  695.482449][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  695.494594][T14220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2578'.
[  695.500792][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.539851][T14215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  695.553707][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  695.771407][T13644] usb 4-1: USB disconnect, device number 81
[  695.821474][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'.
[  695.885805][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  696.048438][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.059064][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  696.071473][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  696.081351][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.094689][   T10] usb 5-1: config 0 descriptor??
[  696.312464][T14223] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2579'.
[  696.337491][   T10] usb 5-1: string descriptor 0 read error: -71
[  696.360017][   T10] usb 5-1: USB disconnect, device number 18
[  697.194210][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  697.270755][T14269] [U] 
[  697.273823][T14269] [U] K{�
[  697.276857][T14269] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  697.283817][T14269] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  697.299444][T14269] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  697.309863][T14269] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  697.345479][T14269] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  697.369118][T14269] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  697.380278][T14269] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  697.391861][T14269] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  697.417916][T14269] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  697.436645][T14269] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  697.483575][T14269] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  697.492348][T14269] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  697.505883][T14269] [U] 22��Ʃ���x?0;3u�
[  697.510052][T14269] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  697.534984][T14269] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  697.544286][T14269] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  697.552877][T14269] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  697.559039][T14269] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  697.571596][T14269] [U] �ec�
[  697.574718][T14269] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  697.597174][T14268] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  697.616969][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  697.628581][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  697.639666][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  697.653774][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  697.697364][T14271] binder: 14270:14271 ioctl c0306201 200000000240 returned -11
[  697.699229][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  697.718750][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.732076][   T24] usb 5-1: config 0 descriptor??
[  698.023840][   T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  698.161518][   T24] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  698.186220][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.196312][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  698.211269][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  698.222407][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.236543][   T10] usb 3-1: config 0 descriptor??
[  698.245586][T13644] usb 4-1: new full-speed USB device number 82 using dummy_hcd
[  698.415052][T13644] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  698.425092][T13644] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  698.438497][T13644] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  698.447700][T13644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.661847][T13644] usb 4-1: usb_control_msg returned -32
[  698.667985][   T10] kovaplus 0003:1E7D:2D50.00A0: unknown main item tag 0x0
[  698.675388][T13644] usbtmc 4-1:16.0: can't read capabilities
[  698.681400][   T10] kovaplus 0003:1E7D:2D50.00A0: unknown main item tag 0x0
[  698.688704][   T10] kovaplus 0003:1E7D:2D50.00A0: unknown main item tag 0x0
[  698.697671][   T10] kovaplus 0003:1E7D:2D50.00A0: unknown main item tag 0x0
[  698.707724][   T10] kovaplus 0003:1E7D:2D50.00A0: unknown main item tag 0x0
[  698.722162][   T10] kovaplus 0003:1E7D:2D50.00A0: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0
[  698.740559][T13644] usb 4-1: USB disconnect, device number 82
[  699.464685][   T10] kovaplus 0003:1E7D:2D50.00A0: couldn't init struct kovaplus_device
[  699.479031][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2592'.
[  699.487643][   T10] kovaplus 0003:1E7D:2D50.00A0: couldn't install mouse
[  699.508735][   T10] kovaplus 0003:1E7D:2D50.00A0: probe with driver kovaplus failed with error -71
[  699.533466][   T10] usb 3-1: USB disconnect, device number 108
[  699.562475][   T56] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[  699.585527][T14295] 9pnet_fd: Insufficient options for proto=fd
[  699.723935][   T56] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  699.733949][   T56] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  699.747141][   T56] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  699.758099][   T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.881222][   T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  699.960314][   T10] usb 5-1: USB disconnect, device number 19
[  699.979635][   T56] usb 2-1: usb_control_msg returned -32
[  699.992533][   T56] usbtmc 2-1:16.0: can't read capabilities
[  700.033428][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  700.036655][T14300] binder: 14299:14300 ioctl c0306201 200000000240 returned -11
[  700.078566][   T56] usb 2-1: USB disconnect, device number 97
[  700.090360][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  700.127627][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  700.154002][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  700.177647][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  700.191516][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.215412][   T24] usb 4-1: config 0 descriptor??
[  700.305628][T14309] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  700.337382][T14309] CIFS mount error: No usable UNC path provided in device string!
[  700.337382][T14309] 
[  700.348062][T14309] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  700.418652][T14313] binder: 14312:14313 ioctl c0306201 200000000240 returned -11
[  700.426584][ T5925] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  700.596080][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  700.620896][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  700.648406][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  700.657681][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  700.668933][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  700.682846][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  700.705748][   T24] usb 4-1: USB disconnect, device number 83
[  700.727180][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  700.747841][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.761098][ T5925] usb 3-1: config 0 descriptor??
[  701.079738][T13644] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  701.213758][ T5925] plantronics 0003:047F:FFFF.00A1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  701.233321][T13644] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  701.265629][T13644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  701.304335][T13644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  701.329398][T13644] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  701.334590][T14329] binder: 14327:14329 ioctl c0306201 0 returned -14
[  701.363268][T13644] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  701.374846][T14329] binder: 14327:14329 ioctl c0306201 200000000240 returned -11
[  701.389282][T13644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.410610][T13644] usb 5-1: config 0 descriptor??
