last executing test programs: 4m58.129164539s ago: executing program 3 (id=2595): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="201628000000cc38"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x60, 0x23, 0x79, {0x79, 0xf, "12dbbd7e0816ce3fce2a7000cf290d34de7ad5c39217456c7752082b8161684161060b2a98161ef8cc329000ff54f2f4df16a12bcef7395718959866d2dfe4b9ea61318ebc2686993fcdfa76551189e9209f87e56702bebc6aba12b53a46de5d6cabd06c3311fc18c5c3b92daa4c854f905a0041e881d6"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x20, 0x14, 0x96, "12457bfbeb024489555e18b38f9f8e3e6b318f3b6f22303414faed7ebd6e6b70964e47c45fb40493c6eb71d987036261ed1c59ce7e9acfb2c5a22336f903e8527cbaf243b029a79b307e989e004ba87f1de0d4f6a374988f2935761f51e486ab6e790ec673e40df0a6112819b4d3faaf2171eb972a4e56b72d8d9b3595047ee2a2119178da5a1861576b179e11727d1b1c99bfe1ca53"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4d}, &(0x7f00000003c0)={0x20, 0x0, 0xce, {0xcc, "f18b5fe0b88c1321f43de7889ef446d88aca8408672eece162775fe078673c147b3fd928beec05b1e79f4b929256231ee2b236be1cd870b0a118690086f1267660e14aae94acb01d7b3d85a3e4ae2ed6c48b0f3f27dafe2ef4500d032c79c00144f832a9c1a06f05cfda12377444e78b6afb0be4eac1ba68a2c494ac7390c2854919ee35f50d8bf3342e8c89dabd8a6ef3f6238b9463b1e5e5847c41b0f01819dc60abf2ab9c90ab5877fe000c7fed3add715c0d0fde04d865929b58a8a594dcdb0ac62e9e4543b6449b0a66"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x81}}) 4m55.726532562s ago: executing program 3 (id=2610): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) (fail_nth: 2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 4m55.541052387s ago: executing program 3 (id=2612): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close(r1) mmap(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x2000000, 0x28011, r1, 0xa8355000) socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) r3 = socket$inet6(0x2d, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r4) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r6, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '*!/^'}, {0x20, ',-\\'}, {0x20, 'tls\x00'}], 0xa, "706b489d3f08cf064f2d4b10d53a19b5236aeb85eef54db3764e0d14274c3a1dab99f636673fac35f9069eae93b29c5fd0a28e2d8e8c7352c0a9161b373b864f17a2fff897692e6edcfc243faf7f4b8ff59b1190ec2aa6092ceb879e58e6c0f9bfcd56d59dd32fd0b95380655e286bd7b7f7e5625f4978f1f2e503ad7d310f73a04ed12f6f2ce4f5276a"}, 0xa4) bind$inet6(r3, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @mcast1, 0xffffffff}, 0x1c) sendfile(r3, r3, &(0x7f0000000040)=0x5, 0x0) 4m55.540714276s ago: executing program 3 (id=2613): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 4m55.534860585s ago: executing program 3 (id=2614): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c1f940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) 4m55.31916207s ago: executing program 3 (id=2615): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_linger(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async) eventfd2(0xffffffff, 0x80000) (async) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'8255\x00', [0x30, 0x80008000, 0xb4f, 0x2, 0x6, 0x0, 0x1, 0xd, 0xffe, 0x1, 0xdec, 0xfffffffd, 0x1006, 0x4, 0xffff, 0xffff, 0xffff7fa8, 0x40000009, 0x40a00000, 0x3, 0x4, 0x10000, 0x100, 0xe2e2, 0x2, 0x2008, 0x5, 0x3, 0x5, 0x4, 0x28045]}) (async) fstat(r1, &(0x7f0000000240)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) (async) mmap(&(0x7f0000eba000/0x1000)=nil, 0x1000, 0x2000001, 0x8010, r0, 0xfffff000) 4m55.235778809s ago: executing program 32 (id=2615): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_linger(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async) eventfd2(0xffffffff, 0x80000) (async) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'8255\x00', [0x30, 0x80008000, 0xb4f, 0x2, 0x6, 0x0, 0x1, 0xd, 0xffe, 0x1, 0xdec, 0xfffffffd, 0x1006, 0x4, 0xffff, 0xffff, 0xffff7fa8, 0x40000009, 0x40a00000, 0x3, 0x4, 0x10000, 0x100, 0xe2e2, 0x2, 0x2008, 0x5, 0x3, 0x5, 0x4, 0x28045]}) (async) fstat(r1, &(0x7f0000000240)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) (async) mmap(&(0x7f0000eba000/0x1000)=nil, 0x1000, 0x2000001, 0x8010, r0, 0xfffff000) 3m30.725880947s ago: executing program 2 (id=3161): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1d0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x220054, &(0x7f0000000040)={[{@size}]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x50424752, 0x0, @stepwise}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r6, 0x8, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1, 0x0, 0x7ff}) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) (async) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) (async) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x104, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000200)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9c00"/12, @ANYRES8=r9], 0xa0}}], 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x4801) 3m30.569052303s ago: executing program 2 (id=3162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x14, r1, 0x1, 0x400000}, 0x14}}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ext3\x00', 0x100000c, 0x0) 3m30.526126494s ago: executing program 2 (id=3163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x3, 0x200, 0x0, 0x6f7, 0x100590f, 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="09ff00"}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002"], 0x138}}, 0x4) 3m28.524938759s ago: executing program 2 (id=3178): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000) 3m28.120941723s ago: executing program 2 (id=3184): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x807, 0x1, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0xff, 0x2}}}}}]}}]}}, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x9, 0x3032, 0xffffffffffffffff, 0x1263b000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000100)) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r3, 0x0, &(0x7f0000803000/0x4000)=nil, 0x4000, 0x87}) dup(r2) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x405c5504) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0x40, 0x40) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000300)={0x3}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r8, 0x6f000) write(r7, &(0x7f0000000400)="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", 0x1f000) 3m24.841133466s ago: executing program 2 (id=3191): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 3m8.758839725s ago: executing program 33 (id=3191): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 2m6.367573372s ago: executing program 5 (id=3723): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="000f0100000077"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201602"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201602"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f00000004c0)={0x0, 0xa, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0x16, 0x7, "bd3d9fe039eaee"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0x16, 0x7, "bd3d9fe039eaee"}, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000080)=@sg0, 0xffffffffffffffff, &(0x7f00000000c0)) 2m4.68677303s ago: executing program 5 (id=3744): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) setresgid(r1, r1, r1) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) 2m4.663441309s ago: executing program 5 (id=3745): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x2000) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5001, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(r3, 0x0, 0x40000000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) fadvise64(r1, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 2m4.473036571s ago: executing program 5 (id=3746): r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffb2, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3c1d, [{{0x9, 0x2, 0xfffffffffffffe06}}]}}, 0x0) (async, rerun: 32) r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x5333578052521f3b) r3 = gettid() (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@int=0x7fffffff, 0x4) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, 0x0, &(0x7f0000000080)) (async) r6 = socket(0x2, 0x80805, 0x0) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000000)={r9, 0x9}, 0x8) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r11, 0x0) sendmsg$netlink(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001dc0)=ANY=[], 0x10}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}], 0x20, 0x10}, 0x20004044) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r13, 0x4020aed2, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m4.471724157s ago: executing program 5 (id=3747): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@local, r2}, 0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x0, 0x9, 0x7, 0x4, 0x4, "8465797a888e8a48e6ab0bfd50a5317da4cdba", 0xfffffffe, 0x1000}) unshare(0x2040600) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r3, 0xffff) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x46, 0x200, 0xee1, 0x3781, 0xa, "a14c0c4837b25ba1055c8b3a9bc480a9edfb67"}) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x7}, 0x18, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r4, &(0x7f00000011c0)=[{&(0x7f0000000580)="8897fda0e01796f6", 0x8}, {&(0x7f00000010c0)="fd559ade", 0x4}], 0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='hfs\x00', 0xc400, 0x0) 2m4.43777311s ago: executing program 5 (id=3748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r3, &(0x7f0000000340)="89", 0x1, 0x6, 0x0, 0x0, r3}]) r5 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\v', 0x1}], 0x1}}], 0x1, 0x4844) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r6, &(0x7f00000000c0)="7c3ba23eeeb359c50fb1eb544421127a34bb54ed5131d8429280ba15e874807b5666d67392cdedd8f204bcf242d8197e4350b29ba3db0834ad005a3fb0aa63527ba4ee5cbf5cb9544fbf66fab19fcb27a275d170edad5dd27832c302095380a79305380c1ff6edd5c0a6da7e00944e0b47343ef259b7b0e1bc8b272db4baee07cecf482602289dee9bbc83133a7f612dba37ab189e80696efc7927de8fd2fa7a686c56c1f4a723455bd3304f97214fe1052b79370e90941092c2000000", 0xbd, 0x20004000, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x7) 1m47.839808631s ago: executing program 34 (id=3748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r3, &(0x7f0000000340)="89", 0x1, 0x6, 0x0, 0x0, r3}]) r5 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\v', 0x1}], 0x1}}], 0x1, 0x4844) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r6, &(0x7f00000000c0)="7c3ba23eeeb359c50fb1eb544421127a34bb54ed5131d8429280ba15e874807b5666d67392cdedd8f204bcf242d8197e4350b29ba3db0834ad005a3fb0aa63527ba4ee5cbf5cb9544fbf66fab19fcb27a275d170edad5dd27832c302095380a79305380c1ff6edd5c0a6da7e00944e0b47343ef259b7b0e1bc8b272db4baee07cecf482602289dee9bbc83133a7f612dba37ab189e80696efc7927de8fd2fa7a686c56c1f4a723455bd3304f97214fe1052b79370e90941092c2000000", 0xbd, 0x20004000, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x7) 5.03715405s ago: executing program 1 (id=4498): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff0a, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f0000000000)="3ac2244065e9", 0xfffffffffffffd3b, 0x5df84d6276e5316f, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000, @empty}, 0x1c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 4.102169534s ago: executing program 1 (id=4503): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f00000000c0)={0x0, 0x0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x2000, 0xffffffffffffffff, &(0x7f00000000c0)}]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00'], 0x408100) utimes(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000500)={{0x0, 0xea60}}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 3.993498292s ago: executing program 1 (id=4506): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 3.894444585s ago: executing program 1 (id=4508): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x96c}, 0x2e, 0x0) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f0000000140), &(0x7f00000003c0)="b4bcbc69434526c09a2a422e82631a58849a5793a31ee858938cd78a3c25c985937cb89cb729d4bfadfdc3a84c580c79dc884de23d425525ae456dd081b73b9fb7889d5060296db29c2b27ddef81db7f864555213e2386962ec1fe9dd2f37a9828d135012190c1c114710e73c20f2258d0939b424e122eed33b53b22a8ca4c1eca629244ead54c2fab39f23d05c986996fdc4d8f2d5ed20ec32cb19c7e66f1557727e09c8103269f70253f12749e34127aaf866b85e525ea0c94d514000b3da06a13092725d0dcdf34b0df52", 0xcc, 0xfffffffffffffffe) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) fcntl$getownex(r3, 0x10, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) r5 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000002c0)={'veth0_to_batadv', 0x32, 0x37}, 0x2f) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 2.949834523s ago: executing program 1 (id=4516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r1 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 2.668976858s ago: executing program 6 (id=4521): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0xe790, 0x1, 0x4, 0x0, 0x40}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004380), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x5502, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05604, &(0x7f0000000180)={0xd, @vbi}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x1, 0x0, 0x9}) r5 = socket(0x1d, 0x2, 0x6) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000300), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) set_mempolicy(0x3, &(0x7f00000002c0)=0x4, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 2.328055323s ago: executing program 0 (id=4527): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000013000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) 2.237073497s ago: executing program 0 (id=4528): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x29, 0x4, 0xfffffffd) write(r3, &(0x7f00000000c0)="240000001d005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) fadvise64(r0, 0x92, 0x5, 0x152450db2d22f067) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x0) process_vm_writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/92, 0x5c}], 0x2, 0x0) 2.193030633s ago: executing program 0 (id=4529): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 2.118341543s ago: executing program 0 (id=4530): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20240f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20240f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x10, "3ecc00000000000000edffffff00"}) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xc4, 0xca, 0x85, 0x10, 0xb48, 0x300d, 0xd4cd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x0, 0x39, 0x6e, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000900)=ANY=[@ANYBLOB="12010003000000206a05280040000102030109022d000101008006090400b8020301020e092104000601229b0f090581034fb5085c9aadf1ab2b83ff030604"], &(0x7f0000000d00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0x51, 0x77, 0x7, 0x10, 0x5}, 0x20, &(0x7f00000009c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0xcb}, @ss_container_id={0x14, 0x10, 0x4, 0x2d, "c88ae6c7c53d22079918cf0aef29bb66"}]}, 0x8, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x29, &(0x7f0000000a80)=@string={0x29, 0x3, "fa67b115925a0f29925f7c08c742cf9a3e7e90ecb305a87ab1be041952a9afc2892ea53c5a9f81"}}, {0x96, &(0x7f0000000ac0)=@string={0x96, 0x3, "9f6a71f639bd3c3f6dd2fd403e801e083924bbdac70d112e81dd92d66382cd462fbf83562a678018d2e9bf1ac8fbadd1c17e462198d00674dd3b3b7497bcd6cdcff9a095171e576720d25d7109bef187b6077f5a49ef664b9294417679dc2c9973c12e26fb097ca3a29a587ecfca15fc84f4d795e3d2d9e05f2e8bde4b47c2ea9e7b16bef7b94723a77af4dbb5e332f909d17d87"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x41a}}, {0x5d, &(0x7f0000000bc0)=@string={0x5d, 0x3, "8b0e855162b5ea2ca49dafc91fc09b3233d6a45854d0c79e9ea192c35eee729bd2b98674f0ac9835688d5534f1997bf31aa80a704b02aaa154aed1ff44ac08d0de884de523b62554280fe7f0046abf7bd5df7fe56152e156e99b33"}}, {0x7a, &(0x7f0000000c40)=@string={0x7a, 0x3, "c176e47c7ececedc232b23ff80d4ea456812f0882f0b2b52899b2f86ba1b4f1af67ff9a73a3a487783186ad9b45c3e3a32ef4102a599bdece42b55b28765514d594f0980ceec720f30e124b5baaa1b00e3162dd4f35781b7fe278d41e31e1c235662deada8befa4c30fd5a0a539323132695071751e96e4e"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x83e}}]}) (async) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000900)=ANY=[@ANYBLOB="12010003000000206a05280040000102030109022d000101008006090400b8020301020e092104000601229b0f090581034fb5085c9aadf1ab2b83ff030604"], &(0x7f0000000d00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0x51, 0x77, 0x7, 0x10, 0x5}, 0x20, &(0x7f00000009c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0xcb}, @ss_container_id={0x14, 0x10, 0x4, 0x2d, "c88ae6c7c53d22079918cf0aef29bb66"}]}, 0x8, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x29, &(0x7f0000000a80)=@string={0x29, 0x3, "fa67b115925a0f29925f7c08c742cf9a3e7e90ecb305a87ab1be041952a9afc2892ea53c5a9f81"}}, {0x96, &(0x7f0000000ac0)=@string={0x96, 0x3, "9f6a71f639bd3c3f6dd2fd403e801e083924bbdac70d112e81dd92d66382cd462fbf83562a678018d2e9bf1ac8fbadd1c17e462198d00674dd3b3b7497bcd6cdcff9a095171e576720d25d7109bef187b6077f5a49ef664b9294417679dc2c9973c12e26fb097ca3a29a587ecfca15fc84f4d795e3d2d9e05f2e8bde4b47c2ea9e7b16bef7b94723a77af4dbb5e332f909d17d87"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x41a}}, {0x5d, &(0x7f0000000bc0)=@string={0x5d, 0x3, "8b0e855162b5ea2ca49dafc91fc09b3233d6a45854d0c79e9ea192c35eee729bd2b98674f0ac9835688d5534f1997bf31aa80a704b02aaa154aed1ff44ac08d0de884de523b62554280fe7f0046abf7bd5df7fe56152e156e99b33"}}, {0x7a, &(0x7f0000000c40)=@string={0x7a, 0x3, "c176e47c7ececedc232b23ff80d4ea456812f0882f0b2b52899b2f86ba1b4f1af67ff9a73a3a487783186ad9b45c3e3a32ef4102a599bdece42b55b28765514d594f0980ceec720f30e124b5baaa1b00e3162dd4f35781b7fe278d41e31e1c235662deada8befa4c30fd5a0a539323132695071751e96e4e"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000dc0)={0x24, 0x0, 0x0, &(0x7f0000000940), 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x2, {0x2, 0x2}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000180)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x29, 0x8, 0x6, 0x8, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "21a21c08a829302db05ff7d3bfc1683e"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4bb3b8074599cccbc0a98dbbf09ce455"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x7, 0x7, 0x6, "f98656c0", "5944e4f2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x81, 0x7, 0x3, 0xc, 0xc4c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x5, 