last executing test programs: 11.803634554s ago: executing program 3 (id=1266): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xe) 10.918026696s ago: executing program 3 (id=1268): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10.707775381s ago: executing program 0 (id=1269): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 10.666323222s ago: executing program 2 (id=1270): socket(0x10, 0x3, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/222) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x400002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045518, &(0x7f0000002a40)) 9.596139608s ago: executing program 3 (id=1272): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x2e) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1) 9.169904058s ago: executing program 2 (id=1273): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000000000010000000000000000000000000000000000000004000000000a0060803b00", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 9.08237012s ago: executing program 1 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$video(0x0, 0x3, 0x501000) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') writev(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) 8.740851699s ago: executing program 0 (id=1275): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0xa000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, 0x0, 0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000900)={0x19}) 7.841155241s ago: executing program 0 (id=1276): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b"], 0xe) 7.668602825s ago: executing program 2 (id=1277): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r3, 0x21, 0x101a, r3, 0x0) fanotify_mark(r3, 0x22, 0x4000103b, r3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x9) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)=@delchain={0x918, 0x65, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0x18}, {0xb, 0x17c9cedaef6c3850}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7d}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0x89c, 0x2, [@TCA_BPF_ACT={0x6c, 0x1, [@m_police={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x38, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c, 0x10, 0x1, 0x0, 0x3, 0x5, 0x8001, 0x5, 0x0, 0x3, 0x4, 0x3, 0x6, 0x8, 0x6, 0x5, 0x71, 0x40, 0x0, 0xfffff000, 0x80000001, 0x9, 0x1, 0x9f1, 0x1, 0x5, 0x7f, 0xf, 0x4, 0x595, 0x8, 0x229, 0xacb, 0xebdf, 0xfffffffc, 0x7, 0x2, 0x2, 0x10001, 0x6, 0x0, 0x1, 0xe, 0x2, 0x6, 0x7fdc1630, 0xffff, 0x2, 0x4, 0x400, 0x5, 0xb, 0x8, 0x0, 0x100, 0x8, 0x0, 0x800, 0x9, 0x0, 0x87, 0x10001, 0x401, 0x8001, 0x4, 0x6, 0x9, 0xd, 0x395, 0x80, 0x0, 0xffff5d22, 0xffffffff, 0xcc6b, 0xe00000, 0x3, 0x0, 0x9, 0x7, 0x9, 0x3, 0x5, 0x8001, 0x4, 0x5a, 0x0, 0x5, 0x4, 0x8, 0x8, 0x1, 0x1, 0x2, 0x60000000, 0x9, 0x4, 0x100, 0x4, 0x3, 0x1, 0x0, 0x7, 0x7, 0x7ca, 0x7fff, 0x4, 0x6, 0x1, 0x1, 0x40e, 0x5, 0x7, 0x9, 0x0, 0x3, 0x6, 0x3255, 0x3497, 0x5, 0x5, 0x2, 0xb0, 0x4, 0x8, 0x8000, 0x7, 0x71, 0x0, 0xfc31, 0x9, 0x5, 0x6, 0x8, 0x8000, 0x5f, 0x76, 0x80, 0x8, 0x4, 0x2, 0x6, 0x3, 0x1, 0x5, 0x7, 0x81, 0x0, 0x2, 0xda, 0x8, 0xffff311c, 0x3, 0x8, 0x5b94, 0x83, 0x6, 0x6, 0x7, 0x7, 0x7, 0xc8, 0x894, 0x5e1, 0x1ff, 0x80, 0x401, 0x691, 0x7f, 0x8001, 0xff, 0x81, 0x4, 0x4a34, 0x3, 0x9, 0x8ed, 0x2e29, 0x49f, 0x1, 0x9, 0x2e, 0xfffffffc, 0x5a, 0x800, 0x6a73a8d3, 0x7cea, 0x7f, 0xffffffff, 0x3, 0x616afe1, 0xa8a, 0x1, 0xffffffff, 0x45, 0x5, 0x3, 0x5, 0x3, 0x8, 0x4, 0x2, 0xbd, 0x3, 0xfb, 0x0, 0x9, 0x9, 0x0, 0x7, 0x1, 0x6, 0x9, 0x8, 0xf353, 0x8, 0xf, 0xc, 0x68a, 0x1000, 0xd9, 0x7f, 0x3, 0xa76f, 0x6, 0x80, 0x6, 0x4, 0x7, 0x4, 0x5, 0x3, 0x6, 0x6, 0x101, 0xe56, 0x7, 0xb, 0x4, 0xe0f6, 0x2, 0x3, 0x80, 0x0, 0x0, 0x5, 0x8, 0xa0f, 0x1, 0x4, 0x3, 0x80, 0x92, 0x1, 0x9, 0x8e7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x69e9a317}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x876a}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0xc, 0x1, 0x0, 0x4, 0x0, 0x81, 0x8000, 0x8, 0x9, 0x3, 0x7, 0xe471, 0x3, 0x1, 0x7f, 0x7, 0x2, 0x4, 0x7, 0x1, 0xfffffff3, 0x8, 0x2, 0x6, 0x1, 0xccdb, 0x0, 0x7fff, 0xb6, 0x4, 0xa, 0xffffffc0, 0x3, 0x7fff, 0x5, 0x0, 0x3, 0x9, 0x81, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0x5, 0x700000, 0x9, 0x2c, 0x800, 0xbf9acc6, 0x6, 0x2, 0x7ff, 0x4, 0x4, 0x53, 0x10, 0x8, 0x10000, 0x679, 0x28, 0x0, 0x6, 0x1, 0x6, 0x1, 0x9, 0xffff, 0x6, 0x6, 0xc6cc, 0x2, 0x7, 0x3, 0x0, 0x7, 0x5, 0x6, 0xa, 0x6, 0x8, 0xb518, 0x5, 0x7fffffff, 0x6a91, 0x6, 0xfffffff9, 0x6, 0xdb, 0x2, 0x261a20ef, 0x5, 0x5, 0x9, 0x800, 0x4, 0x5, 0x1d96bfed, 0x0, 0x6, 0xffffffb8, 0x9, 0x7f, 0x40, 0x9, 0xfffffff6, 0x6, 0x20, 0x3109a588, 0x80000000, 0xf, 0xfffffffc, 0x7, 0x1, 0x4, 0x8001, 0x80000000, 0xd, 0x8000, 0x5, 0x45c5, 0x81, 0xd, 0x9, 0x780, 0x0, 0x7ff, 0x7fff, 0x10001, 0x9, 0x3, 0x9, 0x1, 0x6, 0x3, 0x8000, 0xd, 0x8, 0x81, 0x7, 0xfd09, 0x0, 0xc, 0x0, 0x4, 0x866, 0xd05, 0xce1a, 0x1df, 0x7, 0x4, 0x7f, 0x1000, 0x7ff, 0x98, 0x80000001, 0x4851, 0x5, 0x8, 0x401, 0x0, 0x9, 0x800, 0xf, 0x5, 0x7, 0x4, 0x55, 0x85, 0x2, 0x7fff, 0x10000, 0x4, 0xfffffffe, 0x0, 0x6, 0x0, 0x8, 0x80000000, 0x0, 0x1, 0x7, 0x200, 0x7, 0x8, 0x10, 0x6, 0x76c, 0x2, 0x65, 0xfffffff8, 0xa78, 0xffffffff, 0xffffffff, 0xffffffff, 0x10000, 0x2, 0xfffffff9, 0x1, 0x8, 0x80000001, 0x100, 0x0, 0x9, 0x7, 0x4, 0x7, 0x4, 0x8e9, 0x4, 0x3, 0x7, 0x2cad9d15, 0xfffffff2, 0x8, 0x5798, 0x8, 0xa0b3, 0x6, 0xfffffff3, 0x5, 0x2, 0x6, 0x400, 0x0, 0xf9, 0x3, 0x3ff, 0x4, 0x10001, 0x7f, 0x1, 0xcda, 0x8, 0x4, 0x2a1c, 0x2, 0x800, 0xb4, 0xd0cb, 0x2, 0x4, 0x96, 0x1, 0xbc, 0x8001, 0x800000, 0x8, 0xffff, 0x1, 0x34, 0x5, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x918}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 5.603958195s ago: executing program 1 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040005}, 0x8000) 5.603068804s ago: executing program 2 (id=1279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a7830220", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.409981869s ago: executing program 2 (id=1280): userfaultfd(0x80801) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) 5.37001154s ago: executing program 0 (id=1281): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.305899272s ago: executing program 1 (id=1282): socket(0x10, 0x3, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/222) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x400002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045518, &(0x7f0000002a40)) 4.13640686s ago: executing program 3 (id=1283): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 3.571002584s ago: executing program 1 (id=1284): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0xa000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, 0x0, 0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000000900)={0x19}) 2.975715928s ago: executing program 3 (id=1285): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000000000010000000000000000000000000000000000000004000000000a0060803b00", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 2.946436039s ago: executing program 2 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$video(0x0, 0x3, 0x501000) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') writev(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) 2.838653291s ago: executing program 0 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e00000010500040001"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.583899498s ago: executing program 1 (id=1288): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r3, 0x21, 0x101a, r3, 0x0) fanotify_mark(r3, 0x22, 0x4000103b, r3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x9) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)=@delchain={0x918, 