[  701.746393][T14336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.765564][T14336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.775337][T14337] binder: 14335:14337 ioctl c0306201 200000000240 returned -11
[  701.845436][T13644] plantronics 0003:047F:FFFF.00A2: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  701.858444][   T30] audit: type=1326 audit(1757030576.587:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.2.2596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff90898ebe9 code=0x0
[  701.897971][T14341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.910320][T14341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.927214][T14341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.938152][T14341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.011914][T14343] orangefs: client-core tried to read wrong size
[  702.118689][   T10] usb 4-1: new full-speed USB device number 84 using dummy_hcd
[  702.279832][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  702.290551][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  702.303890][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  702.308300][   T24] usb 2-1: new full-speed USB device number 98 using dummy_hcd
[  702.313066][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.470558][   T24] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  702.480442][   T24] usb 2-1: config 0 has no interface number 1
[  702.486635][   T24] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  702.496600][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  702.508856][   T24] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  702.518440][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  702.526467][   T24] usb 2-1: SerialNumber: syz
[  702.533933][   T10] usb 4-1: usb_control_msg returned -32
[  702.534923][   T24] usb 2-1: config 0 descriptor??
[  702.543205][   T10] usbtmc 4-1:16.0: can't read capabilities
[  702.569389][   T10] usb 4-1: USB disconnect, device number 84
[  702.757138][   T24] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  702.765800][   T24] usb 2-1: No valid video chain found.
[  702.779364][   T24] usb 2-1: USB disconnect, device number 98
[  703.017542][ T5912] usb 3-1: reset high-speed USB device number 109 using dummy_hcd
[  703.212117][T14355] netlink: 'syz.2.2614': attribute type 4 has an invalid length.
[  703.220480][T14355] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2614'.
[  703.333519][T14357] binder: 14356:14357 ioctl c0306201 0 returned -14
[  703.351215][T14357] binder: 14356:14357 ioctl c0306201 200000000240 returned -11
[  703.450208][T14365] binder: 14363:14365 ioctl c0306201 200000000240 returned -11
[  703.786646][ T5912] usb 3-1: device descriptor read/64, error -71
[  703.840087][   T24] usb 5-1: USB disconnect, device number 20
[  704.039785][ T5912] usb 3-1: reset high-speed USB device number 109 using dummy_hcd
[  704.187360][T14383] binder: 14382:14383 ioctl c0306201 0 returned -14
[  704.195120][T14383] binder: 14382:14383 ioctl c0306201 200000000240 returned -11
[  704.213531][ T5912] usb 3-1: device firmware changed
[  704.221410][ T5925] usb 3-1: USB disconnect, device number 109
[  704.336069][   T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  704.387621][ T5925] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  704.490797][T14396] QAT: Invalid ioctl 1075883590
[  704.496160][T14396] QAT: Invalid ioctl 1075883590
[  704.502378][T14396] QAT: Invalid ioctl 1075883590
[  704.507432][   T24] usb 5-1: Using ep0 maxpacket: 16
[  704.509645][T14396] QAT: Invalid ioctl 1075883590
[  704.516244][   T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  704.517990][T14396] QAT: Invalid ioctl 1075883590
[  704.528094][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  704.538675][T14396] QAT: Invalid ioctl 1075883590
[  704.542423][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  704.548260][T14396] QAT: Invalid ioctl 1075883590
[  704.561866][T14396] QAT: Invalid ioctl 1075883590
[  704.567554][T14396] QAT: Invalid ioctl 1075883590
[  704.573170][T14396] QAT: Invalid ioctl 1075883590
[  704.579954][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  704.590429][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.598671][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  704.609241][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  704.619095][   T24] usb 5-1: Product: syz
[  704.623285][   T24] usb 5-1: Manufacturer: syz
[  704.630600][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  704.640543][   T24] usb 5-1: SerialNumber: syz
[  704.647444][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  704.655921][   T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  704.673333][ T5925] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  704.684034][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.693914][ T5925] usb 3-1: Product: syz
[  704.698762][ T5925] usb 3-1: Manufacturer: syz
[  704.711730][ T5925] usb 3-1: SerialNumber: syz
[  704.736238][ T5925] usb 3-1: config 0 descriptor??
[  704.743522][ T5925] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  704.751439][ T5925] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card
[  704.759329][ T5925] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90
[  704.820477][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  704.835906][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  704.841727][T14400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2633'.
[  704.853565][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  704.866702][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  704.880135][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  704.889589][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.900719][   T10] usb 4-1: config 0 descriptor??
[  704.949800][ T5912] usb 3-1: USB disconnect, device number 110
[  705.072989][T14379] netlink: 'syz.4.2624': attribute type 29 has an invalid length.
[  705.081141][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'.
[  705.093140][   T24] usb 5-1: 0:2 : does not exist
[  705.103567][   T24] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1)
[  705.134787][   T24] usb 5-1: USB disconnect, device number 21
[  705.160212][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  705.333554][   T10] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  705.510167][T14406] binder: 14405:14406 ioctl c0306201 200000000240 returned -11
[  705.768478][T14413] pim6reg1: entered promiscuous mode
[  705.773991][T14413] pim6reg1: entered allmulticast mode
[  705.823070][T14415] FAULT_INJECTION: forcing a failure.
