last executing test programs: 6m6.266141596s ago: executing program 0 (id=330): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) 6m3.08044594s ago: executing program 0 (id=335): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x70bd25, 0x80, {0x2, 0x18, 0x14, 0x0, 0x0, 0x4, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0x40, 0xa, 0xe9, {0xe9, 0x9, "ae112cb738ec2dd3baf0fceef2aafd7f5a75ef3fdcb49315cb012bcb12e4bbd10df4c910ba97cb4b8db75b3fcdb71531d94843915a417dbc7fa946328657df36fe3aa7989c41b98edef185ec30cf66342f05ddaecde383912be7e6791b591af1c53ec65819bf6cf748f8658ebe9325f458c663c664919dee1b2628daa1852aeef29b97f1d237105756a25478ec509a900fd5181ea04f7b2254e939ded67b6cc643a0a19e172f905ee1608aa6032238c8bd34004fa2006d93b26050d9576e0d0fcca34b01d27806b25117bcf0967a6360c98cc4ddcc459e53107684dff781002a3d7304061a0238"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xf, 0xd1, "07249cd6e1a76f76564e639aa6394bcea71fccc055c35dc59074a4a75a31eb712413ac49ce8e80b6053baab9c4ce094d9dd84c4f499752a5f1e0fa88fb5e93deb8ae9fa17fbcd5cb69e7d38a35b45a53f4ac0b81327dcbdc8fbc7b38fbcf94a10c01cb054581fd2c9525c82e7a4aed5fd7b2ec31bd469626475d660efb08120adb4291b91f60a2166389c7e04cdeabb5e49e4fb0c2c0ee2ce4a7696f6f2cf364a3858efedd6f966e8b2d88db5b00b17c1faefd4fe58e3564276fec90018eb71e3c223d035fa991bc5d0ccf852d7186cc34"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x81, 0x3, "7d9e7c"}, &(0x7f0000000540)=ANY=[@ANYBLOB="2082fbff00d0a8267c"], &(0x7f0000000580)={0x20, 0x83, 0x1, '|'}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "6ae78b"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "49e81e"}}) 5m59.57869381s ago: executing program 0 (id=338): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x8d}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="000200", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r3, 0xf2e, 0xffffffffffffff48) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) close_range(0xffffffffffffffff, r6, 0x0) 5m58.292957015s ago: executing program 0 (id=343): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendfile(r1, r0, 0x0, 0x22010023894) 5m57.236354806s ago: executing program 0 (id=345): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) 5m55.488256328s ago: executing program 0 (id=347): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xc800) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 5m33.672053875s ago: executing program 32 (id=347): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xc800) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 37.272763266s ago: executing program 1 (id=908): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 30.487250703s ago: executing program 3 (id=916): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000006c0)}) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @private0, @local, {[], {0x0, 0x4e23, 0x8}}}}}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xa000, 0xa, 0x9d, 0xe185, 0x0, [{0x2, 0x1a, 0xb9, '\x00', 0x4}, {0x2, 0x0, 0x5, '\x00', 0xe}, {0xd7, 0x4, 0x0, '\x00', 0x2}, {0x3, 0xab, 0x8, '\x00', 0x6}, {0x1, 0x2, 0x20, '\x00', 0x80}, {0xf, 0x7, 0x3, '\x00', 0xfa}, {0x3, 0xfc, 0x1, '\x00', 0x2}, {0x6, 0x27, 0xc2, '\x00', 0x81}, {0x81, 0xfa, 0x2, '\x00', 0x7}, {0x0, 0xc, 0x1, '\x00', 0x9}, {0x81, 0x6, 0x3, '\x00', 0x3}, {0x7, 0x4, 0xf, '\x00', 0x9}, {0x6d, 0x5b, 0xe, '\x00', 0x94}, {0x1, 0x1, 0x40}, {0x3, 0x6, 0x2, '\x00', 0x2}, {0x8, 0x64, 0x4, '\x00', 0x2}, {0x9, 0xb, 0x0, '\x00', 0xfc}, {0x6, 0x5, 0xb, '\x00', 0x49}, {0x8a, 0xc3, 0x9, '\x00', 0x9}, {0x73, 0x1, 0x0, '\x00', 0x3}, {0x2, 0x5, 0xf7, '\x00', 0x5}, {0x2, 0x5, 0x4, '\x00', 0x9}, {0xfe, 0x1, 0xf4}, {0x63, 0x7b, 0x1, '\x00', 0x1}]}}) 30.431858256s ago: executing program 5 (id=918): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "41ac0beaa2bdb95e", "e6da124a9978f59822df2675241c26af", "a056e13d", "6a515981fa6136ef"}, 0x28) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x14) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 29.934142777s ago: executing program 1 (id=920): socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r1 = eventfd2(0x0, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) io_setup(0x3, &(0x7f00000010c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(0xffffffffffffffff, 0x1) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x9085}], 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"a2e3ad23ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b5d380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) 27.50925059s ago: executing program 3 (id=924): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a0000"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x2200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x806, 0xffffffffffffffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 25.811984223s ago: executing program 1 (id=926): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 25.746552591s ago: executing program 5 (id=927): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) 25.466492413s ago: executing program 3 (id=930): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 25.22371131s ago: executing program 2 (id=931): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20, 0x42, 0x3}, [@NDA_LLADDR={0xa, 0x5, @local}]}, 0x28}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000040)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$DVB_DEMUX_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000340)={0x1, 0x80000, r3}) sendmsg$TIPC_NL_NODE_GET(r10, 0x0, 0x40008) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) 23.804419888s ago: executing program 2 (id=932): r0 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) 23.494967641s ago: executing program 2 (id=933): openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) timer_create(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) 21.68219657s ago: executing program 2 (id=934): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x4, 0xfffffffffffffffd, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c0001800600060003000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 21.516231913s ago: executing program 5 (id=935): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 21.424952673s ago: executing program 1 (id=936): socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r1 = eventfd2(0x0, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) io_setup(0x3, &(0x7f00000010c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(0xffffffffffffffff, 0x1) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x9085}], 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) 21.277492417s ago: executing program 3 (id=937): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "41ac0beaa2bdb95e", "e6da124a9978f59822df2675241c26af", "a056e13d", "6a515981fa6136ef"}, 0x28) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x14) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 21.010881518s ago: executing program 5 (id=938): syz_init_net_socket$ax25(0x3, 0x5, 0xca) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 19.536697945s ago: executing program 4 (id=939): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) lseek(0xffffffffffffffff, 0xffffff7f, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24040084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 18.16473962s ago: executing program 4 (id=940): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a0000"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x2200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x806, 0xffffffffffffffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 18.034447069s ago: executing program 3 (id=941): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16.010799788s ago: executing program 2 (id=942): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20, 0x42, 0x3}, [@NDA_LLADDR={0xa, 0x5, @local}]}, 0x28}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000040)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$DVB_DEMUX_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000340)={0x1, 0x80000, r3}) sendmsg$TIPC_NL_NODE_GET(r10, 0x0, 0x40008) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) 15.901146832s ago: executing program 3 (id=943): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) 15.829489916s ago: executing program 4 (id=944): openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) timer_create(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14.012474905s ago: executing program 4 (id=945): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = mq_open(0x0, 0x2, 0x102, &(0x7f0000000080)={0x1fd, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f00000002c0)=""/174, 0xae, 0x3, &(0x7f0000000140)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005bc6a9ce10584fe8fc9c125d5041b4e6864a3aef2d7f0f8778b0abb936d6dee3afca589ed972a26aef8c629a2734a8cc3049c6486be64a54ceda35267af34aa1f4", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r4 = io_uring_setup(0x56da, 0x0) io_uring_enter(r4, 0x3af6, 0x691f, 0x0, &(0x7f00000009c0)={[0x6]}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000025300)=""/102392, 0x18ff8) r6 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) ptrace$setregs(0xd, 0x0, 0xd, &(0x7f0000000a40)="ebfb5eeabc3c033b538a97008dae30a7dda0475cc31a80ae850f85f1e54459") fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 13.968977261s ago: executing program 5 (id=946): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 13.185663464s ago: executing program 2 (id=947): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 13.082237814s ago: executing program 1 (id=948): gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 13.053240802s ago: executing program 5 (id=949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44040000010101020000000008772474a300000514001980080002001400000008000200010000000600124000040000140005800e000100736e6d705f747261"], 0x44}}, 0x800) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.986083276s ago: executing program 4 (id=950): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) 11.985310151s ago: executing program 1 (id=951): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "41ac0beaa2bdb95e", "e6da124a9978f59822df2675241c26af", "a056e13d", "6a515981fa6136ef"}, 0x28) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x14) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 9.993844081s ago: executing program 4 (id=952): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x4, 0xfffffffffffffffd, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c0001800600060003000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 33 (id=943): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) kernel console output (not intermixed with test programs): T9] usb 4-1: Product: syz [ 114.452309][ T9] usb 4-1: Manufacturer: syz [ 114.452322][ T9] usb 4-1: SerialNumber: syz [ 114.511175][ T9] usb 4-1: config 0 descriptor?? [ 114.528295][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 114.528323][ T9] usb 4-1: selecting invalid altsetting 1 [ 114.528339][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 114.569675][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.570201][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 114.570283][ T9] usb 4-1: media controller created [ 114.623040][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.924736][ T6015] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.081141][ T6015] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 115.081251][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.144177][ T6015] usb 5-1: config 0 descriptor?? [ 115.647828][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 116.076089][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.082609][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.323758][ T6061] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 117.402611][ T9] usb 4-1: USB disconnect, device number 3 [ 118.170784][ T6015] usb 5-1: Cannot set autoneg [ 118.170968][ T6015] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 118.237604][ T6015] usb 5-1: USB disconnect, device number 2 [ 119.102597][ T6109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 123.952183][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 124.991064][ T6138] fuse: Unknown parameter 'euid<00000000000000000000' [ 125.005101][ T5804] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.195533][ T5804] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.195568][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.195589][ T5804] usb 2-1: Product: syz [ 125.195604][ T5804] usb 2-1: Manufacturer: syz [ 125.195617][ T5804] usb 2-1: SerialNumber: syz [ 125.277786][ T5804] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.388352][ T48] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 125.494778][ T809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.644792][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 125.651666][ T809] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 125.651695][ T809] usb 1-1: config 0 has no interface number 0 [ 125.651745][ T809] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.651771][ T809] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.651812][ T809] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 125.651835][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.731342][ T809] usb 1-1: config 0 descriptor?? [ 126.493721][ T48] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 126.503890][ T809] usb 1-1: USB disconnect, device number 2 [ 126.517053][ T48] ath9k_htc: Failed to initialize the device [ 130.084541][ T810] usb 2-1: USB disconnect, device number 2 [ 130.135324][ T810] usb 2-1: ath9k_htc: USB layer deinitialized [ 131.014327][ T6163] netlink: 'syz.2.73': attribute type 23 has an invalid length. [ 131.532684][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.75'. [ 133.045786][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045908][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.664834][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.824694][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 134.827462][ T48] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 134.827489][ T48] usb 4-1: config 0 has no interface number 0 [ 134.827538][ T48] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.827564][ T48] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.827603][ T48] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 134.827626][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.965130][ T48] usb 4-1: config 0 descriptor?? [ 135.561473][ T48] hid (null): unknown global tag 0xe [ 135.693473][ T6201] netlink: 72 bytes leftover after parsing attributes in process `syz.0.78'. [ 136.363818][ T48] usb 4-1: USB disconnect, device number 4 [ 136.770036][ T6207] Zero length message leads to an empty skb [ 141.102778][ T6221] fuse: Unknown parameter 'euid<00000000000000000000' [ 141.297962][ T6224] hub 9-0:1.0: USB hub found [ 141.314843][ T6224] hub 9-0:1.0: 1 port detected [ 144.201598][ T6249] netlink: 72 bytes leftover after parsing attributes in process `syz.3.96'. [ 147.042729][ T6266] hub 9-0:1.0: USB hub found [ 147.048045][ T6266] hub 9-0:1.0: 1 port detected [ 150.153713][ T6284] netlink: 72 bytes leftover after parsing attributes in process `syz.1.107'. [ 151.414682][ T809] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.580427][ T809] usb 2-1: not running at top speed; connect to a high speed hub [ 151.589108][ T809] usb 2-1: config 45 has an invalid interface number: 2 but max is 0 [ 151.589138][ T809] usb 2-1: config 45 has no interface number 0 [ 151.589171][ T809] usb 2-1: config 45 interface 2 has no altsetting 0 [ 151.619104][ T809] usb 2-1: string descriptor 0 read error: -22 [ 151.619264][ T809] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 151.619287][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.676368][ T809] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 151.676908][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 151.713701][ T809] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 151.724029][ T809] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 151.724102][ T809] usb 2-1: media controller created [ 151.724187][ T809] dvb-usb: bulk message failed: -22 (5/0) [ 151.724260][ T809] dvb-usb: MAC address reading failed. [ 151.766277][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.786705][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 151.787042][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 151.787166][ T809] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 151.818493][ T809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 151.850960][ T809] dvb-usb: schedule remote query interval to 100 msecs. [ 151.850986][ T809] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 151.958001][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 151.958077][ T9] dvb-usb: error while querying for an remote control event. [ 152.076548][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 152.076584][ T9] dvb-usb: error while querying for an remote control event. [ 152.184897][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 152.184933][ T9] dvb-usb: error while querying