0x65, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0x18}, {0xb, 0x17c9cedaef6c3850}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7d}]}}, @TCA_CHAIN={0x8, 0xb, 0xc508}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0x89c, 0x2, [@TCA_BPF_ACT={0x6c, 0x1, [@m_police={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x38, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c, 0x10, 0x1, 0x0, 0x3, 0x5, 0x8001, 0x5, 0x0, 0x3, 0x4, 0x3, 0x6, 0x8, 0x6, 0x5, 0x71, 0x40, 0x0, 0xfffff000, 0x80000001, 0x9, 0x1, 0x9f1, 0x1, 0x5, 0x7f, 0xf, 0x4, 0x595, 0x8, 0x229, 0xacb, 0xebdf, 0xfffffffc, 0x7, 0x2, 0x2, 0x10001, 0x6, 0x0, 0x1, 0xe, 0x2, 0x6, 0x7fdc1630, 0xffff, 0x2, 0x4, 0x400, 0x5, 0xb, 0x8, 0x0, 0x100, 0x8, 0x0, 0x800, 0x9, 0x0, 0x87, 0x10001, 0x401, 0x8001, 0x4, 0x6, 0x9, 0xd, 0x395, 0x80, 0x0, 0xffff5d22, 0xffffffff, 0xcc6b, 0xe00000, 0x3, 0x0, 0x9, 0x7, 0x9, 0x3, 0x5, 0x8001, 0x4, 0x5a, 0x0, 0x5, 0x4, 0x8, 0x8, 0x1, 0x1, 0x2, 0x60000000, 0x9, 0x4, 0x100, 0x4, 0x3, 0x1, 0x0, 0x7, 0x7, 0x7ca, 0x7fff, 0x4, 0x6, 0x1, 0x1, 0x40e, 0x5, 0x7, 0x9, 0x0, 0x3, 0x6, 0x3255, 0x3497, 0x5, 0x5, 0x2, 0xb0, 0x4, 0x8, 0x8000, 0x7, 0x71, 0x0, 0xfc31, 0x9, 0x5, 0x6, 0x8, 0x8000, 0x5f, 0x76, 0x80, 0x8, 0x4, 0x2, 0x6, 0x3, 0x1, 0x5, 0x7, 0x81, 0x0, 0x2, 0xda, 0x8, 0xffff311c, 0x3, 0x8, 0x5b94, 0x83, 0x6, 0x6, 0x7, 0x7, 0x7, 0xc8, 0x894, 0x5e1, 0x1ff, 0x80, 0x401, 0x691, 0x7f, 0x8001, 0xff, 0x81, 0x4, 0x4a34, 0x3, 0x9, 0x8ed, 0x2e29, 0x49f, 0x1, 0x9, 0x2e, 0xfffffffc, 0x5a, 0x800, 0x6a73a8d3, 0x7cea, 0x7f, 0xffffffff, 0x3, 0x616afe1, 0xa8a, 0x1, 0xffffffff, 0x45, 0x5, 0x3, 0x5, 0x3, 0x8, 0x4, 0x2, 0xbd, 0x3, 0xfb, 0x0, 0x9, 0x9, 0x0, 0x7, 0x1, 0x6, 0x9, 0x8, 0xf353, 0x8, 0xf, 0xc, 0x68a, 0x1000, 0xd9, 0x7f, 0x3, 0xa76f, 0x6, 0x80, 0x6, 0x4, 0x7, 0x4, 0x5, 0x3, 0x6, 0x6, 0x101, 0xe56, 0x7, 0xb, 0x4, 0xe0f6, 0x2, 0x3, 0x80, 0x0, 0x0, 0x5, 0x8, 0xa0f, 0x1, 0x4, 0x3, 0x80, 0x92, 0x1, 0x9, 0x8e7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x69e9a317}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x876a}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0xc, 0x1, 0x0, 0x4, 0x0, 0x81, 0x8000, 0x8, 0x9, 0x3, 0x7, 0xe471, 0x3, 0x1, 0x7f, 0x7, 0x2, 0x4, 0x7, 0x1, 0xfffffff3, 0x8, 0x2, 0x6, 0x1, 0xccdb, 0x0, 0x7fff, 0xb6, 0x4, 0xa, 0xffffffc0, 0x3, 0x7fff, 0x5, 0x0, 0x3, 0x9, 0x81, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0x5, 0x700000, 0x9, 0x2c, 0x800, 0xbf9acc6, 0x6, 0x2, 0x7ff, 0x4, 0x4, 0x53, 0x10, 0x8, 0x10000, 0x679, 0x28, 0x0, 0x6, 0x1, 0x6, 0x1, 0x9, 0xffff, 0x6, 0x6, 0xc6cc, 0x2, 0x7, 0x3, 0x0, 0x7, 0x5, 0x6, 0xa, 0x6, 0x8, 0xb518, 0x5, 0x7fffffff, 0x6a91, 0x6, 0xfffffff9, 0x6, 0xdb, 0x2, 0x261a20ef, 0x5, 0x5, 0x9, 0x800, 0x4, 0x5, 0x1d96bfed, 0x0, 0x6, 0xffffffb8, 0x9, 0x7f, 0x40, 0x9, 0xfffffff6, 0x6, 0x20, 0x3109a588, 0x80000000, 0xf, 0xfffffffc, 0x7, 0x1, 0x4, 0x8001, 0x80000000, 0xd, 0x8000, 0x5, 0x45c5, 0x81, 0xd, 0x9, 0x780, 0x0, 0x7ff, 0x7fff, 0x10001, 0x9, 0x3, 0x9, 0x1, 0x6, 0x3, 0x8000, 0xd, 0x8, 0x81, 0x7, 0xfd09, 0x0, 0xc, 0x0, 0x4, 0x866, 0xd05, 0xce1a, 0x1df, 0x7, 0x4, 0x7f, 0x1000, 0x7ff, 0x98, 0x80000001, 0x4851, 0x5, 0x8, 0x401, 0x0, 0x9, 0x800, 0xf, 0x5, 0x7, 0x4, 0x55, 0x85, 0x2, 0x7fff, 0x10000, 0x4, 0xfffffffe, 0x0, 0x6, 0x0, 0x8, 0x80000000, 0x0, 0x1, 0x7, 0x200, 0x7, 0x8, 0x10, 0x6, 0x76c, 0x2, 0x65, 0xfffffff8, 0xa78, 0xffffffff, 0xffffffff, 0xffffffff, 0x10000, 0x2, 0xfffffff9, 0x1, 0x8, 0x80000001, 0x100, 0x0, 0x9, 0x7, 0x4, 0x7, 0x4, 0x8e9, 0x4, 0x3, 0x7, 0x2cad9d15, 0xfffffff2, 0x8, 0x5798, 0x8, 0xa0b3, 0x6, 0xfffffff3, 0x5, 0x2, 0x6, 0x400, 0x0, 0xf9, 0x3, 0x3ff, 0x4, 0x10001, 0x7f, 0x1, 0xcda, 0x8, 0x4, 0x2a1c, 0x2, 0x800, 0xb4, 0xd0cb, 0x2, 0x4, 0x96, 0x1, 0xbc, 0x8001, 0x800000, 0x8, 0xffff, 0x1, 0x34, 0x5, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x918}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 102.432098ms ago: executing program 0 (id=1289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a7830220", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 101.757948ms ago: executing program 3 (id=1290): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b"], 0xe) 0s ago: executing program 1 (id=1291): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) kernel console output (not intermixed with test programs): T9] usb 2-1: SerialNumber: syz [ 183.023676][ T9] usb 2-1: 0:2 : does not exist [ 183.094544][ T9] usb 2-1: USB disconnect, device number 16 [ 183.167168][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.681488][ T6685] random: crng reseeded on system resumption [ 185.497717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 185.907355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 187.522732][ T6694] syz.0.279 (6694) used greatest stack depth: 17800 bytes left [ 188.021071][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 188.038002][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 188.056872][ T6701] netlink: 'syz.3.282': attribute type 6 has an invalid length. [ 188.080315][ T6701] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.090183][ T6701] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.099583][ T6701] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.108987][ T6701] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.145329][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 188.192159][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 188.207928][ T6701] netlink: 'syz.3.282': attribute type 6 has an invalid length. [ 192.231597][ T6730] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 193.009400][ T6728] random: crng reseeded on system resumption [ 194.505447][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518107][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.914885][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.112745][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 195.150127][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.173913][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 195.194710][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.222876][ T8] usb 1-1: config 0 descriptor?? [ 195.311462][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.328779][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.362057][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 195.379316][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.398734][ T9] usb 2-1: SerialNumber: syz [ 195.474589][ T5827] usb 1-1: USB disconnect, device number 12 [ 195.561320][ T6778] random: crng reseeded on system resumption [ 195.624490][ T9] usb 2-1: 0:2 : does not exist [ 195.769047][ T9] usb 2-1: USB disconnect, device number 17 [ 195.881752][ T6705] udevd[6705]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.123612][ T6809] syz.0.322 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 197.222062][ T6809] CPU: 0 PID: 6809 Comm: syz.0.322 Not tainted syzkaller #0 [ 197.229417][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.239502][ T6809] Call Trace: [ 197.242810][ T6809] [ 197.245776][ T6809] dump_stack_lvl+0x18c/0x250 [ 197.250502][ T6809] ? show_regs_print_info+0x20/0x20 [ 197.255742][ T6809] ? load_image+0x420/0x420 [ 197.260291][ T6809] ? ___ratelimit+0x478/0x610 [ 197.265037][ T6809] ? radix_tree_cpu_dead+0x160/0x160 [ 197.270375][ T6809] dump_header+0xd8/0x820 [ 197.274812][ T6809] oom_kill_process+0x390/0x580 [ 197.279712][ T6809] out_of_memory+0xe0e/0x1200 [ 197.284452][ T6809] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 197.290131][ T6809] ? print_unlock_imbalance_bug+0x160/0x160 [ 197.296092][ T6809] ? mutex_lock_nested+0x20/0x20 [ 197.301078][ T6809] ? unregister_oom_notifier+0x20/0x20 [ 197.306599][ T6809] mem_cgroup_out_of_memory+0x2c2/0x390 [ 197.312263][ T6809] ? try_charge_memcg+0xc91/0x17c0 [ 197.317412][ T6809] ? drain_local_stock+0x630/0x630 [ 197.322561][ T6809] ? do_raw_spin_unlock+0x121/0x230 [ 197.327803][ T6809] try_charge_memcg+0xca1/0x17c0 [ 197.332787][ T6809] ? verify_lock_unused+0x140/0x140 [ 197.338022][ T6809] ? folio_flags+0x120/0x120 [ 197.342647][ T6809] ? __next_zones_zonelist+0x9d/0x130 [ 197.348068][ T6809] charge_memcg+0x11b/0x3b0 [ 197.352609][ T6809] ? __mem_cgroup_charge+0x80/0x80 [ 197.357750][ T6809] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 197.363935][ T6809] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 197.370050][ T6809] __read_swap_cache_async+0x3f4/0x9c0 [ 197.375565][ T6809] swap_cluster_readahead+0x536/0x670 [ 197.380975][ T6809] ? read_swap_cache_async+0x90/0x90 [ 197.386289][ T6809] ? xas_load+0x12b/0x140 [ 197.390670][ T6809] ? filemap_get_entry+0xce/0x3f0 [ 197.395711][ T6809] ? filemap_get_entry+0xce/0x3f0 [ 197.400767][ T6809] ? filemap_get_entry+0x375/0x3f0 [ 197.405896][ T6809] swapin_readahead+0x108/0xa60 [ 197.410777][ T6809] ? get_swap_device+0x96/0x3f0 [ 197.415661][ T6809] ? exit_swap_address_space+0x290/0x290 [ 197.421336][ T6809] ? __filemap_get_folio+0x939/0xbe0 [ 197.426649][ T6809] ? swap_cache_get_folio+0xad/0x590 [ 197.431966][ T6809] ? get_swap_device+0x26e/0x3f0 [ 197.436928][ T6809] do_swap_page+0x435/0x3f50 [ 197.441544][ T6809] ? print_unlock_imbalance_bug+0x160/0x160 [ 197.447484][ T6809] ? do_swap_page+0xcf/0x3f50 [ 197.452185][ T6809] ? pte_offset_map_nolock+0xb9/0x130 [ 197.457602][ T6809] ? handle_mm_fault+0xe6/0x4a50 [ 197.462581][ T6809] handle_mm_fault+0x10a6/0x4a50 [ 197.467557][ T6809] ? handle_mm_fault+0xe6/0x4a50 [ 197.472524][ T6809] ? lock_vma_under_rcu+0x52c/0x660 [ 197.477803][ T6809] ? numa_migrate_prep+0x350/0x350 [ 197.482946][ T6809] ? lock_vma_under_rcu+0xe5/0x660 [ 197.488119][ T6809] ? do_user_addr_fault+0x1cb/0x12d0 [ 197.493458][ T6809] do_user_addr_fault+0xad2/0x12d0 [ 197.498594][ T6809] ? rcu_is_watching+0x15/0xb0 [ 197.503384][ T6809] exc_page_fault+0x64/0x100 [ 197.508003][ T6809] asm_exc_page_fault+0x26/0x30 [ 197.512867][ T6809] RIP: 0033:0x7fd0bb56cee0 [ 197.517312][ T6809] Code: c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 fe 7f 07 c5 fe 7f 4f 20 [ 197.536950][ T6809] RSP: 002b:00007ffd4ebbe208 EFLAGS: 00010206 [ 197.543047][ T6809] RAX: 0000200000000340 RBX: 0000000000000004 RCX: 0023706f6f6c2f76 [ 197.551044][ T6809] RDX: 000000000000000b RSI: 6f6f6c2f7665642f RDI: 0000200000000340 [ 197.559057][ T6809] RBP: fffffffffffffffe R08: 0000001b2c720000 R09: 0000000000000001 [ 197.567130][ T6809] R10: 7ffffffffffffff4 R11: 0000000000000009 R12: 00007ffd4ebbe330 [ 197.575116][ T6809] R13: 00007fd0bb82609c R14: 00000000000300c9 R15: 00007fd0bb826090 [ 197.583122][ T6809] [ 197.733166][ T6809] memory: usage 3416kB, limit 3416kB, failcnt 91195 [ 197.741463][ T6809] memory+swap: usage 3860kB, limit 9007199254740988kB, failcnt 0 [ 197.750790][ T6809] kmem: usage 3388kB, limit 9007199254740988kB, failcnt 0 [ 197.759609][ T6809] Memory cgroup stats for /syz0: [ 197.759917][ T6809] cache 28672 [ 197.769875][ T6809] rss 0 [ 197.772682][ T6809] rss_huge 0 [ 197.775916][ T6809] shmem 0 [ 197.780451][ T6809] mapped_file 28672 [ 197.784299][ T6809] dirty 28672 [ 197.792219][ T6809] writeback 0 [ 197.796008][ T6809] workingset_refault_anon 1216 [ 197.802485][ T6809] workingset_refault_file 3621 [ 197.860711][ T6809] swap 454656 [ 197.864062][ T6809] pgpgin 125023 [ 197.880744][ T6809] pgpgout 125016 [ 197.884337][ T6809] pgfault 91558 [ 197.893858][ T6809] pgmajfault 860 [ 197.901330][ T6809] inactive_anon 0 [ 197.905008][ T6809] active_anon 0 [ 197.912473][ T6809] inactive_file 0 [ 197.916154][ T6809] active_file 28672 [ 197.931896][ T6809] unevictable 0 [ 197.935406][ T6809] hierarchical_memory_limit 3497984 [ 197.943394][ T6809] hierarchical_memsw_limit 9223372036854771712 [ 197.954581][ T6809] total_cache 28672 [ 197.961564][ T6809] total_rss 0 [ 197.964889][ T6809] total_rss_huge 0 [ 197.973674][ T6809] total_shmem 0 [ 197.977189][ T6809] total_mapped_file 28672 [ 197.985221][ T6809] total_dirty 28672 [ 197.996056][ T6809] total_writeback 0 [ 198.003081][ T6809] total_workingset_refault_anon 1216 [ 198.013836][ T6809] total_workingset_refault_file 3621 [ 198.022453][ T6809] total_swap 454656 [ 198.054617][ T6809] total_pgpgin 125023 [ 198.064714][ T6809] total_pgpgout 125016 [ 198.079023][ T6809] total_pgfault 91558 [ 198.083057][ T6809] total_pgmajfault 860 [ 198.087174][ T6809] total_inactive_anon 0 [ 198.107397][ T6809] total_active_anon 0 [ 198.111486][ T6809] total_inactive_file 0 [ 198.115685][ T6809] total_active_file 28672 [ 198.122398][ T6809] total_unevictable 0 [ 198.126424][ T6809] anon_cost 0 [ 198.137878][ T6809] file_cost 0 [ 198.142595][ T6809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.322,pid=6809,uid=0 [ 198.188756][ T6809] Memory cgroup out of memory: Killed process 6809 (syz.0.322) total-vm:102376kB, anon-rss:1368kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 200.050357][ T27] audit: type=1326 audit(1785641084.114:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8def197d97 code=0x0 [ 200.262615][ T6853] random: crng reseeded on system resumption [ 201.350645][ T6868] binder: 6867:6868 ioctl 4018620d 0 returned -22 [ 204.029310][ T6882] input: syz1 as /devices/virtual/input/input18 [ 205.501681][ T6898] binder: 6896:6898 ioctl 4018620d 0 returned -22 [ 206.864422][ T6909] random: crng reseeded on system resumption [ 206.901465][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 206.901486][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 206.911223][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 206.914382][ T6897] Bluetooth: hci0: command 0x0406 tx timeout [ 208.463804][ T6925] input: syz1 as /devices/virtual/input/input19 [ 208.648212][ T5783] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 208.656687][ T5780] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 208.878932][ T5783] usb 2-1: Using ep0 maxpacket: 8 [ 209.645278][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.658627][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.717442][ T5783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.727970][ T5780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.803613][ T5783] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 209.813309][ T5780] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.835560][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.845460][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.857802][ T5783] usb 2-1: Product: syz [ 209.862753][ T5780] usb 4-1: SerialNumber: syz [ 209.925127][ T5783] usb 2-1: Manufacturer: syz [ 209.936446][ T5783] usb 2-1: SerialNumber: syz [ 209.948986][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.029878][ T5783] usb 2-1: config 0 descriptor?? [ 210.051134][ T6936] binder: 6935:6936 ioctl 4018620d 0 returned -22 [ 210.059676][ T5783] usb 2-1: can't set config #0, error -71 [ 210.085309][ T5780] usb 4-1: can't set config #1, error -71 [ 210.108237][ T5783] usb 2-1: USB disconnect, device number 18 [ 210.135230][ T5780] usb 4-1: USB disconnect, device number 5 [ 210.155998][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.199876][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 210.246849][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.360452][ T9] usb 1-1: config 0 descriptor?? [ 211.238281][ T5780] usb 1-1: USB disconnect, device