[  705.823070][T14415] name failslab, interval 1, probability 0, space 0, times 0
[  705.843275][T14415] CPU: 0 UID: 0 PID: 14415 Comm: syz.4.2637 Not tainted syzkaller #0 PREEMPT(full) 
[  705.843302][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  705.843314][T14415] Call Trace:
[  705.843322][T14415]  <TASK>
[  705.843331][T14415]  dump_stack_lvl+0x189/0x250
[  705.843365][T14415]  ? __pfx____ratelimit+0x10/0x10
[  705.843391][T14415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.843419][T14415]  ? __pfx__printk+0x10/0x10
[  705.843448][T14415]  ? __pfx___might_resched+0x10/0x10
[  705.843470][T14415]  ? fs_reclaim_acquire+0x7d/0x100
[  705.843497][T14415]  should_fail_ex+0x414/0x560
[  705.843521][T14415]  should_failslab+0xa8/0x100
[  705.843545][T14415]  __kmalloc_cache_noprof+0x6f/0x6f0
[  705.843565][T14415]  ? trace_contention_end+0x39/0x120
[  705.843588][T14415]  ? vhost_task_create+0xf6/0x290
[  705.843624][T14415]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  705.843652][T14415]  vhost_task_create+0xf6/0x290
[  705.843675][T14415]  ? arch_stack_walk+0xfc/0x150
[  705.843698][T14415]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  705.843727][T14415]  ? __pfx_vhost_task_create+0x10/0x10
[  705.843761][T14415]  ? __pfx_vhost_task_fn+0x10/0x10
[  705.843804][T14415]  kvm_mmu_post_init_vm+0x14c/0x300
[  705.843826][T14415]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  705.843851][T14415]  ? __mutex_trylock_common+0x153/0x260
[  705.843878][T14415]  ? __pfx___mutex_trylock_common+0x10/0x10
[  705.843903][T14415]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  705.843924][T14415]  ? rcu_is_watching+0x15/0xb0
[  705.843947][T14415]  ? trace_contention_end+0x39/0x120
[  705.843971][T14415]  ? look_up_lock_class+0x74/0x170
[  705.843999][T14415]  ? register_lock_class+0x51/0x320
[  705.844024][T14415]  ? __lock_acquire+0xab9/0xd20
[  705.844071][T14415]  kvm_vcpu_ioctl+0x95c/0xe90
[  705.844095][T14415]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  705.844135][T14415]  ? __fget_files+0x2a/0x420
[  705.844165][T14415]  ? __fget_files+0x3a0/0x420
[  705.844191][T14415]  ? __fget_files+0x2a/0x420
[  705.844217][T14415]  ? bpf_lsm_file_ioctl+0x9/0x20
[  705.844244][T14415]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  705.844260][T14415]  __se_sys_ioctl+0xfc/0x170
[  705.844283][T14415]  do_syscall_64+0xfa/0xfa0
[  705.844307][T14415]  ? lockdep_hardirqs_on+0x9c/0x150
[  705.844333][T14415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.844351][T14415]  ? clear_bhb_loop+0x60/0xb0
[  705.844374][T14415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.844392][T14415] RIP: 0033:0x7f743bf8ebe9
[  705.844408][T14415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  705.844424][T14415] RSP: 002b:00007f743ce5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  705.844444][T14415] RAX: ffffffffffffffda RBX: 00007f743c1c6090 RCX: 00007f743bf8ebe9
[  705.844458][T14415] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  705.844469][T14415] RBP: 00007f743ce5b090 R08: 0000000000000000 R09: 0000000000000000
[  705.844481][T14415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.844491][T14415] R13: 00007f743c1c6128 R14: 00007f743c1c6090 R15: 00007ffdae118a58
[  705.844523][T14415]  </TASK>
[  706.152792][    C0] vkms_vblank_simulate: vblank timer overrun
[  706.226902][T14421] binder: BINDER_SET_CONTEXT_MGR already set
[  706.232962][T14421] binder: 14420:14421 ioctl 4018620d 2000000002c0 returned -16
[  706.382363][T14424] FAULT_INJECTION: forcing a failure.
