last executing test programs: 2m49.615687377s ago: executing program 0 (id=504): r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2a40, 0x0) fadvise64(r1, 0x65f, 0x2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0xd1}, {0x94}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) mlock(&(0x7f00002a3000/0x3000)=nil, 0x3000) chmod(&(0x7f0000000080)='./file0\x00', 0x224) 2m49.443728521s ago: executing program 0 (id=505): creat(&(0x7f0000000000)='./file0\x00', 0x4) 2m49.195546324s ago: executing program 0 (id=507): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000007000)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5b4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="df", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x3384, @loopback, 0xd}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000540)="b43c", 0x2}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000001980)=0xfffffffffffffe58) (rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x1}, 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)='\x00\x00@\x00\x00\x00\x00\x00', 0x8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) (async) socketpair(0x22, 0x2, 0x23, 0x0) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000019c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (rerun: 32) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (rerun: 32) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x7000000) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) pipe2$9p(&(0x7f00000001c0), 0x0) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 2m48.999602795s ago: executing program 0 (id=508): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) lseek(r3, 0x1ff, 0x1) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d0800434000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400078097000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)={[{0x3, 0x9, 0x7, 0x9, 0x3, 0x4, 0x5, 0x7, 0x3, 0x2, 0x81, 0x4, 0x2}, {0x2, 0x164f, 0x8, 0x0, 0x1, 0x6, 0x87, 0xf2, 0x7f, 0x81, 0x0, 0x11, 0x10}, {0x0, 0x5, 0x5, 0x2d, 0x10, 0xa, 0x9, 0x1, 0x0, 0x7, 0xc, 0x1, 0x1ff}], 0x41}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) lseek(r3, 0x1ff, 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d0800434000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400078097000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)={[{0x3, 0x9, 0x7, 0x9, 0x3, 0x4, 0x5, 0x7, 0x3, 0x2, 0x81, 0x4, 0x2}, {0x2, 0x164f, 0x8, 0x0, 0x1, 0x6, 0x87, 0xf2, 0x7f, 0x81, 0x0, 0x11, 0x10}, {0x0, 0x5, 0x5, 0x2d, 0x10, 0xa, 0x9, 0x1, 0x0, 0x7, 0xc, 0x1, 0x1ff}], 0x41}) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r4, r4, 0x0, 0x7ffff000) (async) 2m48.562346906s ago: executing program 0 (id=511): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x2f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r6, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1ffffb}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000440)=""/257, 0x101}, {&(0x7f0000002a40)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/216, 0xd8}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x10000ff}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/139, 0x8b}, {0x0}, {&(0x7f0000001a00)=""/4116, 0x1014}, {&(0x7f0000006080)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/98, 0x62}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}, 0x20008}], 0x8, 0x206, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m47.618510291s ago: executing program 0 (id=517): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x4040010) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$amidi(&(0x7f00000003c0), 0x8000000000000000, 0x408341) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000400)={0x1}) close(r3) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000540)={0x10000001}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) read$FUSE(r6, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x6c, r0, 0xb4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x12}, {0x1, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0xb}, {0xc, 0x1}, {0x12}, {0x12}, {0x6, 0x1}, {0x2}, {0x9, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r6) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x6249}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x24, r8, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002880)={[0xfff, 0x9, 0x1c, 0x1, 0x4, 0x3, 0x9, 0x7, 0x5, 0xd, 0x0, 0xfffffffffffffffb, 0xffffffffffffff80, 0x3, 0x2, 0x9], 0x2000, 0x110000}) write$FUSE_INIT(r6, &(0x7f0000002940)={0x50, 0x0, r7, {0x7, 0x2b, 0x1, 0x58020410, 0x80, 0x3, 0x9, 0x9, 0x0, 0x0, 0x2, 0x8001}}, 0x50) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/127}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000002ac0)={0x1, 0xd6f, 0x2, 0x6, 0x9, "45c6aa57d7e78781"}) 2m47.060043116s ago: executing program 32 (id=517): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x4040010) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$amidi(&(0x7f00000003c0), 0x8000000000000000, 0x408341) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000400)={0x1}) close(r3) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000540)={0x10000001}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) read$FUSE(r6, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x6c, r0, 0xb4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x12}, {0x1, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0xb}, {0xc, 0x1}, {0x12}, {0x12}, {0x6, 0x1}, {0x2}, {0x9, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r6) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x6249}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x24, r8, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002880)={[0xfff, 0x9, 0x1c, 0x1, 0x4, 0x3, 0x9, 0x7, 0x5, 0xd, 0x0, 0xfffffffffffffffb, 0xffffffffffffff80, 0x3, 0x2, 0x9], 0x2000, 0x110000}) write$FUSE_INIT(r6, &(0x7f0000002940)={0x50, 0x0, r7, {0x7, 0x2b, 0x1, 0x58020410, 0x80, 0x3, 0x9, 0x9, 0x0, 0x0, 0x2, 0x8001}}, 0x50) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/127}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000002ac0)={0x1, 0xd6f, 0x2, 0x6, 0x9, "45c6aa57d7e78781"}) 3.588450882s ago: executing program 4 (id=1432): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000fc0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001f00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000940)=""/188, 0xfffffe4d}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000f00)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f0000000b00)=""/216, 0xd8}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/108, 0x6c}], 0xc}, 0x40012100) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x28, 0x40, 0xb, 0x0, 0x3, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xff}]}]}, 0x28}}, 0x48840) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x41, 0x7, 0x0, r6, 0x0, 0x0, 0x1}]) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x8, r8, 0x0, 0x2, 0x1, &(0x7f0000001380)=';'}) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x420000, 0x40) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 3.521274012s ago: executing program 3 (id=1434): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) dup(0xffffffffffffffff) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd2b, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x8000}, 0x34000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3.447051779s ago: executing program 4 (id=1435): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 3.348600227s ago: executing program 3 (id=1436): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="0e000000"], 0x28}}], 0x1, 0x4000005) 3.348404888s ago: executing program 2 (id=1437): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) sendfile(r0, r0, 0x0, 0x7ffff000) 3.241818827s ago: executing program 3 (id=1438): semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000000c0)=""/226) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) (async) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) syz_usb_connect$cdc_ncm(0x6, 0x8c, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x4f, 0xb0, 0x68, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "eb1e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7f, 0x5, 0x87}, {0x6, 0x24, 0x1a, 0x3, 0x24}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x596, 0x1, 0x8, 0x0, 0xf8}, @acm={0x4, 0x24, 0x2, 0x8}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x1, 0x9f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0x7, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x3, 0x6, 0xce, 0x20, 0x4}, 0xbb, &(0x7f0000000400)={0x5, 0xf, 0xbb, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "808abff3e180647207c8542b23bd6afd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x7, 0x1, 0xe}, @generic={0x8b, 0x10, 0xb, "c25823a712ef94b9148ecd705733716842ed564e4779e777e419c71e723b0ea6d8f82e3e18ba7e3e58d6e4638b3d8eec92f11309e03e64dcf1bbd72f7acdfff70f8537dbf8ed79ca4a961ec4b3a701558c5bfe0ae31ce5fdc729efa7cb10ef522c2ef88715c33f88127c42f20f3cb36480116cfa85d491c65862bce68c67fdfcca9a677cd22a31fd"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x9, 0x2, 0x2}]}, 0x4, [{0x3a, &(0x7f00000004c0)=@string={0x3a, 0x3, "5812c465aadaadd8eeefc00b5c2709efddfd285161d9e733d90f3e280384004406d0934a3fdbdb4ceaac6938d7cd13e6333b10f7210d0009"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x816}}]}) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) accept(r1, &(0x7f0000000200)=@can, &(0x7f0000000080)=0x80) (async) r2 = accept(r1, &(0x7f0000000200)=@can, &(0x7f0000000080)=0x80) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)='sockfs\x00', 0x260002, 0x0) 3.171486294s ago: executing program 4 (id=1439): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x414240, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x1}) userfaultfd(0x80001) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='/dev/dlm_plock\x00', r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000022c0)={0x3, 0x0, &(0x7f00000001c0)=""/194, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=""/4096, 0x5000}) r4 = fcntl$getown(r0, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000002300)='setgroups\x00') r6 = memfd_secret(0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002340)) close_range(r5, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000002380)={{0x2, 0x2, 0x5}}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000023c0)=0xd, 0x4) ioctl$TCGETA(r5, 0x5405, &(0x7f0000002400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002440), 0xc00, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r7, 0x8001af71, &(0x7f00000024c0)) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x7fffffff) r8 = memfd_secret(0x0) ioctl$VHOST_VDPA_GET_STATUS(r8, 0x8001af71, &(0x7f0000002500)) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r2, 0x1) r9 = syz_usb_connect(0x5, 0xc2a, &(0x7f0000002540)={{0x12, 0x1, 0x110, 0xba, 0x72, 0xa4, 0x10, 0x2001, 0x400b, 0x63fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc18, 0x4, 0x6, 0x2d, 0x10, 0x9, [{{0x9, 0x4, 0x49, 0x40, 0x3, 0xfd, 0xe4, 0x63, 0x0, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x9, "b800f4c3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x4, "c0", "9886"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x0, 0x54}]}, @hid_hid={0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x4c5}}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x1, 0x1e, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x39, 0x80}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x3, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x1}, @generic={0x38, 0xa, "1518f0a0809d9c9345427a9b015f5e47f5e1d21aee4ac9bdd3497ed82c6acf94ecc4c18381970a2bcf059e2cf5767eea2f0f67b58d18"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x0, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1ff}]}}]}}, {{0x9, 0x4, 0x5, 0x7, 0x6, 0xff, 0xe1, 0x1d, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x3}, [@selector_unit={0x8, 0x24, 0x5, 0x4, 0x1, 'lzz'}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x1, "ab7c9204b1"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0xb0, "a99398961a70"}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x8, "ab6026b9aff4"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x0, 0x5, 0x0, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x8, 0x7, 0x5, 0x7], 0x5}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0xd, 0x2, 0x8, [@generic={0x7b, 0x23, "f0b91773aab92d910165611ee745c3547e8d276cce63d2d915c4134058bda5b25ac7c8b55fbe0a9022c111f18f4f78890a2bb045526b16d2441e35b18925353e6f183d05137d1cbd5c4399bdfaa46dd6e5469bcbd82c861fa3388b0cbb6d36b0570002ed44e6662e3d36b9ff79023914283bc7bf164da316a5"}, @generic={0xf7, 0x5, "ed79a585d2cd66eb49e3b75c213a3cf89e6407634d0cf9de2f8b5e9c5eccb05b20f70e3acc90d284587996a58e560314f69134acbe403ec19d6d2452ddaf735b86c580e445d83eaf620c9955b5ef88f2f5db3da0727d79a0ccbf4d59714517b608bb5ff98d10c6e2f58cebe3fdb39353d99bb43fb4312292632fb71364a4cf67b808bac14771576bcdeea666cb3fefb78cba76d1f1ae0f631b53ace8a5190dd257b9923b6250969a9845ab4b838dab5086bd3e3449ed19f8d84f2a07d0677fc71fee5f6a7b17d767501fcb79fc3f906febc3d655f2a63947bfd0de8e5a989ce36f1a75a61dda972b688bf8838367477508124a8e97"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xd, 0x7, 0x7f, [@generic={0x8, 0xa, "04f3fda32413"}, @generic={0x6, 0x7, "032ac400"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x5, 0xfd, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x4d80}, @generic={0x9e, 0x24, "2be2cb3d450cf3a298a3c30048e2a757944bf36fa8924f9fc32b5e0a1b70944148b2ade0eaf1205636b4d03a2d6586b6ddb6ebde24153df6e03e487106daf1b984657bbba9f74345701957c527392f49865e6d8f8383a89ea9ddb82451ae17290bdbe8d878f6ef5b3fa8e4b52935c10f3dbe7209992799c322c7f83e3d91e3e033f0287ffe0e4b3af0f4fd710158dbc429bad782fab1d153a5a3cd59"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0x1, 0x7, [@generic={0x5f, 0x6, "4cbb43c5e464356e1acf7382d3ec2090b0db729694a52e67bc3b540b54a63cd092a708324706828840fb0d2bb71813284cfd807c7af6c0330b511210974109389b9b1783bc28b8dff9df8c647c6963e59a4adf7eabc6101583bb56ae32"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x3}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x5e, 0x0, 0x24, [@generic={0x22, 0x7, "bcf6b32072134ccec9a5bc5903cf935ba497d5769c5abb6ef9b091c8c688ff10"}]}}]}}, {{0x9, 0x4, 0x23, 0x8, 0x5, 0x50, 0x27, 0x3, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "2d5c10c64af7"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7b00, 0x3, 0xd}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xfff9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x0, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x800}, @generic={0x39, 0xe, "8c97136c2171b0b89258f14ae407aa47d3b15d032f540fb341dc4c31b1bdff3d00b7acce799d6f8e6e8b8d7d6bce20a3fcb4f618c805ac"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x7, 0x7, 0x72, [@generic={0x18, 0x4, "b85a16d133aa00b05bbdd4a49676de684a4e059bdb1a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x2, 0x4, 0x9, [@generic={0x19, 0xf, "4b5ed973ac4cd25cf8c556835ea4caa0f446b1187cd451"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0x0, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}, @generic={0x5c, 0x23, "caf02737fe050411ab9c8ba17d210fb314e74f0c1a529d92ee8976522eac6f0999d949a157f35d5afb25a990bb7320b014f46f9e71cdca70b20f5e48e9d44013e28729def4f4576b5d7ad4cf990209d3aae640381d8e0d7b06ff"}]}}]}}, {{0x9, 0x4, 0x9a, 0x9, 0xe, 0xde, 0xe7, 0x8e, 0xe8, [@hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x88}}], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x5, 0xfb, 0x2f, [@generic={0xf, 0x2c, "f61b0afdaadac9bc22fadaa7c0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x65, 0x0, 0x81, [@generic={0x83, 0x7, "6f13e8403cac25a2bd9c7767bd6483478b782ce11125e529553a4d5d181261e923ac913ce2deb5efa8728c176b027b64b08da38531e7b6a59df0b66e39121ecb214de6606ffeb39be1161cf7fb966439ee8808a627e026bdb140a327959261cd87c78fbcb1d21bfae30fa6ec03952395c9052b26a6146a9b7a8c7c677ca6433955"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xfffe}]}}, {{0x9, 0x5, 0x5, 0xa, 0x20, 0x8, 0xf7, 0xd, [@generic={0x62, 0x5, "0e77548254ee231775e673ca9a79f11297412c2d7b20f3f7600fcf4759bdc9d87f954c52b15890384b36a1b5210eae42dd9814dd92391b6444dfcce48b15b829c129ba2105ad8621ef10829090f4dcc9d01e2771d92cc1c0b2dd13aa4f0d822e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0xe}]}}, {{0x9, 0x5, 0x7, 0x7, 0x200, 0xc, 0xbe, 0x76, [@generic={0xe6, 0x23, "3851b1f53df8ad8b1a908e92466f1e632de86512fd2a4db32098b37bbd009634152b6d05e799f736092afb28209165d6231cfa8ebb39b50d7365eee2d5a507cbf65e3284fab8fd5adb96f1556b0ddf0961bf80b7070c10a687ba336ceec4aad8221457ab3bdea803815b488a137594dc622e7c9dbb4931df492716eb3bc635392dd9ae824080b81ca1cbbf2a8f2ec7c382d84188645f43c27b47e1584dee16f84c50ca26de0278ac9af287a49adb496bb4d48120cb893cab5c9d6482fcc306f915f07a1140e4043b460bc5169bfbc5c221f9925dce6de59badae665f0f012e2e9b33ea57"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x5, 0x87, [@generic={0x96, 0xc, "36d8704c3d16eef74fe6f366e69e385bafe02dcf8d61e18347281a21484984d1a204c5a6be153be81f468ac18cc96af782efaf4e17a93f17dd9d6126b9a296fab7e800cbade061faad10761f79011fcf472131a8d8e5fc697b574b230f7fb9d6dc0ec57fd9207e6b362f5237be0b3ade68231f29fec793a1cd7e87a8b446021ec7feaf5136f0dd04ce7c9288a327b6feaf7a8b14"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x40, 0x3, 0xb, [@generic={0xed, 0x11, "ef12e3fa75341cf9ce4f745f894d3cb1b3f60513ea88e85d2a788dffdd853d722ab2f9fa53d770901a3007dcb4bc23fbd9565aeaf651e44217b01159a2d714a3c9e447618b0bf184a0a648573ad7192ec98ec8769e69a2f68c2fb4c6b5afbd19c029df56e88e34749dd21cddd6fc0bd6d6843db125af4cdcecd2b7225a753c921536557d8fcbfcf91706f088bad417692c9f6e4e8828e2c77ff33004ff925737a5bd023a098fb116b64095d6c14a0f67a5a4fe44a7333493dca5fa94048d8452d0268841e80663fffa89f54d1bc2215c0734941b1934e4f36c057b48952362fe877aec643a190c6abc5a95"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfa0d}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x3, 