number 13 [ 211.789895][ T6955] random: crng reseeded on system resumption [ 212.509564][ T6967] binder: 6966:6967 ioctl c0306201 0 returned -14 [ 212.709046][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 212.949350][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 212.971087][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.988756][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.271560][ T28] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.881846][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 213.898371][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.916213][ T9] usb 1-1: Product: syz [ 213.921531][ T9] usb 1-1: Manufacturer: syz [ 213.926182][ T9] usb 1-1: SerialNumber: syz [ 213.935283][ T9] usb 1-1: config 0 descriptor?? [ 214.034373][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.049696][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.061177][ T28] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.072057][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.080661][ T28] usb 3-1: SerialNumber: syz [ 214.167225][ T5783] usb 1-1: USB disconnect, device number 14 [ 214.310800][ T28] usb 3-1: 0:2 : does not exist [ 214.315805][ T28] usb 3-1: unit 5 not found! [ 214.347217][ T28] usb 3-1: USB disconnect, device number 12 [ 214.385595][ T6923] udevd[6923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.471529][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.661739][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.673394][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 214.685811][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.700088][ T9] usb 4-1: config 0 descriptor?? [ 214.823467][ T6994] binder: 6993:6994 ioctl c0306201 0 returned -14 [ 214.963403][ T5783] usb 4-1: USB disconnect, device number 6 [ 215.034884][ T6997] random: crng reseeded on system resumption [ 217.169634][ T7023] binder: BINDER_SET_CONTEXT_MGR already set [ 217.195069][ T7023] binder: 7021:7023 ioctl 4018620d 200000004a80 returned -16 [ 217.222428][ T7025] binder: 7021:7025 ioctl c0306201 0 returned -14 [ 217.339261][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 217.988089][ T5783] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 218.098460][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 218.105683][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.129010][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 218.143843][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.153678][ T9] usb 3-1: Product: syz [ 218.163807][ T9] usb 3-1: Manufacturer: syz [ 218.170129][ T9] usb 3-1: SerialNumber: syz [ 218.183836][ T9] usb 3-1: config 0 descriptor?? [ 218.202929][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.235158][ T5783] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.257546][ T5783] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.277879][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.285935][ T5783] usb 1-1: SerialNumber: syz [ 218.414986][ T28] usb 3-1: USB disconnect, device number 13 [ 218.441189][ T7036] random: crng reseeded on system resumption [ 218.485574][ T7039] vlan2: entered promiscuous mode [ 218.494018][ T7039] bridge0: entered promiscuous mode [ 218.611156][ T5783] usb 1-1: 0:2 : does not exist [ 218.624382][ T5783] usb 1-1: unit 5 not found! [ 218.701984][ T5783] usb 1-1: USB disconnect, device number 15 [ 218.827121][ T6923] udevd[6923]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.229181][ T173] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.303732][ T5876] IPVS: starting estimator thread 0... [ 219.315219][ T7047] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 219.419159][ T7055] IPVS: using max 21 ests per chain, 50400 per kthread [ 219.440086][ T173] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 219.459492][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.470907][ T173] usb 4-1: Product: syz [ 219.476741][ T173] usb 4-1: Manufacturer: syz [ 219.483010][ T173] usb 4-1: SerialNumber: syz [ 219.502553][ T173] ums-karma 4-1:1.0: USB Mass Storage device detected [ 219.695327][ T173] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 219.695327][ T173] Please send a copy of this message to and [ 219.949476][ T7065] input: syz1 as /devices/virtual/input/input20 [ 222.189017][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 222.291610][ T7076] random: crng reseeded on system resumption [ 222.340100][ T173] ums-karma: probe of 4-1:1.0 failed with error -5 [ 222.364652][ T173] usb 4-1: USB disconnect, device number 7 [ 222.988016][ T28] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 223.119174][ T173] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 223.279996][ T7096] input: syz1 as /devices/virtual/input/input21 [ 223.477951][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 223.491509][ T28] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.510625][ T28] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 225.096789][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.122197][ T28] usb 2-1: Product: syz [ 225.129241][ T28] usb 2-1: Manufacturer: syz [ 225.134006][ T28] usb 2-1: SerialNumber: syz [ 225.163770][ T28] usb 2-1: config 0 descriptor?? [ 225.183787][ T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.203332][ T173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.236825][ T173] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.259511][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.283465][ T173] usb 1-1: SerialNumber: syz [ 225.284398][ T28] usb 2-1: USB disconnect, device number 19 [ 225.519435][ T173] usb 1-1: 0:2 : does not exist [ 225.525514][ T173] usb 1-1: unit 4 not found! [ 225.563441][ T173] usb 1-1: USB disconnect, device number 16 [ 225.620422][ T6923] udevd[6923]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.650950][ T7111] random: crng reseeded on system resumption [ 226.846006][ T7122] syz.0.428 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 226.858698][ T7122] CPU: 0 PID: 7122 Comm: syz.0.428 Not tainted syzkaller #0 [ 226.866043][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.876139][ T7122] Call Trace: [ 226.879462][ T7122] [ 226.882433][ T7122] dump_stack_lvl+0x18c/0x250 [ 226.887167][ T7122] ? show_regs_print_info+0x20/0x20 [ 226.892415][ T7122] ? load_image+0x420/0x420 [ 226.896974][ T7122] ? ___ratelimit+0x478/0x610 [ 226.901710][ T7122] ? radix_tree_cpu_dead+0x160/0x160 [ 226.907051][ T7122] dump_header+0xd8/0x820 [ 226.911436][ T7122] oom_kill_process+0x390/0x580 [ 226.916327][ T7122] out_of_memory+0xe0e/0x1200 [ 226.921023][ T7122] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 226.926672][ T7122] ? mutex_lock_nested+0x20/0x20 [ 226.931642][ T7122] ? unregister_oom_notifier+0x20/0x20 [ 226.937140][ T7122] mem_cgroup_out_of_memory+0x2c2/0x390 [ 226.942712][ T7122] ? try_charge_memcg+0xc91/0x17c0 [ 226.947955][ T7122] ? drain_local_stock+0x630/0x630 [ 226.953102][ T7122] ? do_raw_spin_unlock+0x121/0x230 [ 226.958335][ T7122] try_charge_memcg+0xca1/0x17c0 [ 226.963351][ T7122] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 226.969190][ T7122] ? folio_flags+0x120/0x120 [ 226.973819][ T7122] ? shmem_alloc_folio+0x1f4/0x2a0 [ 226.978979][ T7122] ? percpu_ref_tryget+0x15/0x180 [ 226.984015][ T7122] ? get_mem_cgroup_from_mm+0x38/0x290 [ 226.989504][ T7122] charge_memcg+0x11b/0x3b0 [ 226.994042][ T7122] ? __mem_cgroup_charge+0x80/0x80 [ 226.999164][ T7122] ? get_mem_cgroup_from_mm+0x38/0x290 [ 227.004629][ T7122] ? get_mem_cgroup_from_mm+0x38/0x290 [ 227.010106][ T7122] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 