[  706.382363][T14424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.397301][T14424] CPU: 0 UID: 0 PID: 14424 Comm: syz.2.2641 Not tainted syzkaller #0 PREEMPT(full) 
[  706.397330][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  706.397343][T14424] Call Trace:
[  706.397352][T14424]  <TASK>
[  706.397361][T14424]  dump_stack_lvl+0x189/0x250
[  706.397396][T14424]  ? __pfx____ratelimit+0x10/0x10
[  706.397423][T14424]  ? __pfx_dump_stack_lvl+0x10/0x10
[  706.397454][T14424]  ? __pfx__printk+0x10/0x10
[  706.397496][T14424]  should_fail_ex+0x414/0x560
[  706.397524][T14424]  _copy_to_user+0x31/0xb0
[  706.397556][T14424]  simple_read_from_buffer+0xe1/0x170
[  706.397596][T14424]  proc_fail_nth_read+0x1b3/0x220
[  706.397631][T14424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  706.397666][T14424]  ? rw_verify_area+0x2a6/0x4d0
[  706.397687][T14424]  ? __lock_acquire+0xab9/0xd20
[  706.397707][T14424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  706.397740][T14424]  vfs_read+0x200/0xa30
[  706.397762][T14424]  ? fdget_pos+0x247/0x320
[  706.397794][T14424]  ? __pfx___mutex_lock+0x10/0x10
[  706.397824][T14424]  ? __pfx_vfs_read+0x10/0x10
[  706.397848][T14424]  ? __fget_files+0x2a/0x420
[  706.397879][T14424]  ? __fget_files+0x3a0/0x420
[  706.397904][T14424]  ? __fget_files+0x2a/0x420
[  706.397940][T14424]  ksys_read+0x145/0x250
[  706.397966][T14424]  ? __pfx_ksys_read+0x10/0x10
[  706.397993][T14424]  ? do_syscall_64+0xbe/0xfa0
[  706.398025][T14424]  do_syscall_64+0xfa/0xfa0
[  706.398052][T14424]  ? lockdep_hardirqs_on+0x9c/0x150
[  706.398080][T14424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.398100][T14424]  ? clear_bhb_loop+0x60/0xb0
[  706.398143][T14424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.398163][T14424] RIP: 0033:0x7ff90898d5fc
[  706.398182][T14424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  706.398201][T14424] RSP: 002b:00007ff9097ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  706.398223][T14424] RAX: ffffffffffffffda RBX: 00007ff908bc6090 RCX: 00007ff90898d5fc
[  706.398239][T14424] RDX: 000000000000000f RSI: 00007ff9097ac0a0 RDI: 0000000000000007
[  706.398252][T14424] RBP: 00007ff9097ac090 R08: 0000000000000000 R09: 0000000000000000
[  706.398266][T14424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.398279][T14424] R13: 00007ff908bc6128 R14: 00007ff908bc6090 R15: 00007ffc6ed359a8
[  706.398313][T14424]  </TASK>
[  706.636412][    C0] vkms_vblank_simulate: vblank timer overrun
[  706.726344][T14430] binder: 14429:14430 ioctl c0306201 200000000240 returned -11
[  706.787512][T14433] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2645'.
[  706.973538][   T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  707.115046][   T24] usb 5-1: device descriptor read/64, error -71
[  707.352770][   T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  707.383621][T14444] FAULT_INJECTION: forcing a failure.
[  707.383621][T14444] name failslab, interval 1, probability 0, space 0, times 0
[  707.399426][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.1.2649 Not tainted syzkaller #0 PREEMPT(full) 
[  707.399454][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  707.399466][T14444] Call Trace:
[  707.399474][T14444]  <TASK>
[  707.399483][T14444]  dump_stack_lvl+0x189/0x250
[  707.399516][T14444]  ? __pfx____ratelimit+0x10/0x10
[  707.399542][T14444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  707.399571][T14444]  ? __pfx__printk+0x10/0x10
[  707.399601][T14444]  ? __pfx___might_resched+0x10/0x10
[  707.399624][T14444]  ? fs_reclaim_acquire+0x7d/0x100
[  707.399652][T14444]  should_fail_ex+0x414/0x560
[  707.399677][T14444]  should_failslab+0xa8/0x100
[  707.399702][T14444]  __kmalloc_cache_noprof+0x6f/0x6f0
[  707.399722][T14444]  ? trace_contention_end+0x39/0x120
[  707.399745][T14444]  ? vhost_task_create+0xf6/0x290
[  707.399783][T14444]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  707.399811][T14444]  vhost_task_create+0xf6/0x290
[  707.399835][T14444]  ? arch_stack_walk+0xfc/0x150
[  707.399859][T14444]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  707.399888][T14444]  ? __pfx_vhost_task_create+0x10/0x10
[  707.399923][T14444]  ? __pfx_vhost_task_fn+0x10/0x10
[  707.399969][T14444]  kvm_mmu_post_init_vm+0x14c/0x300
[  707.399991][T14444]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  707.400016][T14444]  ? __mutex_trylock_common+0x153/0x260
[  707.400042][T14444]  ? __pfx___mutex_trylock_common+0x10/0x10
[  707.400065][T14444]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  707.400085][T14444]  ? rcu_is_watching+0x15/0xb0
[  707.400107][T14444]  ? trace_contention_end+0x39/0x120
[  707.400131][T14444]  ? look_up_lock_class+0x74/0x170
[  707.400158][T14444]  ? register_lock_class+0x51/0x320
[  707.400183][T14444]  ? __lock_acquire+0xab9/0xd20
[  707.400232][T14444]  kvm_vcpu_ioctl+0x95c/0xe90
[  707.400254][T14444]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  707.400283][T14444]  ? __fget_files+0x2a/0x420
[  707.400305][T14444]  ? __fget_files+0x3a0/0x420
[  707.400322][T14444]  ? __fget_files+0x2a/0x420
[  707.400342][T14444]  ? bpf_lsm_file_ioctl+0x9/0x20
[  707.400362][T14444]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  707.400375][T14444]  __se_sys_ioctl+0xfc/0x170