0x78, "a5d230fee88041f4b939ae19699ad2d5403b7b16398ad5d4b11d2904d5cbe07d46fe33d619d89fde6ab3a68d008fd49c1d22981ba41fbf434240ff1d88acc9b3e0afdf6b215f4be9327d941d4accbea75ad306101b5ffe4d055e0353a430fb0a287b597990a59b208b0c90bcb236bfff09dab3d6f060daab"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xc0, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x9c5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, '#Z'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "ba40"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r4, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x2, {0x2, 0x2}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000180)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x29, 0x8, 0x6, 0x8, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "21a21c08a829302db05ff7d3bfc1683e"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4bb3b8074599cccbc0a98dbbf09ce455"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x7, 0x7, 0x6, "f98656c0", "5944e4f2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x81, 0x7, 0x3, 0xc, 0xc4c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x5, 0x78, "a5d230fee88041f4b939ae19699ad2d5403b7b16398ad5d4b11d2904d5cbe07d46fe33d619d89fde6ab3a68d008fd49c1d22981ba41fbf434240ff1d88acc9b3e0afdf6b215f4be9327d941d4accbea75ad306101b5ffe4d055e0353a430fb0a287b597990a59b208b0c90bcb236bfff09dab3d6f060daab"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xc0, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x9c5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, '#Z'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "ba40"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 1.937214831s ago: executing program 6 (id=4531): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x800000000fe, 0x0) 1.930311474s ago: executing program 1 (id=4532): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) dup(r0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, 0xffffffffffffffff, 0x5708e000) 1.881119604s ago: executing program 6 (id=4533): creat(&(0x7f0000000140)='./file0\x00', 0x71) socket$inet6(0xa, 0x80002, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x2000, 0xffffffffffffffff, &(0x7f00000000c0)}]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00'], 0x408100) utimes(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000500)={{0x0, 0xea60}}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 1.781624807s ago: executing program 6 (id=4535): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 1.616771468s ago: executing program 6 (id=4536): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x8140, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xe89b1ba254ccdb64, 0xb5, 0x40a9c1, 0xeffffdff, 0x0, [{0x0, 0x80, 0xfc}, {0x1c, 0x1, 0x20, '\x00', 0x10}, {0xfc, 0x7, 0x0, '\x00', 0xff}, {0xfe, 0x90, 0x3, '\x00', 0x8}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x0, 0x60}, {0x0, 0x85, 0xbe, '\x00', 0xff}, {0x0, 0x6}, {0x0, 0xff, 0x0, '\x00', 0xff}, {0x8, 0x1, 0x0, '\x00', 0x42}, {0x0, 0x2, 0x0, '\x00', 0xff}, {0x0, 0x50, 0x0, '\x00', 0xc}, {0x2, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x9}, {0x2, 0x8, 0x8d, '\x00', 0xfe}, {0x24, 0x5}, {0xfe, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xdd}, {0x1, 0x3, 0x7, '\x00', 0x3}, {0x80, 0x0, 0xe, '\x00', 0x7}, {0x1, 0xe8}, {0xd, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x86, 0x9}]}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffff0018) ioctl$SNDCTL_DSP_SPEED(r0, 0x8004500b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x1a3c65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x200002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x8, 0x81, 0x8, 0x81, @tick=0x4, {0x40, 0x9}, {0x2, 0x48}, @ext={0x24, &(0x7f0000000180)="f0c48cf9518c673cd026e40789256bf61abfb5e358b6eb6a825f633def721396fb495f8e"}}, {0x0, 0x81, 0x20, 0x5, @tick=0xd, {0x2}, {0x2, 0x1}, @connect={{0x4, 0x7}, {0x6, 0x10}}}, {0x9, 0x7, 0x7, 0x2, @time={0xffff, 0x7}, {0x2, 0xb2}, {0x5, 0x7}, @ext={0xca, &(0x7f00000001c0)="2f139211454e9087d261c385a4906c54f5aa7e5a858aa2f7423d289193fcc22bda7585a67ba4063a250143457f2d1ecbfe7ac1634869a3a0d13492ab3c36430e3f44384f43d7000af10b9c6ce70547bbe841c54ce89b4826e2d7c01d369268805d2d36d67f6cc25943cc55e651a0894497c0f61a8ddb49edb3ca747cda282b8b3b0cc03f1218ed3c8b05c3dd31323fec26fc9c7a1304033fbe73e0356f1d202cb1a182df2a7a9f6275cae1b06fc090e780434ec9cd0c6972270c86c1b6733493b34917b74a9f765a3272"}}, {0x81, 0x10, 0x10, 0x8, @time={0xc, 0x2}, {0xe5, 0x3}, {0xb7, 0x1}, @queue={0x6, {0x1, 0x7}}}, {0x8, 0x1, 0x3, 0x5, @tick, {0x6, 0x3}, {0x7, 0xdf}, @raw32={[0x78cb, 0x9, 0xac7]}}], 0x8c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000300)="a905000000007464000100002400000000e5c06402823fc31e63a0a94ad8311dabcd21", 0x23}, {&(0x7f0000000200)="679ad6fef6014ed594", 0x9}], 0x2}}], 0x1, 0x4040000) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000300)={0x10}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0xc}) close(r0) 1.524041929s ago: executing program 4 (id=4539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x320, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x18}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x27}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_TX_RATES={0x278, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x9}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x1}, {0x2, 0x6}, {0x3, 0x9}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0xffff, 0x1ff, 0x0, 0x49b, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d23, 0x1ff, 0x7, 0x3ff, 0x8, 0x6, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x1, 0x1000, 0x6, 0x5, 0x101, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x1, 0x5, 0x80, 0x5, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x5, 0x4, 0x0, 0xff7f, 0x40, 0xd302]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x30, 0x36, 0x50, 0x1, 0x24, 0x6, 0x1, 0xb, 0x5, 0x30, 0x6c, 0x2, 0x30, 0x2, 0xc, 0x0, 0x1b, 0x7, 0xc, 0x9, 0x24, 0x1b, 0x24, 0x3, 0x36, 0x36]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x4, 0x36, 0x1b, 0x36, 0x6c, 0x48, 0x60, 0x36, 0x1, 0x1b]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x9, 0x8c, 0xfa88, 0x9c8, 0x8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x1, 0x0, 0x5, 0x3, 0x9f74, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x0, 0x5, 0xa, 0x1e9b, 0x9, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x2, 0x16, 0x6c, 0x5, 0x6c, 0x0, 0x5, 0x4, 0x18, 0x30, 0xc, 0x5c, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x4}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x7, 0x8}, {0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x9}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6, 0x2, 0x8001, 0x8, 0x6, 0x7, 0x0, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x3, 0x55, 0x5, 0x3, 0x4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x10, 0x77b6, 0xec5d, 0x40, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x694b, 0x8, 0x71fb, 0xf7f8, 0x7e, 0x7, 0x2, 0x7]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x5}, {0x3, 0x9}, {0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {}, {0x7, 0xa}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x8}, {0x2}, {0x0, 0x8}, {0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x74, 0x2, 0x6, 0x24]}, @NL80211_TXRATE_HT={0xfffffe7f, 0x2, [{0x3, 0x7}, {0x7, 0x6}, {0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x6}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x5}, {0x3, 0xa}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x7d, 0x19, 0x7a14, 0x64, @private0, @loopback, 0x7}}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019a107000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x2209002, 0x0) 1.325186083s ago: executing program 4 (id=4540): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r0, &(0x7f0000000180)=""/39, 0x27) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000190081054e81f782db0000070a000a000900142603600e1208001e0000050401a8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d302fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500d1d6e3ebd063a851270e98bebfeb789d005f5f188976000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43", 0xd8}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 1.260888247s ago: executing program 6 (id=4541): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000466000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000935000/0x3000)=nil, 0x3000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x7) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) syz_usb_connect$uac1(0x1, 0xc8, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x23, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xaa, 0x85}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0x6, '-'}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x1, 0x3, 0x8000, 0x4, 0x2}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0xf7, 'b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x4, 0x2, {0x7, 0x25, 0x1, 0x3, 0x0, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x6, 0x57, "73dd", "82be8b"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x7, 0x5, 0x81, "cf"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x0, 0x1}, @format_type_i_continuous={0xffffffffffffff46, 0x24, 0x2, 0x1, 0x74, 0x3, 0x6, 0x5, '1\\', '3'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x10, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xff, 0x1, "", "80"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x6, 0x0, {0x7, 0x25, 0x1, 0x81, 0x1, 0x1000}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x9, 0x8, 0xff, 0x6}, 0x3b, &(0x7f0000000140)={0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x23, 0xe, 0x4, 0xf800, 0x24}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b650b3ca4c4d494dfec64d06092bae75"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "3ae7df56d747c10c8143295e4693d4dc"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x412}}, {0xc9, &(0x7f00000001c0)=@string={0xc9, 0x3, "649e0d64b54dafdf0dbe5718b364b345ff278b8b7600234aa96af61fb97c5f5fd20a5a122f1958457bf1af9fca15945f7eed635866749fa2565b295ce1e276bdd8d500dae2953122ec12db53171acb87cfc3310af7e270d303ef07774e6e64c18fda5204bcff0c2fb9268228abe02e814c1bce892214d79c3c3cc2bc521e72c2d614edd1c4c0cdcc75c5e662c509651b499213a6e77c7fed5d6c0ef3972804034ae56c9ffbae1186e79ca5d99c6fb9acc98c8d00511ec7bccda41ae22867d8e54fea7365f45a1e"}}, {0xb2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b203b76432ab7803d616a48c2ac0b24366aae279ea3621cea77f89b9ef980ced21b079b21eaf2992750bade6f839f182966ec36763c434759c4ef3b7f69372b83f049b07000000a320cbefc4e1dd56d755599b2c3f459949d01c6397e6ad466eab7e6569b12fc03774d3adc70cebdc8471dd361a310e05be2dd9d53d99ac73a46c06000000000000000d6814c97d229ce6698473a6462d03a2712aa5b6b76931e26dd64c2a8c5bb8b38fb5cb621ba73b7cb8"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x411}}]}) (async) syz_usb_connect$uac1(0x1, 0xc8, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x23, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xaa, 0x85}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0x6, '-'}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x1, 0x3, 0x8000, 0x4, 0x2}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0xf7, 'b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x4, 0x2, {0x7, 0x25, 0x1, 0x3, 0x0, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x6, 0x57, "73dd", "82be8b"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x7, 0x5, 0x81, "cf"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x0, 0x1}, @format_type_i_continuous={0xffffffffffffff46, 0x24, 0x2, 0x1, 0x74, 0x3, 0x6, 0x5, '1\\', '3'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x10, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xff, 0x1, "", "80"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x6, 0x0, {0x7, 0x25, 0x1, 0x81, 0x1, 0x1000}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x9, 0x8, 0xff, 0x6}, 0x3b, &(0x7f0000000140)={0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x23, 0xe, 0x4, 0xf800, 0x24}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b650b3ca4c4d494dfec64d06092bae75"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "3ae7df56d747c10c8143295e4693d4dc"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x412}}, {0xc9, &(0x7f00000001c0)=@string={0xc9, 0x3, "649e0d64b54dafdf0dbe5718b364b345ff278b8b7600234aa96af61fb97c5f5fd20a5a122f1958457bf1af9fca15945f7eed635866749fa2565b295ce1e276bdd8d500dae2953122ec12db53171acb87cfc3310af7e270d303ef07774e6e64c18fda5204bcff0c2fb9268228abe02e814c1bce892214d79c3c3cc2bc521e72c2d614edd1c4c0cdcc75c5e662c509651b499213a6e77c7fed5d6c0ef3972804034ae56c9ffbae1186e79ca5d99c6fb9acc98c8d00511ec7bccda41ae22867d8e54fea7365f45a1e"}}, {0xb2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b203b76432ab7803d616a48c2ac0b24366aae279ea3621cea77f89b9ef980ced21b079b21eaf2992750bade6f839f182966ec36763c434759c4ef3b7f69372b83f049b07000000a320cbefc4e1dd56d755599b2c3f459949d01c6397e6ad466eab7e6569b12fc03774d3adc70cebdc8471dd361a310e05be2dd9d53d99ac73a46c06000000000000000d6814c97d229ce6698473a6462d03a2712aa5b6b76931e26dd64c2a8c5bb8b38fb5cb621ba73b7cb8"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x411}}]}) 1.231416754s ago: executing program 4 (id=4542): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) clock_nanosleep(0x9511f3c3a34bb9cc, 0x1, &(0x7f00000004c0), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xa000006, 0x0, 0x0, 0x1, 0x6}) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 245.382899ms ago: executing program 4 (id=4543): creat(&(0x7f0000000140)='./file0\x00', 0x71) socket$inet6(0xa, 0x80002, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x2000, 0xffffffffffffffff, &(0x7f00000000c0)}]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00'], 0x408100) utimes(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000500)={{0x0, 0xea60}}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 231.055702ms ago: executing program 4 (id=4544): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 172.37463ms ago: executing program 4 (id=4545): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = socket$inet6(0x2d, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000040)=""/74, 0x49) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2a302, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r5, 0x7dfff000) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) (async) socket$inet6(0x2d, 0x2, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x1, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) read$char_usb(r3, &(0x7f0000000040)=""/74, 0x49) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2a302, 0x0) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r5, 0x7dfff000) (async) 53.028964ms ago: executing program 0 (id=4546): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r3, 0x5, 0x81, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) tkill(r6, 0x12) ptrace(0x4208, r6) tkill(r6, 0x12) setsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000140), 0x3, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x760}, {r0, 0x608}, {r1, 0x200}, {r2, 0x3103}, {r4, 0x10}, {r7, 0x90}, {r8, 0x900c}], 0x7, 0xdbb) 0s ago: executing program 0 (id=4547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000020000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) kernel console output (not intermixed with test programs): 047F:FFFF.005C: ignoring exceeding usage max [ 568.197236][T14326] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 568.321921][T18982] /dev/rnullb0: Can't open blockdev [ 568.385383][T18986] /dev/rnullb0: Can't open blockdev [ 568.417554][T18988] binder: 18987:18988 ioctl c0306201 200000000080 returned -14 [ 568.482732][ T5911] apple 0003:05AC:027B.005D: unknown main item tag 0x6 [ 568.495803][ T5911] apple 0003:05AC:027B.005D: report_id 29495 is invalid [ 568.502821][ T5911] apple 0003:05AC:027B.005D: item 0 2 1 8 parsing failed [ 568.510918][ T5911] apple 0003:05AC:027B.005D: parse failed [ 568.519601][ T5911] apple 0003:05AC:027B.005D: probe with driver apple failed with error -22 [ 568.564299][T18993] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 568.571579][T18993] /dev/rnullb0: Can't open blockdev [ 568.698083][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.720588][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.799597][T19000] /dev/rnullb0: Can't open blockdev [ 568.812303][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.857597][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.904605][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.938152][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.072874][T19005] netlink: 9696 bytes leftover after parsing attributes in process `syz.4.3963'. [ 569.756959][T19014] /dev/rnullb0: Can't open blockdev [ 569.845036][T19019] /dev/rnullb0: Can't open blockdev [ 570.150619][T14326] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 570.332423][T14326] usb 2-1: Using ep0 maxpacket: 32 [ 570.340735][T14326] usb 2-1: config 0 interface 0 has no altsetting 0 [ 570.349766][T14326] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 570.360721][T14326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.369113][T14326] usb 2-1: Product: syz [ 570.373537][T14326] usb 2-1: Manufacturer: syz [ 570.380185][T14326] usb 2-1: SerialNumber: syz [ 570.386797][T14326] usb 2-1: config 0 descriptor?? [ 570.599603][ T24] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 570.610101][ T24] usb 7-1: device reset changed ep0 maxpacket size! [ 570.619138][ T983] usb 7-1: USB disconnect, device number 10 [ 570.769271][ T5911] usb 5-1: USB disconnect, device number 80 [ 570.780583][ T983] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 570.831876][T14326] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 570.973724][ T983] usb 7-1: Using ep0 maxpacket: 16 [ 570.980256][ T983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.003467][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.037516][ T983] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 571.064270][T19037] fuse: Bad value for 'fd' [ 571.156849][ T983] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 571.176952][ T983] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 571.201483][ T983] usb 7-1: Manufacturer: syz [ 571.212616][ T983] usb 7-1: config 0 descriptor?? [ 571.469081][T19028] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3987'. [ 571.478135][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 571.498342][T14326] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 571.507438][T14326] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 571.517081][T19028] gretap0: entered promiscuous mode [ 571.528483][T19043] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3987'. [ 571.568628][T19043] 0{X: renamed from gretap0 [ 571.581188][T19043] 0{X: left promiscuous mode [ 571.590867][T19043] 0{X: entered allmulticast mode [ 