0x23, 0x81, [@generic={0xf6, 0xf, "d71e0ea1d16e757442352fbd7f3128532c7fe301fd5102f5dc7ef67e1e611cc52e24f8df2d0590a4feef8eed47a6a05d48b5e85a12cdca0e81647f3df151f2d5c0480d8b87a6c48d044fee4376cc00b810c153d0a0cb9ec6c549a08c1419b3cf841f2a768a683f339b7cf03b8de7000f784ca96148920d7ef1bb5eba38cb3046f2f6e13d2b0ca4a173653f924385cef7b844923781c7ed48c879d63859826310d0ecaccadd91b352abe08952af48a09e8c339fbfbe2dee37b214eccdf438b35ca98fd07275a6f3ee830a602e9c64327a72a9405ee47e825ba0e0e3c7099d2fc7e584a93e53c600b8592b4e5bbb68636b4c39a9c8"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x40, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0xe, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x339}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7d, 0x5, 0x43, [@generic={0x51, 0xb, "90e2d63f3be6917a72f01108abe894b1eaeaec92e6f6af10a2660a628d2fa7d9dd645f63a4f3c31b68bcbf7912f81556c30b11a5be850c7fc101330f431da8daa0599fd05a73a39ccb5f2d7c765f94"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xec, 0x7e, 0x8, [@generic={0x56, 0x30, "69d77965dc07e8bebc2b48e4b1b57f2d6e96b0fc0d9fef6d1434bf248259d09ce23b8ec6fc1f4a526a4816879816b1456503c7e4b218c85079dcab31342950b8c6f3bfbf57b89086db03862ae92e6357bb549009"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x987a}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x2, 0x7, 0x7, [@generic={0x4e, 0x31, "3cddc1522e043b97482b9867dd1eeb4fa9641773664794bb335b853e5b98a16adcbee029deb083092a4066abbf0de468885aae49a71d05e55d6cac6e32be4f1437f26b2fa9d03ef282d51955"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x0, 0xd9, [@generic={0xd6, 0x6, "da91855041b2cd2d55deeb4551035ae128f7d7de035f6c55b135b9eaa254b399e57bba12885b86c3e745670eb9a83340e54961fb0ed562044786bf1011bcd436beee8e557b9d0083cd14df1d6c61e51879ba9d3dde7b6ac61154189c1c9db976e4ef0f73ee925cdb77bc64fdb67bdb6fbf2171e287c763d4e054c2ca94f95ad46e1fe5d45d042f886b01f9f24ee3a22ab6043daedf0d576b3ca4216fb6f2d11288228dad1d50e83d7918e943fcdcbd285fcd51198ca72274bbb7eaf09de8e751de904e1487c3a1a4dedbf40ba438c09dc73ec796"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}]}}]}}]}}, &(0x7f0000003380)={0xa, &(0x7f0000003180)={0xa, 0x6, 0x201, 0x21, 0xd, 0x0, 0x8, 0x8}, 0x2b, &(0x7f00000031c0)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0xf, 0xf, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x4, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x12b3, 0x1e, 0x8, [0x1fe0000, 0x7f80c0, 0x0]}]}, 0x3, [{0xb0, &(0x7f0000003200)=@string={0xb0, 0x3, "87f073e32d0dcd90910e1b63fc9e264de4dddcf3e5a97d03ab10916a377cef8d273c929eca50bcc571b208d54b724f8764c6adcfaf17ee27fcd487e517c21c06661951bbcf954c4068e88d4390db7347644b0ff3d1d6655fbc426404d7be116c4a91aaed764dc51b5a410b71c328ab87e1ea35f6f92ec8946235f4fd94b863339e4118645b436c1a259ed7664441a9e62fc3fd1ab8f69334039bea367dfe7cb751ac60e78353417117dcc2afa0c0"}}, {0x66, &(0x7f00000032c0)=@string={0x66, 0x3, "898e6b2005d1e561be9c14db17cd4516672e46f816b6a220cb4bb8908e1d3f177d6a26388ed681703ed002ee5897fc5202a953481e1025a6bbcf8eadc9e72b9c26d4716eab7d6960d0062ab841f67c2021458d3b817e8777b810c0efa048f9626730482a"}}, {0x3d, &(0x7f0000003340)=@string={0x3d, 0x3, "cd3dd5de25eeb1b9bd30b6b03e775e7f7fb0500cdaf3bcafa89397bc9fa0689b690d12f9525cdfd00352f11ecee1f90f5da973c4e06ceea3936aa5"}}]}) syz_usb_disconnect(r9) connect$vsock_stream(r5, &(0x7f00000033c0)={0x28, 0x0, 0x2711}, 0x10) keyctl$read(0xb, r2, &(0x7f0000003400)=""/253, 0xfd) clock_settime(0x5, &(0x7f0000003500)) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) keyctl$describe(0x6, r2, &(0x7f0000003540)=""/96, 0x60) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f00000035c0)=0x100, &(0x7f0000003600)=0x4) 2.400472735s ago: executing program 2 (id=1440): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x8, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) 1.753782235s ago: executing program 2 (id=1442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x2b8e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x892f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS, @NFTA_CONNLIMIT_FLAGS, @NFTA_CONNLIMIT_FLAGS, @NFTA_CONNLIMIT_FLAGS, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0xe568}, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS, @NFTA_CONNLIMIT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0xfffff88e}, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x101}]}}}, {0x45, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc}}}]}]}], {0x6c, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x2}, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2705ca3409e73b94, 0x2f, 0x1, 0x4, 0xc}}, 0x50) lstat(&(0x7f0000000680)='./file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0xfffffffffffffffe, {0xfc7, 0x6, 0x0, {0x5, 0x4, 0x6, 0x8, 0x0, 0x1, 0x4, 0x8, 0x7fff, 0xa000, 0x2, r5, 0x0, 0x40, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x40101286, 0x0) 1.568030176s ago: executing program 3 (id=1443): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010102, 0x4e23, 0x7, 0x4e21, 0x10, 0xa, 0x80, 0x20, 0x2b}, {0x4, 0x2, 0x9, 0x3, 0x6, 0x5c8, 0x9, 0x80000001}, {0x1, 0x2, 0x3, 0x5}, 0x5, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in6=@mcast2, 0x0, 0x2, 0x2, 0x5, 0x7ae8, 0xe46, 0xfffff800}}, 0xe8) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='b ', @ANYRESOCT=0x0], 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) splice(r4, 0x0, r7, 0x0, 0xb, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r10, 0x800c5012, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x62, 0x0, 0x0) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r13, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="82f5", 0x2}], 0x1, 0x0, 0x0, 0x8010}}], 0x1, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r11, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1.489465913s ago: executing program 2 (id=1445): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x109, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040563e, &(0x7f0000000040)={0x4}) 1.364469813s ago: executing program 3 (id=1446): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0xd8) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="0e000000"], 0x28}}], 0x1, 0x4000005) 1.36374278s ago: executing program 1 (id=1447): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x30) ptrace(0x10, r0) (async) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea", 0x3c}) (async) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea", 0x3c}) process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/140, 0x8c}], 0x9, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/32, 0x20}], 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x200002, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x200002, 0x0) 1.341434121s ago: executing program 2 (id=1448): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r0, 0xed7e4000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) 1.268809812s ago: executing program 3 (id=1449): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1800, 0x0, 0x0}], 0x1}) 1.156546083s ago: executing program 2 (id=1450): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) 1.154086283s ago: executing program 1 (id=1451): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create(0x2) fgetxattr(r0, &(0x7f0000000780)=@random={'btrfs.', '%\x00'}, 0x0, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1.097270894s ago: executing program 4 (id=1452): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0xffff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f0000000380)=""/197, 0xc5) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000280)=0x6) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000400)={0xfffffffffffffc00, 0x42b}) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x1, r7, 0x0}]) r8 = eventfd2(0x4a, 0x1) r9 = eventfd2(0x6, 0x801) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000500)={r8, 0xf4, 0x5, r9}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000440)={0x1fe, 0x0, 0xeeefd004, 0x2000, &(0x7f00001fb000/0x2000)=nil, 0x100, r5}) setpriority(0x2, 0xff, 0x0) r10 = semget$private(0x0, 0x3, 0x104) r11 = socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000040)=[0x5, 0xd5de, 0x100, 0x4, 0x6]) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r11) r13 = semget(0x3, 0x3, 0x11) semctl$GETNCNT(r13, 0x4, 0xe, &(0x7f0000000080)=""/230) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32], 0x22c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xc4, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000003c0)=0x10) semctl$SEM_STAT(r10, 0x2, 0x12, &(0x7f0000000000)=""/1) 1.074145212s ago: executing program 1 (id=1453): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) close(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=0x0}}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 949.690823ms ago: executing program 4 (id=1454): openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x100, 0x0) (async) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x100, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) 843.794917ms ago: executing program 4 (id=1455): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000e67d33f1399ea520504b25844cab79c1b486ac6190ec72f5a2f800000000000000", @ANYRES16=r2, @ANYRES64=r3], 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fremovexattr(r4, &(0x7f0000000100)=@random={'user.', '\':(\'^(]].]\x00'}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000000)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) flock(r1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0xd, '3'}, @local=@item_4={0x3, 0x2, 0x7, "5db4b1bc"}, @local=@item_4={0x3, 0x2, 0x3, "d53fddcd"}]}}, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x108, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x7, 0x8, 0x10, 0xa7, 0x3, 0x77cd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x1, 0x36, 0x1, 0x1b, 0x1b, 0x16, 0x5, 0xb]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x3}, {0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0xa}, {0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x16, 0x24, 0x48, 0x1, 0x9, 0x9, 0x9, 0x2, 0x6c, 0x1, 0x60, 0x6, 0x5, 0x6c, 0x1b, 0x5, 0x1, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x400, 0xfffd, 0xf175, 0x6, 0x7, 0x4, 0x8]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x8}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x108}}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000e67d33f1399ea520504b25844cab79c1b486ac6190ec72f5a2f800000000000000", @ANYRES16=r2, @ANYRES64=r3], 0x70) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) fremovexattr(r4, &(0x7f0000000100)=@random={'user.', '\':(\'^(]].]\x00'}) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000000)) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) flock(r1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0xd, '3'}, @local=@item_4={0x3, 0x2, 0x7, "5db4b1bc"}, @local=@item_4={0x3, 0x2, 0x3, "d53fddcd"}]}}, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x108, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x7, 0x8, 0x10, 0xa7, 0x3, 0x77cd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x1, 0x36, 0x1, 0x1b, 0x1b, 0x16, 0x5, 0xb]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x3}, {0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0xa}, {0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x16, 0x24, 0x48, 0x1, 0x9, 0x9, 0x9, 0x2, 0x6c, 0x1, 0x60, 0x6, 0x5, 0x6c, 0x1b, 0x5, 0x1, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x400, 0xfffd, 0xf175, 0x6, 0x7, 0x4, 0x8]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x8}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x108}}, 0x2) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) 172.109104ms ago: executing program 1 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) 68.918325ms ago: executing program 1 (id=1457): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0xd8) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="0e000000"], 0x28}}], 0x1, 0x4000005) 0s ago: executing program 1 (id=1458): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): lid maxpacket 1023, setting to 64 [ 284.362947][ T5903] usb 4-1: config 6 interface 5 altsetting 7 endpoint 0x4 has an invalid bInterval 122, changing to 7 [ 284.374969][ T5903] usb 4-1: config 6 interface 5 altsetting 7 endpoint 0x4 has invalid maxpacket 25196, setting to 1024 [ 284.389943][ T5903] usb 4-1: config 6 interface 5 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 284.403251][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 284.416322][ T5938] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 284.432305][ T5903] usb 4-1: config 6 interface 154 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32 [ 284.443495][ T5903] usb 4-1: config 6 interface 154 altsetting 9 endpoint 0xE has an invalid bInterval 84, changing to 10 [ 284.455745][ T5903] usb 4-1: config 6 interface 154 altsetting 9 endpoint 0xE has invalid maxpacket 33364, setting to 1024 [ 284.467485][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 284.480953][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 284.492706][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 284.509936][ T5903] usb 4-1: config 6 interface 154 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 284.522695][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 284.539052][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 284.553186][ T5903] usb 4-1: config 6 interface 154 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 284.564341][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 284.579249][ T5903] usb 4-1: config 6 interface 154 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 284.591689][ T5903] usb 4-1: config 6 interface 154 altsetting 9 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 284.605646][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 284.616429][ T5903] usb 4-1: config 6 interface 73 has no altsetting 0 [ 284.624425][ T5903] usb 4-1: config 6 interface 5 has no altsetting 0 [ 284.637833][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.657059][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.667245][ T5903] usb 4-1: config 6 interface 154 has no altsetting 0 [ 284.674840][ T5938] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 284.684430][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.694591][ T5903] usb 4-1: New USB device found, idVendor=2001, idProduct=400b, bcdDevice=63.fd [ 284.703805][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.713649][ T5903] usb 4-1: Product: 㷍릱ソ낶眾罞끿౐꾼鎨벗ꂟ魨൩裸屒탟刃ự࿹꥝쑳泠ꏮ檓 [ 284.726537][ T5938] usb 3-1: config 0 descriptor?? [ 284.751454][ T5903] usb 4-1: Manufacturer: 躉턅懥鲾촗ᙅ⹧똖₢䯋邸ᶎ᜿橽㠦횎炁퀾靘勼꤂䡓သ꘥쾻궎鰫퐦湱綫恩ې렪⁼䔡㮍纁瞇Ⴘ䢠拹で⩈ [ 284.769230][ T5903] usb 4-1: SerialNumber: syz [ 284.792447][ T5903] usb 4-1: Interface #154 referenced by multiple IADs [ 285.014274][ T5903] pegasus 4-1:6.73: probe with driver pegasus failed with error -71 [ 285.042116][ T5903] pegasus 4-1:6.5: probe with driver pegasus failed with error -71 [ 285.064507][ T5903] pegasus 4-1:6.154: probe with driver pegasus failed with error -71 [ 285.094344][ T5903] usb 4-1: USB disconnect, device number 54 [ 285.208126][ T9684] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 285.209336][ T9685] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 285.215256][ T9684] /dev/rnullb0: Can't open blockdev [ 285.230172][ T9685] /dev/rnullb0: Can't open blockdev [ 285.250644][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 285.323365][ T9687] /dev/rnullb0: Can't open blockdev [ 285.361757][ T5938] ft260 0003:0403:6030.0021: chip code: 6424 8183 [ 285.416802][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 285.427941][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.440855][ T43] usb 5-1: config 0 has no interfaces? [ 285.445638][ T9690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 285.454272][ T43] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 285.470865][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.479166][ T43] usb 5-1: Product: syz [ 285.483428][ T43] usb 5-1: Manufacturer: syz [ 285.489117][ T43] usb 5-1: SerialNumber: syz [ 285.505072][ T43] usb 5-1: config 0 descriptor?? [ 285.589921][ T9695] /dev/rnullb0: Can't open blockdev [ 285.632273][ T5938] ft260 0003:0403:6030.0021: failed to retrieve system status [ 285.652606][ T5938] ft260 0003:0403:6030.0021: probe with driver ft260 failed with error -71 [ 285.683483][ T5938] usb 3-1: USB disconnect, device number 57 [ 285.727585][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.750400][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.766467][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.782346][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.065947][ T5884] usb 5-1: USB disconnect, device number 32 [ 286.416285][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 286.506230][ T5975] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 286.595067][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.610843][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.622367][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 286.638047][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.668064][ T5938] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 286.672124][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.685673][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 286.699663][ T5975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.711316][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.721677][ T5975] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 286.733157][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.743325][ T9] usb 4-1: config 0 descriptor?? [ 286.766513][ T5975] usb 3-1: config 0 descriptor?? [ 286.775986][ T5975] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 286.784216][ T9721] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1063'. [ 286.868261][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 286.891717][ T5938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.914310][ T5938] usb 2-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.40 [ 286.924665][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.934154][ T9723] /dev/rnullb0: Can't open blockdev [ 286.937188][ T5938] usb 2-1: Product: Ё [ 286.943572][ T5938] usb 2-1: Manufacturer: ㎁鮞䅎ꘈ⓻棛蒱텠 [ 286.952919][ T5938] usb 2-1: SerialNumber: ᐇ [ 286.988173][ T5152] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 287.002117][ T9723] fuseblk: Unknown parameter 'appraise' [ 287.103647][ T9725] /dev/rnullb0: Can't open blockdev [ 287.167189][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 287.176710][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 287.218596][ T9] usb 4-1: USB disconnect, device number 55 [ 287.227858][ T5938] usbhid 2-1:1.0: can't add hid device: -71 [ 287.234122][ T5938] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 287.271766][ T5938] usb 2-1: USB disconnect, device number 55 [ 287.403700][ T30] audit: type=1107 audit(1751566044.723:7): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='J2HB,禵1H7e+M{lfK+qQU{- HTbp@P]<{Կ~' [ 287.869880][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 287.889858][ T9736] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 288.050431][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 288.079454][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 288.092273][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.114942][ T43] usb 5-1: config 0 descriptor?? [ 288.163677][ T43] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 288.914509][ T30] audit: type=1326 audit(1751566046.223:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.3.1074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd39438e929 code=0x0 [ 289.172783][ T9761] syz.2.1061: attempt to access beyond end of device [ 289.172783][ T9761] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 289.929440][ T9781] /dev/rnullb0: Can't open blockdev [ 290.242398][ T9733] /dev/rnullb0: Can't open blockdev [ 290.252079][ T43] gspca_sonixj: reg_r err -71 [ 290.264747][ T43] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 290.293367][ T43] usb 5-1: USB disconnect, device number 33 [ 290.429490][ T9] usb 3-1: USB disconnect, device number 58 [ 291.237864][ T9794] /dev/rnullb0: Can't open blockdev [ 291.408427][ T9799] /dev/rnullb0: Can't open blockdev [ 291.609021][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 291.670578][ T9810] /dev/rnullb0: Can't open blockdev [ 291.800794][ T9812] /dev/rnullb0: Can't open blockdev [ 291.833096][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 291.840835][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 291.852775][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.870014][ T9] usb 5-1: config 0 descriptor?? [ 292.276337][ T5975] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 292.310065][ T9821] serio: Serial port ptm0 [ 292.456270][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 292.463201][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.475110][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.484987][ T5975] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 292.494817][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.506286][ T5975] usb 2-1: config 0 descriptor?? [ 292.676219][ T5938] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 292.826199][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 292.839196][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.851380][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.868577][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.895706][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.904074][ T5938] usb 4-1: Product: syz [ 292.916648][ T5938] usb 4-1: Manufacturer: syz [ 292.921687][ T5938] usb 4-1: SerialNumber: syz [ 292.968858][ T9826] /dev/rnullb0: Can't open blockdev [ 293.128381][ T5975] ft260 0003:0403:6030.0022: chip code: 6424 8183 [ 293.155686][ T5938] usb 4-1: 0:2 : does not exist [ 293.168944][ T5938] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 293.206588][ T5938] usb 4-1: USB disconnect, device number 56 [ 293.232109][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.244496][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 293.260104][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 293.265137][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.277539][ T9] usb 5-1: USB disconnect, device number 34 [ 293.291031][ T5903] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 293.329386][ T5975] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 293.446219][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 293.453437][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.464803][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.474697][ T5903] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 293.484025][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.495917][ T5903] usb 3-1: config 0 descriptor?? [ 293.733526][ T5975] ft260 0003:0403:6030.0022: failed to retrieve status: -71 [ 293.751651][ T5975] ft260 0003:0403:6030.0022: failed to reset I2C controller: -71 [ 293.786661][ T5975] usb 2-1: USB disconnect, device number 56 [ 293.911219][ T9834] /dev/rnullb0: Can't open blockdev [ 293.921550][ T9832] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 293.930868][ T9832] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1100'. [ 293.934260][ T5903] usbhid 3-1:0.0: can't add hid device: -32 [ 293.949893][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 293.963033][ T5903] usb 3-1: USB disconnect, device number 59 [ 294.236194][ T5884] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 294.386405][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 294.394648][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 294.406359][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.424884][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 294.434325][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.442521][ T5884] usb 5-1: Product: syz [ 294.446977][ T5884] usb 5-1: Manufacturer: syz [ 294.451611][ T5884] usb 5-1: SerialNumber: syz [ 294.459322][ T5884] usb 5-1: config 0 descriptor?? [ 294.480196][ T5884] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 294.504148][ T5884] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 294.556438][ T5975] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 294.718909][ T5975] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 294.731507][ T5975] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.742964][ T5152] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 294.749801][ T5975] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 294.765183][ T5975] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.774657][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 294.782994][ T5975] usb 2-1: SerialNumber: syz [ 295.009020][ T5975] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 295.018851][ T5975] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 295.037421][ T5975] usb 2-1: USB disconnect, device number 57 [ 295.089323][ T5884] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 295.089580][ T5941] kernel read not supported for file /adsp1 (pid: 5941 comm: kworker/1:8) [ 295.101858][ T5884] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 295.322123][ T5884] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 295.334329][ T5884] em28xx 5-1:0.0: No AC97 audio processor [ 295.349097][ T5884] usb 5-1: USB disconnect, device number 35 [ 295.358411][ T5884] em28xx 5-1:0.0: Disconnecting em28xx [ 295.372336][ T5884] em28xx 5-1:0.0: Freeing device [ 295.526324][ T5975] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 295.677882][ T5975] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 295.690675][ T5975] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.702600][ T5975] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 295.717896][ T5975] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.727299][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.735315][ T5975] usb 2-1: SerialNumber: syz [ 295.878932][ T5941] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 296.059033][ T5941] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.076385][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.090986][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.108488][ T5941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.148042][ T5941] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.158707][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.176319][ T5941] usb 3-1: Product: syz [ 296.180544][ T5941] usb 3-1: Manufacturer: syz [ 296.201461][ T5941] cdc_wdm 3-1:1.0: skipping garbage [ 296.212046][ T5941] cdc_wdm 3-1:1.0: skipping garbage [ 296.225105][ T5941] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 296.236890][ T5941] cdc_wdm 3-1:1.0: Unknown control protocol [ 296.419453][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.435603][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.456596][ T9] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 296.602095][ T9870] No control pipe specified [ 296.610442][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.621906][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 296.645173][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.679760][ T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 296.699302][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.732395][ T9] usb 4-1: Product: syz [ 296.742493][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 296.751748][ T9] usb 4-1: Manufacturer: syz [ 296.765426][ T9] usb 4-1: SerialNumber: syz [ 296.790382][ T9] usb 4-1: config 0 descriptor?? [ 296.792251][ T5941] usb 3-1: USB disconnect, device number 60 [ 297.166328][ T5975] rndis_host 2-1:253.0: RNDIS init failed, -110 [ 297.182293][ T5975] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -110 [ 297.214816][ T5975] usb 2-1: USB disconnect, device number 58 [ 297.325941][ T5941] usb 4-1: USB disconnect, device number 57 [ 297.432625][ T30] audit: type=1326 audit(1751566054.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.1.1117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ce858e929 code=0x0 [ 297.436293][ T9] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 297.628752][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 297.637827][ T9] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.651161][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 297.660771][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 297.670355][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.678886][ T9] usb 5-1: Product: syz [ 297.683105][ T9] usb 5-1: Manufacturer: 䒮쒈꘻⑕䂞㰟簻悃搶쌴役᫙!ﺀ薅㘊ᶣﱔ嘷Ⓢ죐兽备춨賫ꛛﻚ㰶媥霾ꡀ蚃팴ᡌ癴䕚闝浙웞 [ 297.701290][ T9] usb 5-1: SerialNumber: syz [ 297.710736][ T9] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 297.719638][ T9] usb 5-1: no configuration chosen from 1 choice [ 298.269794][ T9903] /dev/rnullb0: Can't open blockdev [ 298.474824][ T9911] syzkaller1: entered promiscuous mode [ 298.481531][ T9911] syzkaller1: entered allmulticast mode [ 298.489342][ T9914] /dev/rnullb0: Can't open blockdev [ 298.492302][ T9911] /dev/rnullb0: Can't open blockdev [ 298.882901][ T9932] could not allocate digest TFM handle ghash-clmulni [ 298.890717][ T9933] could not allocate digest TFM handle ghash-clmulni [ 299.347538][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 299.418186][ T9962] /dev/rnullb0: Can't open blockdev [ 299.508005][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.519045][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.529624][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.539347][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.551581][ T5975] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 299.564967][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.576122][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.584158][ T9] usb 3-1: Product: syz [ 299.589050][ T9] usb 3-1: Manufacturer: syz [ 299.609904][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 299.615172][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 299.642740][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 299.648953][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 299.718244][ T5975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.728783][ T5975] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.743945][ T5975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.754150][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 299.762721][ T5975] usb 4-1: SerialNumber: syz [ 299.780196][ T5975] usb 4-1: bad CDC descriptors [ 299.864081][ T5975] usb 3-1: USB disconnect, device number 61 [ 299.960137][ T9969] /dev/rnullb0: Can't open blockdev [ 300.060403][ T9974] /dev/rnullb0: Can't open blockdev [ 300.237001][ T9981] /dev/rnullb0: Can't open blockdev [ 300.244317][ T5977] usb 5-1: USB disconnect, device number 36 [ 300.446029][ T5853] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 300.700256][ T9987] /dev/rnullb0: Can't open blockdev [ 301.715896][ T9992] syzkaller1: entered promiscuous mode [ 301.724722][ T9992] syzkaller1: entered allmulticast mode [ 302.045976][T10004] /dev/rnullb0: Can't open blockdev [ 302.262249][T10010] pimreg3: entered allmulticast mode [ 302.276017][T10010] /dev/rnullb0: Can't open blockdev [ 302.444062][T10014] /dev/rnullb0: Can't open blockdev [ 302.457766][T10014] overlay: Unknown parameter 'uid<00000000000000000000' [ 302.479166][ T5977] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 302.673108][ T5977] usb 3-1: Using ep0 maxpacket: 16 [ 302.709236][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.744331][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.786416][ T5977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.799799][ T5903] usb 4-1: USB disconnect, device number 58 [ 302.817157][ T5977] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 302.880284][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.893266][ T5977] usb 3-1: config 0 descriptor?? [ 302.916038][ T5977] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 302.931914][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 302.935507][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 302.940394][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 302.940947][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 303.036506][T10023] tty tty27: ldisc open failed (-12), clearing slot 26 [ 303.048205][ T6876] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 303.079459][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 303.102990][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 303.119737][T10007] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 303.148562][ T5977] usb 3-1: USB disconnect, device number 62 [ 303.149177][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 303.170490][T10028] /dev/rnullb0: Can't open blockdev [ 303.326211][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 303.341222][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.353652][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.367108][ T43] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 303.375468][T10032] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 303.380015][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.434604][ T43] usb 5-1: config 0 descriptor?? [ 303.858233][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 303.867915][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 303.904980][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 303.910043][T10045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.932798][T10045] /dev/rnullb0: Can't open blockdev [ 304.080751][ T43] ft260 0003:0403:6030.0023: chip code: 6424 8183 [ 304.281373][ T43] ft260 0003:0403:6030.0023: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 304.490574][ T43] ft260 0003:0403:6030.0023: failed to retrieve status: -32, no wakeup [ 304.666330][ T5903] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 304.753557][ T5975] usb 5-1: USB disconnect, device number 37 [ 304.840211][ T5903] usb 3-1: device descriptor read/64, error -71 [ 305.106259][ T5903] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 305.236211][ T5903] usb 3-1: device descriptor read/64, error -71 [ 305.336195][ T5941] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 305.346859][ T5903] usb usb3-port1: attempt power cycle [ 305.496438][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 305.509289][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.533995][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.555183][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.582964][ T5941] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 305.626375][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.694270][ T5941] usb 4-1: config 0 descriptor?? [ 305.699763][ T5903] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 305.706442][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 305.727045][ T5903] usb 3-1: device descriptor