[  707.400390][T14444]  do_syscall_64+0xfa/0xfa0
[  707.400409][T14444]  ? lockdep_hardirqs_on+0x9c/0x150
[  707.400427][T14444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.400440][T14444]  ? clear_bhb_loop+0x60/0xb0
[  707.400456][T14444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.400469][T14444] RIP: 0033:0x7fc99e38ebe9
[  707.400483][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  707.400495][T14444] RSP: 002b:00007fc99f2cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.400509][T14444] RAX: ffffffffffffffda RBX: 00007fc99e5c5fa0 RCX: 00007fc99e38ebe9
[  707.400520][T14444] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  707.400529][T14444] RBP: 00007fc99f2cc090 R08: 0000000000000000 R09: 0000000000000000
[  707.400537][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.400545][T14444] R13: 00007fc99e5c6038 R14: 00007fc99e5c5fa0 R15: 00007ffe14d70e98
[  707.400568][T14444]  </TASK>
[  707.802129][   T24] usb 5-1: device descriptor read/64, error -71
[  707.912238][   T24] usb usb5-port1: attempt power cycle
[  707.923413][T12731] usb 4-1: USB disconnect, device number 85
[  707.937164][T14454] binder: 14453:14454 ioctl c0306201 200000000240 returned -11
[  708.022615][T14457] =======================================================
[  708.022615][T14457] WARNING: The mand mount option has been deprecated and
[  708.022615][T14457]          and is ignored by this kernel. Remove the mand
[  708.022615][T14457]          option from the mount to silence this warning.
[  708.022615][T14457] =======================================================
[  708.167368][T14461] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  708.179806][T14457] netlink: 'syz.3.2655': attribute type 17 has an invalid length.
[  708.200602][T14456] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  708.208408][T14461] kvm: pic: level sensitive irq not supported
[  708.208632][T14461] kvm: pic: non byte read
[  708.230057][T14457] netlink: 'syz.3.2655': attribute type 16 has an invalid length.
[  708.251566][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  708.254660][T14457] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2655'.
[  708.275678][   T24] usb 5-1: device descriptor read/8, error -71
[  708.601703][   T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  708.662825][   T24] usb 5-1: device descriptor read/8, error -71
[  708.680184][T14482] FAULT_INJECTION: forcing a failure.
[  708.680184][T14482] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  708.701362][   T10] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[  708.715674][T14482] CPU: 1 UID: 0 PID: 14482 Comm: syz.2.2659 Not tainted syzkaller #0 PREEMPT(full) 
[  708.715702][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  708.715715][T14482] Call Trace:
[  708.715723][T14482]  <TASK>
[  708.715732][T14482]  dump_stack_lvl+0x189/0x250
[  708.715768][T14482]  ? __pfx____ratelimit+0x10/0x10
[  708.715797][T14482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  708.715828][T14482]  ? __pfx__printk+0x10/0x10
[  708.715859][T14482]  ? fs_reclaim_acquire+0x7d/0x100
[  708.715903][T14482]  should_fail_ex+0x414/0x560
[  708.715927][T14482]  prepare_alloc_pages+0x213/0x610
[  708.715958][T14482]  __alloc_frozen_pages_noprof+0x123/0x370
[  708.715985][T14482]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  708.716019][T14482]  ? policy_nodemask+0x27c/0x720
[  708.716040][T14482]  ? __lock_acquire+0xab9/0xd20
[  708.716063][T14482]  alloc_pages_mpol+0x232/0x4a0
[  708.716089][T14482]  vma_alloc_folio_noprof+0xe4/0x200
[  708.716110][T14482]  ? __anon_vma_prepare+0x3d2/0x4a0
[  708.716132][T14482]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  708.716155][T14482]  ? up_write+0x1c4/0x420
[  708.716177][T14482]  ? do_raw_spin_unlock+0x122/0x240
[  708.716213][T14482]  folio_prealloc+0x30/0x180
[  708.716236][T14482]  __handle_mm_fault+0x16fd/0x5400
[  708.716271][T14482]  ? __pfx___handle_mm_fault+0x10/0x10
[  708.716304][T14482]  ? mtree_load+0x101/0x6f0
[  708.716330][T14482]  ? __pfx_mtree_load+0x10/0x10
[  708.716354][T14482]  ? __pfx___might_resched+0x10/0x10
[  708.716379][T14482]  handle_mm_fault+0x40a/0x8e0
[  708.716407][T14482]  __get_user_pages+0x1699/0x2ce0
[  708.716499][T14482]  faultin_page_range+0x240/0x8d0
[  708.716531][T14482]  ? __asan_memset+0x22/0x50
[  708.716562][T14482]  ? blk_start_plug+0x6f/0x1b0
[  708.716596][T14482]  madvise_do_behavior+0x2e7/0x550
[  708.716627][T14482]  ? __pfx_madvise_do_behavior+0x10/0x10
[  708.716661][T14482]  ? down_read+0x1ad/0x2e0
[  708.716687][T14482]  do_madvise+0x1bc/0x270
[  708.716712][T14482]  ? __pfx_do_madvise+0x10/0x10
[  708.716757][T14482]  ? ksys_write+0x22a/0x250
[  708.716782][T14482]  ? __pfx_ksys_write+0x10/0x10
[  708.716810][T14482]  __x64_sys_madvise+0xa7/0xc0
[  708.716836][T14482]  do_syscall_64+0xfa/0xfa0
[  708.716862][T14482]  ? lockdep_hardirqs_on+0x9c/0x150
[  708.716890][T14482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.716913][T14482]  ? clear_bhb_loop+0x60/0xb0
[  708.716937][T14482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.716956][T14482] RIP: 0033:0x7ff90898ebe9