227.015668][ T7122] __mem_cgroup_charge+0x25/0x80 [ 227.020631][ T7122] shmem_add_to_page_cache+0x8d3/0x1b80 [ 227.026185][ T7122] ? xas_load+0x12b/0x140 [ 227.030529][ T7122] ? shmem_alloc_folio+0x2a0/0x2a0 [ 227.035658][ T7122] shmem_get_folio_gfp+0x1037/0x2b40 [ 227.040976][ T7122] shmem_fault+0x1b8/0x820 [ 227.045418][ T7122] ? zero_pipe_buf_get+0x10/0x10 [ 227.050382][ T7122] ? handle_mm_fault+0xe6/0x4a50 [ 227.055330][ T7122] ? __lock_acquire+0x7d80/0x7d80 [ 227.060380][ T7122] __do_fault+0x13b/0x4d0 [ 227.064723][ T7122] ? handle_mm_fault+0x3929/0x4a50 [ 227.069849][ T7122] ? handle_mm_fault+0xe6/0x4a50 [ 227.074798][ T7122] handle_mm_fault+0x3945/0x4a50 [ 227.079759][ T7122] ? handle_mm_fault+0xe6/0x4a50 [ 227.084719][ T7122] ? numa_migrate_prep+0x350/0x350 [ 227.089845][ T7122] ? verify_lock_unused+0x140/0x140 [ 227.095097][ T7122] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 227.100398][ T7122] do_user_addr_fault+0x736/0x12d0 [ 227.105552][ T7122] exc_page_fault+0x64/0x100 [ 227.110190][ T7122] asm_exc_page_fault+0x26/0x30 [ 227.115054][ T7122] RIP: 0010:rep_movs_alternative+0x13/0x90 [ 227.120893][ T7122] Code: b6 48 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 [ 227.140595][ T7122] RSP: 0018:ffffc90004ce7910 EFLAGS: 00050202 [ 227.146673][ T7122] RAX: ffffffff8431f301 RBX: 0000000000000001 RCX: 0000000000000001 [ 227.154652][ T7122] RDX: 0000000000000001 RSI: 0000200000004000 RDI: ffff888078c92d40 [ 227.162636][ T7122] RBP: 0000000000000001 R08: ffff888078c92d40 R09: 1ffff1100f1925a8 [ 227.170616][ T7122] R10: dffffc0000000000 R11: ffffed100f1925a9 R12: 0000200000004001 [ 227.178602][ T7122] R13: 0000000000000000 R14: ffff888078c92d40 R15: 0000200000004000 [ 227.186586][ T7122] ? rcuref_put_slowpath+0x101/0x150 [ 227.191893][ T7122] _copy_from_user+0x8b/0xe0 [ 227.196579][ T7122] snd_rawmidi_kernel_write1+0x398/0x610 [ 227.202324][ T7122] snd_rawmidi_write+0x5ac/0xb90 [ 227.207320][ T7122] ? snd_rawmidi_read+0x6d0/0x6d0 [ 227.212379][ T7122] ? do_task_dead+0xd0/0xd0 [ 227.216915][ T7122] ? end_current_label_crit_section+0x149/0x170 [ 227.223273][ T7122] ? common_file_perm+0x198/0x1f0 [ 227.228317][ T7122] ? fsnotify_perm+0x5d/0x5e0 [ 227.233003][ T7122] ? security_file_permission+0x79/0xa0 [ 227.238582][ T7122] do_iter_write+0x4e5/0xc50 [ 227.243204][ T7122] ? snd_rawmidi_read+0x6d0/0x6d0 [ 227.248240][ T7122] ? vfs_iter_write+0xa0/0xa0 [ 227.252934][ T7122] ? __import_iovec+0x3fa/0x850 [ 227.257820][ T7122] ? import_iovec+0x73/0xa0 [ 227.262368][ T7122] do_writev+0x27f/0x480 [ 227.266626][ T7122] ? do_readv+0x460/0x460 [ 227.270973][ T7122] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 227.276983][ T7122] ? lock_chain_count+0x20/0x20 [ 227.281878][ T7122] ? lockdep_hardirqs_on+0x98/0x150 [ 227.287099][ T7122] do_syscall_64+0x55/0xb0 [ 227.291524][ T7122] ? clear_bhb_loop+0x40/0x90 [ 227.296213][ T7122] ? clear_bhb_loop+0x40/0x90 [ 227.300908][ T7122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.306823][ T7122] RIP: 0033:0x7fd0bb59e019 [ 227.311359][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.330976][ T7122] RSP: 002b:00007fd0bc381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 227.339446][ T7122] RAX: ffffffffffffffda RBX: 00007fd0bb825fa0 RCX: 00007fd0bb59e019 [ 227.347432][ T7122] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 227.355408][ T7122] RBP: 00007fd0bb63500c R08: 0000000000000000 R09: 0000000000000000 [ 227.363387][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.371379][ T7122] R13: 00007fd0bb826038 R14: 00007fd0bb825fa0 R15: 00007ffd4ebbe0a8 [ 227.379392][ T7122] [ 227.389511][ T7122] memory: usage 3416kB, limit 3416kB, failcnt 104031 [ 227.396348][ T7122] memory+swap: usage 8172kB, limit 9007199254740988kB, failcnt 0 [ 227.405480][ T7122] kmem: usage 3292kB, limit 9007199254740988kB, failcnt 0 [ 227.413897][ T7122] Memory cgroup stats for /syz0: [ 227.414126][ T7122] cache 126976 [ 227.423844][ T7122] rss 0 [ 227.426640][ T7122] rss_huge 0 [ 227.431064][ T7122] shmem 0 [ 227.434050][ T7122] mapped_file 1339392 [ 227.439384][ T7122] dirty 126976 [ 227.442849][ T7122] writeback 0 [ 227.446165][ T7122] workingset_refault_anon 1477 [ 227.452193][ T7122] workingset_refault_file 3993 [ 227.457063][ T7122] swap 4870144 [ 227.461682][ T7122] pgpgin 143296 [ 227.465187][ T7122] pgpgout 143265 [ 227.470056][ T7122] pgfault 112470 [ 227.473710][ T7122] pgmajfault 1031 [ 227.478786][ T7122] inactive_anon 0 [ 227.483122][ T7122] active_anon 0 [ 227.486639][ T7122] inactive_file 0 [ 227.491177][ T7122] active_file 126976 [ 227.495167][ T7122] unevictable 0 [ 227.499535][ T7122] hierarchical_memory_limit 3497984 [ 227.504831][ T7122] hierarchical_memsw_limit 9223372036854771712 [ 227.512192][ T7122] total_cache 126976 [ 227.516144][ T7122] total_rss 0 [ 227.520706][ T7122] total_rss_huge 0 [ 227.524493][ T7122] total_shmem 0 [ 227.529334][ T7122] total_mapped_file 1339392 [ 227.533910][ T7122] total_dirty 126976 [ 227.538995][ T7122] total_writeback 0 [ 227.542854][ T7122] total_workingset_refault_anon 1477 [ 227.549486][ T7122] total_workingset_refault_file 3993 [ 227.554850][ T7122] total_swap 4870144 [ 227.560001][ T7122] total_pgpgin 143296 [ 227.564035][ T7122] total_pgpgout 143265 [ 227.569385][ T7122] total_pgfault 112470 [ 227.573502][ T7122] total_pgmajfault 1031 [ 227.578952][ T7122] total_inactive_anon 0 [ 227.583151][ T7122] total_active_anon 0 [ 227.587939][ T7122] total_inactive_file 0 [ 227.593407][ T7122] total_active_file 126976 [ 227.599115][ T7122] total_unevictable 0 [ 227.603165][ T7122] anon_cost 0 [ 227.606506][ T7122] file_cost 0 [ 227.611053][ T7122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.428,pid=7121,uid=0 [ 227.629388][ T7122] Memory cgroup out of memory: Killed process 7121 (syz.0.428) total-vm:105780kB, anon-rss:1216kB, file-rss:24448kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 231.848372][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.591778][ T7167] random: crng reseeded on system resumption [ 232.751059][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.773041][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 232.802735][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.874903][ T9] usb 3-1: config 0 descriptor?? [ 233.321720][ T9] usb 3-1: USB disconnect, device number 14 [ 234.192467][ T27] audit: type=1804 audit(1785641117.504:8): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.447" name="/newroot/109/file0/file1" dev="overlay" ino=605 res=1 errno=0 [ 234.249178][ T27] audit: type=1326 audit(1785641118.274:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.329802][ T27] audit: type=1326 audit(1785641118.274:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.391827][ T27] audit: type=1326 audit(1785641118.284:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.463716][ T27] audit: type=1326 audit(1785641118.284:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.490325][ T27] audit: type=1326 audit(1785641118.284:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.515287][ T27] audit: type=1326 audit(1785641118.284:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.563331][ T27] audit: type=1326 audit(1785641118.284:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.595808][ T27] audit: type=1326 audit(1785641118.284:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 234.774545][ T27] audit: type=1326 audit(1785641118.284:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.0.449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd0bb59e019 code=0x7ffc0000 [ 237.574124][ T7217] ceph: No mds server is up