read/8, error -71 [ 305.738295][ T5941] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 305.803435][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 305.855226][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 305.914697][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 305.962832][ T6876] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 305.982884][T10073] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 305.992996][ T5903] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 306.027737][ T5903] usb 3-1: device descriptor read/8, error -71 [ 306.049801][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 306.065871][ T5941] usb 4-1: USB disconnect, device number 59 [ 306.159708][ T5903] usb usb3-port1: unable to enumerate USB device [ 306.336287][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 306.468191][ T9] usb 2-1: device descriptor read/64, error -71 [ 306.686180][ T5975] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 306.706763][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 306.743798][T10092] /dev/rnullb0: Can't open blockdev [ 306.753523][T10093] /dev/rnullb0: Can't open blockdev [ 306.838484][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 306.847181][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.860484][ T9] usb 2-1: device descriptor read/64, error -71 [ 306.876171][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.885971][ T5975] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 306.895951][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.918782][ T5975] usb 5-1: config 0 descriptor?? [ 306.978006][ T9] usb usb2-port1: attempt power cycle [ 307.106321][ T5884] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 307.271423][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.289549][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.301956][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 307.315200][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.329667][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 307.357430][ T5975] usbhid 5-1:0.0: can't add hid device: -71 [ 307.363549][ T5975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 307.371996][ T5884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.389439][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.403280][ T5975] usb 5-1: USB disconnect, device number 38 [ 307.412500][ T9] usb 2-1: device descriptor read/8, error -71 [ 307.443194][ T5884] usb 4-1: config 0 descriptor?? [ 307.451648][T10097] /dev/rnullb0: Can't open blockdev [ 307.656333][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 307.680493][ T9] usb 2-1: device descriptor read/8, error -71 [ 307.797092][ T9] usb usb2-port1: unable to enumerate USB device [ 307.906256][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 307.912343][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.952341][ T5884] usb 4-1: USB disconnect, device number 60 [ 307.983953][T10102] syz.2.1184: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 308.007669][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.2.1184 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 308.007701][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.007718][T10102] Call Trace: [ 308.007726][T10102] [ 308.007735][T10102] dump_stack_lvl+0x189/0x250 [ 308.007765][T10102] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 308.007797][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.007821][T10102] ? __pfx__printk+0x10/0x10 [ 308.007845][T10102] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.007871][T10102] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.007903][T10102] warn_alloc+0x214/0x310 [ 308.007930][T10102] ? stack_depot_save_flags+0x40/0x900 [ 308.007956][T10102] ? __pfx_warn_alloc+0x10/0x10 [ 308.007985][T10102] ? kasan_save_track+0x4f/0x80 [ 308.008008][T10102] ? xskq_create+0x56/0x170 [ 308.008032][T10102] ? xsk_init_queue+0xb0/0x110 [ 308.008054][T10102] ? xsk_setsockopt+0x43f/0x710 [ 308.008075][T10102] ? do_sock_setsockopt+0x25a/0x3e0 [ 308.008106][T10102] ? __x64_sys_setsockopt+0x18b/0x220 [ 308.008135][T10102] ? do_syscall_64+0xfa/0x3b0 [ 308.008161][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.008189][T10102] __vmalloc_node_range_noprof+0x125/0x12f0 [ 308.008245][T10102] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.008271][T10102] ? xskq_create+0x56/0x170 [ 308.008298][T10102] ? __kasan_kmalloc+0x93/0xb0 [ 308.008332][T10102] vmalloc_user_noprof+0xad/0xf0 [ 308.008359][T10102] ? xskq_create+0xbf/0x170 [ 308.008385][T10102] xskq_create+0xbf/0x170 [ 308.008413][T10102] xsk_init_queue+0xb0/0x110 [ 308.008440][T10102] xsk_setsockopt+0x43f/0x710 [ 308.008465][T10102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.008487][T10102] ? __lock_acquire+0xab9/0xd20 [ 308.008521][T10102] ? aa_sock_opt_perm+0xff/0x1b0 [ 308.008548][T10102] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 308.008578][T10102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.008604][T10102] do_sock_setsockopt+0x25a/0x3e0 [ 308.008640][T10102] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 308.008677][T10102] ? __fget_files+0x2a/0x420 [ 308.008715][T10102] __x64_sys_setsockopt+0x18b/0x220 [ 308.008754][T10102] do_syscall_64+0xfa/0x3b0 [ 308.008781][T10102] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.008807][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.008827][T10102] ? clear_bhb_loop+0x60/0xb0 [ 308.008852][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.008880][T10102] RIP: 0033:0x7f0a0e78e929 [ 308.008899][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.008917][T10102] RSP: 002b:00007f0a0f5c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.008938][T10102] RAX: ffffffffffffffda RBX: 00007f0a0e9b5fa0 RCX: 00007f0a0e78e929 [ 308.008953][T10102] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 308.008965][T10102] RBP: 00007f0a0e810b39 R08: 0000000000000004 R09: 0000000000000000 [ 308.008977][T10102] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.008989][T10102] R13: 0000000000000000 R14: 00007f0a0e9b5fa0 R15: 00007ffde4745538 [ 308.009021][T10102] [ 308.009035][T10102] Mem-Info: [ 308.329447][T10102] active_anon:10016 inactive_anon:0 isolated_anon:0 [ 308.329447][T10102] active_file:29708 inactive_file:43798 isolated_file:0 [ 308.329447][T10102] unevictable:849 dirty:123 writeback:0 [ 308.329447][T10102] slab_reclaimable:11026 slab_unreclaimable:95729 [ 308.329447][T10102] mapped:25374 shmem:1404 pagetables:1654 [ 308.329447][T10102] sec_pagetables:0 bounce:0 [ 308.329447][T10102] kernel_misc_reclaimable:0 [ 308.329447][T10102] free:1295861 free_pcp:19105 free_cma:0 [ 308.386322][T10102] Node 0 active_anon:40016kB inactive_anon:0kB active_file:118784kB inactive_file:174984kB unevictable:1860kB isolated(anon):0kB isolated(file):48kB mapped:101432kB dirty:508kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:12160kB pagetables:6404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.461111][T10102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.527249][T10102] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.564295][T10102] lowmem_reserve[]: 0 2496 2498 2498 2498 [ 308.583908][T10102] Node 0 DMA32 free:1282368kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39976kB inactive_anon:0kB active_file:118768kB inactive_file:173660kB unevictable:1860kB writepending:508kB present:3129332kB managed:2556912kB mlocked:324kB bounce:0kB free_pcp:55680kB local_pcp:24104kB free_cma:0kB [ 308.636716][T10102] lowmem_reserve[]: 0 0 1 1 1 [ 308.641783][T10102] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 308.680873][T10102] lowmem_reserve[]: 0 0 0 0 0 [ 308.685678][T10102] Node 1 Normal free:3886216kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:11584kB free_cma:0kB [ 308.721590][T10102] lowmem_reserve[]: 0 0 0 0 0 [ 308.727118][T10102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.740837][T10102] Node 0 DMA32: 1961*4kB (UME) 715*8kB (UM) 795*16kB (UME) 558*32kB (UME) 399*64kB (UME) 124*128kB (UME) 201*256kB (UME) 109*512kB (UME) 36*1024kB (UME) 10*2048kB (UM) 252*4096kB (UM) = 1282348kB [ 308.762039][T10102] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 308.774475][T10102] Node 1 Normal: 236*4kB (UE) 59*8kB (UME) 48*16kB (UME) 84*32kB (UME) 20*64kB (UME) 7*128kB (UM) 5*256kB (UM) 4*512kB (UME) 1*1024kB (M) 0*2048kB 946*4096kB (ME) = 3886216kB [ 308.792826][T10102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.802970][T10102] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 308.812642][T10102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.823244][ T5941] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 308.833127][T10102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.836377][ T5884] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 308.843580][T10102] 74163 total pagecache pages [ 308.857642][T10102] 0 pages in swap cache [ 308.862387][T10102] Free swap = 124996kB [ 308.867482][T10102] Total swap = 124996kB [ 308.871671][T10102] 2097051 pages RAM [ 308.875504][T10102] 0 pages HighMem/MovableOnly [ 308.880947][T10102] 425845 pages reserved [ 308.885372][T10102] 0 pages cma reserved [ 308.999326][ T5941] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 309.006660][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 309.016578][ T5941] usb 4-1: config 0 has no interface number 0 [ 309.022605][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 309.037325][ T5941] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 309.046176][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24711, setting to 1024 [ 309.057918][T10122] netlink: 'syz.2.1189': attribute type 3 has an invalid length. [ 309.068703][ T5941] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 309.078366][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.079283][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1189'. [ 309.113171][ T5941] usb 4-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 309.116506][ T5884] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 309.149313][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 309.165691][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.166324][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.215470][ T5884] usb 5-1: config 0 descriptor?? [ 309.216582][ T5941] usb 4-1: Product: syz [ 309.236145][ T5941] usb 4-1: Manufacturer: syz [ 309.241599][ T5941] usb 4-1: SerialNumber: syz [ 309.247407][T10122] /dev/rnullb0: Can't open blockdev [ 309.257924][ T5884] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 309.271346][T10125] FAULT_INJECTION: forcing a failure. [ 309.271346][T10125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.286481][ T5941] usb 4-1: config 0 descriptor?? [ 309.337142][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.1.1190 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 309.337172][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.337189][T10125] Call Trace: [ 309.337197][T10125] [ 309.337206][T10125] dump_stack_lvl+0x189/0x250 [ 309.337234][T10125] ? __pfx____ratelimit+0x10/0x10 [ 309.337261][T10125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.337284][T10125] ? __pfx__printk+0x10/0x10 [ 309.337307][T10125] ? __might_fault+0xb0/0x130 [ 309.337339][T10125] should_fail_ex+0x414/0x560 [ 309.337378][T10125] _copy_from_user+0x2d/0xb0 [ 309.337399][T10125] ___sys_sendmsg+0x158/0x2a0 [ 309.337421][T10125] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.337480][T10125] ? __fget_files+0x2a/0x420 [ 309.337506][T10125] ? __fget_files+0x3a0/0x420 [ 309.337544][T10125] __x64_sys_sendmsg+0x19b/0x260 [ 309.337563][T10125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.337586][T10125] ? __pfx_ksys_write+0x10/0x10 [ 309.337604][T10125] ? rcu_is_watching+0x15/0xb0 [ 309.337624][T10125] ? do_syscall_64+0xbe/0x3b0 [ 309.337649][T10125] do_syscall_64+0xfa/0x3b0 [ 309.337669][T10125] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.337689][T10125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.337705][T10125] ? clear_bhb_loop+0x60/0xb0 [ 309.337724][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.337739][T10125] RIP: 0033:0x7f8ce858e929 [ 309.337754][T10125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.337768][T10125] RSP: 002b:00007f8ce93a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.337785][T10125] RAX: ffffffffffffffda RBX: 00007f8ce87b5fa0 RCX: 00007f8ce858e929 [ 309.337797][T10125] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000006 [ 309.337807][T10125] RBP: 00007f8ce93a7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.337817][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.337827][T10125] R13: 0000000000000000 R14: 00007f8ce87b5fa0 R15: 00007ffdaaaf4c68 [ 309.337851][T10125] [ 309.637374][ T5941] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 309.672667][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.683561][ T5941] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 309.691903][ T5941] usb 4-1: media controller created [ 309.717559][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.786776][ T5975] usb 5-1: USB disconnect, device number 39 [ 309.830724][ T5941] DVB: Unable to find symbol dib7000p_attach() [ 309.846911][ T5941] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 310.012473][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found [ 310.036196][ T5941] Registered IR keymap rc-empty [ 310.041433][ T5941] dvb-usb: could not initialize remote control. [ 310.068468][ T5941] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 310.116493][ T5941] usb 4-1: USB disconnect, device number 61 [ 310.160118][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1193'. [ 310.166517][T10118] /dev/rnullb0: Can't open blockdev [ 310.239877][ T5941] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 310.576737][ T5938] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 310.748716][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 310.760699][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.782634][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.826246][ T5938] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 310.835739][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.876802][ T5938] usb 3-1: config 0 descriptor?? [ 311.022356][T10167] /dev/rnullb0: Can't open blockdev [ 311.301799][ T5938] usbhid 3-1:0.0: can't add hid device: -71 [ 311.326316][ T5938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 311.350324][ T5938] usb 3-1: USB disconnect, device number 67 [ 311.466211][ T5903] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 311.528611][T10183] 9pnet_fd: Insufficient options for proto=fd [ 311.548588][ T30] audit: type=1800 audit(1751566068.863:10): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1205" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 311.626280][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 311.633981][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 311.664107][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24711, setting to 1024 [ 311.693073][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.727115][ T5903] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 311.746985][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.788516][ T5903] usb 2-1: config 0 descriptor?? [ 311.809982][ T5903] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 312.093888][ T5903] usb 2-1: USB disconnect, device number 63 [ 312.100025][ C1] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 312.243749][T10198] /dev/rnullb0: Can't open blockdev [ 312.546686][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 312.555867][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 312.803156][T10207] /dev/rnullb0: Can't open blockdev [ 312.826191][ T5903] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 312.996511][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 313.010782][ T5903] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 313.019931][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.038489][ T5903] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 313.058901][ T5903] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 313.081739][ T5903] usb 3-1: Product: syz [ 313.092645][ T5903] usb 3-1: Manufacturer: syz [ 313.108836][ T5903] usb 3-1: config 0 descriptor?? [ 313.142102][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 313.358368][T10202] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1213'. [ 313.383515][T10202] kAFS: No cell specified [ 313.398661][ T5903] usb 3-1: USB disconnect, device number 68 [ 313.581229][T10216] syzkaller1: entered promiscuous mode [ 313.587994][T10216] syzkaller1: entered allmulticast mode [ 313.832975][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.843331][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.975270][T10229] /dev/rnullb0: Can't open blockdev [ 314.071268][ T5938] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 314.222244][T10236] /dev/rnullb0: Can't open blockdev [ 314.227928][ T5938] usb 2-1: device descriptor read/64, error -71 [ 314.296617][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 314.457838][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 314.478987][ T5938] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 314.499362][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.524390][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.543399][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.583808][ T43] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 314.600662][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.618802][ T43] usb 5-1: config 0 