[  708.716976][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  708.716992][T14482] RSP: 002b:00007ff9097cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  708.717013][T14482] RAX: ffffffffffffffda RBX: 00007ff908bc5fa0 RCX: 00007ff90898ebe9
[  708.717028][T14482] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000
[  708.717042][T14482] RBP: 00007ff9097cd090 R08: 0000000000000000 R09: 0000000000000000
[  708.717055][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.717066][T14482] R13: 00007ff908bc6038 R14: 00007ff908bc5fa0 R15: 00007ffc6ed359a8
[  708.717101][T14482]  </TASK>
[  709.050438][   T24] usb usb5-port1: unable to enumerate USB device
[  709.098916][T14486] netlink: 'syz.2.2660': attribute type 1 has an invalid length.
[  709.122011][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  709.135562][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  709.149316][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  709.159077][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.180553][   T56] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  709.334304][   T56] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  709.345963][   T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  709.357106][   T24] usb 3-1: new full-speed USB device number 111 using dummy_hcd
[  709.365320][   T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  709.376582][   T56] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  709.383063][   T10] usb 2-1: usb_control_msg returned -32
[  709.390482][   T56] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  709.390511][   T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.414264][   T56] usb 4-1: config 0 descriptor??
[  709.421387][   T10] usbtmc 2-1:16.0: can't read capabilities
[  709.533254][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  709.543702][   T24] usb 3-1: config 2 has an invalid interface number: 22 but max is 3
[  709.552106][   T24] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  709.561032][   T24] usb 3-1: config 2 has an invalid interface number: 90 but max is 3
[  709.569146][   T24] usb 3-1: config 2 has an invalid interface number: 111 but max is 3
[  709.577433][   T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  709.587661][   T24] usb 3-1: config 2 has 3 interfaces, different from the descriptor's value: 4
[  709.597229][   T24] usb 3-1: config 2 has no interface number 0
[  709.603347][   T24] usb 3-1: config 2 has no interface number 1
[  709.609612][   T24] usb 3-1: config 2 has no interface number 2
[  709.616190][   T24] usb 3-1: config 2 interface 22 altsetting 9 endpoint 0xA has invalid maxpacket 919, setting to 64
[  709.627063][   T24] usb 3-1: config 2 interface 22 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  709.644237][   T24] usb 3-1: config 2 interface 22 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  709.655270][   T24] usb 3-1: config 2 interface 90 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  709.666987][   T24] usb 3-1: config 2 interface 90 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  709.690090][   T24] usb 3-1: config 2 interface 111 altsetting 3 has an invalid endpoint descriptor of length 3, skipping
[  709.701422][   T24] usb 3-1: config 2 interface 111 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  709.718656][   T24] usb 3-1: config 2 interface 22 has no altsetting 0
[  709.727626][   T24] usb 3-1: config 2 interface 90 has no altsetting 0
[  709.758979][   T24] usb 3-1: config 2 interface 111 has no altsetting 0
[  709.776312][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0040, bcdDevice=92.a8
[  709.788127][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.796354][   T24] usb 3-1: Product: 民爜넛멭윣ꏯ݃㖴톗硢庸誵툩軕ꃝ烴䈰眻ꈤ管顃ḟ舘䝗㖗ᜓ혤ꄼ蔗毄躿䎅憸ึ⌟艡ㅱ用헯蟜쇀ዘ灦䞦㢊⎂ଶ箏꼒⏢斵죯墷ᵮ礱먬똪ꐹަﵛ쬢퉆旡잩쵾楤䯌넙鵖짱麆ő㖺ꚾო刧袀ご䃒㋊﨟浡劎ລ䣚ل칦哉씝蛅辡쾀ļ㰖ᕂ컛㚘晳㨂꜉⍷ᱣ뎆ᬆ턠삇걢측
[  709.836432][   T24] usb 3-1: Manufacturer: ⸞溣ꖛ㸼㶥ꞝ̞ರ령腵緆㉆䁑ꁛ푍唖ᄗ磣飣ꮉ䶂迆當ꫤ⾎꣐귴嵸쑹璞쟴뒃骖≏ꠗ穿⻠뽸췣⪬⢉૎♒ꦶ椖䆝ਊ捭欵袗㪻⾛㧼ㇹ붘럾臩へ垕㈜懦輄䥆ꔄ劗
[  709.876050][   T24] usb 3-1: SerialNumber: syz
[  709.886567][   T56] plantronics 0003:047F:FFFF.00A4: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  710.147523][   T24] usb 3-1: USB disconnect, device number 111
[  710.267520][T14494] binder: 14493:14494 ioctl c0306201 200000000240 returned -11
[  710.559304][   T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  710.721059][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  710.730148][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  710.744842][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  710.758321][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  710.768584][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.776682][   T10] usb 5-1: Product: syz
[  710.780987][   T10] usb 5-1: Manufacturer: syz
[  710.785597][   T10] usb 5-1: SerialNumber: syz
[  710.898719][   T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  711.058592][   T24] usb 3-1: Using ep0 maxpacket: 8
[  711.067657][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  711.086509][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.094712][   T24] usb 3-1: Product: syz
[  711.101691][   T24] usb 3-1: Manufacturer: syz
[  711.106404][   T24] usb 3-1: SerialNumber: syz
[  711.113990][   T24] usb 3-1: config 0 descriptor??