571.600993][T19043] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 571.622164][ T24] usb 7-1: USB disconnect, device number 11 [ 571.663463][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.675504][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.688341][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.698276][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.715544][ T983] usb 2-1: USB disconnect, device number 51 [ 571.724538][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.733787][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.742859][ T9] usb 5-1: config 0 descriptor?? [ 571.937675][ T5945] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 572.096433][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 572.102103][ T5945] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 572.110906][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.120688][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.126776][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.138673][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.147113][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.153249][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.164909][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.173128][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.179215][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.184590][ T9] plantronics 0003:047F:FFFF.005E: ignoring exceeding usage max [ 572.200953][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.208470][ T9] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 572.224575][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.230744][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.242738][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.251092][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.257486][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.273039][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.281396][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.287590][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.299859][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.308066][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.330857][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.345277][ T5945] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 572.354222][ T5945] usb 1-1: config 2 has no interface number 0 [ 572.360329][ T5945] usb 1-1: config 2 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64 [ 572.379369][ T5945] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 572.396926][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.405103][ T5945] usb 1-1: Product: syz [ 572.411656][ T5945] usb 1-1: Manufacturer: syz [ 572.416362][ T5945] usb 1-1: SerialNumber: syz [ 572.448283][ T5945] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 572.522310][T19062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.542497][T19062] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 572.663595][ T6519] usb 1-1: Failed to submit usb control message: -71 [ 572.666340][ T9] usb 1-1: USB disconnect, device number 45 [ 572.671514][ T6519] usb 1-1: unable to send the bmi data to the device: -71 [ 572.692400][ T6519] usb 1-1: unable to get target info from device [ 572.699695][ T6519] usb 1-1: could not get target info (-71) [ 572.721670][ T6519] usb 1-1: could not probe fw (-71) [ 572.898408][T19086] block nbd6: Attempted send on invalid socket [ 572.904616][T19086] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.914469][T19086] hpfs: hpfs_map_sector(): read error [ 573.036850][ T5945] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 573.207926][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 573.214447][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 573.223293][ T5945] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 573.232854][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.241840][ T5945] usb 2-1: Product: syz [ 573.246107][ T5945] usb 2-1: Manufacturer: syz [ 573.252457][ T5945] usb 2-1: SerialNumber: syz [ 573.259028][ T5945] usb 2-1: config 0 descriptor?? [ 573.378870][T16148] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 573.539574][ T983] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 573.542452][T16148] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 573.555375][T16148] usb 7-1: config 0 has no interface number 0 [ 573.561623][T16148] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 573.572870][T16148] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 573.583665][T16148] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 573.592744][T16148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.595963][T14326] usb 5-1: USB disconnect, device number 81 [ 573.610373][T16148] usb 7-1: config 0 descriptor?? [ 573.617860][T19092] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 573.631986][T16148] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 573.710205][ T983] usb 1-1: Using ep0 maxpacket: 32 [ 573.716778][ T983] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 573.725879][ T983] usb 1-1: config 0 has no interface number 0 [ 573.732047][ T983] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.743639][ T983] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.753571][ T983] usb 1-1: config 0 interface 85 has no altsetting 0 [ 573.763014][ T983] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 573.772115][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.780282][ T983] usb 1-1: Product: syz [ 573.784451][ T983] usb 1-1: Manufacturer: syz [ 573.789745][ T983] usb 1-1: SerialNumber: syz [ 573.795544][ T983] usb 1-1: config 0 descriptor?? [ 573.934549][ T24] usb 7-1: USB disconnect, device number 12 [ 574.252721][T19104] netlink: 'syz.4.4013': attribute type 16 has an invalid length. [ 574.262436][T19104] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4013'. [ 574.278775][T19104] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4013'. [ 574.304683][ T983] appletouch 1-1:0.85: Failed to request geyser raw mode [ 574.318421][ T983] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 574.338258][ T983] usb 1-1: USB disconnect, device number 46 [ 574.344645][T19104] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 574.672409][ T5945] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 574.686038][ T5945] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 574.745173][T19128] /dev/rnullb0: Can't open blockdev [ 574.814920][T19132] /dev/rnullb0: Can't open blockdev [ 575.270925][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 575.377788][ T5945] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 575.443606][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.463653][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 575.476441][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 575.491491][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.515904][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.535965][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.556234][ T5945] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.579559][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 575.591919][ T24] usb 1-1: config 0 descriptor?? [ 575.604621][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 575.619608][ T5945] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 575.634287][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.653191][ T5945] usb 7-1: Product: syz [ 575.664008][ T5945] usb 7-1: Manufacturer: syz [ 575.669028][ T5945] usb 7-1: SerialNumber: syz [ 575.686331][ T5945] usb 7-1: config 0 descriptor?? [ 575.696998][T19152] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 575.922379][ T5945] powermate: unknown product id 0240 [ 575.931339][ T5945] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 575.951568][ T5945] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input45 [ 576.043131][ T24] plantronics 0003:047F:FFFF.005F: ignoring exceeding usage max [ 576.051808][ T5945] usb 2-1: USB disconnect, device number 52 [ 576.089644][ T24] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 576.408916][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.429905][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.458639][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.468594][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.539087][T19152] /dev/rnullb0: Can't open blockdev [ 576.564329][ T5871] Bluetooth: hci0: unexpected event for opcode 0x203d [ 576.579723][ T5945] usb 1-1: USB disconnect, device number 47 [ 576.588152][ C1] powermate: config urb returned -71 [ 576.588345][ T9] usb 7-1: USB disconnect, device number 13 [ 576.593457][ C1] powermate: usb_submit_urb(config) failed [ 576.593510][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 576.632829][T19203] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 577.299029][T19236] /dev/rnullb0: Can't open blockdev [ 577.308032][T19235] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4030'. [ 577.404953][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.412250][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.643998][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 577.666886][T19123] /dev/rnullb0: Can't open blockdev [ 577.806682][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 577.813716][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.826036][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 577.827313][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 577.835560][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.851460][ T24] usb 1-1: Product: syz [ 577.855705][ T24] usb 1-1: Manufacturer: syz [ 577.860809][ T24] usb 1-1: SerialNumber: syz [ 577.872410][ T24] usb 1-1: config 0 descriptor?? [ 578.039642][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 578.056076][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 578.064250][ T10] usb 2-1: config 0 has no interface number 0 [ 578.070348][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.081804][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 578.092182][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 578.114237][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.122262][ T10] usb 2-1: Product: syz [ 578.126539][ T10] usb 2-1: Manufacturer: syz [ 578.131147][ T10] usb 2-1: SerialNumber: syz [ 578.139586][ T10] usb 2-1: config 0 descriptor?? [ 578.312096][T19238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4032'. [ 578.322604][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 578.373000][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 578.380441][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input46 [ 578.391366][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 578.587391][T19242] /dev/rnullb0: Can't open blockdev [ 578.616534][ T5945] usb 2-1: USB disconnect, device number 53 [ 578.637744][ T5945] appletouch 2-1:0.85: input: appletouch disconnected [ 578.965568][ T24] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 578.974047][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 579.182725][ T24] usb 1-1: USB disconnect, device number 48 [ 579.233643][T19255] /dev/rnullb0: Can't open blockdev [ 579.557353][ T5945] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 579.696348][ T5945] usb 2-1: device descriptor read/64, error -71 [ 579.953515][ T5945] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 580.038438][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 580.049203][T16148] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 580.102689][ T5945] usb 2-1: device descriptor read/64, error -71 [ 580.200211][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 580.212995][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 580.224873][T16148] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 580.235855][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 580.245733][ T5945] usb usb2-port1: attempt power cycle [ 580.251251][T16148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 580.262590][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.277180][T16148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 580.290265][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.299369][T16148] usb 1-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 580.308434][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.316528][T16148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.325976][ T24] usb 5-1: config 0 descriptor?? [ 580.334726][T16148] usb 1-1: config 0 descriptor?? [ 580.341160][T19266] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 580.515269][T19272] /dev/rnullb0: Can't open blockdev [ 580.615739][ T5945] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 580.639549][ T5945] usb 2-1: device descriptor read/8, error -71 [ 580.770352][ T24] plantronics 0003:047F:FFFF.0060: ignoring exceeding usage max [ 580.784157][T16148] wacom 0003:056A:00DE.0061: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 580.804495][ T24] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 580.819752][T16148] wacom 0003:056A:00DE.0061: hidraw1: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.0-1/input0 [ 580.843336][T16148] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DE.0061/input/input47 [ 580.915133][ T5945] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 580.948563][ T5945] usb 2-1: device descriptor read/8, error -71 [ 580.985134][T19263] block nbd4: Attempted send on invalid socket [ 580.993234][T19263] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.003622][T19266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4040'. [ 581.065213][ T5945] usb usb2-port1: unable to enumerate USB device [ 581.081287][T19278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.094290][T19278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.151175][ T5945] usb 1-1: USB disconnect, device number 49 [ 581.270636][T19288] Malformed UNC in devname [ 581.270636][T19288] [ 581.277265][T19288] CIFS: VFS: Malformed UNC in devname [ 581.283159][T19289] Malformed UNC in devname [ 581.283159][T19289] [ 581.289907][T19289] CIFS: VFS: Malformed UNC in devname [ 581.673859][ T5945] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 581.812838][ T5945] usb 1-1: device descriptor read/64, error -71 [ 582.080233][ T5945] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 582.240553][ T5945] usb 1-1: device descriptor read/64, error -71 [ 582.360484][ T5945] usb usb1-port1: attempt power cycle [ 582.742917][ T5945] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 582.767036][ T5945] usb 1-1: device descriptor read/8, error -71 [ 582.893577][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 583.031835][ T5945] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 583.053232][ T5945] usb 1-1: device descriptor read/8, error -71 [ 583.063567][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 583.071479][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 583.087433][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 583.097007][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.105004][ T9] usb 2-1: Product: syz [ 583.109579][ T9] usb 2-1: Manufacturer: syz [ 583.114177][ T9] usb 2-1: SerialNumber: syz [ 583.126184][ T9] usb 2-1: config 0 descriptor?? [ 583.170686][ T5945] usb usb1-port1: unable to enumerate USB device [ 583.320624][T16148] usb 5-1: USB disconnect, device number 82 [ 583.383829][T19310] /dev/rnullb0: Can't open blockdev [ 583.482901][T16148] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 583.514662][T19312] netlink: 'syz.6.4056': attribute type 4 has an invalid length. [ 583.563922][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 583.653075][T16148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.664140][T16148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 583.675060][T16148] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 583.684194][T16148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.693424][T16148] usb 5-1: config 0 descriptor?? [ 583.699072][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 584.139635][T16148] glorious 0003:22D4:1503.0062: item fetching failed at offset 6/7 [ 584.148038][T16148] glorious 0003:22D4:1503.0062: probe with driver glorious failed with error -22 [ 584.209745][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 584.227328][ T9] usb 2-1: USB disconnect, device number 58 [ 584.355354][T19306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.367160][T19306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.407339][ T10] usb 5-1: USB disconnect, device number 83 [ 584.614512][T19339] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4059'. [ 584.816574][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 585.000472][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.033819][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 585.050420][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 585.065580][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.080087][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.119063][T19370] /dev/rnullb0: Can't open blockdev [ 585.119665][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.179306][ T10] usb 5-1: config 0 descriptor?? [ 585.201281][T19374] /dev/rnullb0: Can't open blockdev [ 585.555560][T19396] /dev/rnullb0: Can't open blockdev [ 585.571859][T19398] /dev/rnullb0: Can't open blockdev [ 585.639476][ T10] plantronics 0003:047F:FFFF.0063: ignoring exceeding usage max [ 585.666093][ T10] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 585.696746][T19408] /dev/rnullb0: Can't open blockdev [ 586.088712][T16148] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 586.130153][T19418] netlink: 'syz.6.4079': attribute type 1 has an invalid length. [ 586.139396][T19418] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4079'. [ 586.238298][T16148] usb 1-1: device descriptor read/64, error -71 [ 586.495149][T16148] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 586.644474][T16148] usb 1-1: device descriptor read/64, error -71 [ 586.764461][T16148] usb usb1-port1: attempt power cycle [ 587.136189][T16148] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 587.159236][T16148] usb 1-1: device descriptor read/8, error -71 [ 587.414106][T16148] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 587.436721][T16148] usb 1-1: device descriptor read/8, error -71 [ 587.521944][T19466] netlink: 352 bytes leftover after parsing attributes in process `syz.1.4094'. [ 587.532385][T19466] netlink: 352 bytes leftover after parsing attributes in process `syz.1.4094'. [ 587.544478][T19466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'. [ 