for an remote control event. [ 152.203830][ T810] usb 2-1: USB disconnect, device number 3 [ 153.147737][ T810] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 153.584961][ T6321] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 153.903587][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 153.917446][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 158.962678][ T6361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.132'. [ 158.963705][ T6361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.132'. [ 160.909562][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.056280][ T31] usb 4-1: device descriptor read/64, error -71 [ 161.264842][ T810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.305008][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.418368][ T810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.418400][ T810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 161.418424][ T810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 161.418446][ T810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 161.418487][ T810] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 161.418510][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.424497][ T810] usb 1-1: config 0 descriptor?? [ 161.437001][ T31] usb 4-1: device descriptor read/64, error -71 [ 161.545729][ T31] usb usb4-port1: attempt power cycle [ 161.679608][ T810] hdpvr 1-1:0.0: firmware version 0x0 dated [ 161.679633][ T810] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 161.934765][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.955684][ T31] usb 4-1: device descriptor read/8, error -71 [ 162.193965][ T810] hdpvr 1-1:0.0: Could not setup controls [ 162.195475][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.213209][ T810] hdpvr 1-1:0.0: registering videodev failed [ 162.216588][ T31] usb 4-1: device descriptor read/8, error -71 [ 162.278929][ T810] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 162.304343][ T810] usb 1-1: USB disconnect, device number 3 [ 162.326479][ T31] usb usb4-port1: unable to enumerate USB device [ 164.107959][ T6399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.145'. [ 165.377452][ T6015] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 165.588058][ T6015] usb 1-1: not running at top speed; connect to a high speed hub [ 165.590066][ T6015] usb 1-1: config 45 has an invalid interface number: 2 but max is 0 [ 165.590095][ T6015] usb 1-1: config 45 has no interface number 0 [ 165.590131][ T6015] usb 1-1: config 45 interface 2 has no altsetting 0 [ 165.638821][ T6015] usb 1-1: string descriptor 0 read error: -22 [ 165.638940][ T6015] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 165.638963][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.692981][ T6015] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 165.693030][ T6015] dvb-usb: bulk message failed: -22 (3/0) [ 165.747079][ T6015] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 165.766490][ T6015] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 165.766530][ T6015] usb 1-1: media controller created [ 165.766588][ T6015] dvb-usb: bulk message failed: -22 (5/0) [ 165.766629][ T6015] dvb-usb: MAC address reading failed. [ 165.768424][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.857785][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 165.857950][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 165.858012][ T6015] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 165.871984][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 165.936915][ T6015] dvb-usb: schedule remote query interval to 100 msecs. [ 165.936933][ T6015] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 166.054762][ T809] dvb-usb: bulk message failed: -22 (2/0) [ 166.054798][ T809] dvb-usb: error while querying for an remote control event. [ 166.062579][ T6015] usb 1-1: USB disconnect, device number 4 [ 166.212593][ T6015] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 166.291509][ T6415] usb usb8: usbfs: process 6415 (syz.3.152) did not claim interface 0 before use [ 168.264738][ T809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.600190][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'. [ 168.671428][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.723910][ T809] usb 3-1: device descriptor read/64, error -71 [ 169.276551][ T809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.377116][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 169.377150][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.421934][ T9] usb 1-1: config 0 descriptor?? [ 169.470482][ T809] usb 3-1: device descriptor read/64, error -71 [ 169.575476][ T809] usb usb3-port1: attempt power cycle [ 169.934703][ T809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.974035][ T809] usb 3-1: device descriptor read/8, error -71 [ 170.214883][ T809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.245908][ T809] usb 3-1: device descriptor read/8, error -71 [ 170.355923][ T809] usb usb3-port1: unable to enumerate USB device [ 170.941777][ T6448] usb usb8: usbfs: process 6448 (syz.1.164) did not claim interface 0 before use [ 171.117799][ T9] usb 1-1: Cannot set autoneg [ 171.117981][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 171.172385][ T9] usb 1-1: USB disconnect, device number 5 [ 174.696552][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 175.754888][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.904696][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 175.935823][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 175.935864][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.935882][ T31] usb 3-1: Product: syz [ 175.935895][ T31] usb 3-1: Manufacturer: syz [ 175.935909][ T31] usb 3-1: SerialNumber: syz [ 175.951730][ T31] usb 3-1: config 0 descriptor?? [ 176.006926][ T5804] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.134754][ T5804] usb 2-1: device descriptor read/64, error -71 [ 176.183822][ T31] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 176.210523][ T6491] usb usb8: usbfs: process 6491 (syz.3.176) did not claim interface 0 before use [ 176.374743][ T5804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.638004][ T5804] usb 2-1: device descriptor read/64, error -71 [ 176.755329][ T5804] usb usb2-port1: attempt power cycle [ 176.814361][ T31] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 176.829686][ T31] usb 3-1: USB disconnect, device number 7 [ 177.094666][ T5804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.115623][ T5804] usb 2-1: device descriptor read/8, error -71 [ 177.360662][ T5804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.378412][ T5804] usb 2-1: device descriptor read/8, error -71 [ 177.487605][ T5804] usb usb2-port1: unable to enumerate USB device [ 181.008320][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 184.532939][ T6537] usb usb8: usbfs: process 6537 (syz.1.188) did not claim interface 0 before use [ 185.272330][ T5883] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.566283][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 185.571316][ T5883] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 185.571336][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.571347][ T5883] usb 1-1: Product: syz [ 185.571355][ T5883] usb 1-1: Manufacturer: syz [ 185.571363][ T5883] usb 1-1: SerialNumber: syz [ 185.623023][ T5883] usb 1-1: config 0 descriptor?? [ 185.838223][ T5883] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.921299][ T5883] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 186.925819][ T5883] usb 1-1: USB disconnect, device number 6 [ 187.626237][ T5804] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.784768][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 187.786087][ T5804] usb 4-1: no configurations [ 187.786104][ T5804] usb 4-1: can't read configurations, error -22 [ 187.914793][ T5804] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.086448][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 188.582714][ T5804] usb 4-1: no configurations [ 188.582735][ T5804] usb 4-1: can't read configurations, error -22 [ 188.600242][ T5804] usb usb4-port1: attempt power cycle [ 189.234704][ T5804] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.297329][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 189.305416][ T5804] usb 4-1: no configurations [ 189.305437][ T5804] usb 4-1: can't read configurations, error -22 [ 189.468293][ T5804] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.491991][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 189.494718][ T5804] usb 4-1: no configurations [ 189.494736][ T5804] usb 4-1: can't read configurations, error -22 [ 189.501703][ T5804] usb usb4-port1: unable to enumerate USB device [ 189.629212][ T6545] Process accounting resumed [ 193.592740][ T6608] usb usb8: usbfs: process 6608 (syz.4.208) did not claim interface 0 before use [ 193.798586][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 193.798888][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 193.812516][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 193.812890][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 193.813817][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 193.853308][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 193.854060][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 193.854178][ T6616] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 193.854194][ T6616] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 194.480512][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.483645][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.184788][ T6286] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.365079][ T6286] usb 2-1: Using ep0 maxpacket: 32 [ 195.823953][ T6286] usb 2-1: no configurations [ 195.823976][ T6286] usb 2-1: can't read configurations, error -22 [ 195.994693][ T6286] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.194846][ T6286] usb 2-1: Using ep0 maxpacket: 32 [ 196.196223][ T6286] usb 2-1: no configurations [ 196.196240][ T6286] usb 2-1: can't read configurations, error -22 [ 196.196927][ T6286] usb usb2-port1: attempt power cycle [ 196.584684][ T6286] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 196.605861][ T6286] usb 2-1: Using ep0 maxpacket: 32 [ 196.606844][ T6286] usb 2-1: no configurations [ 196.606861][ T6286] usb 2-1: can't read configurations, error -22 [ 196.744802][ T6286] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.885556][ T6286] usb 2-1: Using ep0 maxpacket: 32 [ 196.886610][ T6286] usb 2-1: no configurations [ 196.886629][ T6286] usb 2-1: can't read configurations, error -22 [ 196.892517][ T6286] usb usb2-port1: unable to enumerate USB device [ 197.073021][ T6639] hub 9-0:1.0: USB hub found [ 197.080339][ T6639] hub 9-0:1.0: 1 port detected [ 199.875177][ T5883] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.038817][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 200.041354][ T5883] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.041390][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.041426][ T5883] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 200.041450][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.053322][ T5883] usb 2-1: config 0 descriptor?? [ 200.525115][ T5883] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 200.525160][ T5883] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 200.525188][ T5883] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 200.525214][ T5883] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 200.525240][ T5883] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 200.792614][ T5883] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 201.238998][ T6674] hub 9-0:1.0: USB hub found [ 201.239379][ T6674] hub 9-0:1.0: 1 port detected [ 201.319905][ T5883] usb 2-1: USB disconnect, device number 12 [ 201.516637][ T6672] fido_id[6672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 201.558241][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 201.704671][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 201.705711][ T31] usb 4-1: no configurations [ 201.705737][ T31] usb 4-1: can't read configurations, error -22 [ 201.861119][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 202.046454][ T6679] usb usb8: usbfs: process 6679 (syz.2.234) did not claim interface 0 before use [ 202.064718][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 202.065473][ T31] usb 4-1: no configurations [ 202.065483][ T31] usb 4-1: can't read configurations, error -22 [ 202.065738][ T31] usb usb4-port1: attempt power cycle [ 202.150626][ T36] audit: type=1800 audit(1773657277.617:3): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.235" name="bus" dev="overlay" ino=280 res=0 errno=0 [ 202.404715][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 202.425413][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 202.426361][ T31] usb 4-1: no configurations [ 202.426378][ T31] usb 4-1: can't read configurations, error -22 [ 202.556506][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.575748][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 202.576673][ T31] usb 4-1: no configurations [ 202.576690][ T31] usb 4-1: can't read configurations, error -22 [ 202.577327][ T31] usb usb4-port1: unable to enumerate USB device [ 205.229575][ T1842] Process accounting resumed [ 207.943656][ T6725] netlink: 91 bytes leftover after parsing attributes in process `syz.0.248'. [ 208.468258][ T6732] usb usb8: usbfs: process 6732 (syz.4.251) did not claim interface 0 before use [ 208.468897][ T6286] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.614687][ T6286] usb 1-1: Using ep0 maxpacket: 32 [ 208.623615][ T6286] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.623644][ T6286] usb 1-1: config 0 has no interfaces? [ 208.623677][ T6286] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 208.623700][ T6286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.693281][ T6286] usb 1-1: config 0 descriptor?? [ 209.144494][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.144983][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.445498][ T6286] usb 1-1: USB disconnect, device number 7 [ 211.925654][ T6760] netlink: 91 bytes leftover after parsing attributes in process `syz.4.260'. [ 212.067068][ T6763] hub 9-0:1.0: USB hub found [ 212.070045][ T6763] hub 9-0:1.0: 1 port detected [ 212.132843][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 212.142704][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 212.148459][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 212.226982][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 212.228047][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 215.388284][ T6782] usb usb8: usbfs: process 6782 (syz.0.264) did not claim interface 0 before use [ 217.094858][ T1842] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.245652][ T1842] usb 4-1: Using ep0 maxpacket: 32 [ 217.248451][ T1842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.248480][ T1842] usb 4-1: config 0 has no interfaces? [ 217.248510][ T1842] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 217.248531][ T1842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.319405][ T1842] usb 4-1: config 0 descriptor?? [ 217.778463][ T6805] hub 9-0:1.0: USB hub found [ 217.778906][ T6805] hub 9-0:1.0: 1 port detected [ 217.909619][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.910257][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.144896][ T6809] netlink: 91 bytes leftover after parsing attributes in process `syz.2.273'. [ 220.533794][ T1842] usb 4-1: USB disconnect, device number 17 [ 222.417909][ T6834] hub 9-0:1.0: USB hub found [ 222.418302][ T6834] hub 9-0:1.0: 1 port detected [ 222.571278][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 222.571310][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 224.587154][ T6856] netlink: 'syz.1.289': attribute type 4 has an invalid length. [ 224.587263][ T6856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.289'. [ 225.215765][ T809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 225.364720][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 225.372970][ T809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 225.373002][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.373022][ T809] usb 5-1: Product: syz [ 225.373037][ T809] usb 5-1: Manufacturer: syz [ 225.373052][ T809] usb 5-1: SerialNumber: syz [ 225.386741][ T809] usb 5-1: config 0 descriptor?? [ 225.757519][ T809] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.170333][ T809] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 227.195056][ T809] usb 5-1: USB disconnect, device number 3 [ 227.607889][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 227.607922][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 228.187129][ T6891] usb usb8: usbfs: process 6891 (syz.3.290) did not claim interface 0 before use [ 228.355739][ T5804] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.430416][ T6893] netlink: 'syz.4.302': attribute type 4 has an invalid length. [ 228.430440][ T6893] netlink: 152 bytes leftover after parsing attributes in process `syz.4.302'. [ 228.763423][ T6893] .