descriptor?? [ 314.631501][ T43] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input33 [ 314.652667][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.665645][ T5938] usb 2-1: device descriptor read/64, error -71 [ 314.677225][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.721549][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.743501][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.777195][ T6876] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.805379][ T5938] usb usb2-port1: attempt power cycle [ 314.817959][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.880139][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.912353][T10231] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.937536][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.959199][ T5884] usb 5-1: USB disconnect, device number 40 [ 315.010040][T10245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.160575][ T5938] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 315.195021][ T5938] usb 2-1: device descriptor read/8, error -71 [ 315.439222][ T5938] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 315.471717][ T5938] usb 2-1: device descriptor read/8, error -71 [ 315.590389][ T5938] usb usb2-port1: unable to enumerate USB device [ 315.624482][T10248] FAULT_INJECTION: forcing a failure. [ 315.624482][T10248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.655518][T10248] CPU: 0 UID: 0 PID: 10248 Comm: syz.4.1228 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 315.655542][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.655551][T10248] Call Trace: [ 315.655557][T10248] [ 315.655564][T10248] dump_stack_lvl+0x189/0x250 [ 315.655585][T10248] ? __pfx____ratelimit+0x10/0x10 [ 315.655604][T10248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.655622][T10248] ? __pfx__printk+0x10/0x10 [ 315.655639][T10248] ? __might_fault+0xb0/0x130 [ 315.655663][T10248] should_fail_ex+0x414/0x560 [ 315.655690][T10248] _copy_from_iter+0x3f5/0x16f0 [ 315.655714][T10248] ? rcu_is_watching+0x15/0xb0 [ 315.655733][T10248] ? __pfx__copy_from_iter+0x10/0x10 [ 315.655755][T10248] ? __build_skb_around+0x257/0x3e0 [ 315.655779][T10248] ? netlink_sendmsg+0x642/0xb30 [ 315.655799][T10248] ? skb_put+0x11b/0x210 [ 315.655823][T10248] netlink_sendmsg+0x6b2/0xb30 [ 315.655850][T10248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.655873][T10248] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.655891][T10248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.655913][T10248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.655934][T10248] __sock_sendmsg+0x219/0x270 [ 315.655954][T10248] ____sys_sendmsg+0x505/0x830 [ 315.655973][T10248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.655994][T10248] ? import_iovec+0x74/0xa0 [ 315.656010][T10248] ___sys_sendmsg+0x21f/0x2a0 [ 315.656026][T10248] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.656073][T10248] ? __fget_files+0x2a/0x420 [ 315.656100][T10248] ? __fget_files+0x3a0/0x420 [ 315.656135][T10248] __x64_sys_sendmsg+0x19b/0x260 [ 315.656157][T10248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.656187][T10248] ? __pfx_ksys_write+0x10/0x10 [ 315.656208][T10248] ? rcu_is_watching+0x15/0xb0 [ 315.656232][T10248] ? do_syscall_64+0xbe/0x3b0 [ 315.656263][T10248] do_syscall_64+0xfa/0x3b0 [ 315.656289][T10248] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.656313][T10248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.656333][T10248] ? clear_bhb_loop+0x60/0xb0 [ 315.656365][T10248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.656381][T10248] RIP: 0033:0x7f3530d8e929 [ 315.656399][T10248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.656416][T10248] RSP: 002b:00007f3531c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.656438][T10248] RAX: ffffffffffffffda RBX: 00007f3530fb5fa0 RCX: 00007f3530d8e929 [ 315.656453][T10248] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000006 [ 315.656466][T10248] RBP: 00007f3531c51090 R08: 0000000000000000 R09: 0000000000000000 [ 315.656478][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.656490][T10248] R13: 0000000000000000 R14: 00007f3530fb5fa0 R15: 00007fffb0b71968 [ 315.656519][T10248] [ 316.008351][T10251] loop8: detected capacity change from 0 to 7 [ 316.030744][ T5850] Dev loop8: unable to read RDB block 7 [ 316.052162][ T5850] loop8: unable to read partition table [ 316.077295][ T5850] loop8: partition table beyond EOD, truncated [ 316.085027][T10251] Dev loop8: unable to read RDB block 7 [ 316.094319][T10251] loop8: unable to read partition table [ 316.124899][T10251] loop8: partition table beyond EOD, truncated [ 316.173525][T10251] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 316.688747][ T5938] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 316.846308][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 316.862071][ T5938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.880846][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.892485][ T5938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.913970][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.925702][ T5938] usb 5-1: Product: syz [ 316.930263][ T5938] usb 5-1: Manufacturer: syz [ 316.934996][ T5938] usb 5-1: SerialNumber: syz [ 317.181870][T10259] /dev/rnullb0: Can't open blockdev [ 317.695202][T10253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1230'. [ 317.706459][T10264] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1233'. [ 317.716480][T10264] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 317.727988][ T5938] usb 5-1: 0:2 : does not exist [ 317.751126][ T5938] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 317.856610][ T5938] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 317.900232][ T5938] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 317.912310][T10270] /dev/rnullb0: Can't open blockdev [ 317.921801][ T5938] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 317.968805][ T5938] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 318.018836][ T5938] usb 5-1: USB disconnect, device number 41 [ 318.095833][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.346405][ T5884] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 318.406181][ T5975] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 318.416212][ T5977] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 318.444520][T10286] /dev/rnullb0: Can't open blockdev [ 318.516179][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 318.524652][ T5884] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 318.544221][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.556168][ T5977] usb 3-1: device descriptor read/64, error -71 [ 318.566330][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 318.574366][T10288] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 318.575934][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.588268][T10288] /dev/rnullb0: Can't open blockdev [ 318.597717][ T5884] usb 2-1: config 0 descriptor?? [ 318.609834][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.619968][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.633624][ T5975] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 318.645165][ T5884] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 318.655605][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.680080][ T5975] usb 4-1: config 0 descriptor?? [ 318.706781][ T5975] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 318.730280][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.770256][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.796561][ T5977] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 318.803324][T10289] ALSA: mixer_oss: invalid OSS volume '' [ 318.819525][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.844940][ T6876] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.856334][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.887876][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.930949][T10276] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.960233][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.968537][ T5977] usb 3-1: device descriptor read/64, error -71 [ 318.976965][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 318.987619][ T5903] usb 4-1: USB disconnect, device number 62 [ 319.001769][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 319.089832][T10278] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 319.097220][T10278] /dev/rnullb0: Can't open blockdev [ 319.105242][ T5884] gspca_vc032x: reg_w err -71 [ 319.115734][ T5977] usb usb3-port1: attempt power cycle [ 319.122438][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.132603][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.146195][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.152079][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.162247][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.172385][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.182517][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.192740][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.207547][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.212896][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.218881][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.224218][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.229881][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.235281][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.240725][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.246303][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.251729][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.257904][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.263752][ T5884] gspca_vc032x: Unknown sensor... [ 319.269255][ T5884] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 319.286591][ T5884] usb 2-1: USB disconnect, device number 68 [ 319.426221][ T5938] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 319.466597][ T5977] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 319.489862][ T5977] usb 3-1: device descriptor read/8, error -71 [ 319.566987][T10300] /dev/rnullb0: Can't open blockdev [ 319.576357][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 319.587798][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.599625][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.613253][ T5938] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 319.622733][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.643607][ T5938] usb 5-1: config 0 descriptor?? [ 319.757106][ T5977] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 319.789600][ T5977] usb 3-1: device descriptor read/8, error -71 [ 319.895673][T10306] loop8: detected capacity change from 0 to 7 [ 319.906330][T10306] Dev loop8: unable to read RDB block 7 [ 319.906898][ T5977] usb usb3-port1: unable to enumerate USB device [ 319.911972][T10306] loop8: unable to read partition table [ 319.945087][T10306] loop8: partition table beyond EOD, truncated [ 319.961688][T10306] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 320.259521][T10311] FAULT_INJECTION: forcing a failure. [ 320.259521][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 320.273013][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.1.1253 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 320.273044][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.273056][T10311] Call Trace: [ 320.273065][T10311] [ 320.273075][T10311] dump_stack_lvl+0x189/0x250 [ 320.273102][T10311] ? __pfx____ratelimit+0x10/0x10 [ 320.273129][T10311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.273152][T10311] ? __pfx__printk+0x10/0x10 [ 320.273181][T10311] ? __lock_acquire+0xab9/0xd20 [ 320.273219][T10311] should_fail_ex+0x414/0x560 [ 320.273270][T10311] should_failslab+0xa8/0x100 [ 320.273297][T10311] __kmalloc_cache_noprof+0x70/0x3d0 [ 320.273322][T10311] ? netlbl_unlhsh_add+0x449/0x1280 [ 320.273358][T10311] netlbl_unlhsh_add+0x449/0x1280 [ 320.273394][T10311] ? netlbl_unlhsh_add+0xdc/0x1280 [ 320.273426][T10311] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 320.273459][T10311] ? apparmor_secctx_to_secid+0x98/0x110 [ 320.273490][T10311] netlbl_unlabel_staticadddef+0x52a/0x680 [ 320.273527][T10311] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 320.273568][T10311] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 320.273602][T10311] genl_family_rcv_msg_doit+0x215/0x300 [ 320.273633][T10311] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.273670][T10311] ? bpf_lsm_capable+0x9/0x20 [ 320.273692][T10311] ? security_capable+0x7e/0x2e0 [ 320.273720][T10311] genl_rcv_msg+0x60e/0x790 [ 320.273749][T10311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.273770][T10311] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 320.273819][T10311] netlink_rcv_skb+0x208/0x470 [ 320.273849][T10311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.273873][T10311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.273920][T10311] ? down_read+0x1ad/0x2e0 [ 320.273953][T10311] genl_rcv+0x28/0x40 [ 320.273972][T10311] netlink_unicast+0x75b/0x8d0 [ 320.274010][T10311] netlink_sendmsg+0x805/0xb30 [ 320.274050][T10311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.274083][T10311] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.274108][T10311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.274137][T10311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.274167][T10311] __sock_sendmsg+0x219/0x270 [ 320.274197][T10311] ____sys_sendmsg+0x505/0x830 [ 320.274224][T10311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.274263][T10311] ? import_iovec+0x74/0xa0 [ 320.274288][T10311] ___sys_sendmsg+0x21f/0x2a0 [ 320.274312][T10311] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.274373][T10311] ? __fget_files+0x2a/0x420 [ 320.274401][T10311] ? __fget_files+0x3a0/0x420 [ 320.274442][T10311] __x64_sys_sendmsg+0x19b/0x260 [ 320.274467][T10311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.274498][T10311] ? __pfx_ksys_write+0x10/0x10 [ 320.274521][T10311] ? rcu_is_watching+0x15/0xb0 [ 320.274547][T10311] ? do_syscall_64+0xbe/0x3b0 [ 320.274579][T10311] do_syscall_64+0xfa/0x3b0 [ 320.274605][T10311] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.274630][T10311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.274650][T10311] ? clear_bhb_loop+0x60/0xb0 [ 320.274675][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.274695][T10311] RIP: 0033:0x7f8ce858e929 [ 320.274713][T10311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.274731][T10311] RSP: 002b:00007f8ce93a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.274754][T10311] RAX: ffffffffffffffda RBX: 00007f8ce87b5fa0 RCX: 00007f8ce858e929 [ 320.274769][T10311] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000006 [ 320.274782][T10311] RBP: 00007f8ce93a7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.274795][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.274807][T10311] R13: 0000000000000000 R14: 00007f8ce87b5fa0 R15: 00007ffdaaaf4c68 [ 320.274840][T10311] [ 320.286515][ T5938] ft260 0003:0403:6030.0024: chip code: 6424 8183 [ 320.511194][T10314] /dev/rnullb0: Can't open blockdev [ 320.607610][ T5938] ft260 0003:0403:6030.0024: failed to retrieve system status [ 320.706880][ T5938] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -71 [ 320.744668][ T5938] usb 5-1: USB disconnect, device number 42 [ 320.805380][T10316] capability: warning: `syz.1.1255' uses 32-bit capabilities (legacy support in use) [ 321.293572][T10326] program syz.2.