587.600633][T16148] usb usb1-port1: unable to enumerate USB device [ 587.606603][T19467] /dev/rnullb0: Can't open blockdev [ 587.619849][T19469] /dev/rnullb0: Can't open blockdev [ 588.151806][ T983] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 588.301361][ T983] usb 5-1: device descriptor read/64, error -71 [ 588.302111][T19500] /dev/rnullb0: Can't open blockdev [ 588.397535][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 588.545569][ T5871] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 588.552220][ T5871] Bluetooth: Wrong link type (-22) [ 588.559280][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.571997][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 588.583181][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 588.590062][ T983] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 588.605460][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.618806][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.629836][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.639242][ T5871] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 588.659465][ T24] usb 2-1: config 0 descriptor?? [ 588.750445][ T983] usb 5-1: device descriptor read/64, error -71 [ 588.759126][T19514] nfs4: Unknown parameter '/dev/rnullb0' [ 588.797395][T19516] /dev/rnullb0: Can't open blockdev [ 588.979609][T19521] /dev/rnullb0: Can't open blockdev [ 589.007238][ T983] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 589.049998][ T983] usb 5-1: device descriptor read/8, error -71 [ 589.157874][ T24] plantronics 0003:047F:FFFF.0064: ignoring exceeding usage max [ 589.190819][ T24] plantronics 0003:047F:FFFF.0064: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 589.328320][ T983] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 589.350484][ T983] usb 5-1: device descriptor read/8, error -71 [ 589.359629][T16148] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 589.374111][ T10] usb 2-1: USB disconnect, device number 59 [ 589.476484][ T43] usb 5-1: USB disconnect, device number 84 [ 589.498775][T16148] usb 1-1: device descriptor read/64, error -71 [ 589.626871][ T43] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 589.755145][T16148] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 589.777051][ T43] usb 5-1: device descriptor read/64, error -71 [ 589.894171][T16148] usb 1-1: device descriptor read/64, error -71 [ 589.951794][T19537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4122'. [ 589.985371][T19537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4122'. [ 590.012714][T16148] usb usb1-port1: attempt power cycle [ 590.033055][ T43] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 590.182680][ T43] usb 5-1: device descriptor read/64, error -71 [ 590.219243][T19551] /dev/rnullb0: Can't open blockdev [ 590.300432][ T43] usb usb5-port1: attempt power cycle [ 590.385861][T16148] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 590.399838][T19555] 9p: Could not find request transport: unixx000000000000010b [ 590.418388][T16148] usb 1-1: device descriptor read/8, error -71 [ 590.674430][ T43] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 590.695821][T16148] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 590.717846][T16148] usb 1-1: device descriptor read/8, error -71 [ 590.724375][ T43] usb 5-1: device descriptor read/8, error -71 [ 590.848147][T16148] usb usb1-port1: unable to enumerate USB device [ 590.986070][ T43] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 591.220205][ T43] usb 5-1: device not accepting address 88, error -71 [ 591.227220][ T43] usb usb5-port1: unable to enumerate USB device [ 591.540295][ T43] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 591.700748][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 591.797472][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 591.839571][ T43] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 591.981323][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.992952][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.004601][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 592.010691][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 592.014425][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.027966][ T43] usb usb5-port1: attempt power cycle [ 592.032845][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.047123][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.076121][ T9] usb 2-1: config 0 descriptor?? [ 592.438241][ T43] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 592.480776][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 592.519430][ T9] plantronics 0003:047F:FFFF.0065: ignoring exceeding usage max [ 592.537370][T19577] /dev/rnullb0: Can't open blockdev [ 592.565149][ T9] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 592.594405][T19581] /dev/rnullb0: Can't open blockdev [ 592.662788][ T43] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 592.684481][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 592.690071][ T43] usb usb5-port1: unable to enumerate USB device [ 592.865861][ T5945] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 593.026075][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 593.033682][ T5945] usb 7-1: config 2 has an invalid interface number: 21 but max is 2 [ 593.041834][ T5945] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 593.050587][ T5945] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 593.060782][ T5945] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 593.069760][ T5945] usb 7-1: config 2 has no interface number 0 [ 593.075839][ T5945] usb 7-1: config 2 interface 21 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 593.089500][ T5945] usb 7-1: config 2 interface 21 has no altsetting 0 [ 593.098234][ T5945] usb 7-1: New USB device found, idVendor=045e, idProduct=0415, bcdDevice=56.1c [ 593.107553][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.115656][ T5945] usb 7-1: Product: 靡ヮԗ㏕蒂癩몣ꓭ鱠䝦ꋬ踸憁뇬谎镸⛬劜㯼䉈咢퍺皱됣헰쎫౱蜧௃륶湮↌䳅믴휸⅁믹纯啘὚䦠Ⲏ [ 593.133532][ T5945] usb 7-1: Manufacturer: 뺌ঠ야ྊ돵삅륨妀７咓턏ⴴ暿줲諭厜塱媠灣ଛ⨤ώ⛾₄ῒ駂ṕ꒮ѽ鷨뾋艪⹦痐퍶㩪ฬ霪糧ꙋ䁆㰃ᩤ鶼Ǣ骂촺ꇖ쏙亭䏴䡌蝍풔㨓蠨䑁䨻ⳳ횮⇄ꙩ쟵铝ꅨ凨ཊ涇㖃ὶ뗶ᨋ衔뚻쎪螀ꆗ龡뺭蘾퇁㿪쉀裂叽썦鶮蚯炑奈ᰪ㎛얣믅 [ 593.172215][ T5945] usb 7-1: SerialNumber: 騸麝啀蚲뗘ㅑಐ옗䭫珖৤䭥祮Ϫ氙⨻㗤꧞츪ΰ蓳毲엽쳾셽鎒ᥝ㩄脜쫷땺㟂췏篇ꣿ䄫縚霠ⓡ騎껠ゑ맗㟘娳ㄺ묝꛶ဃ仳惒 [ 593.195650][T19591] netlink: 'syz.0.4141': attribute type 11 has an invalid length. [ 593.204508][T19591] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4141'. [ 593.235188][T19596] dlm: no local IP address has been set [ 593.240927][T19596] dlm: cannot start dlm midcomms -107 [ 593.248331][T19596] /dev/rnullb0: Can't open blockdev [ 593.276760][T19599] /dev/rnullb0: Can't open blockdev [ 593.398599][T19608] /dev/rnullb0: Can't open blockdev [ 593.680773][ T5945] usb 7-1: USB disconnect, device number 14 [ 593.848546][T19624] ubi: mtd0 is already attached to ubi7 [ 593.856549][T19624] /dev/rnullb0: Can't open blockdev [ 593.928724][T19628] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 594.003376][T19631] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4154'. [ 594.329607][T19640] /dev/rnullb0: Can't open blockdev [ 594.597454][ T43] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 594.726594][ T5945] usb 2-1: USB disconnect, device number 60 [ 594.759114][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 594.766273][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 594.781603][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 594.795079][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 594.829080][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 594.859133][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 594.898555][ T43] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 594.924254][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.957835][ T43] usb 5-1: Product: syz [ 594.976492][ T43] usb 5-1: Manufacturer: syz [ 594.988829][ T43] usb 5-1: SerialNumber: syz [ 595.016657][ T43] usb 5-1: config 0 descriptor?? [ 595.050284][T19649] ubi: mtd0 is already attached to ubi7 [ 595.057612][T19649] /dev/rnullb0: Can't open blockdev [ 595.151474][T19659] /dev/sg0: Can't lookup blockdev [ 595.238488][ T43] input input50: Device does not respond to id packet M [ 595.356527][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 595.460572][ T43] input input50: Device does not respond to id packet P [ 595.470952][ T43] input input50: Device does not respond to id packet B [ 595.478184][ T5945] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 595.512226][ T30] audit: type=1326 audit(5268879837.633:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19670 comm="syz.0.4169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa33eb8ebe9 code=0x0 [ 595.540680][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.552410][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 595.563567][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 595.573406][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.586469][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.595573][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.605177][ T10] usb 7-1: config 0 descriptor?? [ 595.647886][ T5945] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 595.659118][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 595.672301][ T5945] usb 2-1: Product: syz [ 595.676563][ T5945] usb 2-1: SerialNumber: syz [ 595.692533][ T43] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 595.700999][ T5945] usb 2-1: config 0 descriptor?? [ 595.706811][ T43] input input50: Device does not respond to id packet N [ 595.715637][ T43] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 595.722161][ T43] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 595.728520][ T43] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 595.735327][ T43] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 595.747940][ T43] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input50 [ 595.764739][ T43] usb 5-1: USB disconnect, device number 93 [ 595.930092][ T5945] hso 2-1:0.0: Failed to find BULK IN ep [ 596.043063][ T10] plantronics 0003:047F:FFFF.0066: ignoring exceeding usage max [ 596.054440][ T10] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 596.145918][T19661] /dev/rnullb0: Can't open blockdev [ 596.153610][ T43] usb 2-1: USB disconnect, device number 61 [ 596.638326][T19685] ubi: mtd0 is already attached to ubi7 [ 596.646054][T19685] /dev/rnullb0: Can't open blockdev [ 596.721167][ T10] usb 7-1: USB disconnect, device number 15 [ 596.743694][T19693] /dev/rnullb0: Can't open blockdev [ 596.924971][T19704] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 596.934006][T19704] /dev/rnullb0: Can't open blockdev [ 597.055586][T19709] ubi: mtd0 is already attached to ubi7 [ 597.067624][T19709] /dev/rnullb0: Can't open blockdev [ 597.146092][T19713] /dev/rnullb0: Can't open blockdev [ 597.152650][ T5911] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 597.242456][T19719] /dev/rnullb0: Can't open blockdev [ 597.259415][ T5945] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 597.363646][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.380670][ T5911] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.398715][ T5911] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.420049][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 597.426699][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 597.446792][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.470246][ T5945] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 597.497478][ T5945] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.502603][ T5911] usb 5-1: config 0 descriptor?? [ 597.575441][ T5945] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 597.626663][ T5945] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.635817][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 597.654318][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 597.679010][ T5945] usb 1-1: SerialNumber: syz [ 597.702161][ T5945] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 597.769774][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 597.784822][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 597.814383][ T5911] usb 5-1: USB disconnect, device number 94 [ 597.814398][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.882985][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.916571][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 597.928117][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.079092][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.096048][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.115144][ T43] usb 2-1: config 0 descriptor?? [ 598.132753][T19742] ubi: mtd0 is already attached to ubi7 [ 598.159551][T19742] /dev/rnullb0: Can't open blockdev [ 598.594342][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.624927][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.632797][T16148] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 598.654839][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.664586][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.672256][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.679912][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.689766][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.699319][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.709128][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.716981][ T43] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 598.743624][ T43] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 598.810725][T16148] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.826661][T16148] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.859839][T16148] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.886809][T16148] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.912156][T16148] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.927188][T16148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.953319][T16148] usb 7-1: config 0 descriptor?? [ 599.007667][ T43] usb 2-1: USB disconnect, device number 62 [ 599.247610][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 599.405602][T16148] plantronics 0003:047F:FFFF.0068: ignoring exceeding usage max [ 599.418591][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 599.432721][T16148] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 599.433960][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.467187][ T10] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 599.476462][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.505637][ T10] usb 5-1: config 0 descriptor?? [ 599.730813][T19749] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 599.752715][ T10] usb 5-1: USB disconnect, device number 95 [ 600.150156][ T5945] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 600.169397][ T5945] usb 1-1: USB disconnect, device number 62 [ 600.394906][ T5871] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 600.615701][ T5945] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 600.786748][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 600.794290][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 600.814134][ T5945] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 600.840051][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 600.861019][ T5945] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 600.881122][ T5945] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 600.904451][ T5945] usb 1-1: Product: syz [ 600.908655][ T5945] usb 1-1: Manufacturer: syz [ 600.913240][ T5945] usb 1-1: SerialNumber: syz [ 600.935116][ T5945] usb 1-1: config 0 descriptor?? [ 601.289360][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 601.391955][ T5945] gs_usb 1-1:0.0: Configuring for 241 interfaces [ 601.406624][ T5945] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 601.414477][ T5945] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 601.462196][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.474858][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.487238][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 601.496632][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.510524][ T10] usb 2-1: config 0 descriptor?? [ 601.758085][ T5911] usb 1-1: USB disconnect, device number 63 [ 601.953905][ T43] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 601.971687][ T10] cm6533_jd 0003:0D8C:0022.0069: hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 602.363195][ T983] usb 2-1: USB disconnect, device number 63 [ 602.390562][ T5945] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 602.561170][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 602.570646][ T5945] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 602.579137][ T983] usb 7-1: USB disconnect, device number 16 [ 602.588010][ T5945] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 602.600298][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.609647][ T5945] usb 5-1: Product: syz [ 602.616816][ T5945] usb 5-1: Manufacturer: syz [ 602.636113][ T5945] usb 5-1: SerialNumber: syz [ 602.642710][ T5945] usb 5-1: config 0 descriptor?? [ 602.650371][ T5945] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 602.659113][ T5945] usb 5-1: setting power ON [ 602.663649][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 602.671799][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.681669][ T5945] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 602.690437][ T5945] usb 5-1: media controller created [ 602.708589][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.727496][ T5945] usb 5-1: selecting invalid altsetting 6 [ 602.733339][ T5945] usb 5-1: digital interface selection failed (-22) [ 602.739947][ T5945] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 602.749147][ T5945] usb 5-1: setting power OFF [ 602.753960][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 602.759693][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 602.769002][ T5945] (NULL device *): no alternate interface [ 602.779809][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 602.867973][T19792] program syz.4.4210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.887847][ T983] usb 5-1: USB disconnect, device number 96 [ 602.978137][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 603.140877][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.174326][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.187545][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 603.199991][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.213474][T19812] adf_ctl_ioctl: 15 callbacks suppressed [ 603.213497][T19812] QAT: Invalid ioctl 1075883590 [ 603.216107][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.233460][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.240977][T19812] QAT: Invalid ioctl 1075883590 [ 603.250595][ T10] usb 1-1: config 0 descriptor?? [ 603.261234][T19812] QAT: Invalid ioctl 1075883590 [ 603.266289][T19812] QAT: Invalid ioctl 1075883590 [ 603.272526][T19812] QAT: Invalid ioctl 1075883590 [ 603.278072][T19812] QAT: Invalid ioctl 1075883590 [ 603.283165][T19812] QAT: Invalid ioctl 1075883590 [ 603.288631][T19812] QAT: Invalid ioctl 1075883590 [ 603.293762][T19812] QAT: Invalid ioctl 1075883590 [ 603.299615][T19812] QAT: Invalid ioctl 1075883590 [ 603.496675][T19821] /dev/rnullb0: Can't open blockdev [ 603.627796][T19827] /dev/rnullb0: Can't open blockdev [ 603.691687][ T10] plantronics 0003:047F:FFFF.006A: ignoring exceeding usage max [ 603.724572][ T10] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 604.654969][T19846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4228'. [ 604.773998][ T5945] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 604.815114][T19848] /dev/rnullb0: Can't open blockdev [ 604.868666][T19850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.946543][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.958836][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 604.969907][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 604.980273][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 604.993316][ T5945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.002428][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.011795][ T5945] usb 5-1: config 0 descriptor?? [ 605.115901][T16148] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 605.276203][T16148] usb 7-1: Using ep0 maxpacket: 8 [ 605.282599][T16148] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 605.290971][T16148] usb 7-1: config 0 has no interface number 0 [ 605.299206][T16148] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 605.308336][T16148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.316328][T16148] usb 7-1: Product: syz [ 605.320554][T16148] usb 7-1: Manufacturer: syz [ 605.325339][T16148] usb 7-1: SerialNumber: syz [ 605.331386][T16148] usb 7-1: config 0 descriptor?? [ 605.451353][ T5945] hid_parser_main: 5 callbacks suppressed [ 605.451368][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.464576][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.472230][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.479723][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.487127][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.494635][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.502214][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.509797][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.517244][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.524758][ T5945] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 605.537475][ T5945] plantronics 0003:047F:FFFF.006B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 605.552568][T16148] peak_usb 7-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 605.575035][T16148] peak_usb 7-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 605.587734][T16148] peak_usb 7-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 605.629433][T16148] peak_usb 7-1:0.56: probe with driver peak_usb failed with error -71 [ 605.650718][T16148] usb 7-1: USB disconnect, device number 17 [ 605.666741][T19858] ubi: mtd0 is already attached to ubi7 [ 605.759996][ T10] usb 5-1: USB disconnect, device number 97 [ 606.047121][T19875] /dev/rnullb0: Can't open blockdev [ 606.170530][ T30] audit: type=1326 audit(5268879847.596:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.1.4242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7f0f8ebe9 code=0x0 [ 606.192270][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.207069][ T5911] usb 1-1: USB disconnect, device number 64 [ 606.334604][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 606.357073][ T5911] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 606.439663][T19885] ubi: mtd0 is already attached to ubi7 [ 606.509220][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.522510][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.533974][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 606.544960][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 606.558638][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.568085][ T5911] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 606.576504][ T5911] usb 1-1: config 0 has no interface number 0 [ 606.582783][ T5911] usb 1-1: too many endpoints for config 0 interface 109 altsetting 111: 117, using maximum allowed: 30 [ 606.595496][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.605025][ T10] usb 7-1: config 0 descriptor?? [ 606.610563][ T5911] usb 1-1: config 0 interface 109 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 606.624352][ T5911] usb 1-1: config 0 interface 109 has no altsetting 0 [ 606.635219][ T5911] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 606.644592][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.652687][ T5911] usb 1-1: Product: syz [ 606.656994][ T5911] usb 1-1: Manufacturer: syz [ 606.661640][ T5911] usb 1-1: SerialNumber: syz [ 606.668109][ T5911] usb 1-1: config 0 descriptor?? [ 606.762250][T19897] /dev/rnullb0: Can't open blockdev [ 606.792702][T19899] /dev/rnullb0: Can't open blockdev [ 607.066842][ T10] plantronics 0003:047F:FFFF.006C: ignoring exceeding usage max [ 607.085570][ T10] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 607.127080][T16148] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 607.178119][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4253'. [ 607.192839][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4253'. [ 607.296699][T16148] usb 5-1: Using ep0 maxpacket: 16 [ 607.305159][T16148] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 607.314245][T16148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.324833][T16148] usb 5-1: config 0 has no interface number 0 [ 607.334759][T16148] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 607.345328][T16148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.350316][T19912] ubi: mtd0 is already attached to ubi7 [ 607.353685][T16148] usb 5-1: Product: syz [ 607.363281][T16148] usb 5-1: Manufacturer: syz [ 607.367914][T16148] usb 5-1: SerialNumber: syz [ 607.379430][T16148] usb 5-1: config 0 descriptor?? [ 607.608912][T16148] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 607.615321][T16148] usb 5-1: No valid video chain found. [ 607.623294][T16148] usb 5-1: USB disconnect, device number 98 [ 607.841758][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 607.980727][ T10] usb 2-1: device descriptor read/64, error -71 [ 608.238138][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 608.376149][ T10] usb 2-1: device descriptor read/64, error -71 [ 608.483144][ T5911] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 608.494802][ T10] usb usb2-port1: attempt power cycle [ 608.677086][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 608.685194][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 608.695335][ T5911] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 608.704051][ T5911] usb 5-1: can't read configurations, error -22 [ 608.857315][ T5911] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 608.865093][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 608.889687][ T10] usb 2-1: device descriptor read/8, error -71 [ 608.962302][ T5924] usb 1-1: USB disconnect, device number 65 [ 609.031389][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.040556][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 609.051005][ T5911] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 609.059754][ T5911] usb 5-1: can't read configurations, error -22 [ 609.067659][ T5911] usb usb5-port1: attempt power cycle [ 609.139471][T19946] ubi: mtd0 is already attached to ubi7 [ 609.147103][T19946] /dev/rnullb0: Can't open blockdev [ 609.157142][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 609.178381][ T10] usb 2-1: device descriptor read/8, error -71 [ 609.218524][T19951] /dev/rnullb0: Can't open blockdev [ 609.226294][T19950] /dev/rnullb0: Can't open blockdev [ 609.257389][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4267'. [ 609.267458][T19953] /dev/rnullb0: Can't open blockdev [ 609.296437][T16148] usb 7-1: USB disconnect, device number 18 [ 609.299761][ T10] usb usb2-port1: unable to enumerate USB device [ 609.434506][ T5911] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 609.438465][T19961] /dev/rnullb0: Can't open blockdev [ 609.471204][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.487040][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 609.496573][ T5911] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 609.505792][ T5911] usb 5-1: can't read configurations, error -22 [ 609.648373][ T5911] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 609.671799][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.679915][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 609.688552][ T5911] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 609.698674][ T5911] usb 5-1: can't read configurations, error -22 [ 609.705243][ T5911] usb usb5-port1: unable to enumerate USB device [ 609.819460][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 609.981439][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 609.989582][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 609.998286][ T10] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 610.006573][ T10] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 610.017929][ T10] usb 7-1: config 4 has no interface number 0 [ 610.026514][ T10] usb 7-1: string descriptor 0 read error: -22 [ 610.032750][ T10] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 610.041827][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.053827][ T10] usb 7-1: Found UVC 0.00 device (04f2:b746) [ 610.061083][ T10] usb 7-1: No valid video chain found. [ 610.173376][ T5911] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 610.269560][ T43] usb 7-1: USB disconnect, device number 19 [ 610.344500][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.356152][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 610.367182][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 610.376941][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.389888][ T5911] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.398953][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.408318][ T5911] usb 1-1: config 0 descriptor?? [ 610.765636][T19968] netlink: 'syz.1.4272': attribute type 64 has an invalid length. [ 610.773505][T19968] netlink: 'syz.1.4272': attribute type 4 has an invalid length. [ 610.781433][T19968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4272'. [ 610.803870][T19968] /dev/rnullb0: Can't open blockdev [ 610.841266][T19970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4273'. [ 610.851378][T19970] nbd: illegal input index -1900544 [ 610.852788][ T5911] plantronics 0003:047F:FFFF.006D: ignoring exceeding usage max [ 610.893220][ T5911] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 610.912682][T19970] overlayfs: workdir and upperdir must be separate subtrees [ 610.944907][T19970] /dev/rnullb0: Can't open blockdev [ 610.945035][T19975] ubi: mtd0 is already attached to ubi7 [ 610.961211][T19975] /dev/rnullb0: Can't open blockdev [ 611.829124][T16148] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 611.882496][ T43] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 612.026061][T16148] usb 7-1: unable to get BOS descriptor or descriptor too short [ 612.034996][T16148] usb 7-1: not running at top speed; connect to a high speed hub [ 612.044232][T16148] usb 7-1: config 1 has an invalid interface number: 199 but max is 0 [ 612.052866][T16148] usb 7-1: config 1 has an invalid descriptor of length 50, skipping remainder of the config [ 612.063773][T16148] usb 7-1: config 1 has no interface number 0 [ 612.070250][T16148] usb 7-1: too many endpoints for config 1 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 612.073993][T19999] /dev/rnullb0: Can't open blockdev [ 612.082251][T16148] usb 7-1: config 1 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 612.100784][T16148] usb 7-1: config 1 interface 199 has no altsetting 0 [ 612.100910][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.118792][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 612.130826][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.139454][T16148] usb 7-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 612.148520][T16148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.158859][T16148] usb 7-1: Product: syz [ 612.164782][ T43] usb 5-1: config 0 descriptor?? [ 612.170260][T16148] usb 7-1: Manufacturer: syz [ 612.177447][T16148] usb 7-1: SerialNumber: syz [ 612.318264][T20006] ubi: mtd0 is already attached to ubi7 [ 612.325312][T20006] /dev/rnullb0: Can't open blockdev [ 612.353432][T20008] netlink: 'syz.1.4285': attribute type 10 has an invalid length. [ 612.376399][T20008] team0: Port device dummy0 added [ 612.382032][T20008] netlink: 'syz.1.4285': attribute type 10 has an invalid length. [ 612.400768][T20008] team0: Port device dummy0 removed [ 612.409834][T20008] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 612.617225][ T43] keytouch 0003:0926:3333.006E: fixing up Keytouch IEC report descriptor [ 612.627981][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006E/input/input52 [ 612.694755][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 612.714414][ T43] keytouch 0003:0926:3333.006E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 612.861964][ T24] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 612.875044][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.885183][ T24] usb 2-1: Product: syz [ 612.890167][ C1] Mem-Info: [ 612.893300][ C1] active_anon:9885 inactive_anon:6 isolated_anon:0 [ 612.893300][ C1] active_file:20933 inactive_file:92840 isolated_file:0 [ 612.893300][ C1] unevictable:2815 dirty:96 writeback:0 [ 612.893300][ C1] slab_reclaimable:8565 slab_unreclaimable:102857 [ 612.893300][ C1] mapped:32262 shmem:4239 pagetables:1608 [ 612.893300][ C1] sec_pagetables:3 bounce:0 [ 612.893300][ C1] kernel_misc_reclaimable:0 [ 612.893300][ C1] free:1227455 free_pcp:33667 free_cma:0 [ 612.938546][ C1] Node 0 active_anon:39540kB inactive_anon:24kB active_file:83708kB inactive_file:371156kB unevictable:9724kB isolated(anon):0kB isolated(file):0kB mapped:129028kB dirty:384kB writeback:0kB shmem:15420kB shmem_thp:6144kB shmem_pmdmapped:2048kB anon_thp:6144kB kernel_stack:12732kB pagetables:6276kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 612.971297][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 613.001264][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 613.030017][ C1] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 613.035768][ C1] Node 0 DMA32 free:1029376kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39496kB inactive_anon:24kB active_file:83708kB inactive_file:370080kB unevictable:9724kB writepending:384kB present:3129332kB managed:2555588kB mlocked:8192kB bounce:0kB free_pcp:87948kB local_pcp:36008kB free_cma:0kB [ 613.068334][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 613.073032][ C1] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 613.101868][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 613.106557][ C1] Node 1 Normal free:3865080kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:46712kB local_pcp:26152kB free_cma:0kB [ 613.137814][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 613.142504][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 613.155086][ C1] Node 0 DMA32: 1972*4kB (UME) 830*8kB (UME) 1146*16kB (UME) 2404*32kB (UME) 1555*64kB (UME) 273*128kB (UME) 175*256kB (UME) 70*512kB (ME) 32*1024kB (ME) 20*2048kB (UM) 154*4096kB (UM) = 1029408kB [ 613.174413][ C1] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 613.186206][ C1] Node 1 Normal: 142*4kB (UME) 62*8kB (UME) 27*16kB (UME) 183*32kB (UME) 53*64kB (UME) 8*128kB (UME) 8*256kB (UME) 4*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 938*4096kB (M) = 3865080kB [ 613.204321][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.213846][ C1] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 613.223110][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.232631][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 613.241893][ C1] 118048 total pagecache pages [ 613.246632][ C1] 40 pages in swap cache [ 613.250853][ C1] Free swap = 124628kB [ 613.254987][ C1] Total swap = 124996kB [ 613.259119][ C1] 2097051 pages RAM [ 613.262903][ C1] 0 pages HighMem/MovableOnly [ 613.267556][ C1] 426256 pages reserved [ 613.271690][ C1] 0 pages cma reserved [ 613.276305][ T24] usb 2-1: Manufacturer: syz [ 613.280910][ T24] usb 2-1: SerialNumber: syz [ 613.294316][ T24] usb 2-1: config 0 descriptor?? [ 613.309466][ T24] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 068 [ 613.318081][ T5945] usb 1-1: USB disconnect, device number 66 [ 613.327870][T20017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.337561][T20017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.356031][T20017] vxfs: WRONG superblock magic 00000000 at 1 [ 613.362457][T20017] vxfs: WRONG superblock magic 00000000 at 8 [ 613.370308][T20017] vxfs: can't find superblock. [ 613.526615][ T24] (null): failure setting delay to 10us [ 613.532534][ T24] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 613.544501][ T24] usb 2-1: USB disconnect, device number 68 [ 613.558605][ T30] audit: type=1400 audit(5268879854.509:863): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20018 comm="syz.0.4290" [ 613.599027][ T983] usb 5-1: USB disconnect, device number 103 [ 613.783256][T20024] netlink: 'syz.0.4292': attribute type 21 has an invalid length. [ 613.793307][T20024] netlink: 'syz.0.4292': attribute type 1 has an invalid length. [ 613.801574][T20024] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4292'. [ 613.811794][T20024] /dev/rnullb0: Can't open blockdev [ 613.885643][T20031] /dev/rnullb0: Can't open blockdev [ 614.302649][T20044] netlink: 'syz.1.4298': attribute type 10 has an invalid length. [ 614.362298][ T5911] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 614.437292][ T5945] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 614.511973][ T5911] usb 1-1: device descriptor read/64, error -71 [ 614.619379][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.644261][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 614.662360][ T5945] usb 5-1: New USB device found, idVendor=6beb, idProduct=bd00, bcdDevice=ab.90 [ 614.671461][ T5945] usb 5-1: New USB device strings: Mfr=221, Product=166, SerialNumber=0 [ 614.679903][ T5945] usb 5-1: Product: syz [ 614.684419][ T5945] usb 5-1: Manufacturer: syz [ 614.690833][ T5945] usb 5-1: config 0 descriptor?? [ 614.720803][T16148] usb 7-1: USB disconnect, device number 20 [ 614.740534][ T5945] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 614.775761][ T5911] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 614.928992][ T5911] usb 1-1: device descriptor read/64, error -71 [ 614.959426][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 614.974759][T20048] ubi: mtd0 is already attached to ubi7 [ 614.981139][T20048] /dev/rnullb0: Can't open blockdev [ 615.024818][T20050] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4301'. [ 615.061903][ T5911] usb usb1-port1: attempt power cycle [ 615.069782][T20052] evm: overlay not supported [ 615.606292][ T5911] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 615.636634][ T5911] usb 1-1: device descriptor read/8, error -71 [ 615.891532][ T5911] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 615.913346][ T5911] usb 1-1: device descriptor read/8, error -71 [ 616.035733][ T5911] usb usb1-port1: unable to enumerate USB device [ 616.179008][T20074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.190974][T20074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.251169][T20082] ubi: mtd0 is already attached to ubi7 [ 616.261491][T20082] /dev/rnullb0: Can't open blockdev [ 616.425329][ T5911] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 616.553589][ T5945] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 616.585781][ T5911] usb 7-1: device descriptor read/64, error -71 [ 616.713927][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 616.722066][ T5945] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 616.731605][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 616.739815][ T5945] usb 2-1: Product: syz [ 616.743999][ T5945] usb 2-1: Manufacturer: syz [ 616.748675][ T5945] usb 2-1: SerialNumber: syz [ 616.754563][ T5945] usb 2-1: config 0 descriptor?? [ 616.853010][ T5911] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 616.975718][T20084] netlink: 'syz.1.4312': attribute type 83 has an invalid length. [ 616.991967][ T5911] usb 7-1: device descriptor read/64, error -71 [ 617.109679][ T5911] usb usb7-port1: attempt power cycle [ 617.144300][ T5945] usb 2-1: USB disconnect, device number 69 [ 617.344084][T20087] /dev/rnullb0: Can't open blockdev [ 617.403468][ T10] usb 5-1: USB disconnect, device number 104 [ 617.472988][ T5911] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 617.492905][T20093] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 617.496345][T20093] : renamed from pim6reg1 [ 617.587365][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.600932][ T5911] usb 7-1: device descriptor read/8, error -71 [ 617.606275][T20094] /dev/rnullb0: Can't open blockdev [ 617.868487][ T5911] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 617.890190][ T5911] usb 7-1: device descriptor read/8, error -71 [ 617.913263][T20108] /dev/rnullb0: Can't open blockdev [ 617.979606][T20103] vcan0: tx drop: invalid sa for name 0x000003fffffffffd [ 618.019143][ T5911] usb usb7-port1: unable to enumerate USB device [ 618.424234][ T5911] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 618.520455][T16148] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 618.613274][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 618.626790][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 618.639624][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 618.652934][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.672779][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.683709][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.697589][ T5911] usb 5-1: config 0 descriptor?? [ 618.707346][T16148] usb 1-1: Using ep0 maxpacket: 16 [ 618.716513][T16148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.733384][T16148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.743870][T16148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.750555][T16148] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 618.759648][T16148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.773388][T16148] usb 1-1: config 0 descriptor?? [ 618.838238][T20129] ./cgroup: Can't lookup blockdev [ 619.139519][ T983] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 619.150008][ T5911] plantronics 0003:047F:FFFF.006F: ignoring exceeding usage max [ 619.161596][ T5911] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 619.214736][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.221699][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.231096][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.238549][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.245306][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.254479][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.261288][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.267979][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.275621][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.282383][T16148] kye 0003:0458:0138.0070: unknown main item tag 0x0 [ 619.289631][T16148] kye 0003:0458:0138.0070: unexpected long global item [ 619.297134][T16148] kye 0003:0458:0138.0070: parse failed [ 619.302767][T16148] kye 0003:0458:0138.0070: probe with driver kye failed with error -22 [ 619.314919][ T983] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 619.324216][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.333379][ T983] usb 2-1: config 0 descriptor?? [ 619.365323][T20123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.376577][T20123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.427843][T20126] raw_sendmsg: syz.0.4326 forgot to set AF_INET. Fix it! [ 619.435955][T16148] usb 1-1: USB disconnect, device number 71 [ 619.464132][T20138] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 619.470670][T20138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.479388][T20138] vhci_hcd vhci_hcd.0: Device attached [ 619.486658][T20139] vhci_hcd: cannot find the pending unlink 2048 [ 619.561787][ T983] waltop 0003:172F:0032.0071: item fetching failed at offset 3/5 [ 619.581000][ T983] waltop 0003:172F:0032.0071: probe with driver waltop failed with error -22 [ 619.599458][ T983] usb 2-1: USB disconnect, device number 70 [ 619.663851][T20148] /dev/rnullb0: Can't open blockdev [ 619.696349][T14326] vhci_hcd: vhci_device speed not set [ 619.731314][T20123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.751542][T20123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.765085][ T5911] usb 5-1: USB disconnect, device number 105 [ 619.771304][T14326] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 620.327033][T16148] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 620.353882][T20139] vhci_hcd: connection reset by peer [ 620.364566][T15961] vhci_hcd: stop threads [ 620.368876][T15961] vhci_hcd: release socket [ 620.369751][ T5911] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 620.383183][T15961] vhci_hcd: disconnect device [ 620.499178][T16148] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 620.511658][T16148] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 620.524725][T16148] usb 2-1: can't read configurations, error -61 [ 620.572991][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 620.580251][ T5911] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 620.602383][ T5911] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 620.626481][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 620.648093][ T5911] usb 1-1: New USB device found, idVendor=046d, idProduct=e00e, bcdDevice=4d.ca [ 620.657167][ T5911] usb 1-1: New USB device strings: Mfr=25, Product=0, SerialNumber=0 [ 620.669416][T16148] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 620.676597][ T5911] usb 1-1: Manufacturer: syz [ 620.687979][ T5911] usb 1-1: config 0 descriptor?? [ 620.880958][T20173] /dev/rnullb0: Can't open blockdev [ 620.887468][T16148] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 620.898665][T16148] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 620.907560][T16148] usb 2-1: can't read configurations, error -61 [ 620.925027][T16148] usb usb2-port1: attempt power cycle [ 620.953044][ T5911] usb 1-1: USB disconnect, device number 72 [ 621.271295][ T30] audit: type=1400 audit(5268879861.722:864): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20184 comm="syz.4.4344" [ 621.298705][T16148] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 621.332593][T16148] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 621.340657][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4345'. [ 621.341823][T16148] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 621.351004][T20190] /dev/rnullb0: Can't open blockdev [ 621.357950][T16148] usb 2-1: can't read configurations, error -61 [ 621.520861][T20199] overlay: filesystem on ./bus not supported as upperdir [ 621.524252][T16148] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 621.556842][T20199] overlay: filesystem on ./bus not supported as upperdir [ 621.559837][T16148] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 621.573398][T16148] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 621.581621][T20199] overlay: filesystem on ./bus not supported as upperdir [ 621.582957][T16148] usb 2-1: can't read configurations, error -61 [ 621.611493][T16148] usb usb2-port1: unable to enumerate USB device [ 622.962982][T20209] /dev/rnullb0: Can't open blockdev [ 623.288029][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 623.458977][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 623.467750][ T24] usb 5-1: config 7 has an invalid interface number: 157 but max is 1 [ 623.476125][ T24] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 623.486559][ T24] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 623.495482][ T24] usb 5-1: config 7 has an invalid interface number: 73 but max is 1 [ 623.503759][ T30] audit: type=1400 audit(5268879863.817:865): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20221 comm="syz.1.4356" [ 623.520070][ T24] usb 5-1: config 7 has an invalid interface descriptor of length 2, skipping [ 623.529086][ T24] usb 5-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 623.539286][ T24] usb 5-1: config 7 has no interface number 0 [ 623.546360][ T24] usb 5-1: config 7 has no interface number 1 [ 623.552476][ T24] usb 5-1: config 7 interface 157 altsetting 157 has a duplicate endpoint with address 0xB, skipping [ 623.564005][ T24] usb 5-1: config 7 interface 157 altsetting 157 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 623.586583][ T24] usb 5-1: config 7 interface 157 altsetting 157 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 623.598150][ T24] usb 5-1: config 7 interface 157 altsetting 157 has a duplicate endpoint with address 0x2, skipping [ 623.609424][ T24] usb 5-1: config 7 interface 157 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 623.626752][ T24] usb 5-1: config 7 interface 157 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 623.639540][ T24] usb 5-1: config 7 interface 73 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 623.656268][ T24] usb 5-1: config 7 interface 157 has no altsetting 0 [ 623.669372][ T24] usb 5-1: config 7 interface 73 has no altsetting 0 [ 623.678337][ T24] usb 5-1: Dual-Role OTG device on HNP port [ 623.684737][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=3d81, bcdDevice= c.eb [ 623.693779][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.702796][ T24] usb 5-1: Product: Ц [ 623.707961][ T24] usb 5-1: Manufacturer: 툙ƚ黓ꐾᯄ軀猫噭阷邙垀ߔ퉱馦⤱脤춁㦣㲌㓛씈ࡐ敘丧⬿㼜ఽ骢鵝첕놹뵁೩哛慏㵍约ᯭ툿摅ꩅઆㆡ텛뇇筓笷鯳鬪㒉췯寮꼹ና굆㑂괏㉊呿줚㬠벾匦軜蟕嚑 [ 623.732287][ T24] usb 5-1: SerialNumber: з [ 623.740147][T20211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 623.971098][ T24] option 5-1:7.157: GSM modem (1-port) converter detected [ 623.984646][ T24] usb 5-1: USB disconnect, device number 106 [ 623.992936][ T24] option 5-1:7.157: device disconnected [ 624.121759][ T5945] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 624.202131][T20247] /dev/rnullb0: Can't open blockdev [ 624.282073][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 624.289030][ T5945] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 624.297637][ T5945] usb 2-1: config 0 has no interface number 0 [ 624.304033][ T5945] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.315334][ T5945] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 624.325472][ T5945] usb 2-1: config 0 interface 85 has no altsetting 0 [ 624.334045][ T5945] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 624.343762][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.353110][ T5945] usb 2-1: Product: syz [ 624.357563][ T5945] usb 2-1: Manufacturer: syz [ 624.362181][ T5945] usb 2-1: SerialNumber: syz [ 624.376305][ T5945] usb 2-1: config 0 descriptor?? [ 624.533863][ T30] audit: type=1400 audit(5268879864.781:866): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20251 comm="syz.4.4365" [ 624.647069][ T5946] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 624.809045][ T5946] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 624.848895][ T5946] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 624.857011][ T5946] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.921073][ T5945] appletouch 2-1:0.85: Failed to request geyser raw mode [ 624.926068][ T5946] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 624.939989][ T5946] usb 7-1: string descriptor 0 read error: -22 [ 624.942730][ T5945] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 624.946388][ T5946] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 624.963916][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.974104][ T5946] usb 7-1: config 0 descriptor?? [ 624.981000][ T5945] usb 2-1: USB disconnect, device number 75 [ 624.987050][ T5946] hub 7-1:0.0: bad descriptor, ignoring hub [ 624.993731][ T5946] hub 7-1:0.0: probe with driver hub failed with error -5 [ 625.046195][T20263] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4369'. [ 625.276210][T14326] vhci_hcd: vhci_device speed not set [ 625.437943][ T24] usb 7-1: USB disconnect, device number 25 [ 625.906892][ T24] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 625.974794][T20270] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 626.003465][T20270] /dev/rnullb0: Can't open blockdev [ 626.088622][ T24] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 626.111731][ T24] usb 2-1: config 0 has no interface number 0 [ 626.117863][ T24] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.131634][ T24] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.143727][ T24] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 626.166100][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.188280][T20275] netlink: 'syz.6.4374': attribute type 10 has an invalid length. [ 626.190322][ T24] usb 2-1: Product: syz [ 626.201099][ T24] usb 2-1: Manufacturer: syz [ 626.205757][ T24] usb 2-1: SerialNumber: syz [ 626.211325][T20275] team0: Device ipvlan1 failed to register rx_handler [ 626.221408][ T24] usb 2-1: config 0 descriptor?? [ 626.233073][T20274] /dev/rnullb0: Can't open blockdev [ 626.238968][ T24] ums-karma 2-1:0.46: USB Mass Storage device detected [ 626.296237][ T24] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 626.329439][ T30] audit: type=1400 audit(5268879866.456:867): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20278 comm="syz.6.4375" [ 626.495053][T20268] /dev/rnullb0: Can't open blockdev [ 626.501011][ T24] usb 2-1: USB disconnect, device number 76 [ 626.606911][T20282] /dev/rnullb0: Can't open blockdev [ 627.511027][T14509] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 627.553143][T14509] CPU: 1 UID: 0 PID: 14509 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 627.553176][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.553188][T14509] Call Trace: [ 627.553196][T14509] [ 627.553203][T14509] dump_stack_lvl+0x189/0x250 [ 627.553232][T14509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.553254][T14509] ? __pfx__printk+0x10/0x10 [ 627.553278][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.553300][T14509] dump_header+0xd3/0x480 [ 627.553316][T14509] oom_kill_process+0x387/0x920 [ 627.553337][T14509] out_of_memory+0xf09/0x12a0 [ 627.553357][T14509] ? mem_cgroup_iter+0x3b/0x460 [ 627.553375][T14509] ? __pfx_out_of_memory+0x10/0x10 [ 627.553395][T14509] mem_cgroup_out_of_memory+0x145/0x240 [ 627.553412][T14509] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 627.553433][T14509] ? _raw_spin_unlock+0x28/0x50 [ 627.553450][T14509] ? memcg1_oom_prepare+0x37f/0x450 [ 627.553472][T14509] try_charge_memcg+0xdff/0x1290 [ 627.553495][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.553517][T14509] ? __pfx_try_charge_memcg+0x10/0x10 [ 627.553539][T14509] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 627.553556][T14509] ? xa_load+0x60/0x210 [ 627.553576][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.553594][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.553612][T14509] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 627.553636][T14509] charge_memcg+0x9f/0x180 [ 627.553657][T14509] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 627.553679][T14509] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 627.553704][T14509] __read_swap_cache_async+0x28c/0x510 [ 627.553728][T14509] swap_cluster_readahead+0x4cf/0x5f0 [ 627.553750][T14509] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 627.553771][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.553786][T14509] ? filemap_get_entry+0xad/0x2f0 [ 627.553805][T14509] ? get_vma_policy+0x27c/0x3c0 [ 627.553828][T14509] swapin_readahead+0x17d/0xb50 [ 627.553847][T14509] ? __pfx_filemap_get_entry+0x10/0x10 [ 627.553867][T14509] ? get_swap_device_info+0x1c/0x2b0 [ 627.553885][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.553901][T14509] ? __pfx_swapin_readahead+0x10/0x10 [ 627.553921][T14509] ? __filemap_get_folio+0x9a6/0xaf0 [ 627.553942][T14509] ? swap_cache_get_folio+0xae/0x3b0 [ 627.553962][T14509] do_swap_page+0x525/0x5ac0 [ 627.553983][T14509] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 627.554007][T14509] ? ___pte_offset_map+0x29/0x250 [ 627.554029][T14509] ? lock_acquire+0x5f/0x360 [ 627.554044][T14509] ? do_swap_page+0x184/0x5ac0 [ 627.554064][T14509] ? __pfx_do_swap_page+0x10/0x10 [ 627.554085][T14509] ? __pfx_default_wake_function+0x10/0x10 [ 627.554102][T14509] ? ___pte_offset_map+0x45/0x250 [ 627.554121][T14509] ? ___pte_offset_map+0x1cf/0x250 [ 627.554143][T14509] ? pte_offset_map_rw_nolock+0xea/0x160 [ 627.554171][T14509] __handle_mm_fault+0xe55/0x5400 [ 627.554198][T14509] ? __pfx___handle_mm_fault+0x10/0x10 [ 627.554220][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.554241][T14509] ? lock_vma_under_rcu+0x3cb/0x450 [ 627.554259][T14509] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 627.554277][T14509] handle_mm_fault+0x40a/0x8e0 [ 627.554302][T14509] do_user_addr_fault+0xa81/0x1390 [ 627.554323][T14509] ? rcu_is_watching+0x15/0xb0 [ 627.554341][T14509] ? trace_page_fault_user+0x84/0x1e0 [ 627.554358][T14509] exc_page_fault+0x82/0x100 [ 627.554380][T14509] asm_exc_page_fault+0x26/0x30 [ 627.554396][T14509] RIP: 0033:0x7f2a287c14a8 [ 627.554412][T14509] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 627.554426][T14509] RSP: 002b:00007ffef89ba3d0 EFLAGS: 00010293 [ 627.554441][T14509] RAX: 0000000000000000 RBX: 0000000000000442 RCX: 00007f2a287c14a5 [ 627.554453][T14509] RDX: 00007ffef89ba410 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.554463][T14509] RBP: 00007ffef89ba47c R08: 0000000000000000 R09: 0000000000000000 [ 627.554472][T14509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 627.554480][T14509] R13: 00000000000927c0 R14: 00000000000944b3 R15: 00007ffef89ba4d0 [ 627.554499][T14509] [ 627.554507][T14509] memory: usage 307200kB, limit 307200kB, failcnt 36627 [ 627.574869][T14326] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 627.595870][T14509] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 627.595890][T14509] kmem: usage 1920kB, limit 9007199254740988kB, failcnt 0 [ 627.595901][T14509] Memory cgroup stats for /syz4: [ 627.596012][T14509] cache 312590336 [ 627.821800][T14326] usb 2-1: Using ep0 maxpacket: 32 [ 628.077790][T14509] rss 0 [ 628.084609][T14509] rss_huge 0 [ 628.097298][T14509] shmem 312590336 [ 628.116035][T14509] mapped_file 0 [ 628.123220][T14326] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.139568][T14509] dirty 0 [ 628.154180][T14326] usb 2-1: config 1 interface 0 has no altsetting 0 [ 628.161009][T14509] writeback 0 [ 628.166263][T14326] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 628.180716][T14509] workingset_refault_anon 175 [ 628.182540][T14326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.197519][T14326] usb 2-1: Product: syz [ 628.202274][T14509] workingset_refault_file 15357 [ 628.206208][T14326] usb 2-1: Manufacturer: syz [ 628.219239][T14326] usb 2-1: SerialNumber: syz [ 628.239005][T14509] swap 212992 [ 628.242340][T14509] swapcached 0 [ 628.278075][T14509] pgpgin 620718 [ 628.299766][T14509] pgpgout 544402 [ 628.310548][T14509] pgfault 186875 [ 628.321322][T14509] pgmajfault 3458 [ 628.332314][T14509] inactive_anon 0 [ 628.353693][T14509] active_anon 58281984 [ 628.375234][T14509] inactive_file 0 [ 628.386004][T14509] active_file 0 [ 628.399720][T14509] unevictable 254308352 [ 628.417292][T14509] hierarchical_memory_limit 314572800 [ 628.450428][T20294] overlayfs: failed to resolve './file0': -2 [ 628.467713][T14509] hierarchical_memsw_limit 9223372036854771712 [ 628.481609][T14326] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input55 [ 628.508564][ T5220] bcm5974 2-1:1.0: could not read from device [ 628.525355][T14509] total_cache 312590336 [ 628.533348][T20310] /dev/rnullb0: Can't open blockdev [ 628.536234][T14509] total_rss 0 [ 628.545814][T14326] usb 2-1: USB disconnect, device number 77 [ 628.547496][ T5220] bcm5974 2-1:1.0: could not read from device [ 628.567783][T14509] total_rss_huge 0 [ 628.625350][T20312] netlink: 'syz.6.4387': attribute type 8 has an invalid length. [ 628.630420][T14509] total_shmem 312590336 [ 628.658044][T14509] total_mapped_file 0 [ 628.662111][T14509] total_dirty 0 [ 628.665836][T14509] total_writeback 0 [ 628.678703][T14509] total_workingset_refault_anon 175 [ 628.683935][T14509] total_workingset_refault_file 15357 [ 628.701403][T14509] total_swap 212992 [ 628.705298][T14509] total_swapcached 0 [ 628.718181][T14509] total_pgpgin 620718 [ 628.722194][T14509] total_pgpgout 544402 [ 628.747944][T14509] total_pgfault 186875 [ 628.754520][T14509] total_pgmajfault 3458 [ 628.764500][T14509] total_inactive_anon 0 [ 628.769625][T14509] total_active_anon 58281984 [ 628.775111][T14509] total_inactive_file 0 [ 628.779295][T14509] total_active_file 0 [ 628.785547][T14509] total_unevictable 254308352 [ 628.790233][T14509] anon_cost 0 [ 628.793935][T14509] file_cost 0 [ 628.797329][T14509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4369,pid=20262,uid=0 [ 628.813840][T14509] Memory cgroup out of memory: Killed process 20262 (syz.4.4369) total-vm:101944kB, anon-rss:1080kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 628.955143][ T30] audit: type=1400 audit(5268879868.916:868): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20324 comm="syz.6.4392" [ 629.131261][T20328] /dev/rnullb0: Can't open blockdev [ 629.424360][T14326] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 629.509249][ T5945] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 629.596205][T14326] usb 1-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 629.617998][T14326] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 629.628328][T14326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.647362][T14326] usb 1-1: Product: syz [ 629.651586][T14326] usb 1-1: Manufacturer: syz [ 629.656175][T14326] usb 1-1: SerialNumber: syz [ 629.677484][ T5945] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 629.695421][ T5945] usb 2-1: string descriptor 0 read error: -22 [ 629.702035][ T5945] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 629.711092][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.902526][T20331] 9pnet: p9_errstr2errno: server reported unknown error @ [ 629.991659][T14326] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 629.998086][T14326] dvb_usb_af9035 1-1:156.0: probe with driver dvb_usb_af9035 failed with error -22 [ 630.035218][T14326] usb 1-1: USB disconnect, device number 73 [ 630.102944][ T983] usb 2-1: USB disconnect, device number 78 [ 630.375247][T14326] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 630.559374][T14326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 630.580135][T14326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.606765][T14326] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 630.616359][T14326] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 630.624966][T14326] usb 1-1: Product: syz [ 630.641443][T14326] usb 1-1: config 0 descriptor?? [ 630.651441][ T5945] hid_parser_main: 74 callbacks suppressed [ 630.651461][ T5945] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 630.700165][ T5945] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz0 [ 630.898350][ T5946] hid (null): unknown global tag 0xc [ 630.903959][ T5946] hid (null): report_id 0 is invalid [ 630.909350][ T5946] hid (null): unknown global tag 0x7d [ 630.917299][ T5946] hid-generic 0008:0009:FFFFFC00.0073: unknown main item tag 0x6 [ 630.925418][ T5946] hid-generic 0008:0009:FFFFFC00.0073: unknown global tag 0xc [ 630.933507][ T5946] hid-generic 0008:0009:FFFFFC00.0073: item 0 4 1 12 parsing failed [ 630.941900][ T43] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 630.942741][ T5946] hid-generic 0008:0009:FFFFFC00.0073: probe with driver hid-generic failed with error -22 [ 630.986407][T20358] ubi: mtd0 is already attached to ubi7 [ 630.993151][T20358] /dev/rnullb0: Can't open blockdev [ 631.005888][ T983] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 631.080608][ T43] usb 7-1: device descriptor read/64, error -71 [ 631.082893][T14326] bigben 0003:146B:0902.0074: unexpected rdesc, please submit for review [ 631.099419][T14326] bigben 0003:146B:0902.0074: unbalanced collection at end of report description [ 631.110044][T14326] bigben 0003:146B:0902.0074: parse failed [ 631.116300][T14326] bigben 0003:146B:0902.0074: probe with driver bigben failed with error -22 [ 631.174779][T20362] FAULT_INJECTION: forcing a failure. [ 631.174779][T20362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.189516][T20362] CPU: 0 UID: 0 PID: 20362 Comm: syz.4.4406 Not tainted syzkaller #0 PREEMPT(full) [ 631.189540][T20362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.189559][T20362] Call Trace: [ 631.189566][T20362] [ 631.189572][T20362] dump_stack_lvl+0x189/0x250 [ 631.189600][T20362] ? __pfx____ratelimit+0x10/0x10 [ 631.189621][T20362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.189643][T20362] ? __pfx__printk+0x10/0x10 [ 631.189667][T20362] ? rcu_is_watching+0x15/0xb0 [ 631.189686][T20362] should_fail_ex+0x414/0x560 [ 631.189710][T20362] _copy_to_user+0x31/0xb0 [ 631.189729][T20362] simple_read_from_buffer+0xe1/0x170 [ 631.189750][T20362] proc_fail_nth_read+0x1b3/0x220 [ 631.189773][T20362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.189794][T20362] ? rw_verify_area+0x2a6/0x4d0 [ 631.189810][T20362] ? nr_ioctl+0x1b1/0x3b0 [ 631.189831][T20362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.189853][T20362] vfs_read+0x200/0xa30 [ 631.189868][T20362] ? fdget_pos+0x247/0x320 [ 631.189889][T20362] ? __pfx___mutex_lock+0x10/0x10 [ 631.189911][T20362] ? __pfx_vfs_read+0x10/0x10 [ 631.189930][T20362] ? __fget_files+0x3a0/0x420 [ 631.189948][T20362] ? __fget_files+0x2a/0x420 [ 631.189969][T20362] ksys_read+0x145/0x250 [ 631.189984][T20362] ? __fget_files+0x2a/0x420 [ 631.190002][T20362] ? __pfx_ksys_read+0x10/0x10 [ 631.190017][T20362] ? __pfx_sock_ioctl+0x10/0x10 [ 631.190036][T20362] ? rcu_is_watching+0x15/0xb0 [ 631.190052][T20362] do_syscall_64+0xfa/0xfa0 [ 631.190070][T20362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.190085][T20362] ? clear_bhb_loop+0x60/0xb0 [ 631.190102][T20362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.190115][T20362] RIP: 0033:0x7f2a2878d5fc [ 631.190130][T20362] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 631.190143][T20362] RSP: 002b:00007f2a29689030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.190161][T20362] RAX: ffffffffffffffda RBX: 00007f2a289b5fa0 RCX: 00007f2a2878d5fc [ 631.190174][T20362] RDX: 000000000000000f RSI: 00007f2a296890a0 RDI: 0000000000000003 [ 631.190183][T20362] RBP: 00007f2a29689090 R08: 0000000000000000 R09: 0000000000000000 [ 631.190194][T20362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.190204][T20362] R13: 00007f2a289b6038 R14: 00007f2a289b5fa0 R15: 00007ffef89ba0b8 [ 631.190220][T20362] [ 631.191210][ T983] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.272003][ T30] audit: type=1400 audit(5268879871.077:869): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20365 comm="syz.4.4408" [ 631.273296][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.358576][ T43] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 631.413407][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 631.557866][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.564664][ T5945] usb 1-1: USB disconnect, device number 74 [ 631.572514][ T983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.600021][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.617980][ T983] usb 2-1: config 0 descriptor?? [ 631.679231][ T43] usb 7-1: device descriptor read/64, error -71 [ 631.797208][ T43] usb usb7-port1: attempt power cycle [ 632.067021][ T983] plantronics 0003:047F:FFFF.0075: ignoring exceeding usage max [ 632.101169][ T983] plantronics 0003:047F:FFFF.0075: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 632.193950][ T43] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 632.220501][ T43] usb 7-1: device descriptor read/8, error -71 [ 632.480936][ T43] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 632.502665][ T43] usb 7-1: device descriptor read/8, error -71 [ 632.534478][ T983] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 632.630679][ T43] usb usb7-port1: unable to enumerate USB device [ 632.695974][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.707096][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.716910][ T983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 632.729859][ T983] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.738955][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.748173][ T983] usb 5-1: config 0 descriptor?? [ 632.969336][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.978596][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.987744][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.996365][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.004948][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.013573][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.022101][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.030804][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.040126][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.048818][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.245844][T20399] overlay: ./file0 is not a directory [ 633.247312][T20400] overlay: ./file0 is not a directory [ 633.353725][T20406] syzkaller1: entered promiscuous mode [ 633.359277][T20406] syzkaller1: entered allmulticast mode [ 633.369617][ T5911] usb 2-1: USB disconnect, device number 79 [ 633.387379][ T983] usbhid 5-1:0.0: can't add hid device: -71 [ 633.395448][ T983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 633.409564][ T983] usb 5-1: USB disconnect, device number 107 [ 633.428182][T20410] /dev/rnullb0: Can't open blockdev [ 633.892018][ T5911] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 633.924379][T20430] /dev/rnullb0: Can't open blockdev [ 634.050599][T20439] overlayfs: failed lookup in lower (newroot/434, name='file1', err=-40): overlapping layers [ 634.064810][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 634.080150][ T5911] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 634.097228][ T5911] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 634.117581][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.137533][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 634.147462][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.158308][ T5911] usb 5-1: config 0 descriptor?? [ 634.274392][ T5871] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 634.680374][ T5911] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 634.726113][ T5945] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 634.875388][ T5945] usb 1-1: device descriptor read/64, error -71 [ 634.876657][ T5911] usb 7-1: config index 0 descriptor too short (expected 16443, got 59) [ 634.894939][ T5911] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 634.904919][ T5911] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 634.914771][ T5911] usb 7-1: config 1 interface 0 has no altsetting 0 [ 634.932843][ T5911] usb 7-1: string descriptor 0 read error: -22 [ 634.939093][ T5911] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.948177][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.959564][T20451] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 634.969071][T20451] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 634.984371][ T5911] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 635.142647][ T5945] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 635.197889][T20451] sctp: [Deprecated]: syz.6.4437 (pid 20451) Use of int in maxseg socket option. [ 635.197889][T20451] Use struct sctp_assoc_value instead [ 635.214901][T20451] /dev/rnullb0: Can't open blockdev [ 635.221858][ T5946] usb 7-1: USB disconnect, device number 30 [ 635.231718][T20456] /dev/rnullb0: Can't open blockdev [ 635.255202][T20460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4440'. [ 635.281778][ T5945] usb 1-1: device descriptor read/64, error -71 [ 635.409902][ T5945] usb usb1-port1: attempt power cycle [ 635.775620][ T5945] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 635.807192][ T5945] usb 1-1: device descriptor read/8, error -71 [ 636.006310][T20468] /dev/rnullb0: Can't open blockdev [ 636.173309][ T5945] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 636.213335][ T5945] usb 1-1: device descriptor read/8, error -71 [ 636.329345][ T5945] usb usb1-port1: unable to enumerate USB device [ 636.860840][ T5946] usb 5-1: USB disconnect, device number 108 [ 637.176844][T20510] 9p: Could not find request transport: bd [ 637.184805][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4456'. [ 637.832556][T20519] /dev/rnullb0: Can't open blockdev [ 637.886635][T20522] /dev/rnullb0: Can't open blockdev [ 637.967010][ T30] audit: type=1400 audit(5268879877.354:870): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20524 comm="syz.6.4461" [ 638.048116][T20527] /dev/rnullb0: Can't open blockdev [ 638.066493][T20527] netlink: 'syz.4.4462': attribute type 2 has an invalid length. [ 638.093609][T20527] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4462'. [ 638.213550][T20533] block device autoloading is deprecated and will be removed. [ 638.942669][T20561] netlink: 'syz.6.4472': attribute type 1 has an invalid length. [ 638.953573][T20561] netlink: 'syz.6.4472': attribute type 11 has an invalid length. [ 638.964681][T20561] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4472'. [ 639.022869][ T5945] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 639.044051][T20565] : Can't lookup blockdev [ 639.149936][ T5871] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 639.186457][ T5945] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 639.197759][ T5945] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 639.210286][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 639.215394][ T5911] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 639.218742][ T5945] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 639.233653][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 639.241895][ T5945] usb 2-1: Product: syz [ 639.246059][ T5945] usb 2-1: Manufacturer: syz [ 639.250716][ T5945] usb 2-1: SerialNumber: syz [ 639.262811][ T5945] usb 2-1: config 0 descriptor?? [ 639.271724][ T5945] hub 2-1:0.0: bad descriptor, ignoring hub [ 639.277652][ T5945] hub 2-1:0.0: probe with driver hub failed with error -5 [ 639.286783][ T5945] usb 2-1: selecting invalid altsetting 0 [ 639.402880][ T5911] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 639.415258][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.427189][ T5911] usb 7-1: Product: syz [ 639.432709][ T5911] usb 7-1: Manufacturer: syz [ 639.437410][ T5911] usb 7-1: SerialNumber: syz [ 639.446602][ T5911] r8152-cfgselector 7-1: Unknown version 0x0000 [ 639.456470][ T5911] r8152-cfgselector 7-1: config 0 descriptor?? [ 639.714873][ T5911] r8152-cfgselector 7-1: USB disconnect, device number 31 [ 639.790725][ T30] audit: type=1400 audit(5268879879.047:871): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20583 