`: renamed from bond0 (while UP) [ 229.085914][ T5804] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 229.085936][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.117751][ T5804] usb 3-1: config 0 descriptor?? [ 229.160447][ T6893] syz.4.302 (6893) used greatest stack depth: 18168 bytes left [ 231.223945][ T5804] usb 3-1: Cannot set MAC address [ 231.224225][ T5804] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 231.283017][ T5804] usb 3-1: USB disconnect, device number 8 [ 231.297428][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 231.297468][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 231.501611][ T6924] hub 9-0:1.0: USB hub found [ 231.501980][ T6924] hub 9-0:1.0: 1 port detected [ 232.341204][ T6933] process 'syz.4.311' launched './file0' with NULL argv: empty string added [ 233.274124][ T5804] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.894856][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 233.897356][ T5804] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 233.897380][ T5804] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 233.897420][ T5804] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 233.897444][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.413323][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.413684][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.415185][ T5915] usb 3-1: USB disconnect, device number 9 [ 236.993984][ T6964] warning: `syz.0.324' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 237.125046][ T809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.334814][ T809] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 238.334846][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.344871][ T809] usb 2-1: config 0 descriptor?? [ 238.390986][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 238.464720][ T5915] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 238.639295][ T5915] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.639328][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.639348][ T5915] usb 1-1: Product: syz [ 238.639361][ T5915] usb 1-1: Manufacturer: syz [ 238.639374][ T5915] usb 1-1: SerialNumber: syz [ 238.727923][ T5915] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 238.754421][ T6286] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.378131][ T809] usb 2-1: Cannot set autoneg [ 239.378426][ T809] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 239.419604][ T6974] hub 9-0:1.0: USB hub found [ 239.420027][ T6974] hub 9-0:1.0: 1 port detected [ 239.834884][ T6286] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 239.835469][ T6286] ath9k_htc: Failed to initialize the device [ 239.902126][ T6286] usb 1-1: ath9k_htc: USB layer deinitialized [ 240.055346][ T5915] usb 1-1: USB disconnect, device number 8 [ 241.507286][ T6981] usb usb8: usbfs: process 6981 (syz.3.328) did not claim interface 0 before use [ 241.546308][ T810] usb 2-1: USB disconnect, device number 13 [ 242.224292][ T6286] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 242.454656][ T6286] usb 1-1: device descriptor read/64, error -71 [ 243.604780][ T6286] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.734692][ T6286] usb 1-1: device descriptor read/64, error -71 [ 244.286004][ T6286] usb usb1-port1: attempt power cycle [ 245.655650][ T6286] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 245.785067][ T6286] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 245.805568][ T6286] usb 1-1: Using ep0 maxpacket: 32 [ 245.807405][ T6286] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 245.807430][ T6286] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 245.807465][ T6286] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 245.807487][ T6286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.458684][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.466017][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.049416][ T7017] loop8: detected capacity change from 0 to 4 [ 247.229756][ T5819] Dev loop8: unable to read RDB block 4 [ 247.229805][ T5819] loop8: unable to read partition table [ 247.230060][ T5819] loop8: partition table beyond EOD, truncated [ 247.260916][ T1842] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 247.343024][ T7017] Dev loop8: unable to read RDB block 4 [ 247.343062][ T7017] loop8: unable to read partition table [ 247.343208][ T7017] loop8: partition table beyond EOD, truncated [ 247.343237][ T7017] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 247.435379][ T1842] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 247.435661][ T1842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.436231][ T1842] usb 3-1: Product: syz [ 247.436247][ T1842] usb 3-1: Manufacturer: syz [ 247.436260][ T1842] usb 3-1: SerialNumber: syz [ 247.506867][ T1842] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.550989][ T5883] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 248.108206][ T1842] usb 1-1: USB disconnect, device number 12 [ 248.561773][ T7021] hub 9-0:1.0: USB hub found [ 248.562155][ T7021] hub 9-0:1.0: 1 port detected [ 248.635566][ T5883] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 248.637124][ T5883] ath9k_htc: Failed to initialize the device [ 248.695442][ T5883] usb 3-1: ath9k_htc: USB layer deinitialized [ 249.036439][ T1842] usb 3-1: USB disconnect, device number 10 [ 250.434688][ T1842] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.034680][ T1842] usb 3-1: Using ep0 maxpacket: 16 [ 252.860078][ T1842] usb 3-1: device descriptor read/all, error -71 [ 254.585404][ T7067] usb usb8: usbfs: process 7067 (syz.2.349) did not claim interface 0 before use [ 255.952799][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.952846][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.119835][ T1842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 256.306891][ T1842] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.306929][ T1842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.306949][ T1842] usb 5-1: Product: syz [ 256.306964][ T1842] usb 5-1: Manufacturer: syz [ 256.306978][ T1842] usb 5-1: SerialNumber: syz [ 256.451925][ T1842] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.482592][ T6015] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.594662][ T6015] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 257.594856][ T6015] ath9k_htc: Failed to initialize the device [ 257.640855][ T6015] usb 5-1: ath9k_htc: USB layer deinitialized [ 257.815798][ T5915] usb 5-1: USB disconnect, device number 4 [ 262.978992][ T6915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.284629][ T6915] usb 3-1: Using ep0 maxpacket: 16 [ 263.288746][ T6915] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.288782][ T6915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.288819][ T6915] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 263.288842][ T6915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.371751][ T7117] usb usb8: usbfs: process 7117 (syz.4.363) did not claim interface 0 before use [ 264.382866][ T6915] usb 3-1: config 0 descriptor?? [ 264.774749][ T6015] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 265.019439][ T6915] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 265.019619][ T6915] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 265.019639][ T6915] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 265.019654][ T6915] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 265.019670][ T6915] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 265.231503][ T6015] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.231608][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.231630][ T6015] usb 2-1: Product: syz [ 265.231644][ T6015] usb 2-1: Manufacturer: syz [ 265.231658][ T6015] usb 2-1: SerialNumber: syz [ 265.282923][ T6015] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 265.307924][ T5883] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.500800][ T6915] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 265.863148][ T6915] usb 3-1: USB disconnect, device number 13 [ 266.442785][ T5883] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 266.443165][ T5883] ath9k_htc: Failed to initialize the device [ 268.826657][ T7121] fido_id[7121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 273.838911][ T810] usb 2-1: USB disconnect, device number 14 [ 273.884623][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 273.908079][ T810] usb 2-1: ath9k_htc: USB layer deinitialized [ 275.466722][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.487572][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.496851][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.505085][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.506252][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.834747][ T1842] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 275.864675][ T5883] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 275.987802][ T1842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.988566][ T1842] usb 5-1: not running at top speed; connect to a high speed hub [ 275.990150][ T1842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.990174][ T1842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.000029][ T1842] usb 5-1: string descriptor 0 read error: -22 [ 276.000184][ T1842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.000205][ T1842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.163524][ T1842] usb 5-1: 0:2 : does not exist [ 276.208318][ T5883] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 276.208360][ T5883] usb 2-1: can't read configurations, error -71 [ 277.556762][ T1842] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 277.568461][ T1842] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 277.686177][ T5811] Bluetooth: hci5: command tx timeout [ 278.165326][ T1842] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 279.224625][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.257444][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 279.287447][ T1842] usb 5-1: USB disconnect, device number 5 [ 279.357488][ T7165] usb usb8: usbfs: process 7165 (syz.4.378) did not claim interface 0 before use [ 279.383647][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.383680][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.383699][ T9] usb 2-1: Product: syz [ 279.383713][ T9] usb 2-1: Manufacturer: syz [ 279.383727][ T9] usb 2-1: SerialNumber: syz [ 279.512196][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 279.530322][ T809] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.760454][ T5811] Bluetooth: hci5: command tx timeout [ 281.874665][ T5811] Bluetooth: hci5: command tx timeout [ 282.042014][ T809] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 282.042171][ T809] ath9k_htc: Failed to initialize the device [ 285.085084][ T9] usb 2-1: USB disconnect, device number 17 [ 285.114741][ T5811] Bluetooth: hci5: command tx timeout [ 285.173597][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 287.882515][ T809] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.930448][ T120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.054688][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 288.057971][ T809] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 288.057999][ T809] usb 5-1: config 0 has no interface number 0 [ 288.058046][ T809] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.058072][ T809] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.058102][ T809] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 288.058116][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.080846][ T809] usb 5-1: config 0 descriptor?? [ 288.540872][ T809] usbhid 5-1:0.4: can't add hid device: -71 [ 288.541011][ T809] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 288.552610][ T809] usb 5-1: USB disconnect, device number 6 [ 288.609681][ T120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.024004][ T120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.066016][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.067814][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.068064][ T7137] bridge_slave_0: entered allmulticast mode [ 289.071112][ T7137] bridge_slave_0: entered promiscuous mode [ 289.106687][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.108499][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.108743][ T7137] bridge_slave_1: entered allmulticast mode [ 289.111920][ T7137] bridge_slave_1: entered promiscuous mode [ 290.388405][ T810] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 290.557694][ T120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.610553][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.688745][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.730813][ T810] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 290.730845][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.730865][ T810] usb 5-1: Product: syz [ 290.730879][ T810] usb 5-1: Manufacturer: syz [ 290.730892][ T810] usb 5-1: SerialNumber: syz [ 290.790024][ T810] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 290.809354][ T6915] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 290.974253][ T7137] team0: Port device team_slave_0 added [ 290.989803][ T7137] team0: Port device team_slave_1 added [ 291.930215][ T6915] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 291.990955][ T6915] ath9k_htc: Failed to initialize the device [ 292.048961][ T6915] usb 5-1: ath9k_htc: USB layer deinitialized [ 292.117097][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.117119][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.117215][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.335954][ T6015] usb 5-1: USB disconnect, device number 7 [ 292.452777][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.452794][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.452821][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.810718][ T7223] usb usb8: usbfs: process 7223 (syz.4.394) did not claim interface 0 before use [ 294.088917][ T7137] hsr_slave_0: entered promiscuous mode [ 294.090578][ T7137] hsr_slave_1: entered promiscuous mode [ 294.091655][ T7137] debugfs: 'hsr0' already exists in 'hsr' [ 294.091680][ T7137] Cannot create hsr debugfs directory [ 294.962055][ T120] bridge_slave_1: left allmulticast mode [ 294.962186][ T120] bridge_slave_1: left promiscuous mode [ 294.963137][ T120] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.128325][ T120] bridge_slave_0: left allmulticast mode [ 295.128358][ T120] bridge_slave_0: left promiscuous mode [ 295.128618][ T120] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.783207][ T7251] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.374645][ T809] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.560362][ T809] usb 4-1: device descriptor read/64, error -71 [ 297.849203][ T809] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 297.974679][ T809] usb 4-1: device descriptor read/64, error -71 [ 298.085257][ T809] usb usb4-port1: attempt power cycle [ 298.485630][ T809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 298.505613][ T809] usb 4-1: device descriptor read/8, error -71 [ 298.715252][ T120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.754669][ T809] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 298.755420][ T120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.775197][ T809] usb 4-1: device descriptor read/8, error -71 [ 298.788149][ T120] bond0 (unregistering): Released all slaves [ 298.904734][ T809] usb usb4-port1: unable to enumerate USB device [ 301.847524][ T7295] usb usb8: usbfs: process 7295 (syz.1.410) did not claim interface 0 before use [ 302.489437][ T7298] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 302.489476][ T7298] overlayfs: failed to set xattr on upper [ 302.489485][ T7298] overlayfs: ...falling back to redirect_dir=nofollow. [ 302.489494][ T7298] overlayfs: ...falling back to index=off. [ 302.489734][ T7298] overlayfs: conflicting lowerdir path [ 303.064071][ T120] hsr_slave_0: left promiscuous mode [ 303.124747][ T120] hsr_slave_1: left promiscuous mode [ 303.129505][ T120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.129593][ T120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.227115][ T120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.227148][ T120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.565057][ T120] veth1_macvtap: left promiscuous mode [ 303.565340][ T120] veth0_macvtap: left promiscuous mode [ 303.565819][ T120] veth1_vlan: left promiscuous mode [ 303.566154][ T120] veth0_vlan: left promiscuous mode [ 306.704714][ T1842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 306.834742][ T1842] usb 2-1: device descriptor read/64, error -71 [ 307.135679][ T1842] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 307.534657][ T1842] usb 2-1: device descriptor read/64, error -71 [ 307.667023][ T1842] usb usb2-port1: attempt power cycle [ 308.051459][ T1842] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 308.065526][ T1842] usb 2-1: device descriptor