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.365747][ T5975] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 321.368031][ T5938] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 321.496174][ T5975] usb 2-1: device descriptor read/64, error -71 [ 321.536498][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 321.547372][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.565899][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.587353][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.610649][ T5938] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 321.627327][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.656867][ T5938] usb 4-1: config 0 descriptor?? [ 321.686617][ T5938] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 321.706599][ T5977] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 321.714918][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.747761][ T5975] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 321.756330][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.774840][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.803549][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.837369][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.857240][ T6876] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.874952][T10320] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.886264][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 321.906905][ T5975] usb 2-1: device descriptor read/64, error -71 [ 321.916933][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.937395][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 321.937416][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.946774][ T5938] usb 4-1: USB disconnect, device number 63 [ 321.975842][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 321.997016][ T5977] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 322.024710][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.054596][ T5977] usb 5-1: config 0 descriptor?? [ 322.066485][ T5975] usb usb2-port1: attempt power cycle [ 322.266767][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 322.416472][ T5975] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 322.446349][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 322.456441][ T5975] usb 2-1: device descriptor read/8, error -71 [ 322.465196][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.482692][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.502888][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 322.517723][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.537455][ T9] usb 3-1: config 0 descriptor?? [ 322.693328][ T5977] ft260 0003:0403:6030.0025: chip code: 6424 8183 [ 322.710380][ T5975] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 322.745217][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.762401][ T5975] usb 2-1: device descriptor read/8, error -71 [ 322.784021][T10341] /dev/rnullb0: Can't open blockdev [ 322.888237][ T5975] usb usb2-port1: unable to enumerate USB device [ 322.894909][ T5977] ft260 0003:0403:6030.0025: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 323.095501][ T5977] ft260 0003:0403:6030.0025: failed to retrieve status: -32, no wakeup [ 323.172956][ T9] ft260 0003:0403:6030.0026: chip code: 6424 8183 [ 323.276325][ T5938] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 323.316603][ T978] usb 5-1: USB disconnect, device number 43 [ 323.373712][ T9] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 323.428102][ T5938] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.436962][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.449075][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.458581][ T5938] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.472164][ T5938] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.481325][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.489487][ T5938] usb 4-1: Product: syz [ 323.493697][ T5938] usb 4-1: Manufacturer: syz [ 323.505914][ T5938] cdc_wdm 4-1:1.0: skipping garbage [ 323.511893][ T5938] cdc_wdm 4-1:1.0: skipping garbage [ 323.523707][ T5938] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 323.529933][ T5938] cdc_wdm 4-1:1.0: Unknown control protocol [ 323.713287][ T5977] usb 4-1: USB disconnect, device number 64 [ 323.776873][ T9] ft260 0003:0403:6030.0026: failed to retrieve status: -71 [ 323.790050][ T9] ft260 0003:0403:6030.0026: failed to reset I2C controller: -71 [ 323.814955][ T9] usb 3-1: USB disconnect, device number 73 [ 323.904100][T10348] Malformed UNC in devname [ 323.904100][T10348] [ 323.911843][T10348] CIFS: VFS: Malformed UNC in devname [ 324.266536][ T978] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 324.394986][T10364] /dev/rnullb0: Can't open blockdev [ 324.426300][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 324.447880][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.469429][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.499626][ T978] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 324.529796][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.550944][ T978] usb 5-1: config 0 descriptor?? [ 324.659496][ T5903] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 324.756198][ T5977] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 324.818873][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 324.828685][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.845701][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.856782][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.870259][ T5903] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 324.879793][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.897734][ T5903] usb 3-1: config 0 descriptor?? [ 324.916169][ T5977] usb 2-1: Using ep0 maxpacket: 16 [ 324.921479][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 324.935740][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.943759][ T5903] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 324.952642][ T5977] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 324.977620][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.013895][ T5977] usb 2-1: config 0 descriptor?? [ 325.019204][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.062686][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.090410][ T5830] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.106692][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.123000][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 325.134113][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.138629][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.165150][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.177325][T10366] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.182664][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 325.194396][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.203959][ T978] ft260 0003:0403:6030.0027: chip code: 6424 8183 [ 325.211478][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.227110][ T9] usb 4-1: config 0 descriptor?? [ 325.234578][ T5187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 325.255984][ T5903] usb 3-1: USB disconnect, device number 74 [ 325.408530][ T978] ft260 0003:0403:6030.0027: failed to retrieve system status [ 325.422961][ T978] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -71 [ 325.448258][ T978] usb 5-1: USB disconnect, device number 44 [ 325.472661][ T5977] apple 0003:05AC:024B.0028: item fetching failed at offset 2/69 [ 325.487076][ T5977] apple 0003:05AC:024B.0028: parse failed [ 325.500367][ T5977] apple 0003:05AC:024B.0028: probe with driver apple failed with error -22 [ 325.720766][T10370] /dev/rnullb0: Can't open blockdev [ 325.734282][ T978] usb 2-1: USB disconnect, device number 73 [ 325.861342][ T9] ft260 0003:0403:6030.0029: chip code: 6424 8183 [ 325.955132][T10378] FAULT_INJECTION: forcing a failure. [ 325.955132][T10378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.969019][T10378] CPU: 0 UID: 0 PID: 10378 Comm: syz.2.1275 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 325.969049][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.969061][T10378] Call Trace: [ 325.969069][T10378] [ 325.969077][T10378] dump_stack_lvl+0x189/0x250 [ 325.969106][T10378] ? __pfx____ratelimit+0x10/0x10 [ 325.969133][T10378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.969155][T10378] ? __pfx__printk+0x10/0x10 [ 325.969192][T10378] should_fail_ex+0x414/0x560 [ 325.969230][T10378] _copy_to_user+0x31/0xb0 [ 325.969253][T10378] simple_read_from_buffer+0xe1/0x170 [ 325.969301][T10378] proc_fail_nth_read+0x1df/0x250 [ 325.969329][T10378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.969352][T10378] ? rw_verify_area+0x258/0x650 [ 325.969375][T10378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.969397][T10378] vfs_read+0x200/0x980 [ 325.969425][T10378] ? __pfx___mutex_lock+0x10/0x10 [ 325.969453][T10378] ? __pfx_vfs_read+0x10/0x10 [ 325.969478][T10378] ? __fget_files+0x2a/0x420 [ 325.969511][T10378] ? __fget_files+0x3a0/0x420 [ 325.969537][T10378] ? __fget_files+0x2a/0x420 [ 325.969574][T10378] ksys_read+0x145/0x250 [ 325.969600][T10378] ? __pfx_ksys_read+0x10/0x10 [ 325.969621][T10378] ? rcu_is_watching+0x15/0xb0 [ 325.969647][T10378] ? do_syscall_64+0xbe/0x3b0 [ 325.969679][T10378] do_syscall_64+0xfa/0x3b0 [ 325.969704][T10378] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.969736][T10378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.969757][T10378] ? clear_bhb_loop+0x60/0xb0 [ 325.969782][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.969801][T10378] RIP: 0033:0x7f0a0e78d33c [ 325.969819][T10378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.969837][T10378] RSP: 002b:00007f0a0f5c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.969858][T10378] RAX: ffffffffffffffda RBX: 00007f0a0e9b5fa0 RCX: 00007f0a0e78d33c [ 325.969873][T10378] RDX: 000000000000000f RSI: 00007f0a0f5c50a0 RDI: 0000000000000005 [ 325.969885][T10378] RBP: 00007f0a0f5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 325.969897][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.969909][T10378] R13: 0000000000000000 R14: 00007f0a0e9b5fa0 R15: 00007ffde4745538 [ 325.969941][T10378] [ 326.217260][ T9] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 326.385208][T10382] libceph: resolve '4' (ret=-3): failed [ 326.405807][T10382] /dev/rnullb0: Can't open blockdev [ 326.418674][ T9] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 326.532058][ T978] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 326.637793][ T5903] usb 4-1: USB disconnect, device number 65 [ 326.706333][ T978] usb 5-1: device descriptor read/64, error -71 [ 326.949150][ T978] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 327.033118][T10387] /dev/rnullb0: Can't open blockdev [ 327.086959][ T978] usb 5-1: device descriptor read/64, error -71 [ 327.196815][ T978] usb usb5-port1: attempt power cycle [ 327.298004][ T5884] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 327.466323][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 327.473603][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.485132][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.486237][ T5903] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 327.495821][ T5884] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 327.512881][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.524841][ T5884] usb 2-1: config 0 descriptor?? [ 327.556865][ T978] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 327.576963][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 327.580201][ T978] usb 5-1: device descriptor read/8, error -71 [ 327.666609][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 327.674068][ T5903] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 327.689533][ T5903] usb 3-1: config 4 has no interface number 0 [ 327.695686][ T5903] usb 3-1: config 4 interface 15 has no altsetting 0 [ 327.710828][ T5903] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 327.720278][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.730470][ T5903] usb 3-1: Product: syz [ 327.734680][ T5903] usb 3-1: Manufacturer: syz [ 327.741153][ T5903] usb 3-1: SerialNumber: syz [ 327.746568][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 327.756043][ T5903] ax88179_178a 3-1:4.15: probe with driver ax88179_178a failed with error -22 [ 327.771968][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.797586][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.808278][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.826339][ T978] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 327.836230][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 327.845943][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.859167][ T9] usb 4-1: config 0 descriptor?? [ 327.865206][ T978] usb 5-1: device descriptor read/8, error -71 [ 327.892462][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 327.927930][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 327.938428][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 327.958385][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 327.971158][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 327.986858][ T978] usb usb5-port1: unable to enumerate USB device [ 328.002055][ T9] usb 3-1: USB disconnect, device number 75 [ 328.016027][ T6876] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 328.034963][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 328.053978][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 328.080071][ T5187] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 328.097468][T10398] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 328.118550][ T978] usb 4-1: USB disconnect, device number 66 [ 328.149137][ T5884] ft260 0003:0403:6030.002A: chip code: 6424 8183 [ 328.360682][ T5884] ft260 0003:0403:6030.002A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 328.764747][ T5884] ft260 0003:0403:6030.002A: failed to retrieve status: -71 [ 328.789252][ T5884] ft260 0003:0403:6030.002A: failed to reset I2C controller: -71 [ 328.830402][ T5884] usb 2-1: USB disconnect, device number 74 [ 329.256278][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 329.417068][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 329.431044][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.466293][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.498876][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 329.518182][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.537941][ T9] usb 3-1: config 0 descriptor?? [ 329.976381][ T978] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 330.056299][ T5975] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 330.146220][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 330.163910][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.164741][ T9] ft260 0003:0403:6030.002B: chip code: 6424 8183 [ 330.181835][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.202060][ T978] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 330.211770][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.226493][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 330.231404][ T978] usb 2-1: config 0 descriptor?? [ 330.262019][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.275511][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.288977][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.303937][ T5975] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 330.316353][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.333254][ T5975] usb 5-1: config 0 descriptor?? [ 330.365780][ T9] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 330.376714][ T5975] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 330.399022][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.440915][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.467977][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.484510][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.498468][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.546417][T10429] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.576713][ T9] ft260 0003:0403:6030.002B: failed to retrieve status: -32, no wakeup [ 330.609065][ T5850] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 330.625216][ T5941] usb 5-1: USB disconnect, device number 49 [ 330.639875][ T5187] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 330.794292][ T5938] usb 3-1: USB disconnect, device number 76 [ 330.866408][ T5977] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 330.895580][ T978] ft260 0003:0403:6030.002C: chip code: 6424 8183 [ 331.036306][ T5977] usb 4-1: Using ep0 maxpacket: 8 [ 331.050351][ T5977] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 331.059871][ T5977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.073285][ T5977] usb 4-1: config 0 has no interface number 0 [ 331.080751][ T5977] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 331.095525][ T5977] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.098478][ T978] ft260 0003:0403:6030.002C: failed to retrieve system status [ 331.112417][ T5977] usb 4-1: config 0 interface 52 has no altsetting 0 [ 331.125961][ T978] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -71 [ 331.127484][ T5977] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 331.161772][ T5977] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 331.165809][ T978] usb 2-1: USB disconnect, device number 75 [ 331.170909][ T5977] usb 4-1: Manufacturer: syz [ 331.197068][ T5977] usb 4-1: config 0 descriptor?? [ 331.321725][T10436] /dev/rnullb0: Can't open blockdev [ 331.428803][ T5977] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input39 [ 331.510010][T10440] /dev/rnullb0: Can't open blockdev [ 331.519495][T10440] /dev/rnullb0: Can't open blockdev [ 331.615016][T10434] /dev/rnullb0: Can't open blockdev [ 331.627943][ T5941] usb 4-1: USB disconnect, device number 67 [ 331.628090][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 331.760243][T10447] /dev/rnullb0: Can't open blockdev [ 332.015986][T10458] loop8: detected capacity change from 0 to 7 [ 332.024244][T10458] Dev loop8: unable to read RDB block 7 [ 332.035049][T10458] loop8: unable to read partition table [ 332.055329][T10458] loop8: partition table beyond EOD, truncated [ 332.067792][T10458] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 332.116184][ T5938] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 332.146547][ T978] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 332.246417][ T5938] usb 2-1: device descriptor read/64, error -71 [ 332.306255][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 332.322715][ T978] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 332.339198][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.355114][ T978] usb 3-1: Product: syz [ 332.361791][ T978] usb 3-1: Manufacturer: syz [ 332.375971][ T978] usb 3-1: SerialNumber: syz [ 332.411702][ T978] r8152-cfgselector 3-1: Unknown version 0x0000 [ 332.418589][ T978] r8152-cfgselector 3-1: config 0 descriptor?? [ 332.486228][ T5938] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 332.586503][ T5977] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 332.616318][ T5938] usb 2-1: device descriptor read/64, error -71 [ 332.728317][ T5938] usb usb2-port1: attempt power cycle [ 332.758375][ T5977] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.770313][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.782192][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 332.792020][ T5977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.807456][ T5977] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.816796][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.829032][ T5977] usb 4-1: config 0 descriptor?? [ 332.842048][T10449] /dev/rnullb0: Can't open blockdev [ 332.849160][ T5975] r8152-cfgselector 3-1: USB disconnect, device number 77 [ 332.879594][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 333.036241][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 333.043759][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.054801][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.064793][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 333.074432][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.076426][ T5938] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 333.095208][ T9] usb 5-1: config 0 descriptor?? [ 333.111220][ T5938] usb 2-1: device descriptor read/8, error -71 [ 333.245970][ T5977] plantronics 0003:047F:FFFF.002D: ignoring exceeding usage max [ 333.272616][ T5977] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 333.366347][ T5938] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 333.387817][ T5938] usb 2-1: device descriptor read/8, error -71 [ 333.516542][ T5938] usb usb2-port1: unable to enumerate USB device [ 333.717202][ T9] ft260 0003:0403:6030.002E: chip code: 6424 8183 [ 333.746313][ T5903] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 333.906178][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 333.917728][ T9] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 333.919023][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 333.956189][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24711, setting to 1024 [ 333.976136][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.989538][ T5903] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 333.999026][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.017278][ T5903] usb 3-1: config 0 descriptor?? [ 334.053121][ T5903] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 334.119132][ T9] ft260 0003:0403:6030.002E: failed to retrieve status: -32, no wakeup [ 334.267295][ T5903] usb 3-1: USB disconnect, device number 78 [ 334.355366][ T9] usb 5-1: USB disconnect, device number 50 [ 334.686319][ T5903] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 334.849904][ T5903] usb 4-1: device descriptor read/64, error -32 [ 335.021769][T10478] syzkaller1: entered promiscuous mode [ 335.030639][T10478] syzkaller1: entered allmulticast mode [ 335.108502][ T5903] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 335.249423][T10484] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.275622][T10484] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1311'. [ 335.286470][ T5903] usb 4-1: device descriptor read/64, error -32 [ 335.306409][T10484] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.1311'. [ 335.316193][ T5975] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 335.484383][ T5975] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.513788][ T5975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.535673][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.565495][ T5975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.576664][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 335.606184][ T5903] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 335.642989][ T5975] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.659664][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.676154][ T5975] usb 3-1: Product: syz [ 335.680379][ T5975] usb 3-1: Manufacturer: syz [ 335.717185][ T5975] cdc_wdm 3-1:1.0: skipping garbage [ 335.722467][ T5975] cdc_wdm 3-1:1.0: skipping garbage [ 335.749778][T10488] fuseblk: Bad value for 'user_id' [ 335.754961][T10488] fuseblk: Bad value for 'user_id' [ 335.768278][ T5975] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 335.774244][ T5975] cdc_wdm 3-1:1.0: Unknown control protocol [ 335.782407][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 335.798037][ T9] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 335.816960][ T9] usb 5-1: config 0 has no interface number 0 [ 335.826268][ T5903] usb 4-1: device not accepting address 68, error -71 [ 335.831624][ T9] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 335.871950][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 335.890004][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.916827][ T9] usb 5-1: config 0 descriptor?? [ 335.980058][T10490] /dev/rnullb0: Can't open blockdev [ 336.238600][T10495] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 336.440991][T10495] team0: Port device wlan1 added [ 336.541340][ T5941] usb 5-1: USB disconnect, device number 51 [ 336.688881][ T5903] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 336.727205][ T5903] usb 4-1: device reset changed ep0 maxpacket size! [ 336.737407][ T5938] usb 4-1: USB disconnect, device number 68 [ 336.916190][ T5938] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 337.106191][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 337.129998][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 337.156230][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24711, setting to 1024 [ 337.181515][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.225184][ T5938] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 337.248702][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.272438][ T5938] usb 4-1: config 0 descriptor?? [ 337.297656][ T5938] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 337.549002][ T5941] usb 4-1: USB disconnect, device number 69 [ 337.666628][ T5938] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 337.796732][T10515] loop8: detected capacity change from 0 to 7 [ 337.851530][T10515] Dev loop8: unable to read RDB block 7 [ 337.857692][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 337.863123][T10515] loop8: unable to read partition table [ 337.878925][T10515] loop8: partition table beyond EOD, truncated [ 337.883535][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.885231][T10515] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 337.926342][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.946253][ T5938] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 337.969525][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.009089][ T5938] usb 5-1: config 0 descriptor?? [ 338.166743][ T5975] usb 3-1: USB disconnect, device number 79 [ 338.410295][T10522] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1323'. [ 338.586550][ T5975] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 338.609135][T10527] /dev/rnullb0: Can't open blockdev [ 338.630001][ T5938] ft260 0003:0403:6030.002F: chip code: 6424 8183 [ 338.653871][T10527] pim6reg1: entered promiscuous mode [ 338.669858][T10527] pim6reg1: entered allmulticast mode [ 338.746359][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 338.756970][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.775518][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.796504][ T5975] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 338.805819][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.831982][ T5938] ft260 0003:0403:6030.002F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 338.832783][ T5975] usb 3-1: config 0 descriptor?? [ 338.961841][ T5941] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 339.048408][ T5938] ft260 0003:0403:6030.002F: failed to retrieve status: -32, no wakeup [ 339.110777][ T5941] usb 2-1: device descriptor read/64, error -71 [ 339.236212][ T5903] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 339.267403][ T9] usb 5-1: USB disconnect, device number 52 [ 339.376564][ T5941] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 339.384457][ T5903] usb 4-1: device descriptor read/64, error -71 [ 339.479979][ T5975] ft260 0003:0403:6030.0030: chip code: 6424 8183 [ 339.516220][ T5941] usb 2-1: device descriptor read/64, error -71 [ 339.626397][ T5903] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 339.634227][ T5941] usb usb2-port1: attempt power cycle [ 339.681838][ T5975] ft260 0003:0403:6030.0030: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 339.766417][ T5903] usb 4-1: device descriptor read/64, error -71 [ 339.889971][ T5903] usb usb4-port1: attempt power cycle [ 339.976372][ T5941] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 340.010201][ T5941] usb 2-1: device descriptor read/8, error -71 [ 340.051311][T10536] netlink: 'syz.4.1328': attribute type 15 has an invalid length. [ 340.059574][T10536] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1328'. [ 340.083794][ T5975] ft260 0003:0403:6030.0030: failed to retrieve status: -71 [ 340.095722][ T5975] ft260 0003:0403:6030.0030: failed to reset I2C controller: -71 [ 340.115286][ T5975] usb 3-1: USB disconnect, device number 80 [ 340.256296][ T5903] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 340.263989][ T5941] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 340.287012][ T5903] usb 4-1: device descriptor read/8, error -71 [ 340.293340][ T5941] usb 2-1: device descriptor read/8, error -71 [ 340.406533][ T5941] usb usb2-port1: unable to enumerate USB device [ 340.526207][ T5903] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 340.550949][ T5903] usb 4-1: device descriptor read/8, error -71 [ 340.666702][ T5903] usb usb4-port1: unable to enumerate USB device [ 340.886267][ T5941] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 341.036178][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 341.043564][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.059780][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.070210][ T5941] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 341.083610][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.095654][ T5941] usb 3-1: config 0 descriptor?? [ 341.136498][ T5903] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 341.297929][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 341.318390][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 341.330414][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24711, setting to 1024 [ 341.341943][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.355416][ T5903] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 341.364577][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.377711][ T5903] usb 5-1: config 0 descriptor?? [ 341.391886][ T5903] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 341.608668][ T9] usb 5-1: USB disconnect, device number 53 [ 341.716979][ T5941] ft260 0003:0403:6030.0031: chip code: 6424 8183 [ 341.872794][T10546] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1332'. [ 341.949940][ T5941] ft260 0003:0403:6030.0031: failed to retrieve system status [ 341.979056][ T5941] ft260 0003:0403:6030.0031: probe with driver ft260 failed with error -71 [ 342.008344][ T5941] usb 3-1: USB disconnect, device number 81 [ 342.797415][T10565] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1341'. [ 343.064308][T10575] /dev/rnullb0: Can't open blockdev [ 343.530199][T10585] loop8: detected capacity change from 0 to 7 [ 343.537686][T10585] Dev loop8: unable to read RDB block 7 [ 343.543331][T10585] loop8: unable to read partition table [ 343.551945][T10585] loop8: partition table beyond EOD, truncated [ 343.559176][T10585] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 343.566223][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 343.736324][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 343.748965][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.770505][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24711, setting to 1024 [ 343.803037][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.836839][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 343.857394][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.877915][ T9] usb 4-1: config 0 descriptor?? [ 343.899930][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 344.131805][ T5903] usb 4-1: USB disconnect, device number 74 [ 344.373508][T10602] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1355'. [ 344.387300][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 344.398629][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 344.546160][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 344.558201][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.576285][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.606174][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 344.625457][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.644615][ T9] usb 3-1: config 0 descriptor?? [ 344.706491][ T5903] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 344.881497][ T5903] usb 2-1: config 0 has an invalid interface number: 197 but max is 1 [ 344.899614][ T5903] usb 2-1: config 0 has an invalid interface number: 218 but max is 1 [ 344.916272][ T5903] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 344.931227][ T5903] usb 2-1: config 0 has no interface number 0 [ 344.942360][ T5903] usb 2-1: config 0 has no interface number 1 [ 344.955469][ T5903] usb 2-1: config 0 interface 197 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 344.981752][ T5903] usb 2-1: config 0 interface 197 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 344.988386][T10611] loop8: detected capacity change from 0 to 7 [ 345.003889][ T5903] usb 2-1: config 0 interface 197 altsetting 9 endpoint 0x8A has invalid maxpacket 30194, setting to 64 [ 345.018361][T10611] Dev loop8: unable to read RDB block 7 [ 345.024084][T10611] loop8: unable to read partition table [ 345.027233][ T5903] usb 2-1: config 0 interface 197 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 345.036439][T10611] loop8: partition table beyond EOD, [ 345.045585][ T5903] usb 2-1: config 0 interface 197 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 345.054123][T10611] truncated [ 345.068251][ T5903] usb 2-1: config 0 interface 197 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 345.096255][ T5903] usb 2-1: config 0 interface 197 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 345.100808][T10611] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 345.116217][ T5903] usb 2-1: config 0 interface 197 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 345.142258][ T5903] usb 2-1: config 0 interface 218 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 345.165958][ T5903] usb 2-1: config 0 interface 218 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 345.187898][ T5903] usb 2-1: config 0 interface 218 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 345.199408][ T5903] usb 2-1: config 0 interface 218 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 345.216689][ T5903] usb 2-1: config 0 interface 218 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 345.236214][ T5903] usb 2-1: config 0 interface 197 has no altsetting 0 [ 345.243254][ T5903] usb 2-1: config 0 interface 218 has no altsetting 0 [ 345.254691][ T5903] usb 2-1: New USB device found, idVendor=14ea, idProduct=ab13, bcdDevice= b.f4 [ 345.264619][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.272585][ T9] ft260 0003:0403:6030.0032: chip code: 6424 8183 [ 345.272750][ T5903] usb 2-1: Product: Ж [ 345.283886][ T5903] usb 2-1: Manufacturer: 燥胬梾ĉﺔ퓯숺鈓惴㓍놉ꝡṶ猶Ɨ鹕芤凜ꖋ渢夞⯢㥇淚뀀䯍ఇ篳૽䅡犖吝⟟㰉煎牍뀜瀁쎄⇔鉎쥚◪宇뒷唚曩엋㢸摠ꟃ䩊轕┱署믐㴠㪭놊얽䬰ഴຜ汔袟缭锨퓀뜕腿톺굈畆昲뢊⎤糍ↁེ뼖佅ᤋ炉趡⧻뮐緹ꛙ繁ᑧᅕゅ [ 345.334976][ T5903] usb 2-1: SerialNumber: Ћ [ 345.349932][ T5903] usb 2-1: config 0 descriptor?? [ 345.356844][T10604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.364315][T10604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.473314][ T9] ft260 0003:0403:6030.0032: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 345.647925][ T5903] usb 2-1: USB disconnect, device number 84 [ 345.820895][T10621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1364'. [ 345.874667][ T9] ft260 0003:0403:6030.0032: failed to retrieve status: -71 [ 345.887856][ T9] ft260 0003:0403:6030.0032: failed to reset I2C controller: -71 [ 345.918307][ T9] usb 3-1: USB disconnect, device number 82 [ 346.096511][ T5941] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 346.256901][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 346.270283][ T5941] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 346.286343][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.297801][ T5941] usb 5-1: Product: syz [ 346.302016][ T5941] usb 5-1: Manufacturer: syz [ 346.316823][ T5941] usb 5-1: SerialNumber: syz [ 346.329568][ T5941] usb 5-1: config 0 descriptor?? [ 346.349667][ T5941] gspca_main: sq930x-2.14.0 probing 2770:930c [ 346.386395][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 346.487674][ T5884] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 346.519971][T10630] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 346.538448][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 346.560878][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.596263][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.620439][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 346.636170][ T5884] usb 2-1: device descriptor read/64, error -71 [ 346.648521][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.667334][ T9] usb 4-1: config 0 descriptor?? [ 346.690554][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input44 [ 346.893266][ T5903] usb 4-1: USB disconnect, device number 75 [ 346.906238][ T5884] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 347.046151][ T5884] usb 2-1: device descriptor read/64, error -71 [ 347.059861][ T5941] gspca_sq930x: ucbus_write failed -110 [ 347.176660][ T5884] usb usb2-port1: attempt power cycle [ 347.286284][ T5941] gspca_sq930x: Sensor ov9630 not yet treated [ 347.309280][ T5941] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 