[  711.126402][   T24] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  711.453048][ T5925] usb 2-1: USB disconnect, device number 99
[  711.679157][ T5925] usb 4-1: USB disconnect, device number 86
[  711.728995][   T24] gspca_sonixj: reg_r err -32
[  711.751991][   T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -32
[  711.814287][T14507] trusted_key: encrypted_key: insufficient parameters specified
[  711.830614][T14507] trusted_key: encrypted_key: insufficient parameters specified
[  712.292392][T14514] netlink: 'syz.3.2668': attribute type 21 has an invalid length.
[  712.350549][T14501] block nbd1: shutting down sockets
[  712.645653][T14516] block nbd3: shutting down sockets
[  712.686841][    T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  712.794464][T14521] binder: 14520:14521 ioctl c0306201 200000000240 returned -11
[  712.852463][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  712.873493][    T9] usb 2-1: can't read configurations, error -61
[  712.981822][   T30] audit: type=1804 audit(1757030587.739:48): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2672" name="/newroot/85/file1" dev="fuse" ino=1 res=1 errno=0
[  713.002200][    C0] vkms_vblank_simulate: vblank timer overrun
[  713.016646][    T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  713.025589][   T30] audit: type=1800 audit(1757030587.739:49): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2672" name="/" dev="fuse" ino=1 res=0 errno=0
[  713.052326][   T30] audit: type=1800 audit(1757030587.769:50): pid=14523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2672" name="/" dev="fuse" ino=1 res=0 errno=0
[  713.202811][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  713.212369][    T9] usb 2-1: can't read configurations, error -61
[  713.224249][    T9] usb usb2-port1: attempt power cycle
[  713.373901][   T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  713.385994][ T5925] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[  713.406756][   T10] usb 5-1: unit 51 not found!
[  713.429714][   T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  713.450347][   T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  713.484318][   T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  713.513302][   T10] usb 5-1: USB disconnect, device number 26
[  713.560861][ T5925] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  713.565496][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  713.586553][ T5925] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  713.594408][    T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  713.630703][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  713.632959][ T5925] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  713.650522][    T9] usb 2-1: can't read configurations, error -61
[  713.670247][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.715857][ T5853] usb 3-1: USB disconnect, device number 112
[  713.795901][    T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  713.818002][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  713.828506][    T9] usb 2-1: can't read configurations, error -61
[  713.837206][    T9] usb usb2-port1: unable to enumerate USB device
[  713.895337][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  713.904629][ T5925] usb 4-1: usb_control_msg returned -32
[  713.910475][ T5925] usbtmc 4-1:16.0: can't read capabilities
[  714.046707][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  714.058539][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  714.069544][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  714.079365][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  714.092442][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  714.101599][ T5853] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  714.109385][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.121158][   T10] usb 5-1: config 0 descriptor??
[  714.266769][ T5853] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  714.275894][ T5853] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  714.286613][ T5853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  714.295832][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  714.308294][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  714.321686][ T5853] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  714.330892][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  714.339143][ T5853] usb 3-1: Product: syz
[  714.344391][ T5853] usb 3-1: Manufacturer: syz
[  714.356723][ T5853] cdc_wdm 3-1:1.0: skipping garbage
[  714.362155][ T5853] cdc_wdm 3-1:1.0: skipping garbage
[  714.369357][ T5853] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  714.375436][ T5853] cdc_wdm 3-1:1.0: Unknown control protocol
[  714.562965][   T56] usb 3-1: USB disconnect, device number 113
[  714.571617][   T10] plantronics 0003:047F:FFFF.00A5: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  715.312641][T14535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'.
[  715.474544][   T30] audit: type=1804 audit(1757030590.242:51): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2678" name="/newroot/66/file1" dev="fuse" ino=1 res=1 errno=0
[  715.475729][T14542] INFO: trying to register non-static key.
[  715.501159][T14542] The code is fine but needs lockdep annotation, or maybe
[  715.508273][T14542] you didn't initialize this object before use?
[  715.514507][T14542] turning off the locking correctness validator.