read/8, error -71 [ 308.304811][ T1842] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 308.325528][ T1842] usb 2-1: device descriptor read/8, error -71 [ 308.435208][ T1842] usb usb2-port1: unable to enumerate USB device [ 310.494642][ T810] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.654549][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 310.664053][ T810] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 310.664082][ T810] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 310.664120][ T810] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 310.664139][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.870835][ T120] team0 (unregistering): Port device team_slave_1 removed [ 311.117997][ T120] team0 (unregistering): Port device team_slave_0 removed [ 311.134380][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.135015][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.868226][ T7367] usb usb8: usbfs: process 7367 (syz.1.428) did not claim interface 0 before use [ 312.890134][ T7137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.000609][ T7137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.147828][ T7137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.271921][ T7137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.353472][ T9] usb 5-1: USB disconnect, device number 8 [ 314.631330][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.103078][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.176949][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.177043][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.178477][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.178561][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.012364][ T5883] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 316.164638][ T5883] usb 3-1: device descriptor read/64, error -71 [ 316.429758][ T5883] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 316.584654][ T5883] usb 3-1: device descriptor read/64, error -71 [ 316.694923][ T5883] usb usb3-port1: attempt power cycle [ 317.064647][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 317.085462][ T5883] usb 3-1: device descriptor read/8, error -71 [ 317.324657][ T5883] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 317.347200][ T5883] usb 3-1: device descriptor read/8, error -71 [ 317.362679][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.362758][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440284][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.454907][ T5883] usb usb3-port1: unable to enumerate USB device [ 319.062590][ T7137] veth0_vlan: entered promiscuous mode [ 319.128481][ T7137] veth1_vlan: entered promiscuous mode [ 320.368999][ T7137] veth0_macvtap: entered promiscuous mode [ 320.382755][ T7137] veth1_macvtap: entered promiscuous mode [ 320.557079][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.652300][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.748456][ T120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.748725][ T120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.748794][ T120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.748833][ T120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.901039][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.901063][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.938823][ T7476] usb usb8: usbfs: process 7476 (syz.2.448) did not claim interface 0 before use [ 322.310660][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.310691][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.454675][ T809] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 324.614635][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 324.617202][ T809] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 324.617230][ T809] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 324.617282][ T809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.617304][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.617328][ T809] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 324.617371][ T809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.617394][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.815770][ T809] usbtmc 4-1:16.0: bulk endpoints not found [ 325.354715][ T6915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 325.484674][ T6915] usb 6-1: device descriptor read/64, error -71 [ 325.734685][ T6915] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.864684][ T6915] usb 6-1: device descriptor read/64, error -71 [ 326.015258][ T6915] usb usb6-port1: attempt power cycle [ 326.357793][ T6915] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 326.405476][ T6915] usb 6-1: device descriptor read/8, error -71 [ 326.644729][ T6915] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 326.666515][ T6915] usb 6-1: device descriptor read/8, error -71 [ 326.763548][ T809] usb 4-1: USB disconnect, device number 22 [ 326.989628][ T6915] usb usb6-port1: unable to enumerate USB device [ 327.265842][ T7536] netlink: 'syz.3.459': attribute type 4 has an invalid length. [ 329.055295][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 329.234699][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 329.237495][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.237549][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.237594][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 329.237628][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.253673][ T9] usb 3-1: config 0 descriptor?? [ 329.301068][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 329.756199][ T7557] usb usb8: usbfs: process 7557 (syz.5.464) did not claim interface 0 before use [ 331.505562][ T5883] usb 3-1: USB disconnect, device number 18 [ 335.158044][ T7602] netlink: 'syz.2.475': attribute type 4 has an invalid length. [ 340.500405][ T7648] usb usb8: usbfs: process 7648 (syz.2.487) did not claim interface 0 before use [ 351.835851][ T7730] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 356.070477][ T7762] usb usb8: usbfs: process 7762 (syz.4.513) did not claim interface 0 before use [ 357.938764][ T7783] netlink: 'syz.1.517': attribute type 4 has an invalid length. [ 367.156723][ T7846] usb usb8: usbfs: process 7846 (syz.4.531) did not claim interface 0 before use [ 373.625144][ T7894] usb usb8: usbfs: process 7894 (syz.2.543) did not claim interface 0 before use [ 379.728113][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.728195][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.675103][ T7944] usb usb8: usbfs: process 7944 (syz.1.558) did not claim interface 0 before use [ 387.424648][ T5804] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 387.574581][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 387.577052][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.577077][ T5804] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.577116][ T5804] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 387.577139][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.637868][ T5804] usb 4-1: config 0 descriptor?? [ 389.962136][ T809] usb 4-1: USB disconnect, device number 23 [ 390.456423][ T8001] usb usb8: usbfs: process 8001 (syz.1.574) did not claim interface 0 before use [ 392.581595][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.580'. [ 396.479965][ T8031] trusted_key: encrypted_key: insufficient parameters specified [ 397.694358][ T8040] trusted_key: encrypted_key: insufficient parameters specified [ 398.460427][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 398.538132][ T8042] usb usb8: usbfs: process 8042 (syz.2.587) did not claim interface 0 before use [ 398.637712][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 398.650582][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.650610][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.650650][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 398.650673][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.708370][ T9] usb 6-1: config 0 descriptor?? [ 398.897683][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 399.044722][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 399.061965][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.062003][ T5883] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 399.062017][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.103888][ T5883] usb 3-1: config 0 descriptor?? [ 399.117885][ T5883] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 400.762827][ T5915] usb 6-1: USB disconnect, device number 6 [ 401.378504][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 401.974731][ T5804] usb 3-1: USB disconnect, device number 19 [ 403.033865][ T8084] trusted_key: encrypted_key: insufficient parameters specified [ 404.234036][ T8088] trusted_key: encrypted_key: insufficient parameters specified [ 405.178622][ T8090] usb usb8: usbfs: process 8090 (syz.4.599) did not claim interface 0 before use [ 405.437061][ T8096] fuse: Unknown parameter 'euid<00000000000000000000' [ 405.440679][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.598'. [ 407.614866][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 407.764647][ T5883] usb 5-1: device descriptor read/64, error -71 [ 408.004601][ T5883] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 408.229145][ T6915] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 408.807592][ T6915] usb 4-1: Using ep0 maxpacket: 16 [ 408.810404][ T6915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.810429][ T6915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.810468][ T6915] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 408.810491][ T6915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.013627][ T5883] usb 5-1: device descriptor read/64, error -71 [ 409.031903][ T6915] usb 4-1: config 0 descriptor?? [ 409.120491][ T5883] usb usb5-port1: attempt power cycle [ 409.632922][ T5883] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 409.686780][ T5883] usb 5-1: device descriptor read/8, error -71 [ 410.214590][ T5883] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 410.235481][ T5883] usb 5-1: device descriptor read/8, error -71 [ 410.344839][ T5883] usb usb5-port1: unable to enumerate USB device [ 412.003910][ T5884] usb 4-1: USB disconnect, device number 24 [ 417.027030][ T8162] hub 9-0:1.0: USB hub found [ 417.029477][ T8162] hub 9-0:1.0: 1 port detected [ 419.384614][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 419.561807][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 419.563912][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.563927][ T5884] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.563949][ T5884] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 419.563962][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.582543][ T5884] usb 6-1: config 0 descriptor?? [ 419.978030][ T8171] usb usb8: usbfs: process 8171 (syz.2.610) did not claim interface 0 before use [ 420.246318][ T8177] fuse: Unknown parameter 'euid<00000000000000000000' [ 420.247835][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 421.756461][ T5884] usb 6-1: USB disconnect, device number 7 [ 424.568670][ T8209] hub 9-0:1.0: USB hub found [ 425.113531][ T8209] hub 9-0:1.0: 1 port detected [ 426.479352][ T8193] libceph: resolve '0..' (ret=-3): failed [ 426.591763][ T8215] usb usb8: usbfs: process 8215 (syz.3.632) did not claim interface 0 before use [ 426.804623][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 426.964638][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 426.967280][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.967327][ T5884] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.967342][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.967363][ T5884] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 426.967376][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.975393][ T5884] usb 2-1: config 0 descriptor?? [ 427.161292][ T5884] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 427.208287][ T5884] usb 2-1: USB disconnect, device number 22 [ 427.574958][ T8225] fuse: Unknown parameter 'euid<00000000000000000000' [ 427.580791][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 429.314522][ T5804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 429.476235][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 429.478220][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.478254][ T5804] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.478294][ T5804] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 429.478318][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.788846][ T5804] usb 5-1: config 0 descriptor?? [ 433.213649][ T8250] usb usb8: usbfs: process 8250 (syz.1.644) did not claim interface 0 before use [ 433.231111][ T5804] usb 5-1: USB disconnect, device number 13 [ 433.283020][ T8255] fuse: Bad value for 'fd' [ 434.000285][ T8267] hub 9-0:1.0: USB hub found [ 434.357214][ T8267] hub 9-0:1.0: 1 port detected [ 434.546785][ T5804] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 435.674581][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 435.677055][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.677114][ T5804] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.677142][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.677178][ T5804] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 435.677200][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.688148][ T5804] usb 5-1: config 0 descriptor?? [ 435.740079][ T5804] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 435.844569][ T5883] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 436.122639][ T5883] usb 2-1: device descriptor read/64, error -71 [ 436.358446][ T5883] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 436.489060][ T5883] usb 2-1: device descriptor read/64, error -71 [ 436.532466][ T8283] libceph: resolve '0..' (ret=-3): failed [ 436.598378][ T5883] usb usb2-port1: attempt power cycle [ 436.934955][ T5883] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 436.995354][ T5883] usb 2-1: device descriptor read/8, error -71 [ 437.234641][ T5883] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 437.255365][ T5883] usb 2-1: device descriptor read/8, error -71 [ 437.365101][ T5883] usb usb2-port1: unable to enumerate USB device [ 438.558108][ T5915] usb 5-1: USB disconnect, device number 14 [ 440.559912][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.559996][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.807215][ T8300] usb usb8: usbfs: process 8300 (syz.5.657) did not claim interface 0 before use [ 440.924574][ T5915] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 441.251952][ T8305] hub 9-0:1.0: USB hub found [ 441.256002][ T8305] hub 9-0:1.0: 1 port detected [ 441.554940][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 441.815487][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.815544][ T5915] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.815861][ T5915] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 441.816277][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.947937][ T5915] usb 5-1: config 0 descriptor?? [ 444.727382][ T6915] usb 5-1: USB disconnect, device number 15 [ 445.239218][ T6915] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 445.387011][ T6915] usb 5-1: Using ep0 maxpacket: 16 [ 445.388840][ T6915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.388880][ T6915] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.388896][ T6915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.388917][ T6915] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 445.388930][ T6915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.396491][ T6915] usb 5-1: config 0 descriptor?? [ 445.475502][ T6915] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 448.297441][ T5804] usb 5-1: USB disconnect, device number 16 [ 449.763573][ T8357] hub 9-0:1.0: USB hub found [ 449.766238][ T8357] hub 9-0:1.0: 1 port detected [ 452.798587][ T8365] usb usb8: usbfs: process 8365 (syz.3.672) did not claim interface 0 before use [ 453.457534][ T8374] fuse: Unknown parameter 'euid<00000000000000000000' [ 453.458992][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 453.486691][ T1842] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 453.654567][ T1842] usb 2-1: Using ep0 maxpacket: 16 [ 453.660272][ T1842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.660326][ T1842] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.660343][ T1842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 453.660365][ T1842] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 453.660378][ T1842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.740610][ T1842] usb 2-1: config 0 descriptor?? [ 453.755339][ T1842] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 455.463081][ T8387] syzkaller0: entered promiscuous mode [ 455.472953][ T8387] syzkaller0: entered allmulticast mode [ 456.124466][ T8394] libceph: resolve '0..' (ret=-3): failed [ 456.210103][ T8398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.210121][ T8398] IPv6: NLM_F_CREATE should be set when creating new route [ 456.210255][ T8398] IPv6: NLM_F_CREATE should be set