comm="syz.4.4478" [ 639.833644][T20587] /dev/rnullb0: Can't open blockdev [ 640.284277][ T5911] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 640.382019][ T5945] usb 2-1: USB disconnect, device number 80 [ 640.467469][ T5911] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 640.488663][ T5911] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 640.508681][ T5911] usb 7-1: config 220 has no interface number 2 [ 640.525789][ T5911] usb 7-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 640.562618][ T5911] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 104, changing to 10 [ 640.573984][ T5911] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid maxpacket 41325, setting to 1024 [ 640.609041][ T5911] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 640.637445][ T5911] usb 7-1: config 220 interface 0 has no altsetting 0 [ 640.644413][ T5911] usb 7-1: config 220 interface 76 has no altsetting 0 [ 640.651882][ T5911] usb 7-1: config 220 interface 1 has no altsetting 0 [ 640.660607][ T5911] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 640.669909][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.677906][ T5911] usb 7-1: Product: syz [ 640.682302][ T5911] usb 7-1: Manufacturer: syz [ 640.686900][ T5911] usb 7-1: SerialNumber: syz [ 640.925545][ T5911] usb 7-1: selecting invalid altsetting 0 [ 640.931407][ T5911] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 640.946944][ T5911] usb 7-1: No valid video chain found. [ 640.962327][ T5911] usb 7-1: selecting invalid altsetting 0 [ 640.962403][T20602] ubi: mtd0 is already attached to ubi7 [ 640.968102][ T5911] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 640.981641][ T5911] usb 7-1: USB disconnect, device number 32 [ 640.992295][T20602] /dev/rnullb0: Can't open blockdev [ 641.064607][ T983] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 641.078325][T20606] /dev/rnullb0: Can't open blockdev [ 641.258252][ T983] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 641.268909][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.278554][ T983] usb 5-1: config 0 descriptor?? [ 641.291163][ T983] cp210x 5-1:0.0: cp210x converter detected [ 641.515650][ T43] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 641.527919][ T983] usb 5-1: cp210x converter now attached to ttyUSB0 [ 641.719752][ T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 641.739770][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.758727][ T43] usb 2-1: Product: syz [ 641.764872][ T43] usb 2-1: Manufacturer: syz [ 641.780331][ T43] usb 2-1: SerialNumber: syz [ 641.792295][ T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 641.817174][T16148] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 642.498449][ T30] audit: type=1400 audit(5268879881.592:872): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20619 comm="syz.6.4491" [ 643.094390][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.100847][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.758666][T20623] /dev/rnullb0: Can't open blockdev [ 643.891080][T20625] ubi: mtd0 is already attached to ubi7 [ 643.922131][T20625] /dev/rnullb0: Can't open blockdev [ 644.070417][ T5946] usb 5-1: USB disconnect, device number 109 [ 644.078045][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 644.163347][ T5946] cp210x 5-1:0.0: device disconnected [ 644.216140][T20629] O3c: renamed from bridge_slave_0 (while UP) [ 644.348496][T20631] btrfs: Unknown parameter 'discard^' [ 644.720616][ T43] usb 2-1: USB disconnect, device number 81 [ 644.728470][T16148] usb 2-1: Service connection timeout for: 256 [ 644.735372][T20642] /dev/rnullb0: Can't open blockdev [ 644.744672][T16148] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 644.752908][T16148] ath9k_htc: Failed to initialize the device [ 644.759156][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 644.837422][ T5871] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 644.867903][T20644] /dev/rnullb0: Can't open blockdev [ 645.494658][T20652] ubi: mtd0 is already attached to ubi7 [ 645.520850][T20652] /dev/rnullb0: Can't open blockdev [ 645.542785][T20658] /dev/rnullb0: Can't open blockdev [ 645.588865][T20661] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 645.606735][T20661] /dev/rnullb0: Can't open blockdev [ 646.383805][T20670] random: crng reseeded on system resumption [ 646.545223][T20678] ubi: mtd0 is already attached to ubi7 [ 646.553005][T20678] /dev/rnullb0: Can't open blockdev [ 646.673651][ T30] audit: type=1326 audit(5268879885.493:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20682 comm="syz.1.4516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7f0f8ebe9 code=0x0 [ 646.713580][T20685] /dev/rnullb0: Can't open blockdev [ 646.842147][ T5871] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 647.023340][T20700] ubi: mtd0 is already attached to ubi7 [ 647.033934][T20700] /dev/rnullb0: Can't open blockdev [ 647.468883][T20715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.496071][T20715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.725702][ T5946] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 647.739652][T20723] ubi: mtd0 is already attached to ubi7 [ 647.746661][T20723] /dev/rnullb0: Can't open blockdev [ 647.809666][T20725] netlink: 1072 bytes leftover after parsing attributes in process `syz.4.4534'. [ 647.818858][T20725] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4534'. [ 647.854010][ T5871] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 647.896564][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.906744][ T5946] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.915798][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.932419][ T5946] usb 1-1: config 0 descriptor?? [ 647.945662][ T5946] pwc: Askey VC010 type 2 USB webcam detected. [ 648.102873][T20731] /dev/sg0: Can't lookup blockdev [ 648.373254][ T5946] pwc: recv_control_msg error -32 req 02 val 2b00 [ 648.383947][T20716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.392441][T20715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.403659][ T5946] pwc: recv_control_msg error -32 req 02 val 2700 [ 648.413226][T20715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.420094][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.441071][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.443644][T20716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.553962][T20716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.568414][T20716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.603387][ T5946] pwc: recv_control_msg error -32 req 02 val 2c00 [ 648.618077][ T5946] pwc: recv_control_msg error -32 req 04 val 1000 [ 648.636012][ T5946] pwc: recv_control_msg error -32 req 04 val 1300 [ 648.643138][ T5946] pwc: recv_control_msg error -32 req 04 val 1400 [ 648.653726][ T5946] pwc: recv_control_msg error -32 req 02 val 2000 [ 648.707570][ T24] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 648.847124][ T24] usb 7-1: device descriptor read/64, error -71 [ 648.875660][T20715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.884598][T20715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.904920][ T5946] pwc: recv_control_msg error -71 req 04 val 1500 [ 648.917659][ T5946] pwc: recv_control_msg error -71 req 02 val 2500 [ 648.928559][ T5946] pwc: recv_control_msg error -71 req 02 val 2400 [ 648.946327][ T5946] pwc: recv_control_msg error -71 req 02 val 2600 [ 648.963862][ T5946] pwc: recv_control_msg error -71 req 02 val 2900 [ 648.971912][ T5946] pwc: recv_control_msg error -71 req 02 val 2800 [ 648.988038][ T5946] pwc: recv_control_msg error -71 req 04 val 1100 [ 649.005635][ T5946] pwc: recv_control_msg error -71 req 04 val 1200 [ 649.019700][ T5946] pwc: Registered as video103. [ 649.049658][ T5946] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 649.091800][ T5946] usb 1-1: USB disconnect, device number 79 [ 649.114177][ T24] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 649.274134][ T24] usb 7-1: device descriptor read/64, error -71 [ 649.283668][T20753] ubi: mtd0 is already attached to ubi7 [ 649.296526][T20753] /dev/rnullb0: Can't open blockdev [ 649.403165][ T24] usb usb7-port1: attempt power cycle [ 649.507740][T20759] /dev/rnullb0: Can't open blockdev [ 649.649141][ T5946] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 649.765848][ T24] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 649.787610][ T24] usb 7-1: device descriptor read/8, error -71 [ 649.822330][ T5946] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 649.835040][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.043708][ T24] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 650.064547][ T5946] usb 5-1: Product: syz [ 650.076901][ T5946] usb 5-1: Manufacturer: syz [ 650.079138][ T24] usb 7-1: device descriptor read/8, error -71 [ 650.081530][ T5946] usb 5-1: SerialNumber: syz [ 650.089093][ T5946] usb 5-1: config 0 descriptor?? [ 650.124902][ T5871] Bluetooth: hci5: urb ffff888072a15a00 submission failed (2) [ 650.215056][ T24] usb usb7-port1: unable to enumerate USB device [ 650.333413][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.354483][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.390969][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.415356][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.454628][ T5946] usb 5-1: USB disconnect, device number 110 [ 650.590624][ T30] audit: type=1400 audit(5268879889.160:874): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20773 comm="syz.4.4551" [ 650.614964][T20776] IPv6: NLM_F_CREATE should be specified when creating new route [ 650.690818][T20780] ubi: mtd0 is already attached to ubi7 [ 650.698568][T20780] /dev/rnullb0: Can't open blockdev [ 672.673438][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 688.911091][ T31] INFO: task syz.5.3748:18332 blocked for more than 143 seconds. [ 688.918893][ T31] Not tainted syzkaller #0 [ 688.925212][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.933951][ T31] task:syz.5.3748 state:D stack:25224 pid:18332 tgid:18332 ppid:16920 task_flags:0x400040 flags:0x00004006 [ 688.946035][ T31] Call Trace: [ 688.949319][ T31] [ 688.952233][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 688.956799][ T31] ? do_raw_spin_lock+0x121/0x290 [ 688.961827][ T31] ? rcu_is_watching+0x15/0xb0 [ 688.966910][ T31] ? __pfx___schedule+0x10/0x10 [ 688.971833][ T31] ? rcu_is_watching+0x15/0xb0 [ 688.976673][ T31] ? schedule+0x91/0x360 [ 688.980918][ T31] ? rcu_is_watching+0x15/0xb0 [ 688.985772][ T31] ? lock_release+0x4b/0x3e0 [ 688.996118][ T31] schedule+0x165/0x360 [ 689.000320][ T31] __fuse_simple_request+0xf15/0x18d0 [ 689.005706][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 689.092313][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 689.098444][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 689.115419][ T31] fuse_flush+0x5d4/0x800 [ 689.119830][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 689.125685][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 689.130557][ T31] ? __fput_deferred+0x215/0x390 [ 689.138327][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 689.143220][ T31] filp_flush+0xbd/0x190 [ 689.148007][ T31] filp_close+0x1d/0x40 [ 689.152186][ T31] __se_sys_close_range+0x359/0x650 [ 689.157747][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 689.163483][ T31] ? rcu_is_watching+0x15/0xb0 [ 689.171805][ T31] do_syscall_64+0xfa/0xfa0 [ 689.176339][ T31] ? rcu_is_watching+0x15/0xb0 [ 689.183550][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.189996][ T31] ? clear_bhb_loop+0x60/0xb0 [ 689.194702][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.200716][ T31] RIP: 0033:0x7fb30f58ebe9 [ 689.205133][ T31] RSP: 002b:00007ffc0b833358 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 689.213569][ T31] RAX: ffffffffffffffda RBX: 00007fb30f7b7da0 RCX: 00007fb30f58ebe9 [ 689.221575][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 689.229540][ T31] RBP: 00007fb30f7b7da0 R08: 00000000000001c8 R09: 000000170b83364f [ 689.237544][ T31] R10: 00007fb30f7b7cb0 R11: 0000000000000246 R12: 000000000007dac7 [ 689.245548][ T31] R13: 00007fb30f7b5fa0 R14: ffffffffffffffff R15: 00007ffc0b833470 [ 689.253568][ T31] [ 689.256615][ T31] INFO: lockdep is turned off. [ 689.261402][ T31] NMI backtrace for cpu 1 [ 689.261417][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 689.261434][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.261444][ T31] Call Trace: [ 689.261451][ T31] [ 689.261457][ T31] dump_stack_lvl+0x189/0x250 [ 689.261485][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.261507][ T31] ? __pfx__printk+0x10/0x10 [ 689.261533][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 689.261552][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 689.261569][ T31] ? __pfx__printk+0x10/0x10 [ 689.261591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 689.261609][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 689.261627][ T31] watchdog+0xf60/0xfa0 [ 689.261643][ T31] ? watchdog+0x1e2/0xfa0 [ 689.261658][ T31] kthread+0x711/0x8a0 [ 689.261679][ T31] ? __pfx_watchdog+0x10/0x10 [ 689.261699][ T31] ? __pfx_kthread+0x10/0x10 [ 689.261719][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.261736][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.261756][ T31] ? __pfx_kthread+0x10/0x10 [ 689.261774][ T31] ret_from_fork+0x47c/0x820 [ 689.261793][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 689.261813][ T31] ? __switch_to_asm+0x39/0x70 [ 689.261829][ T31] ? __switch_to_asm+0x33/0x70 [ 689.261845][ T31] ? __pfx_kthread+0x10/0x10 [ 689.261865][ T31] ret_from_fork_asm+0x1a/0x30 [ 689.261888][ T31] [ 689.261895][ T31] Sending NMI from CPU 1 to CPUs 0: [ 689.407317][ C0] NMI backtrace for cpu 0 [ 689.407335][ C0] CPU: 0 UID: 0 PID: 20640 Comm: syz.4.4497 Not tainted syzkaller #0 PREEMPT(full) [ 689.407354][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.407364][ C0] RIP: 0010:debug_check_no_obj_freed+0x212/0x470 [ 689.407389][ C0] Code: c0 0f 84 45 02 00 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 74 08 4c 89 ff e8 e1 e9 48 fd 49 8b 07 <48> 89 44 24 18 4d 8d 67 18 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 [ 689.407409][ C0] RSP: 0018:ffffc90003377818 EFLAGS: 00000046 [ 689.407423][ C0] RAX: ffff888022b40a10 RBX: 0000000000000003 RCX: dffffc0000000001 [ 689.407435][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90003377700 [ 689.407446][ C0] RBP: ffff888027e85c68 R08: 0000000000000003 R09: 0000000000000004 [ 689.407456][ C0] R10: dffffc0000000000 R11: fffff5200066eee0 R12: ffff888031d04018 [ 689.407468][ C0] R13: ffffc9000efcb000 R14: 1ffff110048b6069 R15: ffff8880245b0348 [ 689.407480][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 689.407492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.407503][ C0] CR2: 00007fe7f1ce7d60 CR3: 000000000e338000 CR4: 00000000003526f0 [ 689.407517][ C0] DR0: 0000000000000000 DR1: 0000000000000025 DR2: 0000000000000000 [ 689.407527][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 689.407537][ C0] Call Trace: [ 689.407543][ C0] [ 689.407556][ C0] remove_vm_area+0x1d3/0x300 [ 689.407578][ C0] ? __pfx_kcov_close+0x10/0x10 [ 689.407598][ C0] vfree+0x63/0x400 [ 689.407617][ C0] ? __pfx_kcov_close+0x10/0x10 [ 689.407635][ C0] kcov_close+0x28/0x50 [ 689.407653][ C0] __fput+0x449/0xa70 [ 689.407675][ C0] task_work_run+0x1d4/0x260 [ 689.407696][ C0] ? __pfx_task_work_run+0x10/0x10 [ 689.407716][ C0] ? kmem_cache_free+0x18f/0x400 [ 689.407737][ C0] do_exit+0x6b5/0x2300 [ 689.407758][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 689.407775][ C0] ? do_raw_spin_lock+0x121/0x290 [ 689.407794][ C0] ? __pfx_do_exit+0x10/0x10 [ 689.407814][ C0] ? rcu_is_watching+0x15/0xb0 [ 689.407833][ C0] do_group_exit+0x21c/0x2d0 [ 689.407853][ C0] get_signal+0x1286/0x1340 [ 689.407876][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 689.407892][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 689.407907][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 689.407927][ C0] ? rcu_is_watching+0x15/0xb0 [ 689.407943][ C0] exit_to_user_mode_loop+0x75/0x130 [ 689.407958][ C0] do_syscall_64+0x2bd/0xfa0 [ 689.407977][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.407992][ C0] ? clear_bhb_loop+0x60/0xb0 [ 689.408009][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.408023][ C0] RIP: 0033:0x7f2a287c14a5 [ 689.408035][ C0] Code: Unable to access opcode bytes at 0x7f2a287c147b. [ 689.408044][ C0] RSP: 002b:00007f2a29688f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 689.408059][ C0] RAX: fffffffffffffdfc RBX: 00007f2a289b5fa0 RCX: 00007f2a287c14a5 [ 689.408070][ C0] RDX: 00007f2a29688fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.408080][ C0] RBP: 00007f2a28811e19 R08: 0000000000000000 R09: 0000000000000000 [ 689.408091][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 689.408100][ C0] R13: 00007f2a289b6038 R14: 00007f2a289b5fa0 R15: 00007ffef89ba0b8 [ 689.408118][ C0] [ 689.862110][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 689.868992][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 689.878115][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.888180][ T31] Call Trace: [ 689.891461][ T31] [ 689.894390][ T31] dump_stack_lvl+0x99/0x250 [ 689.898981][ T31] ? __asan_memcpy+0x40/0x70 [ 689.903574][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.908782][ T31] ? __pfx__printk+0x10/0x10 [ 689.913380][ T31] vpanic+0x281/0x750 [ 689.917354][ T31] ? __pfx_vpanic+0x10/0x10 [ 689.921839][ T31] ? rcu_is_watching+0x15/0xb0 [ 689.926585][ T31] ? preempt_schedule+0xae/0xc0 [ 689.931424][ T31] ? preempt_schedule_common+0x83/0xd0 [ 689.936870][ T31] panic+0xb9/0xc0 [ 689.940583][ T31] ? __pfx_panic+0x10/0x10 [ 689.944993][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 689.950363][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 689.956509][ T31] watchdog+0xf9f/0xfa0 [ 689.960658][ T31] ? watchdog+0x1e2/0xfa0 [ 689.964974][ T31] kthread+0x711/0x8a0 [ 689.969035][ T31] ? __pfx_watchdog+0x10/0x10 [ 689.973705][ T31] ? __pfx_kthread+0x10/0x10 [ 689.978280][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.983465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.988651][ T31] ? __pfx_kthread+0x10/0x10 [ 689.993227][ T31] ret_from_fork+0x47c/0x820 [ 689.997800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 690.002893][ T31] ? __switch_to_asm+0x39/0x70 [ 690.007638][ T31] ? __switch_to_asm+0x33/0x70 [ 690.012386][ T31] ? __pfx_kthread+0x10/0x10 [ 690.016965][ T31] ret_from_fork_asm+0x1a/0x30 [ 690.021715][ T31] [ 690.024962][ T31] Kernel Offset: disabled [ 690.029270][ T31] Rebooting in 86400 seconds..