347.332556][ T5941] usb 5-1: USB disconnect, device number 54 [ 347.536345][ T5884] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 347.567184][ T5884] usb 2-1: device descriptor read/8, error -71 [ 347.808778][ T5884] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 347.848160][ T5884] usb 2-1: device descriptor read/8, error -71 [ 347.956905][ T5884] usb usb2-port1: unable to enumerate USB device [ 348.388075][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 348.455203][T10659] /dev/rnullb0: Can't open blockdev [ 348.546321][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 348.570252][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 348.580123][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.592728][ T9] usb 3-1: config 0 descriptor?? [ 348.612402][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 348.645739][ T30] audit: type=1800 audit(1751566105.963:11): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1381" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 348.759056][T10666] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1382'. [ 349.432333][T10650] @: renamed from vlan0 (while UP) [ 349.736588][ T9] gspca_sunplus: reg_w_riv err -110 [ 349.741935][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 349.768029][T10696] NILFS (nullb0): couldn't find nilfs on the device [ 350.234194][T10724] overlay: ./file0 is not a directory [ 350.395568][T10733] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1404'. [ 350.443127][T10734] /dev/rnullb0: Can't open blockdev [ 350.511982][T10740] loop8: detected capacity change from 0 to 7 [ 350.521627][T10740] Dev loop8: unable to read RDB block 7 [ 350.528167][T10740] loop8: unable to read partition table [ 350.550805][T10740] loop8: partition table beyond EOD, truncated [ 350.557531][T10740] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 350.936443][ T5903] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 351.043616][T10760] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1414'. [ 351.061529][ T5941] usb 3-1: USB disconnect, device number 83 [ 351.096378][ T5938] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 351.123266][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.144692][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.159000][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.168982][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.182265][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.191957][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.202411][ T5903] usb 4-1: config 0 descriptor?? [ 351.276390][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 351.283393][ T5938] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 351.291693][ T5938] usb 2-1: config 8 has no interface number 0 [ 351.298097][ T5938] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 351.310657][ T5938] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 351.322139][ T5938] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 351.335325][ T5938] usb 2-1: config 8 interface 206 has no altsetting 0 [ 351.344793][ T5938] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 351.355284][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.363413][ T5938] usb 2-1: Product: syz [ 351.367678][ T5938] usb 2-1: Manufacturer: syz [ 351.372322][ T5938] usb 2-1: SerialNumber: syz [ 351.587091][T10751] /dev/rnullb0: Can't open blockdev [ 351.598286][ T5938] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 351.615817][ T5903] plantronics 0003:047F:FFFF.0033: ignoring exceeding usage max [ 351.625991][ T5938] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 351.645047][ T5903] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 351.663621][ T5938] usb 2-1: USB disconnect, device number 89 [ 351.691739][ T5938] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 351.712778][ T5938] garmin_gps 2-1:8.206: device disconnected [ 351.814124][T10766] /dev/rnullb0: Can't open blockdev [ 351.909262][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.922713][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.373231][T10786] syzkaller1: entered promiscuous mode [ 352.379310][T10786] syzkaller1: entered allmulticast mode [ 352.389794][T10786] /dev/rnullb0: Can't open blockdev [ 352.486290][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 352.646251][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 352.654278][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.680711][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.696336][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 352.705748][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.719845][ T9] usb 2-1: config 0 descriptor?? [ 353.146412][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 353.155524][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 353.285326][T10799] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1430'. [ 353.434236][T10802] /dev/rnullb0: Can't open blockdev [ 353.503705][T10804] netlink: 'syz.4.1432': attribute type 29 has an invalid length. [ 353.532111][T10804] netlink: 'syz.4.1432': attribute type 29 has an invalid length. [ 353.554345][T10806] /dev/rnullb0: Can't open blockdev [ 353.561077][T10804] netlink: 'syz.4.1432': attribute type 29 has an invalid length. [ 353.593660][T10804] /dev/rnullb0: Can't open blockdev [ 353.663869][T10811] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 353.730793][T10814] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 353.733360][T10811] team0: Port device geneve1 added [ 353.745405][ T5884] usb 4-1: USB disconnect, device number 76 [ 353.771017][T10814] /dev/rnullb0: Can't open blockdev [ 353.885058][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.913718][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.226459][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 354.238292][ T5884] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 354.396188][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 354.403276][ T9] usb 5-1: config 6 has an invalid interface number: 73 but max is 3 [ 354.426562][ T9] usb 5-1: config 6 has an invalid interface number: 5 but max is 3 [ 354.435066][ T9] usb 5-1: config 6 has an invalid interface number: 154 but max is 3 [ 354.456233][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 354.469916][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 354.479842][ T9] usb 5-1: config 6 has 3 interfaces, different from the descriptor's value: 4 [ 354.489048][ T9] usb 5-1: config 6 has no interface number 0 [ 354.495165][ T9] usb 5-1: config 6 has no interface number 1 [ 354.501982][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 354.511805][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 354.521563][ T9] usb 5-1: config 6 has no interface number 2 [ 354.527919][ T9] usb 5-1: config 6 interface 73 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 354.539582][ T9] usb 5-1: config 6 interface 5 altsetting 7 endpoint 0x4 has an invalid bInterval 122, changing to 7 [ 354.550797][ T9] usb 5-1: config 6 interface 5 altsetting 7 endpoint 0x4 has invalid maxpacket 25196, setting to 1024 [ 354.563738][ T5884] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 354.573290][ T9] usb 5-1: config 6 interface 5 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 354.586475][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.594663][ T5884] usb 4-1: Product: syz [ 354.599323][ T9] usb 5-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 354.610359][ T5884] usb 4-1: Manufacturer: syz [ 354.615006][ T5884] usb 4-1: SerialNumber: syz [ 354.622024][ T9] usb 5-1: config 6 interface 154 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32 [ 354.637200][ T5884] usb 4-1: config 0 descriptor?? [ 354.642437][ T9] usb 5-1: config 6 interface 154 altsetting 9 endpoint 0xE has an invalid bInterval 84, changing to 10 [ 354.654433][ T9] usb 5-1: config 6 interface 154 altsetting 9 endpoint 0xE has invalid maxpacket 33364, setting to 1024 [ 354.668399][ T5884] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 354.675540][ T9] usb 5-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 354.692873][ T9] usb 5-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 354.705764][ T9] usb 5-1: config 6 interface 154 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 354.718890][ T9] usb 5-1: config 6 interface 154 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 354.730041][ T9] usb 5-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 354.741522][ T9] usb 5-1: config 6 interface 154 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 354.752398][ T9] usb 5-1: config 6 interface 154 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 354.768353][ T9] usb 5-1: config 6 interface 154 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 354.779365][ T9] usb 5-1: config 6 interface 154 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 354.790404][ T9] usb 5-1: config 6 interface 154 altsetting 9 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 354.803897][ T9] usb 5-1: config 6 interface 73 has no altsetting 0 [ 354.810653][ T9] usb 5-1: config 6 interface 5 has no altsetting 0 [ 354.817334][ T9] usb 5-1: config 6 interface 154 has no altsetting 0 [ 354.826729][ T9] usb 5-1: New USB device found, idVendor=2001, idProduct=400b, bcdDevice=63.fd [ 354.836282][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.844358][ T9] usb 5-1: Product: 㷍릱ソ낶眾罞끿౐꾼鎨벗ꂟ魨൩裸屒탟刃ự࿹꥝쑳泠ꏮ檓 [ 354.855665][ T9] usb 5-1: Manufacturer: 躉턅懥鲾촗ᙅ⹧똖₢䯋邸ᶎ᜿橽㠦횎炁퀾靘勼꤂䡓သ꘥쾻궎鰫퐦湱綫恩ې렪⁼䔡㮍纁瞇Ⴘ䢠拹で⩈ [ 354.873106][ T9] usb 5-1: SerialNumber: syz [ 354.881524][ T5884] scsi host1: usb-storage 4-1:0.0 [ 354.887564][ T9] usb 5-1: Interface #154 referenced by multiple IADs [ 354.910628][ T5884] usb 4-1: USB disconnect, device number 77 [ 355.107581][ T9] pegasus 5-1:6.73: probe with driver pegasus failed with error -71 [ 355.122605][ T9] pegasus 5-1:6.5: probe with driver pegasus failed with error -71 [ 355.136712][ T9] pegasus 5-1:6.154: probe with driver pegasus failed with error -71 [ 355.157165][ T9] usb 5-1: USB disconnect, device number 55 [ 355.294546][ T5903] usb 2-1: USB disconnect, device number 90 [ 355.439824][T10833] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1442'. [ 355.793276][T10847] /dev/rnullb0: Can't open blockdev [ 355.820172][T10844] /dev/rnullb0: Can't open blockdev [ 355.938510][T10853] /dev/rnullb0: Can't open blockdev [ 356.087053][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 356.109303][T10861] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.162163][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 356.180455][ T5903] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 356.188726][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 356.199282][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 356.209392][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 356.221471][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 356.235246][T10865] /dev/rnullb0: Can't open blockdev [ 356.246417][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 356.263765][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.286124][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.296041][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 356.305288][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.317031][ T9] usb 4-1: config 0 descriptor?? [ 356.346244][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 356.353994][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.376320][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.396165][ T5903] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 356.405258][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.429068][ T5903] usb 3-1: config 0 descriptor?? [ 356.734377][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 356.741389][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 356.749296][ T1211] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 356.843699][ T5903] usbhid 3-1:0.0: can't add hid device: -32 [ 356.851278][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 356.863737][ T5903] usb 3-1: USB disconnect, device number 84 [ 356.908084][ T1211] usb 5-1: Using ep0 maxpacket: 16 [ 356.931205][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.954296][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.964925][ T1211] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 356.974153][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.994744][ T1211] usb 5-1: config 0 descriptor?? [ 357.119306][T10875] [ 357.121685][T10875] ============================================ [ 357.127954][T10875] WARNING: possible recursive locking detected [ 357.134138][T10875] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 357.140744][T10875] -------------------------------------------- [ 357.146907][T10875] syz.1.1458/10875 is trying to acquire lock: [ 357.152990][T10875] ffff88804e0648c8 (&sb->s_type->i_mutex_key#33){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 357.163292][T10875] [ 357.163292][T10875] but task is already holding lock: [ 357.170677][T10875] ffff88804e0611c8 (&sb->s_type->i_mutex_key#33){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 357.181987][T10875] [ 357.181987][T10875] other info that might help us debug this: [ 357.190077][T10875] Possible unsafe locking scenario: [ 357.190077][T10875] [ 357.197546][T10875] CPU0 [ 357.200845][T10875] ---- [ 357.204145][T10875] lock(&sb->s_type->i_mutex_key#33); [ 357.209644][T10875] lock(&sb->s_type->i_mutex_key#33); [ 357.215154][T10875] [ 357.215154][T10875] *** DEADLOCK *** [ 357.215154][T10875] [ 357.223327][T10875] May be due to missing lock nesting notation [ 357.223327][T10875] [ 357.231674][T10875] 4 locks held by syz.1.1458/10875: [ 357.236917][T10875] #0: ffff8880115280e0 (&type->s_umount_key#107){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 357.247256][T10875] #1: ffff888027f9e0a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 357.256926][T10875] #2: ffffffff8f8e2df0 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 357.269063][T10875] #3: ffff88804e0611c8 (&sb->s_type->i_mutex_key#33){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 357.280793][T10875] [ 357.280793][T10875] stack backtrace: [ 357.286720][T10875] CPU: 1 UID: 0 PID: 10875 Comm: syz.1.1458 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 357.286754][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.286768][T10875] Call Trace: [ 357.286776][T10875] [ 357.286785][T10875] dump_stack_lvl+0x189/0x250 [ 357.286827][T10875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.286851][T10875] ? __pfx__printk+0x10/0x10 [ 357.286876][T10875] ? print_lock_name+0xde/0x100 [ 357.286900][T10875] print_deadlock_bug+0x28b/0x2a0 [ 357.286923][T10875] validate_chain+0x1a3f/0x2140 [ 357.286955][T10875] __lock_acquire+0xab9/0xd20 [ 357.286988][T10875] ? rpc_close_pipes+0x10a/0x730 [ 357.287007][T10875] lock_acquire+0x120/0x360 [ 357.287035][T10875] ? rpc_close_pipes+0x10a/0x730 [ 357.287061][T10875] down_write+0x96/0x1f0 [ 357.287090][T10875] ? rpc_close_pipes+0x10a/0x730 [ 357.287109][T10875] ? __pfx_down_write+0x10/0x10 [ 357.287137][T10875] ? __pfx_find_submount+0x10/0x10 [ 357.287156][T10875] ? _raw_spin_unlock+0x28/0x50 [ 357.287178][T10875] ? d_walk+0x6f4/0x780 [ 357.287208][T10875] rpc_close_pipes+0x10a/0x730 [ 357.287229][T10875] ? d_invalidate+0x204/0x260 [ 357.287247][T10875] ? __pfx_rpc_close_pipes+0x10/0x10 [ 357.287268][T10875] ? up_write+0x1c4/0x420 [ 357.287289][T10875] ? __pfx_rpc_close_pipes+0x10/0x10 [ 357.287309][T10875] __simple_recursive_removal+0x208/0x510 [ 357.287336][T10875] ? __pfx_rpc_close_pipes+0x10/0x10 [ 357.287357][T10875] rpc_unlink+0x56/0x80 [ 357.287375][T10875] rpc_pipefs_event+0xc0/0x170 [ 357.287405][T10875] notifier_call_chain+0x1b3/0x3e0 [ 357.287429][T10875] blocking_notifier_call_chain+0x6a/0x90 [ 357.287452][T10875] rpc_kill_sb+0xd0/0x190 [ 357.287475][T10875] deactivate_locked_super+0xb9/0x130 [ 357.287498][T10875] cleanup_mnt+0x425/0x4c0 [ 357.287517][T10875] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.287543][T10875] task_work_run+0x1d1/0x260 [ 357.287571][T10875] ? __pfx_task_work_run+0x10/0x10 [ 357.287600][T10875] ? exit_to_user_mode_loop+0x40/0x110 [ 357.287631][T10875] exit_to_user_mode_loop+0xec/0x110 [ 357.287660][T10875] do_syscall_64+0x2bd/0x3b0 [ 357.287687][T10875] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.287712][T10875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.287732][T10875] ? clear_bhb_loop+0x60/0xb0 [ 357.287753][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.287773][T10875] RIP: 0033:0x7f8ce858e929 [ 357.287791][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.287817][T10875] RSP: 002b:00007f8ce93a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.287839][T10875] RAX: ffffffffffffffec RBX: 00007f8ce87b5fa0 RCX: 00007f8ce858e929 [ 357.287853][T10875] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000080 [ 357.287869][T10875] RBP: 00007f8ce8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 357.287880][T10875] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 357.287889][T10875] R13: 0000000000000000 R14: 00007f8ce87b5fa0 R15: 00007ffdaaaf4c68 [ 357.287905][T10875] [ 357.411928][ T1211] hid-picolcd 0003:04D8:F002.0034: item fetching failed at offset 7/11 [ 357.601281][ T1211] hid-picolcd 0003:04D8:F002.0034: device report parse failed [ 357.636199][ T1211] hid-picolcd 0003:04D8:F002.0034: probe with driver hid-picolcd failed with error -22 [ 357.764229][ T1211] usb 5-1: USB disconnect, device number 56 [ 358.858206][ T1211] usb 4-1: USB disconnect, device number 78