when creating new route [ 456.210800][ T8398] IPv6: NLM_F_CREATE should be set when creating new route [ 456.581138][ T5804] usb 2-1: USB disconnect, device number 27 [ 456.944636][ T8399] hub 9-0:1.0: USB hub found [ 456.955536][ T8399] hub 9-0:1.0: 1 port detected [ 460.781666][ T8446] usb usb8: usbfs: process 8446 (syz.5.694) did not claim interface 0 before use [ 461.485578][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 461.677479][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 461.679727][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.679763][ T9] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.679779][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 461.679801][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 461.679814][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.699882][ T9] usb 3-1: config 0 descriptor?? [ 461.764739][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 462.546403][ T8458] libceph: resolve '0..' (ret=-3): failed [ 464.263915][ T8466] hub 9-0:1.0: USB hub found [ 464.266045][ T8466] hub 9-0:1.0: 1 port detected [ 464.495507][ T5804] usb 3-1: USB disconnect, device number 20 [ 464.866797][ T8477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.174572][ T6915] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 465.333565][ T6915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 465.333598][ T6915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.333619][ T6915] usb 2-1: Product: syz [ 465.333633][ T6915] usb 2-1: Manufacturer: syz [ 465.333648][ T6915] usb 2-1: SerialNumber: syz [ 465.334739][ T5804] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 465.401285][ T6915] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 465.423005][ T48] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 465.520496][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.547573][ T5804] usb 3-1: not running at top speed; connect to a high speed hub [ 465.554833][ T5804] usb 3-1: config 7 has an invalid interface number: 7 but max is 0 [ 465.554930][ T5804] usb 3-1: config 7 has no interface number 0 [ 465.554962][ T5804] usb 3-1: config 7 interface 7 has no altsetting 0 [ 465.602407][ T5804] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=a7.4e [ 465.602659][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.602683][ T5804] usb 3-1: Product: syz [ 465.602816][ T5804] usb 3-1: Manufacturer: syz [ 465.602832][ T5804] usb 3-1: SerialNumber: syz [ 466.029433][ T5804] gspca_main: spca505-2.14.0 probing 0733:0430 [ 466.038219][ T5804] gspca_spca505: reg write: error -71 [ 466.038387][ T5804] spca505 3-1:7.7: probe with driver spca505 failed with error -5 [ 466.049411][ T5804] usb 3-1: USB disconnect, device number 21 [ 466.064963][ T5884] usb 2-1: USB disconnect, device number 28 [ 466.352040][ T8486] syzkaller0: entered promiscuous mode [ 466.352059][ T8486] syzkaller0: entered allmulticast mode [ 466.717899][ T48] usb 2-1: Service connection timeout for: 256 [ 466.717925][ T48] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 466.719043][ T48] ath9k_htc: Failed to initialize the device [ 466.724209][ T5884] usb 2-1: ath9k_htc: USB layer deinitialized [ 467.322744][ T8498] usb usb8: usbfs: process 8498 (syz.1.709) did not claim interface 0 before use [ 467.922911][ T8503] netlink: 132 bytes leftover after parsing attributes in process `syz.5.711'. [ 469.819704][ T8510] hub 9-0:1.0: USB hub found [ 469.820162][ T8510] hub 9-0:1.0: 1 port detected [ 470.434621][ T5884] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 470.549604][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.715'. [ 470.588164][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 470.591054][ T5884] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 470.591087][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.690798][ T5884] usb 2-1: selecting invalid altsetting 3 [ 470.690815][ T5884] comedi comedi5: could not set alternate setting 3 in high speed [ 470.690824][ T5884] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 470.744102][ T5884] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 471.197208][ T8523] libceph: resolve '0..' (ret=-3): failed [ 471.293515][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.297439][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.126562][ T8539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.126581][ T8539] IPv6: NLM_F_CREATE should be set when creating new route [ 473.126637][ T8539] IPv6: NLM_F_CREATE should be set when creating new route [ 473.126667][ T8539] IPv6: NLM_F_CREATE should be set when creating new route [ 473.167593][ T8537] syzkaller0: entered promiscuous mode [ 473.167622][ T8537] syzkaller0: entered allmulticast mode [ 473.531175][ T5884] usb 2-1: USB disconnect, device number 29 [ 473.954566][ T5884] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 474.075194][ T8549] usb usb8: usbfs: process 8549 (syz.5.723) did not claim interface 0 before use [ 474.114852][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 474.117368][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.117391][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.117414][ T5884] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 474.117427][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.151974][ T5884] usb 2-1: config 0 descriptor?? [ 474.783684][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 474.783820][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 474.858899][ T5884] usb 2-1: USB disconnect, device number 30 [ 476.554568][ T5884] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 476.706299][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 476.709059][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.709084][ T5884] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.709124][ T5884] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 476.709147][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.793473][ T5884] usb 3-1: config 0 descriptor?? [ 478.295301][ T8581] syzkaller0: entered promiscuous mode [ 478.295330][ T8581] syzkaller0: entered allmulticast mode [ 478.589655][ T8587] libceph: resolve '0..' (ret=-3): failed [ 479.605075][ T5884] usb 3-1: USB disconnect, device number 22 [ 479.998968][ T8597] usb usb8: usbfs: process 8597 (syz.2.738) did not claim interface 0 before use [ 480.454629][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'. [ 480.574878][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 480.744814][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 480.771453][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.771475][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.771499][ T5884] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 480.771513][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.896416][ T5884] usb 5-1: config 0 descriptor?? [ 481.731302][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 481.731387][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 481.781227][ T5884] usb 5-1: USB disconnect, device number 17 [ 482.314691][ T5804] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 482.485220][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 482.488462][ T5804] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 482.489935][ T5804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.489960][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.489985][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.490009][ T5804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.490054][ T5804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.490077][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.918728][ T5804] usb 4-1: usb_control_msg returned -32 [ 482.918786][ T5804] usbtmc 4-1:16.0: can't read capabilities [ 484.214694][ T5804] usb 4-1: USB disconnect, device number 25 [ 484.345641][ T8624] syzkaller0: entered promiscuous mode [ 484.345669][ T8624] syzkaller0: entered allmulticast mode [ 485.798532][ T8645] libceph: resolve '0..' (ret=-3): failed [ 487.684561][ T1842] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 488.684560][ T1842] usb 4-1: Using ep0 maxpacket: 32 [ 488.687065][ T1842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.687098][ T1842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.687138][ T1842] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 488.687163][ T1842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.612645][ T1842] usb 4-1: config 0 descriptor?? [ 489.830851][ T1842] usb 4-1: can't set config #0, error -71 [ 489.846330][ T1842] usb 4-1: USB disconnect, device number 26 [ 493.324657][ T5804] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 493.477682][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 493.481841][ T5804] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 493.481903][ T5804] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.481926][ T5804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.481949][ T5804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.481970][ T5804] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.482002][ T5804] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.482016][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.790635][ T5804] usb 2-1: usb_control_msg returned -32 [ 493.790687][ T5804] usbtmc 2-1:16.0: can't read capabilities [ 493.882500][ T5804] usb 2-1: USB disconnect, device number 31 [ 498.357481][ T8721] libceph: resolve '0..' (ret=-3): failed [ 499.253503][ T8729] hub 9-0:1.0: USB hub found [ 499.263642][ T8729] hub 9-0:1.0: 1 port detected [ 502.445996][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.446043][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.280464][ T8761] syz.2.788 uses obsolete (PF_INET,SOCK_PACKET) [ 506.341641][ T8767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.748152][ T8773] libceph: resolve '0..' (ret=-3): failed [ 509.920278][ T8800] hub 9-0:1.0: USB hub found [ 509.924802][ T8800] hub 9-0:1.0: 1 port detected [ 512.714620][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 512.886827][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 512.888703][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.888738][ T9] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.888752][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.888773][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 512.888789][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.961596][ T9] usb 5-1: config 0 descriptor?? [ 512.971991][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 513.626900][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 514.924766][ T5804] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 514.980705][ T48] usb 5-1: USB disconnect, device number 18 [ 515.081231][ T5804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 515.081255][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 515.081267][ T5804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 515.084151][ T5804] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 515.084180][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.084199][ T5804] usb 4-1: Product: syz [ 515.084213][ T5804] usb 4-1: Manufacturer: syz [ 515.084227][ T5804] usb 4-1: SerialNumber: syz [ 515.110169][ T5804] usb 4-1: config 0 descriptor?? [ 515.116136][ T8818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 516.362271][ T8832] libceph: resolve '0..' (ret=-3): failed [ 516.550338][ T5883] usb 4-1: USB disconnect, device number 27 [ 516.856464][ T8839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.856482][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 516.856534][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 516.856566][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 518.548495][ T8846] hub 9-0:1.0: USB hub found [ 518.551540][ T8846] hub 9-0:1.0: 1 port detected [ 524.682038][ T8893] hub 9-0:1.0: USB hub found [ 524.734747][ T8893] hub 9-0:1.0: 1 port detected [ 526.042093][ T8895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.193558][ T8914] libceph: resolve '0..' (ret=-3): failed [ 530.156017][ T8919] fuse: Bad value for 'group_id' [ 530.156032][ T8919] fuse: Bad value for 'group_id' [ 533.079744][ T8934] hub 9-0:1.0: USB hub found [ 533.082466][ T8934] hub 9-0:1.0: 1 port detected [ 535.403063][ T8948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.226051][ T8967] libceph: resolve '0..' (ret=-3): failed [ 539.324671][ T810] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 539.482017][ T810] usb 6-1: Using ep0 maxpacket: 8 [ 539.485302][ T810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.485329][ T810] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.498339][ T810] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 539.498370][ T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.498391][ T810] usb 6-1: Product: syz [ 539.498405][ T810] usb 6-1: Manufacturer: syz [ 539.498420][ T810] usb 6-1: SerialNumber: syz [ 539.651705][ T810] usb 6-1: config 0 descriptor?? [ 540.337101][ T8977] hub 9-0:1.0: USB hub found [ 540.339763][ T8977] hub 9-0:1.0: 1 port detected [ 542.034278][ T5804] usb 6-1: USB disconnect, device number 8 [ 545.914273][ T9007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.914344][ T9007] IPv6: NLM_F_CREATE should be set when creating new route [ 545.915652][ T9007] IPv6: NLM_F_CREATE should be set when creating new route [ 545.915815][ T9007] IPv6: NLM_F_CREATE should be set when creating new route [ 548.366441][ T9022] hub 9-0:1.0: USB hub found [ 548.369718][ T9022] hub 9-0:1.0: 1 port detected [ 549.714643][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 549.864571][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 549.871427][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 549.882230][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 549.882306][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.882344][ T9] usb 4-1: Product: syz [ 549.882375][ T9] usb 4-1: Manufacturer: syz [ 549.882406][ T9] usb 4-1: SerialNumber: syz [ 549.971619][ T9] usb 4-1: config 0 descriptor?? [ 550.939065][ T9042] libceph: resolve '0..' (ret=-3): failed [ 552.512883][ T6915] usb 4-1: USB disconnect, device number 28 [ 553.364659][ T810] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 553.685702][ T9070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.708515][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 554.708552][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.708575][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 554.767940][ T810] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 554.767973][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.767993][ T810] usb 4-1: Product: syz [ 554.768009][ T810] usb 4-1: Manufacturer: syz [ 554.768024][ T810] usb 4-1: SerialNumber: syz [ 554.812657][ T810] usb 4-1: config 0 descriptor?? [ 554.821440][ T9065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 555.049599][ T5883] usb 4-1: USB disconnect, device number 29 [ 555.434608][ T810] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 555.627072][ T810] usb 6-1: Using ep0 maxpacket: 16 [ 555.630997][ T810] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.631026][ T810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 555.631060][ T810] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 555.631074][ T810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.708284][ T810] usb 6-1: config 0 descriptor?? [ 555.753913][ T810] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 558.434153][ T6915] usb 6-1: USB disconnect, device number 9 [ 559.008699][ T9111] libceph: resolve '0..' (ret=-3): failed [ 561.464536][ T6915] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 561.627519][ T6915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 561.627542][ T6915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 561.627554][ T6915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 561.629585][ T6915] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 561.629603][ T6915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.629614][ T6915] usb 2-1: Product: syz [ 561.629622][ T6915] usb 2-1: Manufacturer: syz [ 561.629630][ T6915] usb 2-1: SerialNumber: syz [ 561.710037][ T6915] usb 2-1: config 0 descriptor?? [ 561.711216][ T9121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 561.960567][ T6915] usb 2-1: USB disconnect, device number 32 [ 563.187722][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.187822][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.464855][ T9134] fuse: Unknown parameter 'euid<00000000000000000000' [ 563.466155][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 563.704634][ T5883] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 563.894518][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 563.900222][ T5883] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.900254][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 563.900291][ T5883] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 563.900315][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.959134][ T5883] usb 3-1: config 0 descriptor?? [ 563.983549][ T5883] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 564.294974][ T9152] netlink: 810 bytes leftover after parsing attributes in process `syz.5.890'. [ 564.295724][ T9152] ======================================================= [ 564.295724][ T9152] WARNING: The mand mount option has been deprecated and [ 564.295724][ T9152] and is ignored by this kernel. Remove the mand [ 564.295724][ T9152] option from the mount to silence this warning. [ 564.295724][ T9152] ======================================================= [ 564.363244][ T6915] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 564.709130][ T6915] usb 4-1: Using ep0 maxpacket: 8 [ 564.712108][ T6915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.791737][ T6915] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 564.791769][ T6915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.791788][ T6915] usb 4-1: Product: syz [ 564.791798][ T6915] usb 4-1: Manufacturer: syz [ 564.791805][ T6915] usb 4-1: SerialNumber: syz [ 564.807455][ T6915] usb 4-1: config 0 descriptor?? [ 567.214673][ T6915] usb 4-1: USB disconnect, device number 30 [ 567.269324][ T9] usb 3-1: USB disconnect, device number 23 [ 567.384805][ T9178] libceph: resolve '0..' (ret=-3): failed [ 568.913381][ T9192] hub 9-0:1.0: USB hub found [ 568.913809][ T9192] hub 9-0:1.0: 1 port detected [ 571.465356][ T9205] netlink: 810 bytes leftover after parsing attributes in process `syz.5.909'. [ 574.862969][ T9228] syz.4.913 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 574.863011][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.4.913 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.863035][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.863055][ T9228] Call Trace: [ 574.863064][ T9228] [ 574.863073][ T9228] dump_stack_lvl+0xe8/0x150 [ 574.863112][ T9228] dump_header+0xd3/0x4c0 [ 574.863142][ T9228] oom_kill_process+0x3ab/0x970 [ 574.863176][ T9228] out_of_memory+0x106c/0x1410 [ 574.863219][ T9228] ? __pfx_out_of_memory+0x10/0x10 [ 574.863245][ T9228] ? lockdep_hardirqs_on+0x7a/0x110 [ 574.863276][ T9228] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 574.863304][ T9228] ? _mutex_lock_killable+0x152/0x1d0 [ 574.863328][ T9228] ? try_charge_memcg+0xbca/0x1630 [ 574.863365][ T9228] try_charge_memcg+0xc92/0x1630 [ 574.863403][ T9228] ? __lock_acquire+0x6b5/0x2cf0 [ 574.863438][ T9228] ? __pfx_try_charge_memcg+0x10/0x10 [ 574.863495][ T9228] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 574.863531][ T9228] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 574.863567][ T9228] __swap_cache_prepare_and_add+0x53b/0x710 [ 574.863617][ T9228] swap_cache_alloc_folio+0xf1/0x240 [ 574.863649][ T9228] swap_cluster_readahead+0x53a/0x690 [ 574.863684][ T9228] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 574.863710][ T9228] ? do_raw_spin_lock+0x12b/0x2f0 [ 574.863754][ T9228] ? get_vma_policy+0x27b/0x3c0 [ 574.863781][ T9228] swapin_readahead+0x196/0xc50 [ 574.863820][ T9228] ? swap_table_get+0x1e/0x260 [ 574.863846][ T9228] ? __pfx_swapin_readahead+0x10/0x10 [ 574.863878][ T9228] ? swap_table_get+0x1e/0x260 [ 574.863903][ T9228] ? swap_table_get+0x1e/0x260 [ 574.863926][ T9228] ? swap_table_get+0x1e/0x260 [ 574.863953][ T9228] ? swap_table_get+0x219/0x260 [ 574.863980][ T9228] ? swap_cache_get_folio+0x500/0x510 [ 574.864014][ T9228] do_swap_page+0x516/0x4670 [ 574.864071][ T9228] ? __pte_offset_map+0x178/0x200 [ 574.864105][ T9228] ? do_swap_page+0xcd/0x4670 [ 574.864130][ T9228] ? pte_offset_map_rw_nolock+0xea/0x160 [ 574.864163][ T9228] handle_mm_fault+0xad2/0x13c0 [ 574.864202][ T9228] ? handle_mm_fault+0xe7/0x13c0 [ 574.864236][ T9228] ? __pfx_handle_mm_fault+0x10/0x10 [ 574.864265][ T9228] ? lock_vma_under_rcu+0x45a/0x500 [ 574.864286][ T9228] ? __pfx_do_futex+0x10/0x10 [ 574.864334][ T9228] do_user_addr_fault+0xa73/0x1340 [ 574.864378][ T9228] ? rcu_is_watching+0x15/0xb0 [ 574.864401][ T9228] ? trace_page_fault_user+0x84/0x210 [ 574.864429][ T9228] exc_page_fault+0x6a/0xc0 [ 574.864461][ T9228] asm_exc_page_fault+0x26/0x30 [ 574.864482][ T9228] RIP: 0033:0x7f5f35e8c7b2 [ 574.864502][ T9228] Code: d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 54 41 89 d4 55 48 89 [ 574.864520][ T9228] RSP: 002b:00007ffd5ff19558 EFLAGS: 00010286 [ 574.864541][ T9228] RAX: ffffffffffffffff RBX: 000000000008c294 RCX: ffffffffffffffe8 [ 574.864556][ T9228] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5f36105fac [ 574.864569][ T9228] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 574.864583][ T9228] R10: 00007ffd5ff19660 R11: 0000000000000246 R12: 00007ffd5ff19680 [ 574.864597][ T9228] R13: 00007f5f36105fac R14: 000000000008c2c6 R15: 00007ffd5ff19660 [ 574.864634][ T9228] [ 574.864886][ T9228] memory: usage 307200kB, limit 307200kB, failcnt 2252 [ 574.864900][ T9228] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 574.864912][ T9228] kmem: usage 306888kB, limit 9007199254740988kB, failcnt 0 [ 574.864924][ T9228] Memory cgroup stats for /syz4: [ 574.865703][ T9228] cache 229376 [ 574.865714][ T9228] rss 86016 [ 574.865721][ T9228] shmem 0 [ 574.865728][ T9228] mapped_file 0 [ 574.865735][ T9228] dirty 0 [ 574.865741][ T9228] writeback 0 [ 574.865749][ T9228] workingset_refault_anon 204 [ 574.865756][ T9228] workingset_refault_file 55 [ 574.865764][ T9228] swap 106496 [ 574.865771][ T9228] swapcached 9969664 [ 574.865778][ T9228] pgpgin 370681 [ 574.865785][ T9228] pgpgout 370603 [ 574.865792][ T9228] pgfault 267960 [ 574.865798][ T9228] pgmajfault 33 [ 574.865805][ T9228] inactive_anon 12288 [ 574.865812][ T9228] active_anon 0 [ 574.865819][ T9228] inactive_file 229376 [ 574.865827][ T9228] active_file 0 [ 574.865834][ T9228] unevictable 0 [ 574.865841][ T9228] hierarchical_memory_limit 314572800 [ 574.865850][ T9228] hierarchical_memsw_limit 9223372036854771712 [ 574.865858][ T9228] total_cache 229376 [ 574.865866][ T9228] total_rss 86016 [ 574.865873][ T9228] total_shmem 0 [ 574.865879][ T9228] total_mapped_file 0 [ 574.865887][ T9228] total_dirty 0 [ 574.865894][ T9228] total_writeback 0 [ 574.865901][ T9228] total_workingset_refault_anon 204 [ 574.865909][ T9228] total_workingset_refault_file 55 [ 574.865917][ T9228] total_swap 106496 [ 574.865923][ T9228] total_swapcached 9969664 [ 574.865931][ T9228] total_pgpgin 370681 [ 574.865938][ T9228] total_pgpgout 370603 [ 574.865945][ T9228] total_pgfault 267960 [ 574.865952][ T9228] total_pgmajfault 33 [ 574.865960][ T9228] total_inactive_anon 12288 [ 574.865967][ T9228] total_active_anon 0 [ 574.865975][ T9228] total_inactive_file 229376 [ 574.865982][ T9228] total_active_file 0 [ 574.865990][ T9228] total_unevictable 0 [ 574.865997][ T9228] anon_cost 0 [ 574.866004][ T9228] file_cost 19 [ 574.866012][ T9228] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.913,pid=9228,uid=0 [ 574.866671][ T9228] Memory cgroup out of memory: Killed process 9228 (syz.4.913) total-vm:102228kB, anon-rss:1316kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 574.954618][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 575.404583][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 575.430931][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 575.430964][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.430984][ T9] usb 4-1: Product: syz [ 575.430998][ T9] usb 4-1: Manufacturer: syz [ 575.431013][ T9] usb 4-1: SerialNumber: syz [ 575.606257][ T9] usb 4-1: config 0 descriptor?? [ 575.819897][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 576.427294][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 576.466959][ T9] usb 4-1: USB disconnect, device number 31 [ 577.539280][ T9248] libceph: resolve '0..' (ret=-3): failed [ 577.872383][ T9252] hub 9-0:1.0: USB hub found [ 577.879889][ T9252] hub 9-0:1.0: 1 port detected [ 581.778461][ T9266] syz.3.924 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 581.778502][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.3.924 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 581.778524][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.778535][ T9266] Call Trace: [ 581.778542][ T9266] [ 581.778551][ T9266] dump_stack_lvl+0xe8/0x150 [ 581.778586][ T9266] dump_header+0xd3/0x4c0 [ 581.778616][ T9266] oom_kill_process+0x3ab/0x970 [ 581.778647][ T9266] out_of_memory+0x106c/0x1410 [ 581.778689][ T9266] ? __pfx_out_of_memory+0x10/0x10 [ 581.778712][ T9266] ? lockdep_hardirqs_on+0x7a/0x110 [ 581.778740][ T9266] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 581.778773][ T9266] ? _mutex_lock_killable+0x152/0x1d0 [ 581.778797][ T9266] ? try_charge_memcg+0xbca/0x1630 [ 581.778833][ T9266] try_charge_memcg+0xc92/0x1630 [ 581.778869][ T9266] ? __lock_acquire+0x6b5/0x2cf0 [ 581.778901][ T9266] ? __pfx_try_charge_memcg+0x10/0x10 [ 581.778953][ T9266] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 581.778988][ T9266] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 581.779023][ T9266] __swap_cache_prepare_and_add+0x53b/0x710 [ 581.779070][ T9266] swap_cache_alloc_folio+0xf1/0x240 [ 581.779102][ T9266] swap_cluster_readahead+0x53a/0x690 [ 581.779137][ T9266] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 581.779163][ T9266] ? do_raw_spin_lock+0x12b/0x2f0 [ 581.779206][ T9266] ? get_vma_policy+0x27b/0x3c0 [ 581.779231][ T9266] swapin_readahead+0x196/0xc50 [ 581.779269][ T9266] ? swap_table_get+0x1e/0x260 [ 581.779295][ T9266] ? __pfx_swapin_readahead+0x10/0x10 [ 581.779335][ T9266] ? swap_table_get+0x1e/0x260 [ 581.779359][ T9266] ? swap_table_get+0x1e/0x260 [ 581.779381][ T9266] ? swap_table_get+0x1e/0x260 [ 581.779406][ T9266] ? swap_table_get+0x219/0x260 [ 581.779432][ T9266] ? swap_cache_get_folio+0x500/0x510 [ 581.779466][ T9266] do_swap_page+0x516/0x4670 [ 581.779511][ T9266] ? __pte_offset_map+0x178/0x200 [ 581.779543][ T9266] ? do_swap_page+0xcd/0x4670 [ 581.779566][ T9266] ? pte_offset_map_rw_nolock+0xea/0x160 [ 581.779599][ T9266] handle_mm_fault+0xad2/0x13c0 [ 581.779637][ T9266] ? handle_mm_fault+0xe7/0x13c0 [ 581.779671][ T9266] ? __pfx_handle_mm_fault+0x10/0x10 [ 581.779699][ T9266] ? lock_vma_under_rcu+0x45a/0x500 [ 581.779720][ T9266] ? __pfx_do_futex+0x10/0x10 [ 581.779769][ T9266] do_user_addr_fault+0xa73/0x1340 [ 581.779807][ T9266] ? rcu_is_watching+0x15/0xb0 [ 581.779831][ T9266] ? trace_page_fault_user+0x84/0x210 [ 581.779862][ T9266] exc_page_fault+0x6a/0xc0 [ 581.779894][ T9266] asm_exc_page_fault+0x26/0x30 [ 581.779914][ T9266] RIP: 0033:0x7f3c809db660 [ 581.779935][ T9266] Code: c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 fe 7f 07 c5 fe 7f 4f 20 [ 581.779953][ T9266] RSP: 002b:00007fffbaa5b158 EFLAGS: 00010202 [ 581.779973][ T9266] RAX: 0000200000000300 RBX: 0000000000000004 RCX: 007265636e657571 [ 581.779989][ T9266] RDX: 000000000000000f RSI: 7165732f7665642f RDI: 0000200000000300 [ 581.780003][ T9266] RBP: fffffffffffffffe R08: 0000001b2e220000 R09: 0000000000000001 [ 581.780017][ T9266] R10: 7ffffffffffffff0 R11: 0000000000000009 R12: 00007fffbaa5b280 [ 581.780031][ T9266] R13: 00007f3c80c85fac R14: 000000000008da13 R15: 00007fffbaa5b260 [ 581.780066][ T9266] [ 581.780075][ T9266] memory: usage 307200kB, limit 307200kB, failcnt 2301 [ 581.780090][ T9266] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 581.780104][ T9266] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 581.780117][ T9266] Memory cgroup stats for /syz3: [ 581.780242][ T9266] cache 24576 [ 581.780252][ T9266] rss 12288 [ 581.780259][ T9266] shmem 0 [ 581.780266][ T9266] mapped_file 0 [ 581.780273][ T9266] dirty 0 [ 581.780280][ T9266] writeback 0 [ 581.780287][ T9266] workingset_refault_anon 24 [ 581.780295][ T9266] workingset_refault_file 5 [ 581.780302][ T9266] swap 163840 [ 581.780320][ T9266] swapcached 397312 [ 581.780327][ T9266] pgpgin 215198 [ 581.780341][ T9266] pgpgout 215181 [ 581.780348][ T9266] pgfault 208545 [ 581.780355][ T9266] pgmajfault 14 [ 581.780362][ T9266] inactive_anon 16384 [ 581.780369][ T9266] active_anon 24576 [ 581.780376][ T9266] inactive_file 24576 [ 581.780383][ T9266] active_file 0 [ 581.780391][ T9266] unevictable 0 [ 581.780398][ T9266] hierarchical_memory_limit 314572800 [ 581.780406][ T9266] hierarchical_memsw_limit 9223372036854771712 [ 581.780415][ T9266] total_cache 24576 [ 581.780422][ T9266] total_rss 12288 [ 581.780429][ T9266] total_shmem 0 [ 581.780436][ T9266] total_mapped_file 0 [ 581.780443][ T9266] total_dirty 0 [ 581.780450][ T9266] total_writeback 0 [ 581.780457][ T9266] total_workingset_refault_anon 24 [ 581.780465][ T9266] total_workingset_refault_file 5 [ 581.780473][ T9266] total_swap 163840 [ 581.780480][ T9266] total_swapcached 397312 [ 581.780488][ T9266] total_pgpgin 215198 [ 581.780497][ T9266] total_pgpgout 215181 [ 581.780504][ T9266] total_pgfault 208545 [ 581.780511][ T9266] total_pgmajfault 14 [ 581.780519][ T9266] total_inactive_anon 16384 [ 581.780526][ T9266] total_active_anon 24576 [ 581.780534][ T9266] total_inactive_file 24576 [ 581.780542][ T9266] total_active_file 0 [ 581.780550][ T9266] total_unevictable 0 [ 581.780557][ T9266] anon_cost 1 [ 581.780565][ T9266] file_cost 3 [ 581.780573][ T9266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.924,pid=9266,uid=0 [ 581.780713][ T9266] Memory cgroup out of memory: Killed process 9266 (syz.3.924) total-vm:102228kB, anon-rss:1244kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 582.366170][ T9282] fuse: Unknown parameter 'group_i00000000000000000000' [ 582.454689][ T1842] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 582.790650][ T9287] netlink: 'syz.2.931': attribute type 4 has an invalid length. [ 583.034607][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 583.208939][ T1842] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.208960][ T1842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.208971][ T1842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.209011][ T1842] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.211724][ T1842] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.211743][ T1842] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 583.211755][ T1842] usb 2-1: Product: syz [ 583.211763][ T1842] usb 2-1: Manufacturer: syz [ 583.278210][ T1842] cdc_wdm 2-1:1.0: skipping garbage [ 583.278230][ T1842] cdc_wdm 2-1:1.0: skipping garbage [ 583.335761][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 583.343845][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 583.343871][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.343883][ T9] usb 6-1: Product: syz [ 583.343891][ T9] usb 6-1: Manufacturer: syz [ 583.343900][ T9] usb 6-1: SerialNumber: syz [ 583.351880][ T1842] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 583.351900][ T1842] cdc_wdm 2-1:1.0: Unknown control protocol [ 583.363873][ T9] usb 6-1: config 0 descriptor?? [ 583.486515][ T1842] usb 2-1: USB disconnect, device number 33 [ 583.609274][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 583.985536][ T5804] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 584.092816][ T9291] netlink: 810 bytes leftover after parsing attributes in process `syz.4.928'. [ 584.160444][ T5804] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.160477][ T5804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.160496][ T5804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.160544][ T5804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.205549][ T5804] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.205584][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.205605][ T5804] usb 2-1: Product: syz [ 584.205620][ T5804] usb 2-1: Manufacturer: syz [ 584.214449][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 584.217817][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 584.218089][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 584.321962][ T5804] cdc_wdm 2-1:1.0: skipping garbage [ 584.321986][ T5804] cdc_wdm 2-1:1.0: skipping garbage [ 584.322519][ T9] usb 6-1: USB disconnect, device number 10 [ 584.360725][ T5804] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 584.360749][ T5804] cdc_wdm 2-1:1.0: Unknown control protocol [ 585.869545][ T9281] syz.3.930 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 585.869587][ T9281] CPU: 0 UID: 0 PID: 9281 Comm: syz.3.930 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 585.869611][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.869624][ T9281] Call Trace: [ 585.869632][ T9281] [ 585.869642][ T9281] dump_stack_lvl+0xe8/0x150 [ 585.869681][ T9281] dump_header+0xd3/0x4c0 [ 585.869713][ T9281] oom_kill_process+0x3ab/0x970 [ 585.869750][ T9281] out_of_memory+0x106c/0x1410 [ 585.869796][ T9281] ? __pfx_out_of_memory+0x10/0x10 [ 585.869834][ T9281] ? lockdep_hardirqs_on+0x7a/0x110 [ 585.869865][ T9281] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 585.869897][ T9281] ? _mutex_lock_killable+0x152/0x1d0 [ 585.869922][ T9281] ? try_charge_memcg+0xbca/0x1630 [ 585.869959][ T9281] try_charge_memcg+0xc92/0x1630 [ 585.869998][ T9281] ? __lock_acquire+0x6b5/0x2cf0 [ 585.870034][ T9281] ? __pfx_try_charge_memcg+0x10/0x10 [ 585.870107][ T9281] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 585.870145][ T9281] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 585.870183][ T9281] __swap_cache_prepare_and_add+0x53b/0x710 [ 585.870237][ T9281] swap_cache_alloc_folio+0xf1/0x240 [ 585.870269][ T9281] swap_cluster_readahead+0x369/0x690 [ 585.870306][ T9281] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 585.870340][ T9281] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.870387][ T9281] ? get_vma_policy+0x27b/0x3c0 [ 585.870413][ T9281] swapin_readahead+0x196/0xc50 [ 585.870452][ T9281] ? swap_table_get+0x1e/0x260 [ 585.870478][ T9281] ? __pfx_swapin_readahead+0x10/0x10 [ 585.870510][ T9281] ? swap_table_get+0x1e/0x260 [ 585.870535][ T9281] ? swap_table_get+0x1e/0x260 [ 585.870558][ T9281] ? swap_table_get+0x1e/0x260 [ 585.870584][ T9281] ? swap_table_get+0x219/0x260 [ 585.870612][ T9281] ? swap_cache_get_folio+0x500/0x510 [ 585.870655][ T9281] do_swap_page+0x516/0x4670 [ 585.870703][ T9281] ? __pte_offset_map+0x178/0x200 [ 585.870736][ T9281] ? do_swap_page+0xcd/0x4670 [ 585.870762][ T9281] ? pte_offset_map_rw_nolock+0xea/0x160 [ 585.870796][ T9281] handle_mm_fault+0xad2/0x13c0 [ 585.870835][ T9281] ? handle_mm_fault+0xe7/0x13c0 [ 585.870873][ T9281] ? __pfx_handle_mm_fault+0x10/0x10 [ 585.870902][ T9281] ? lock_vma_under_rcu+0x45a/0x500 [ 585.870958][ T9281] do_user_addr_fault+0xa73/0x1340 [ 585.870998][ T9281] ? rcu_is_watching+0x15/0xb0 [ 585.871022][ T9281] ? trace_page_fault_user+0x84/0x210 [ 585.871055][ T9281] exc_page_fault+0x6a/0xc0 [ 585.871087][ T9281] asm_exc_page_fault+0x26/0x30 [ 585.871108][ T9281] RIP: 0033:0x7f3c809d0f04 [ 585.871130][ T9281] Code: 60 08 00 00 eb 11 8b 32 48 83 c2 04 85 f6 0f 85 c8 00 00 00 83 c0 01 89 c7 83 f8 03 76 e8 49 8b 70 60 48 8b 46 08 48 83 e0 f8 <49> 39 80 88 08 00 00 0f 82 4b 02 00 00 48 8d 53 20 48 39 d0 0f 83 [ 585.871148][ T9281] RSP: 002b:00007fffbaa5aef0 EFLAGS: 00010206 [ 585.871168][ T9281] RAX: 0000000000020500 RBX: 0000000000000120 RCX: 000000000007ffff [ 585.871184][ T9281] RDX: 00007f3c80c5d690 RSI: 0000555568435b00 RDI: 0000000000000004 [ 585.871198][ T9281] RBP: 0000000000000010 R08: 00007f3c80c5ce20 R09: 0000000000000001 [ 585.871212][ T9281] R10: 0000000000021000 R11: 0000000000000000 R12: 0000000000000110 [ 585.871225][ T9281] R13: 0000000000000000 R14: 00007f3c80c5ce80 R15: 0000000000000120 [ 585.871263][ T9281] [ 585.871271][ T9281] memory: usage 307196kB, limit 307200kB, failcnt 2831 [ 585.871285][ T9281] memory+swap: usage 307316kB, limit 9007199254740988kB, failcnt 0 [ 585.871300][ T9281] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 585.871314][ T9281] Memory cgroup stats for /syz3: [ 585.871454][ T9281] cache 0 [ 585.871464][ T9281] rss 0 [ 585.871471][ T9281] shmem 0 [ 585.871478][ T9281] mapped_file 0 [ 585.871486][ T9281] dirty 0 [ 585.871493][ T9281] writeback 0 [ 585.871501][ T9281] workingset_refault_anon 157 [ 585.871509][ T9281] workingset_refault_file 153 [ 585.871517][ T9281] swap 122880 [ 585.871525][ T9281] swapcached 495616 [ 585.871532][ T9281] pgpgin 215521 [ 585.871539][ T9281] pgpgout 215503 [ 585.871547][ T9281] pgfault 208752 [ 585.871555][ T9281] pgmajfault 120 [ 585.871562][ T9281] inactive_anon 73728 [ 585.871570][ T9281] active_anon 0 [ 585.871577][ T9281] inactive_file 0 [ 585.871585][ T9281] active_file 0 [ 585.871593][ T9281] unevictable 0 [ 585.871600][ T9281] hierarchical_memory_limit 314572800 [ 585.871609][ T9281] hierarchical_memsw_limit 9223372036854771712 [ 585.871617][ T9281] total_cache 0 [ 585.871624][ T9281] total_rss 0 [ 585.871632][ T9281] total_shmem 0 [ 585.871639][ T9281] total_mapped_file 0 [ 585.871647][ T9281] total_dirty 0 [ 585.871655][ T9281] total_writeback 0 [ 585.871663][ T9281] total_workingset_refault_anon 157 [ 585.871671][ T9281] total_workingset_refault_file 153 [ 585.871679][ T9281] total_swap 122880 [ 585.871687][ T9281] total_swapcached 495616 [ 585.871695][ T9281] total_pgpgin 215521 [ 585.871703][ T9281] total_pgpgout 215503 [ 585.871711][ T9281] total_pgfault 208752 [ 585.871719][ T9281] total_pgmajfault 120 [ 585.871727][ T9281] total_inactive_anon 73728 [ 585.871735][ T9281] total_active_anon 0 [ 585.871742][ T9281] total_inactive_file 0 [ 585.871751][ T9281] total_active_file 0 [ 585.871758][ T9281] total_unevictable 0 [ 585.871766][ T9281] anon_cost 42 [ 585.871773][ T9281] file_cost 0 [ 585.871781][ T9281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.930,pid=9281,uid=0 [ 586.136404][ T5804] usb 2-1: USB disconnect, device number 34 [ 586.158293][ T9281] Memory cgroup out of memory: Killed process 9281 (syz.3.930) total-vm:102360kB, anon-rss:1236kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 588.703002][ T9314] syz.3.937 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 588.703030][ T9314] CPU: 0 UID: 0 PID: 9314 Comm: syz.3.937 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 588.703044][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.703051][ T9314] Call Trace: [ 588.703056][ T9314] [ 588.703062][ T9314] dump_stack_lvl+0xe8/0x150 [ 588.703084][ T9314] dump_header+0xd3/0x4c0 [ 588.703102][ T9314] oom_kill_process+0x3ab/0x970 [ 588.703121][ T9314] out_of_memory+0x106c/0x1410 [ 588.703145][ T9314] ? __pfx_out_of_memory+0x10/0x10 [ 588.703159][ T9314] ? lockdep_hardirqs_on+0x7a/0x110 [ 588.703176][ T9314] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 588.703194][ T9314] ? _mutex_lock_killable+0x152/0x1d0 [ 588.703215][ T9314] ? try_charge_memcg+0xbca/0x1630 [ 588.703235][ T9314] try_charge_memcg+0xc92/0x1630 [ 588.703263][ T9314] ? __pfx_try_charge_memcg+0x10/0x10 [ 588.703285][ T9314] ? percpu_ref_tryget+0x15/0x180 [ 588.703304][ T9314] ? __memcg_kmem_charge_page+0x11f/0x460 [ 588.703323][ T9314] __memcg_kmem_charge_page+0x2dd/0x460 [ 588.703339][ T9314] ? __memcg_kmem_charge_page+0x11f/0x460 [ 588.703356][ T9314] memcg_charge_kernel_stack+0x2f5/0x4e0 [ 588.703369][ T9314] ? dup_task_struct+0x1a7/0x9a0 [ 588.703387][ T9314] dup_task_struct+0x1c7/0x9a0 [ 588.703403][ T9314] ? rt_spin_unlock+0x160/0x200 [ 588.703419][ T9314] copy_process+0x508/0x3cd0 [ 588.703452][ T9314] ? __pfx_copy_process+0x10/0x10 [ 588.703470][ T9314] ? __asan_memset+0x22/0x50 [ 588.703489][ T9314] kernel_clone+0x249/0x840 [ 588.703507][ T9314] ? __pfx_kernel_clone+0x10/0x10 [ 588.703536][ T9314] __se_sys_clone3+0x33c/0x360 [ 588.703550][ T9314] ? __pfx___se_sys_clone3+0x10/0x10 [ 588.703571][ T9314] ? _copy_to_user+0x8a/0xb0 [ 588.703596][ T9314] ? do_user_addr_fault+0xc6f/0x1340 [ 588.703620][ T9314] do_syscall_64+0x14d/0xf80 [ 588.703635][ T9314] ? trace_irq_disable+0x3b/0x150 [ 588.703649][ T9314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.703661][ T9314] ? clear_bhb_loop+0x40/0x90 [ 588.703676][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.703688][ T9314] RIP: 0033:0x7f3c80a0d589 [ 588.703701][ T9314] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 588.703711][ T9314] RSP: 002b:00007fffbaa5aeb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 588.703725][ T9314] RAX: ffffffffffffffda RBX: 00007f3c809c8b20 RCX: 00007f3c80a0d589 [ 588.703735][ T9314] RDX: 00007f3c809c8b20 RSI: 0000000000000058 RDI: 00007fffbaa5af10 [ 588.703743][ T9314] RBP: 00007f3c7ec3d6c0 R08: 00007f3c7ec3d6c0 R09: 00007fffbaa5aff7 [ 588.703751][ T9314] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 588.703759][ T9314] R13: 000000000000006e R14: 00007fffbaa5af10 R15: 00007fffbaa5aff8 [ 588.703778][ T9314] [ 588.703783][ T9314] memory: usage 307200kB, limit 307200kB, failcnt 2937 [ 588.703791][ T9314] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 588.703800][ T9314] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 588.703807][ T9314] Memory cgroup stats for /syz3: [ 588.703898][ T9314] cache 0 [ 588.703904][ T9314] rss 45056 [ 588.703908][ T9314] shmem 0 [ 588.703912][ T9314] mapped_file 0 [ 588.703916][ T9314] dirty 0 [ 588.703920][ T9314] writeback 0 [ 588.703924][ T9314] workingset_refault_anon 204 [ 588.703928][ T9314] workingset_refault_file 154 [ 588.703933][ T9314] swap 65536 [ 588.703937][ T9314] swapcached 487424 [ 588.703941][ T9314] pgpgin 215586 [ 588.703945][ T9314] pgpgout 215569 [ 588.703949][ T9314] pgfault 208845 [ 588.703953][ T9314] pgmajfault 147 [ 588.703960][ T9314] inactive_anon 36864 [ 588.703965][ T9314] active_anon 32768 [ 588.703969][ T9314] inactive_file 0 [ 588.703974][ T9314] active_file 0 [ 588.703977][ T9314] unevictable 0 [ 588.703981][ T9314] hierarchical_memory_limit 314572800 [ 588.703986][ T9314] hierarchical_memsw_limit 9223372036854771712 [ 588.703991][ T9314] total_cache 0 [ 588.703995][ T9314] total_rss 45056 [ 588.703999][ T9314] total_shmem 0 [ 588.704003][ T9314] total_mapped_file 0 [ 588.704007][ T9314] total_dirty 0 [ 588.704011][ T9314] total_writeback 0 [ 588.704015][ T9314] total_workingset_refault_anon 204 [ 588.704019][ T9314] total_workingset_refault_file 154 [ 588.704024][ T9314] total_swap 65536 [ 588.704028][ T9314] total_swapcached 487424 [ 588.704032][ T9314] total_pgpgin 215586 [ 588.704036][ T9314] total_pgpgout 215569 [ 588.704040][ T9314] total_pgfault 208845 [ 588.704044][ T9314] total_pgmajfault 147 [ 588.704049][ T9314] total_inactive_anon 36864 [ 588.704053][ T9314] total_active_anon 32768 [ 588.704057][ T9314] total_inactive_file 0 [ 588.704062][ T9314] total_active_file 0 [ 588.704066][ T9314] total_unevictable 0 [ 588.704070][ T9314] anon_cost 170 [ 588.704074][ T9314] file_cost 0 [ 588.704078][ T9314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.937,pid=9314,uid=0 [ 589.336648][ T9314] Memory cgroup out of memory: Killed process 9314 (syz.3.937) total-vm:102360kB, anon-rss:1248kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 590.904792][ T9325] syz.3.941 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 590.904822][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.3.941 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 590.904837][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.904844][ T9325] Call Trace: [ 590.904850][ T9325] [ 590.904855][ T9325] dump_stack_lvl+0xe8/0x150 [ 590.904879][ T9325] dump_header+0xd3/0x4c0 [ 590.904897][ T9325] oom_kill_process+0x3ab/0x970 [ 590.904916][ T9325] out_of_memory+0x106c/0x1410 [ 590.904941][ T9325] ? __pfx_out_of_memory+0x10/0x10 [ 590.904955][ T9325] ? lockdep_hardirqs_on+0x7a/0x110 [ 590.904980][ T9325] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 590.904998][ T9325] ? _mutex_lock_killable+0x152/0x1d0 [ 590.905012][ T9325] ? try_charge_memcg+0xbca/0x1630 [ 590.905031][ T9325] try_charge_memcg+0xc92/0x1630 [ 590.905060][ T9325] ? __pfx_try_charge_memcg+0x10/0x10 [ 590.905082][ T9325] ? percpu_ref_tryget+0x15/0x180 [ 590.905101][ T9325] ? __memcg_kmem_charge_page+0x11f/0x460 [ 590.905120][ T9325] __memcg_kmem_charge_page+0x2dd/0x460 [ 590.905135][ T9325] ? __memcg_kmem_charge_page+0x11f/0x460 [ 590.905153][ T9325] memcg_charge_kernel_stack+0xf2/0x4e0 [ 590.905167][ T9325] ? dup_task_struct+0x1a7/0x9a0 [ 590.905185][ T9325] dup_task_struct+0x1c7/0x9a0 [ 590.905202][ T9325] ? rt_spin_unlock+0x160/0x200 [ 590.905218][ T9325] copy_process+0x508/0x3cd0 [ 590.905251][ T9325] ? __pfx_copy_process+0x10/0x10 [ 590.905270][ T9325] ? __asan_memset+0x22/0x50 [ 590.905289][ T9325] kernel_clone+0x249/0x840 [ 590.905308][ T9325] ? __pfx_kernel_clone+0x10/0x10 [ 590.905337][ T9325] __se_sys_clone3+0x33c/0x360 [ 590.905351][ T9325] ? __pfx___se_sys_clone3+0x10/0x10 [ 590.905373][ T9325] ? _copy_to_user+0x8a/0xb0 [ 590.905399][ T9325] ? do_user_addr_fault+0xc6f/0x1340 [ 590.905422][ T9325] do_syscall_64+0x14d/0xf80 [ 590.905438][ T9325] ? trace_irq_disable+0x3b/0x150 [ 590.905451][ T9325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.905468][ T9325] ? clear_bhb_loop+0x40/0x90 [ 590.905484][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.905495][ T9325] RIP: 0033:0x7f3c80a0d589 [ 590.905508][ T9325] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 590.905519][ T9325] RSP: 002b:00007fffbaa5aeb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 590.905533][ T9325] RAX: ffffffffffffffda RBX: 00007f3c809c8b20 RCX: 00007f3c80a0d589 [ 590.905542][ T9325] RDX: 00007f3c809c8b20 RSI: 0000000000000058 RDI: 00007fffbaa5af10 [ 590.905550][ T9325] RBP: 00007f3c7ec3d6c0 R08: 00007f3c7ec3d6c0 R09: 00007fffbaa5aff7 [ 590.905558][ T9325] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 590.905566][ T9325] R13: 000000000000006e R14: 00007fffbaa5af10 R15: 00007fffbaa5aff8 [ 590.905586][ T9325] [ 590.934955][ T9325] memory: usage 307200kB, limit 307200kB, failcnt 3006 [ 590.935021][ T9325] memory+swap: usage 307264kB, limit 9007199254740988kB, failcnt 0 [ 590.937603][ T9325] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 590.940600][ T9325] Memory cgroup stats for /syz3: [ 591.235780][ T9325] cache 0 [ 591.235792][ T9325] rss 77824 [ 591.235799][ T9325] shmem 0 [ 591.235805][ T9325] mapped_file 0 [ 591.235811][ T9325] dirty 0 [ 591.235817][ T9325] writeback 0 [ 591.235824][ T9325] workingset_refault_anon 218 [ 591.235831][ T9325] workingset_refault_file 154 [ 591.235837][ T9325] swap 45056 [ 591.235844][ T9325] swapcached 442368 [ 591.235850][ T9325] pgpgin 215617 [ 591.235856][ T9325] pgpgout 215598 [ 591.235863][ T9325] pgfault 208904 [ 591.235869][ T9325] pgmajfault 154 [ 591.235876][ T9325] inactive_anon 77824 [ 591.235882][ T9325] active_anon 0 [ 591.235889][ T9325] inactive_file 0 [ 591.235895][ T9325] active_file 0 [ 591.235902][ T9325] unevictable 0 [ 591.235908][ T9325] hierarchical_memory_limit 314572800 [ 591.235915][ T9325] hierarchical_memsw_limit 9223372036854771712 [ 591.235923][ T9325] total_cache 0 [ 591.235929][ T9325] total_rss 77824 [ 591.235936][ T9325] total_shmem 0 [ 591.235942][ T9325] total_mapped_file 0 [ 591.235949][ T9325] total_dirty 0 [ 591.235956][ T9325] total_writeback 0 [ 591.235962][ T9325] total_workingset_refault_anon 218 [ 591.235969][ T9325] total_workingset_refault_file 154 [ 591.235977][ T9325] total_swap 45056 [ 591.235983][ T9325] total_swapcached 442368 [ 591.235990][ T9325] total_pgpgin 215617 [ 591.235997][ T9325] total_pgpgout 215598 [ 591.236003][ T9325] total_pgfault 208904 [ 591.236010][ T9325] total_pgmajfault 154 [ 591.236016][ T9325] total_inactive_anon 77824 [ 591.236032][ T9325] total_active_anon 0 [ 591.236038][ T9325] total_inactive_file 0 [ 591.236045][ T9325] total_active_file 0 [ 591.236051][ T9325] total_unevictable 0 [ 591.236058][ T9325] anon_cost 40 [ 591.236064][ T9325] file_cost 0 [ 591.236071][ T9325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.941,pid=9325,uid=0 [ 591.236217][ T9325] Memory cgroup out of memory: Killed process 9325 (syz.3.941) total-vm:102360kB, anon-rss:1296kB, file-rss:21512kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 591.941914][ T9334] netlink: 'syz.2.942': attribute type 4 has an invalid length. [ 595.005402][ T5799] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 595.005444][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 595.005469][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.005481][ T5799] Call Trace: [ 595.005490][ T5799] [ 595.005500][ T5799] dump_stack_lvl+0xe8/0x150 [ 595.005539][ T5799] dump_header+0xd3/0x4c0 [ 595.005572][ T5799] oom_kill_process+0x3ab/0x970 [ 595.005609][ T5799] out_of_memory+0x106c/0x1410 [ 595.005655][ T5799] ? __pfx_out_of_memory+0x10/0x10 [ 595.005682][ T5799] ? lockdep_hardirqs_on+0x7a/0x110 [ 595.005713][ T5799] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 595.005744][ T5799] ? _mutex_lock_killable+0x152/0x1d0 [ 595.005770][ T5799] ? try_charge_memcg+0xbca/0x1630 [ 595.005807][ T5799] try_charge_memcg+0xc92/0x1630 [ 595.005846][ T5799] ? __lock_acquire+0x6b5/0x2cf0 [ 595.005882][ T5799] ? __pfx_try_charge_memcg+0x10/0x10 [ 595.005941][ T5799] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 595.005989][ T5799] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 595.006028][ T5799] __swap_cache_prepare_and_add+0x53b/0x710 [ 595.006081][ T5799] swap_cache_alloc_folio+0xf1/0x240 [ 595.006114][ T5799] swap_cluster_readahead+0x369/0x690 [ 595.006150][ T5799] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 595.006195][ T5799] ? get_vma_policy+0x27b/0x3c0 [ 595.006220][ T5799] swapin_readahead+0x196/0xc50 [ 595.006250][ T5799] ? __lock_acquire+0x6b5/0x2cf0 [ 595.006278][ T5799] ? swap_table_get+0x1e/0x260 [ 595.006304][ T5799] ? __pfx_swapin_readahead+0x10/0x10 [ 595.006336][ T5799] ? swap_table_get+0x1e/0x260 [ 595.006361][ T5799] ? swap_table_get+0x1e/0x260 [ 595.006382][ T5799] ? swap_table_get+0x1e/0x260 [ 595.006408][ T5799] ? swap_table_get+0x219/0x260 [ 595.006435][ T5799] ? swap_cache_get_folio+0x500/0x510 [ 595.006468][ T5799] do_swap_page+0x516/0x4670 [ 595.006517][ T5799] ? __pte_offset_map+0x178/0x200 [ 595.006551][ T5799] ? do_swap_page+0xcd/0x4670 [ 595.006577][ T5799] ? pte_offset_map_rw_nolock+0xea/0x160 [ 595.006611][ T5799] handle_mm_fault+0xad2/0x13c0 [ 595.006650][ T5799] ? handle_mm_fault+0xe7/0x13c0 [ 595.006685][ T5799] ? __pfx_handle_mm_fault+0x10/0x10 [ 595.006714][ T5799] ? lock_vma_under_rcu+0x45a/0x500 [ 595.006770][ T5799] do_user_addr_fault+0xa73/0x1340 [ 595.006809][ T5799] ? rcu_is_watching+0x15/0xb0 [ 595.006834][ T5799] ? trace_page_fault_user+0x84/0x210 [ 595.006868][ T5799] exc_page_fault+0x6a/0xc0 [ 595.006901][ T5799] asm_exc_page_fault+0x26/0x30 [ 595.006922][ T5799] RIP: 0033:0x7f3c809ccfce [ 595.006944][ T5799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 595.006973][ T5799] RSP: 002b:00007fffbaa5b2d8 EFLAGS: 00010246 [ 595.006994][ T5799] RAX: 0000000000000000 RBX: 0000555568422500 RCX: 00007f3c809ccfce [ 595.007009][ T5799] RDX: 00007fffbaa5b330 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.007023][ T5799] RBP: 00007fffbaa5b39c R08: 0000000000000000 R09: 0000000000000000 [ 595.007037][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 595.007051][ T5799] R13: 00000000000927c0 R14: 00000000000908d6 R15: 00007fffbaa5b3f0 [ 595.007089][ T5799] [ 595.007097][ T5799] memory: usage 307200kB, limit 307200kB, failcnt 3205 [ 595.007112][ T5799] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 595.007126][ T5799] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 595.007139][ T5799] Memory cgroup stats for /syz3: [ 595.007261][ T5799] cache 0 [ 595.007270][ T5799] rss 32768 [ 595.007278][ T5799] shmem 0 [ 595.007285][ T5799] mapped_file 0 [ 595.007293][ T5799] dirty 0 [ 595.007300][ T5799] writeback 0 [ 595.007307][ T5799] workingset_refault_anon 287 [ 595.007316][ T5799] workingset_refault_file 154 [ 595.007323][ T5799] swap 65536 [ 595.007331][ T5799] swapcached 581632 [ 595.007339][ T5799] pgpgin 215705 [ 595.007346][ T5799] pgpgout 215688 [ 595.007354][ T5799] pgfault 209011 [ 595.007361][ T5799] pgmajfault 192 [ 595.007369][ T5799] inactive_anon 24576 [ 595.007376][ T5799] active_anon 0 [ 595.007384][ T5799] inactive_file 0 [ 595.007392][ T5799] active_file 0 [ 595.007399][ T5799] unevictable 0 [ 595.007406][ T5799] hierarchical_memory_limit 314572800 [ 595.007415][ T5799] hierarchical_memsw_limit 9223372036854771712 [ 595.007424][ T5799] total_cache 0 [ 595.007431][ T5799] total_rss 32768 [ 595.007439][ T5799] total_shmem 0 [ 595.007446][ T5799] total_mapped_file 0 [ 595.007454][ T5799] total_dirty 0 [ 595.007461][ T5799] total_writeback 0 [ 595.007469][ T5799] total_workingset_refault_anon 287 [ 595.007478][ T5799] total_workingset_refault_file 154 [ 595.007486][ T5799] total_swap 65536 [ 595.007493][ T5799] total_swapcached 581632 [ 595.007501][ T5799] total_pgpgin 215705 [ 595.007508][ T5799] total_pgpgout 215688 [ 595.007515][ T5799] total_pgfault 209011 [ 595.007522][ T5799] total_pgmajfault 192 [ 595.007530][ T5799] total_inactive_anon 24576 [ 595.007537][ T5799] total_active_anon 0 [ 595.007545][ T5799] total_inactive_file 0 [ 595.007552][ T5799] total_active_file 0 [ 595.007559][ T5799] total_unevictable 0 [ 595.007567][ T5799] anon_cost 65 [ 595.007573][ T5799] file_cost 0 [ 595.007580][ T5799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.943,pid=9335,uid=0 [ 595.007722][ T5799] Memory cgroup out of memory: Killed process 9335 (syz.3.943) total-vm:102360kB, anon-rss:1248kB, file-rss:21512kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 700.834350][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 700.834370][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9339/1:b..l P9335/1:b..l [ 700.834420][ C0] rcu: (detected by 0, t=10502 jiffies, g=33825, q=382 ncpus=2) [ 700.834439][ C0] task:syz.3.943 state:R running task stack:22368 pid:9335 tgid:9335 ppid:5799 task_flags:0x400840 flags:0x0008000a [ 700.834502][ C0] Call Trace: [ 700.834510][ C0] [ 700.834524][ C0] __schedule+0x1553/0x5240 [ 700.834592][ C0] ? __pfx___schedule+0x10/0x10 [ 700.834624][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 700.834657][ C0] preempt_schedule_irq+0x4d/0xa0 [ 700.834686][ C0] irqentry_exit+0x599/0x620 [ 700.834715][ C0] ? trace_irq_disable+0x3b/0x150 [ 700.834746][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 700.834769][ C0] RIP: 0010:lock_is_held_type+0x45/0x150 [ 700.834799][ C0] Code: 84 e4 00 00 00 65 8b 05 b9 b1 2b 07 85 c0 0f 85 d5 00 00 00 65 4c 8b 2d 01 6b 2b 07 41 83 bd b4 0b 00 00 00 0f 85 bf 00 00 00 <89> f5 49 89 fe 9c 41 5c fa 48 c7 c7 67 9b 57 8d e8 a6 18 00 00 65 [ 700.834816][ C0] RSP: 0018:ffffc900046a7080 EFLAGS: 00000246 [ 700.834833][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000001 [ 700.834847][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ddcb980 [ 700.834861][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 700.834873][ C0] R10: dffffc0000000000 R11: ffffed102808aa2b R12: 0000000000000000 [ 700.834887][ C0] R13: ffff88802ee68000 R14: 0000000000000000 R15: 0000000000000000 [ 700.834925][ C0] css_next_descendant_pre+0x32/0x260 [ 700.834959][ C0] mem_cgroup_iter+0x1dc/0x450 [ 700.834987][ C0] ? mem_cgroup_iter+0x3b/0x450 [ 700.835016][ C0] shrink_node+0xeb6/0x2950 [ 700.835093][ C0] ? __pfx_shrink_node+0x10/0x10 [ 700.835121][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 700.835152][ C0] ? vmpressure_prio+0x33/0x140 [ 700.835181][ C0] do_try_to_free_pages+0x6ed/0x1980 [ 700.835203][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 700.835250][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 700.835295][ C0] try_to_free_mem_cgroup_pages+0x2eb/0x840 [ 700.835324][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 700.835361][ C0] ? psi_memstall_enter+0x259/0x310 SYZFAIL: failed to send rpc fd=3 want=232 sent=0 n=-1 (errno 32: Broken pipe) [ 700.835388][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.835417][ C0] ? psi_memstall_enter+0x259/0x310 [ 700.835447][ C0] try_charge_memcg+0x859/0x1630 [ 700.835499][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 700.835535][ C0] ? percpu_ref_tryget+0x15/0x180 [ 700.835569][ C0] ? __memcg_kmem_charge_page+0x11f/0x460 [ 700.835602][ C0] __memcg_kmem_charge_page+0x2dd/0x460 [ 700.835630][ C0] ? __memcg_kmem_charge_page+0x11f/0x460 [ 700.835660][ C0] memcg_charge_kernel_stack+0x2f5/0x4e0 [ 700.835689][ C0] dup_task_struct+0x290/0x9a0 [ 700.835719][ C0] ? rt_spin_unlock+0x160/0x200 [ 700.835747][ C0] copy_process+0x508/0x3cd0 [ 700.835782][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 700.835834][ C0] ? __pfx_copy_process+0x10/0x10 [ 700.835867][ C0] ? __asan_memset+0x22/0x50 [ 700.835900][ C0] kernel_clone+0x249/0x840 [ 700.835933][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 700.835972][ C0] ? count_memcg_event_mm+0x21/0x260 [ 700.836011][ C0] __se_sys_clone3+0x33c/0x360 [ 700.836036][ C0] ? __pfx___se_sys_clone3+0x10/0x10 [ 700.836108][ C0] do_syscall_64+0x14d/0xf80 [ 700.836136][ C0] ? trace_irq_disable+0x3b/0x150 [ 700.836159][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.836179][ C0] ? clear_bhb_loop+0x40/0x90 [ 700.836205][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.836225][ C0] RIP: 0033:0x7f3c80a0d589 [ 700.836243][ C0] RSP: 002b:00007fffbaa5aeb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 700.836263][ C0] RAX: ffffffffffffffda RBX: 00007f3c809c8b20 RCX: 00007f3c80a0d589 [ 700.836285][ C0] RDX: 00007f3c809c8b20 RSI: 0000000000000058 RDI: 00007fffbaa5af10 [ 700.836299][ C0] RBP: 00007f3c7ec3d6c0 R08: 00007f3c7ec3d6c0 R09: 00007fffbaa5aff7 [ 700.836312][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 700.836325][ C0] R13: 000000000000006e R14: 00007fffbaa5af10 R15: 00007fffbaa5aff8 [ 700.836360][ C0] [ 700.836367][ C0] task:syz.3.943 state:R running task stack:22152 pid:9339 tgid:9335 ppid:5799 task_flags:0x400940 flags:0x0008000a [ 700.836425][ C0] Call Trace: [ 700.836431][ C0] [ 700.836444][ C0] __schedule+0x1553/0x5240 [ 700.836480][ C0] ? rcu_is_watching+0x15/0xb0 [ 700.836522][ C0] ? __pfx___schedule+0x10/0x10 [ 700.836564][ C0] preempt_schedule_irq+0x4d/0xa0 [ 700.836593][ C0] irqentry_exit+0x599/0x620 [ 700.836620][ C0] ? trace_irq_disable+0x3b/0x150 [ 700.836651][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 700.836672][ C0] RIP: 0010:lock_release+0x2d7/0x3d0 [ 700.836691][ C0] Code: 1d ae 10 00 00 00 00 eb b5 e8 a5 69 82 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 15 d7 ad 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 72 f9 cc [ 700.836708][ C0] RSP: 0018:ffffc9000e1e6e60 EFLAGS: 00000286 [ 700.836724][ C0] RAX: 94b764f70f709400 RBX: 0000000000000202 RCX: 0000000000000046 [ 700.836738][ C0] RDX: 0000000000000000 RSI: ffffffff8d7bd2ec RDI: ffffffff8ba66700 [ 700.836752][ C0] RBP: ffff88806a6daa38 R08: 0000000000000000 R09: 0000000000000000 [ 700.836765][ C0] R10: 0000000000000100 R11: 0000000000000406 R12: 0000000000000000 [ 700.836777][ C0] R13: 0000000000000000 R14: ffffffff8ddcb980 R15: ffff88806a6d9e80 [ 700.836810][ C0] ? list_lru_count_one+0x27/0x2d0 [ 700.836837][ C0] list_lru_count_one+0x252/0x2d0 [ 700.836865][ C0] super_cache_count+0x1a7/0x240 [ 700.836892][ C0] do_shrink_slab+0x91/0x1170 [ 700.836930][ C0] ? shrink_slab+0x1ef/0x1150 [ 700.836961][ C0] shrink_slab+0x830/0x1150 [ 700.836992][ C0] ? shrink_slab+0x1ef/0x1150 [ 700.837026][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 700.837071][ C0] ? page_counter_calculate_protection+0x188/0x470 [ 700.837106][ C0] shrink_node+0x124d/0x2950 [ 700.837182][ C0] ? __pfx_shrink_node+0x10/0x10 [ 700.837210][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 700.837241][ C0] ? vmpressure_prio+0x33/0x140 [ 700.837277][ C0] do_try_to_free_pages+0x6ed/0x1980 [ 700.837299][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 700.837346][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 700.837382][ C0] try_to_free_mem_cgroup_pages+0x2eb/0x840 [ 700.837409][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 700.837447][ C0] ? psi_memstall_enter+0x259/0x310 [ 700.837473][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.837501][ C0] ? psi_memstall_enter+0x259/0x310 [ 700.837530][ C0] try_charge_memcg+0x859/0x1630 [ 700.837581][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 700.837619][ C0] ? percpu_ref_tryget+0x15/0x180 [ 700.837652][ C0] ? __memcg_kmem_charge_page+0x11f/0x460 [ 700.837685][ C0] __memcg_kmem_charge_page+0x2dd/0x460 [ 700.837713][ C0] ? __memcg_kmem_charge_page+0x11f/0x460 [ 700.837744][ C0] __alloc_frozen_pages_noprof+0x1c1/0x380 [ 700.837772][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 700.837803][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 700.837827][ C0] ? rcu_is_watching+0x15/0xb0 [ 700.837853][ C0] alloc_pages_bulk_noprof+0x5f1/0x7d0 [ 700.837892][ C0] io_region_allocate_pages+0x175/0x470 [ 700.837930][ C0] io_create_region+0x37a/0x4a0 [ 700.837968][ C0] io_allocate_scq_urings+0x220/0x820 [ 700.838011][ C0] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 700.838051][ C0] ? bpf_lsm_capable+0x9/0x20 [ 700.838085][ C0] io_uring_create+0x46b/0x980 [ 700.838122][ C0] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 700.838148][ C0] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 700.838191][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 700.838231][ C0] do_syscall_64+0x14d/0xf80 [ 700.838259][ C0] ? trace_irq_disable+0x3b/0x150 [ 700.838289][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.838310][ C0] ? clear_bhb_loop+0x40/0x90 [ 700.838335][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.838356][ C0] RIP: 0033:0x7f3c80a0c799 [ 700.838372][ C0] RSP: 002b:00007f3c7ec5dfb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 700.838391][ C0] RAX: ffffffffffffffda RBX: 00007f3c80c85fa0 RCX: 00007f3c80a0c799 [ 700.838405][ C0] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000837 [ 700.838419][ C0] RBP: 0000200000000180 R08: 0000000000000000 R09: 0000200000000140 [ 700.838432][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 700.838444][ C0] R13: 0000000000000000 R14: 0000000000000837 R15: 0000200000000140 [ 700.838477][ C0] [ 700.838486][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g33825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 700.838508][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 700.838519][ C0] rcu: RCU grace-period kthread stack dump: [ 700.838525][ C0] task:rcu_preempt state:R running task stack:27776 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 700.838588][ C0] Call Trace: [ 700.838594][ C0] [ 700.838606][ C0] __schedule+0x1553/0x5240 [ 700.838638][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 700.838680][ C0] ? __pfx___schedule+0x10/0x10 [ 700.838718][ C0] ? schedule+0x90/0x360 [ 700.838748][ C0] schedule+0x164/0x360 [ 700.838778][ C0] schedule_timeout+0x158/0x2c0 [ 700.838808][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 700.838837][ C0] ? __pfx_process_timeout+0x10/0x10 [ 700.838867][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 700.838896][ C0] ? prepare_to_swait_event+0x340/0x370 [ 700.838932][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 700.838965][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.838996][ C0] ? rcu_gp_init+0x1313/0x15b0 [ 700.839032][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 700.839059][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 700.839094][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 700.839127][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 700.839160][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 700.839188][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 700.839219][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 700.839248][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 700.839292][ C0] kthread+0x388/0x470 [ 700.839315][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 700.839342][ C0] ? __pfx_kthread+0x10/0x10 [ 700.839365][ C0] ret_from_fork+0x51e/0xb90 [ 700.839396][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 700.839422][ C0] ? __switch_to+0xc7d/0x1450 [ 700.839451][ C0] ? __pfx_kthread+0x10/0x10 [ 700.839475][ C0] ret_from_fork_asm+0x1a/0x30 [ 700.839513][ C0] [ 700.839520][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 700.839533][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 700.839555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.839566][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 700.839593][ C0] Code: 6e 5d 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 9c 26 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 700.839609][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000246 [ 700.839625][ C0] RAX: 0000000000de03f3 RBX: ffffffff81996dba RCX: 0000000080000001 [ 700.839639][ C0] RDX: 0000000000000001 RSI: ffffffff8d560c6d RDI: ffffffff8ba66700 [ 700.839652][ C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833f1b R09: 1ffff110171067e3 [ 700.839666][ C0] R10: dffffc0000000000 R11: ffffed10171067e4 R12: ffffffff8f6a3bb0 [ 700.839681][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b605d8 [ 700.839693][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 700.839710][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.839723][ C0] CR2: 00007f5f36c356b8 CR3: 00000000745fe000 CR4: 00000000003526f0 [ 700.839742][ C0] Call Trace: [ 700.839749][ C0] [ 700.839756][ C0] default_idle+0x9/0x20 [ 700.839775][ C0] default_idle_call+0x72/0xb0 [ 700.839796][ C0] do_idle+0x1ba/0x5d0 [ 700.839818][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.839852][ C0] ? __pfx_do_idle+0x10/0x10 [ 700.839886][ C0] cpu_startup_entry+0x43/0x60 [ 700.839911][ C0] rest_init+0x2de/0x300 [ 700.839935][ C0] start_kernel+0x385/0x3d0 [ 700.839961][ C0] x86_64_start_reservations+0x24/0x30 [ 700.839986][ C0] x86_64_start_kernel+0x143/0x1c0 [ 700.840014][ C0] common_startup_64+0x13e/0x147 [ 700.840053][ C0] [ 703.345041][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.345121][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.360697][ T38] oom_reaper: reaped process 9335 (syz.3.943), now anon-rss:0kB, file-rss:20548kB, shmem-rss:0kB [ 703.864015][ T9358] syz.4.950 (9358) used greatest stack depth: 17888 bytes left [ 708.809162][ T3594] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.155086][ T3594] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.436859][ T3594] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.670825][ T3594] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.966274][ T3594] bridge_slave_1: left allmulticast mode [ 709.966308][ T3594] bridge_slave_1: left promiscuous mode [ 709.969152][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.046240][ T3594] bridge_slave_0: left allmulticast mode [ 710.046271][ T3594] bridge_slave_0: left promiscuous mode [ 710.046640][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.477021][ T3594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.557241][ T3594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.576515][ T3594] bond0 (unregistering): Released all slaves [ 712.824571][ T3594] hsr_slave_0: left promiscuous mode [ 712.844570][ T3594] hsr_slave_1: left promiscuous mode [ 712.845485][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.845507][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.886989][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.887024][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.945844][ T3594] veth1_macvtap: left promiscuous mode [ 712.945914][ T3594] veth0_macvtap: left promiscuous mode [ 712.946064][ T3594] veth1_vlan: left promiscuous mode [ 712.946166][ T3594] veth0_vlan: left promiscuous mode [ 713.715067][ T3594] team0 (unregistering): Port device team_slave_1 removed [ 713.759272][ T3594] team0 (unregistering): Port device team_slave_0 removed