[  715.520827][T14542] CPU: 1 UID: 0 PID: 14542 Comm: syz.2.2678 Not tainted syzkaller #0 PREEMPT(full) 
[  715.520846][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  715.520857][T14542] Call Trace:
[  715.520869][T14542]  <TASK>
[  715.520876][T14542]  dump_stack_lvl+0x189/0x250
[  715.520905][T14542]  ? rcu_is_watching+0x15/0xb0
[  715.520925][T14542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  715.520949][T14542]  ? __pfx__printk+0x10/0x10
[  715.520972][T14542]  ? __is_module_percpu_address+0x39b/0x3f0
[  715.520994][T14542]  ? is_module_address+0x17/0xf0
[  715.521019][T14542]  assign_lock_key+0x133/0x150
[  715.521039][T14542]  register_lock_class+0x105/0x320
[  715.521057][T14542]  __lock_acquire+0x99/0xd20
[  715.521076][T14542]  ? skb_dequeue+0x2e/0x150
[  715.521095][T14542]  lock_acquire+0x120/0x360
[  715.521111][T14542]  ? skb_dequeue+0x2e/0x150
[  715.521136][T14542]  _raw_spin_lock_irqsave+0xa7/0xf0
[  715.521157][T14542]  ? skb_dequeue+0x2e/0x150
[  715.521175][T14542]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  715.521195][T14542]  ? __alloc_skb+0x254/0x2d0
[  715.521216][T14542]  ? kmem_cache_free+0x19a/0x690
[  715.521232][T14542]  ? __alloc_skb+0x142/0x2d0
[  715.521256][T14542]  skb_dequeue+0x2e/0x150
[  715.521274][T14542]  ? audit_log_start+0x465/0xa90
[  715.521297][T14542]  audit_log_start+0x47b/0xa90
[  715.521321][T14542]  ? __pfx_audit_log_start+0x10/0x10
[  715.521343][T14542]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[  715.521365][T14542]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.521386][T14542]  ? take_dentry_name_snapshot+0x157/0x500
[  715.521406][T14542]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  715.521429][T14542]  integrity_audit_message+0xfe/0x4d0
[  715.521455][T14542]  ? __pfx_integrity_audit_message+0x10/0x10
[  715.521479][T14542]  ? take_dentry_name_snapshot+0x29/0x500
[  715.521500][T14542]  ? take_dentry_name_snapshot+0x4eb/0x500
[  715.521522][T14542]  integrity_audit_msg+0x41/0x60
[  715.521547][T14542]  ima_collect_measurement+0x72c/0x8f0
[  715.521569][T14542]  ? __pfx_ima_collect_measurement+0x10/0x10
[  715.521590][T14542]  ? __mutex_lock+0x335/0x1350
[  715.521623][T14542]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  715.521650][T14542]  process_measurement+0x1121/0x1a40
[  715.521673][T14542]  ? __pfx_process_measurement+0x10/0x10
[  715.521703][T14542]  ? rcu_read_lock_any_held+0xb3/0x120
[  715.521728][T14542]  ima_file_mmap+0x1a2/0x1f0
[  715.521743][T14542]  ? __pfx_ima_file_mmap+0x10/0x10
[  715.521760][T14542]  ? common_file_perm+0x1b5/0x230
[  715.521784][T14542]  security_mmap_file+0x7a4/0xa60
[  715.521803][T14542]  vm_mmap_pgoff+0x129/0x4d0
[  715.521828][T14542]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  715.521851][T14542]  ? __fget_files+0x2a/0x420
[  715.521877][T14542]  ? __fget_files+0x2a/0x420
[  715.521897][T14542]  ? __fget_files+0x2a/0x420
[  715.521918][T14542]  ksys_mmap_pgoff+0x51f/0x760
[  715.521935][T14542]  do_syscall_64+0xfa/0xfa0
[  715.521957][T14542]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.521978][T14542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.521993][T14542]  ? clear_bhb_loop+0x60/0xb0
[  715.522011][T14542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.522025][T14542] RIP: 0033:0x7ff90898ebe9
[  715.522040][T14542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  715.522055][T14542] RSP: 002b:00007ff9097cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  715.522072][T14542] RAX: ffffffffffffffda RBX: 00007ff908bc5fa0 RCX: 00007ff90898ebe9
[  715.522084][T14542] RDX: 0000000000000006 RSI: 0000000000002000 RDI: 0000200000000000
[  715.522094][T14542] RBP: 00007ff9097cd090 R08: 0000000000000007 R09: 0000000000000000
[  715.522104][T14542] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  715.522115][T14542] R13: 00007ff908bc6038 R14: 00007ff908bc5fa0 R15: 00007ffc6ed359a8
[  715.522134][T14542]  </TASK>
[  715.522924][   T30] audit: type=1800 audit(1757030590.242:52): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2678" name="/" dev="fuse" ino=1 res=0 errno=0
[  715.568937][T14542] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  715.930431][T14547] tty tty1: ldisc open failed (-12), clearing slot 0
[  715.937497][T14542] audit: out of memory in audit_log_start
[  716.150030][   T56] usb 4-1: USB disconnect, device number 87
[  716.454603][   T10] usb 5-1: USB disconnect, device number 27