or the cluster is laggy [ 237.644666][ T173] libceph: connect (1)[c::]:6789 error -101 [ 237.679549][ T173] libceph: mon0 (1)[c::]:6789 connect error [ 237.718942][ T7224] random: crng reseeded on system resumption [ 237.997020][ T173] libceph: connect (1)[c::]:6789 error -101 [ 238.005409][ T173] libceph: mon0 (1)[c::]:6789 connect error [ 238.377998][ T5827] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 239.279867][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.307454][ T5827] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 239.326931][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.358663][ T5827] usb 4-1: config 0 descriptor?? [ 239.372845][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 239.403682][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 239.445770][ T7244] bridge1: entered promiscuous mode [ 239.464308][ T7244] bridge1: entered allmulticast mode [ 239.477024][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 239.486605][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 239.508848][ T7247] bridge2: entered promiscuous mode [ 239.514225][ T7247] bridge2: entered allmulticast mode [ 239.585348][ T5827] usb 4-1: USB disconnect, device number 8 [ 240.947152][ T7260] random: crng reseeded on system resumption [ 245.146588][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 245.171198][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 245.216154][ T7286] bridge1: entered promiscuous mode [ 245.250668][ T7286] bridge1: entered allmulticast mode [ 245.270517][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 245.285574][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 245.442736][ T28] libceph: connect (1)[c::]:6789 error -101 [ 245.466546][ T7298] ceph: No mds server is up or the cluster is laggy [ 245.476221][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 245.513932][ T7294] bridge2: entered promiscuous mode [ 245.583254][ T7294] bridge2: entered allmulticast mode [ 246.238295][ T5808] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 246.412123][ T7311] random: crng reseeded on system resumption [ 246.659643][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.673915][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.692913][ T5808] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.719757][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.731059][ T5808] usb 3-1: SerialNumber: syz [ 246.991771][ T5808] usb 3-1: 0:2 : does not exist [ 247.024487][ T5808] usb 3-1: unit 4 not found! [ 247.155647][ T5808] usb 3-1: USB disconnect, device number 15 [ 247.295717][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.723306][ T7333] input: syz1 as /devices/virtual/input/input27 [ 249.150534][ T7348] random: crng reseeded on system resumption [ 249.204398][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 249.224649][ T7351] ceph: No mds server is up or the cluster is laggy [ 249.524049][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 250.526410][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 250.526426][ T27] audit: type=1804 audit(1785641134.584:27): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.506" name="/newroot/126/file0/file1" dev="overlay" ino=703 res=1 errno=0 [ 252.290820][ T7401] ceph: No mds server is up or the cluster is laggy [ 252.481470][ T28] libceph: connect (1)[c::]:6789 error -101 [ 252.564635][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 253.033504][ T7397] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 254.137545][ T27] audit: type=1804 audit(1785641137.604:28): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.519" name="/newroot/132/file0/file1" dev="overlay" ino=722 res=1 errno=0 [ 254.402952][ T7417] input: syz1 as /devices/virtual/input/input30 [ 255.426734][ T7425] random: crng reseeded on system resumption [ 255.612992][ T7433] binder: 7431:7433 ioctl c0306201 0 returned -14 [ 256.102310][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.109961][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.866871][ T27] audit: type=1804 audit(1785641140.324:29): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.528" name="/newroot/136/file0/file1" dev="overlay" ino=753 res=1 errno=0 [ 257.509167][ T5810] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 257.630555][ T7451] input: syz1 as /devices/virtual/input/input31 [ 257.724760][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.881012][ T5810] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 258.016485][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.026594][ T173] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 258.340494][ T5810] usb 4-1: config 0 descriptor?? [ 258.457131][ T173] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.499538][ T173] usb 1-1: no configurations [ 258.504204][ T173] usb 1-1: can't read configurations, error -22 [ 258.583089][ T5876] usb 4-1: USB disconnect, device number 9 [ 258.732444][ T7460] binder: 7457:7460 ioctl c0306201 0 returned -14 [ 259.934799][ T7461] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 260.083860][ T7466] random: crng reseeded on system resumption [ 261.008512][ T173] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 261.112250][ T7483] input: syz1 as /devices/virtual/input/input32 [ 261.196061][ T173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.196133][ T173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.209636][ T173] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.209679][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.209731][ T173] usb 2-1: SerialNumber: syz [ 261.886976][ T173] usb 2-1: 0:2 : does not exist [ 261.887083][ T173] usb 2-1: unit 4 not found! [ 261.955979][ T173] usb 2-1: USB disconnect, device number 20 [ 262.062116][ T7453] udevd[7453]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.379419][ T7495] binder: 7492:7495 ioctl c0306201 0 returned -14 [ 262.628058][ T56] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 262.663377][ T5827] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 262.796023][ T7504] random: crng reseeded on system resumption [ 262.811264][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.828742][ T56] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 262.842391][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.854625][ T56] usb 3-1: config 0 descriptor?? [ 262.868534][ T5827] usb 4-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 263.263872][ T5827] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 263.277235][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.285875][ T5827] usb 4-1: Product: syz [ 263.299400][ T5827] usb 4-1: Manufacturer: syz [ 263.304060][ T5827] usb 4-1: SerialNumber: syz [ 263.323505][ T5827] usb-storage 4-1:1.0: USB Mass Storage device detected [ 263.361206][ T5827] scsi host1: usb-storage 4-1:1.0 [ 263.427926][ T5783] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 263.489201][ T7513] input: syz1 as /devices/virtual/input/input33 [ 263.545927][ T9] usb 3-1: USB disconnect, device number 16 [ 263.861660][ T173] usb 4-1: USB disconnect, device number 10 [ 264.477142][ T5783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.505911][ T5783] usb 2-1: no configurations [ 264.511679][ T5783] usb 2-1: can't read configurations, error -22 [ 264.689686][ T7530] random: crng reseeded on system resumption [ 265.029757][ T5827] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 265.214053][ T7539] input: syz1 as /devices/virtual/input/input34 [ 265.264922][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.658981][ T173] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.932102][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.000285][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.006566][ T173] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 266.012040][ T5827] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.029531][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.038329][ T5827] usb 1-1: SerialNumber: syz [ 266.104223][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.142908][ T173] usb 3-1: config 0 descriptor?? [ 266.264757][ T5827] usb 1-1: 0:2 : does not exist [ 266.273782][ T5827] usb 1-1: unit 4 not found! [ 266.319887][ T5827] usb 1-1: USB disconnect, device number 19 [ 266.374399][ T173] usb 3-1: USB disconnect, device number 17 [ 266.412806][ T7453] udevd[7453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.017377][ T7561] input: syz1 as /devices/virtual/input/input35 [ 267.436441][ T5783] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 267.586200][ T7564] random: crng reseeded on system resumption [ 268.275281][ T5783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.296427][ T5783] usb 4-1: no configurations [ 268.318292][ T5783] usb 4-1: can't read configurations, error -22 [ 269.327972][ T56] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 269.587817][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.669336][ T56] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.815655][ T56] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.902130][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.948779][ T56] usb 3-1: SerialNumber: syz [ 270.059255][ T7595] input: syz1 as /devices/virtual/input/input36 [ 270.170472][ T56] usb 3-1: 0:2 : does not exist [ 270.175473][ T56] usb 3-1: unit 4 not found! [ 271.602349][ T56] usb 3-1: USB disconnect, device number 18 [ 271.726338][ T7453] udevd[7453]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.095106][ T7610] random: crng reseeded on system resumption [ 273.003161][ T27] audit: type=1804 audit(1785641156.964:30): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.592" name="/newroot/148/file0/file1" dev="overlay" ino=826 res=1 errno=0 [ 274.882598][ T7626] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 277.388627][ T5827] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 277.867155][ T7640] ======================================================= [ 277.867155][ T7640] WARNING: The mand mount option has been deprecated and [ 277.867155][ T7640] and is ignored by this kernel. Remove the mand [ 277.867155][ T7640] option from the mount to silence this warning. [ 277.867155][ T7640] ======================================================= [ 278.112572][ T7646] random: crng reseeded on system resumption [ 279.718505][ T27] audit: type=1804 audit(1785641163.694:31): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.607" name="/newroot/155/file0/file1" dev="overlay" ino=861 res=1 errno=0 [ 281.149398][ T7662] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 281.729363][ T7669] input: syz1 as /devices/virtual/input/input37 [ 283.182936][ T5810] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 283.512436][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 283.617155][ T5810] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 283.642857][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.669169][ T5810] usb 4-1: Product: syz [ 283.693753][ T5810] usb 4-1: Manufacturer: syz [ 283.724183][ T5810] usb 4-1: SerialNumber: syz [ 283.774905][ T5810] usb 4-1: config 0 descriptor?? [ 283.826005][ T5810] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 283.851071][ T5810] pctv452e: pctv452e_power_ctrl: 1 [ 283.851071][ T5810] [ 283.863507][ T5810] usb 4-1: selecting invalid altsetting 3 [ 283.873196][ T5810] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 283.873196][ T5810] [ 283.891277][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 283.913212][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.930590][ T5810] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 283.958437][ T5810] usb 4-1: media controller created [ 283.968991][ T5810] dvb-usb: bulk message failed: -22 (8/0) [ 283.979100][ T5810] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 283.998992][ T5810] dvb-usb: MAC address reading failed. [ 284.015046][ T7677] dvb-usb: bulk message failed: -22 (7/0) [ 284.053199][ T7677] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 284.075489][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.447212][ T27] audit: type=1804 audit(1785641168.474:32): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.617" name="/newroot/162/file0/file1" dev="overlay" ino=895 res=1 errno=0 [ 284.595555][ T5810] DVB: Unable to find symbol stb0899_attach() [ 284.603512][ T5810] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 289.060555][ T7701] random: crng reseeded on system resumption [ 289.089003][ T5810] rc_core: IR keymap rc-tt-1500 not found [ 289.096097][ T5810] Registered IR keymap rc-empty [ 289.212916][ T5810] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 289.880860][ T5810] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input38 [ 290.150835][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 290.174286][ T5810] pctv452e: pctv452e_power_ctrl: 0 [ 290.174286][ T5810] [ 290.183238][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 290.198897][ T5810] usb 4-1: USB disconnect, device number 13 [ 290.278603][ T7711] syz.3.622 uses obsolete (PF_INET,SOCK_PACKET) [ 290.385600][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 292.212444][ T27] audit: type=1804 audit(1785641176.194:33): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.626" name="/newroot/161/file0/file1" dev="overlay" ino=904 res=1 errno=0 [ 292.348033][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 292.705830][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.721368][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.735797][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.747522][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.764978][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.782407][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.796171][ T7738] random: crng reseeded on system resumption [ 292.810709][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.823798][ T5810] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 292.834886][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.846525][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.858793][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.870710][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.928033][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.158745][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 293.236590][ T5810] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 293.366913][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.484296][ T5810] usb 1-1: Product: syz [ 293.534926][ T5810] usb 1-1: Manufacturer: syz [ 293.615230][ T5810] usb 1-1: SerialNumber: syz [ 293.725304][ T5810] usb 1-1: config 0 descriptor?? [ 293.806897][ T5810] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 293.829444][ T5810] pctv452e: pctv452e_power_ctrl: 1 [ 293.829444][ T5810] [ 293.849429][ T5810] usb 1-1: selecting invalid altsetting 3 [ 293.855209][ T5810] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 293.855209][ T5810] [ 293.889069][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 293.911422][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.950530][ T5810] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 293.974058][ T5810] usb 1-1: media controller created [ 293.994449][ T5810] dvb-usb: bulk message failed: -22 (8/0) [ 294.021679][ T5810] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 294.051321][ T7734] dvb-usb: bulk message failed: -22 (7/0) [ 294.061227][ T5810] dvb-usb: MAC address reading failed. [ 294.071075][ T7734] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 294.166225][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.898624][ T5810] DVB: Unable to find symbol stb0899_attach() [ 294.928984][ T5810] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 295.335828][ T27] audit: type=1804 audit(1785641179.304:34): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.636" name="/newroot/161/file0/file1" dev="overlay" ino=906 res=1 errno=0 [ 295.439124][ T5810] rc_core: IR keymap rc-tt-1500 not found [ 295.455607][ T5810] Registered IR keymap rc-empty [ 295.463927][ T5810] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 295.524318][ T5810] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input39 [ 295.565501][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 295.589341][ T5810] pctv452e: pctv452e_power_ctrl: 0 [ 295.589341][ T5810] [ 295.612205][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 295.676387][ T5810] usb 1-1: USB disconnect, device number 20 [ 295.931247][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 296.766745][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.782744][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.793495][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.804930][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.816611][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.828013][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.841192][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.853081][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.863616][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.875905][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.886556][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.898839][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.997957][ T56] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 297.130697][ T7787] random: crng reseeded on system resumption [ 297.466292][ T27] audit: type=1804 audit(1785641181.494:35): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.648" name="/newroot/169/file0/file1" dev="overlay" ino=955 res=1 errno=0 [ 297.498577][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 297.512174][ T56] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 297.526770][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.535598][ T56] usb 4-1: Product: syz [ 297.540922][ T56] usb 4-1: Manufacturer: syz [ 297.545555][ T56] usb 4-1: SerialNumber: syz [ 297.596341][ T56] usb 4-1: config 0 descriptor?? [ 297.632411][ T56] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 297.652090][ T56] pctv452e: pctv452e_power_ctrl: 1 [ 297.652090][ T56] [ 297.684595][ T56] usb 4-1: selecting invalid altsetting 3 [ 297.725390][ T56] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 297.725390][ T56] [ 297.771361][ T56] dvb-usb: bulk message failed: -22 (5/0) [ 297.809234][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.854249][ T7779] dvb-usb: bulk message failed: -22 (7/0) [ 297.878283][ T56] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 297.890698][ T7779] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 297.911893][ T56] usb 4-1: media controller created [ 297.956112][ T56] dvb-usb: bulk message failed: -22 (8/0) [ 297.977976][ T56] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 298.033878][ T56] dvb-usb: MAC address reading failed. [ 298.125772][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.226842][ T56] DVB: Unable to find symbol stb0899_attach() [ 298.242704][ T56] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 298.397899][ T56] rc_core: IR keymap rc-tt-1500 not found [ 298.404385][ T56] Registered IR keymap rc-empty [ 298.418762][ T56] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 298.440161][ T56] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input40 [ 298.481892][ T56] dvb-usb: schedule remote query interval to 100 msecs. [ 298.493037][ T56] pctv452e: pctv452e_power_ctrl: 0 [ 298.493037][ T56] [ 298.503780][ T56] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 298.568178][ T56] usb 4-1: USB disconnect, device number 14 [ 298.723683][ T56] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 298.951438][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.971811][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.996502][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.016600][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.033984][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.046312][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.081207][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.105058][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.125114][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.139253][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.164073][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.197210][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.882363][ T27] audit: type=1804 audit(1785641183.914:36): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.662" name="/newroot/168/file0/file1" dev="overlay" ino=953 res=1 errno=0 [ 300.002057][ T7823] random: crng reseeded on system resumption [ 300.208979][ T5810] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 300.508989][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 300.516264][ T5810] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 300.527013][ T5810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.538641][ T5810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.550248][ T5810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.562411][ T5810] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.586064][ T5810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.599486][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.667929][ T5783] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 300.823001][ T5810] usb 1-1: usb_control_msg returned -32 [ 300.833447][ T5810] usbtmc 1-1:16.0: can't read capabilities [ 301.587890][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 301.599753][ T5783] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 301.626178][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.648169][ T5783] usb 4-1: Product: syz [ 301.652480][ T5783] usb 4-1: Manufacturer: syz [ 301.657185][ T5783] usb 4-1: SerialNumber: syz [ 301.683763][ T5783] usb 4-1: config 0 descriptor?? [ 301.700396][ T5783] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 301.718319][ T5783] pctv452e: pctv452e_power_ctrl: 1 [ 301.718319][ T5783] [ 301.733319][ T5783] usb 4-1: selecting invalid altsetting 3 [ 301.750865][ T5783] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 301.750865][ T5783] [ 301.765212][ T5783] dvb-usb: bulk message failed: -22 (5/0) [ 301.777036][ T5783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.793108][ T5783] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 301.802583][ T5783] usb 4-1: media controller created [ 301.821871][ T5783] dvb-usb: bulk message failed: -22 (8/0) [ 301.830697][ T5783] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 301.843696][ T5783] dvb-usb: MAC address reading failed. [ 301.868747][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.904146][ T7826] dvb-usb: bulk message failed: -22 (7/0) [ 301.910720][ T7826] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 301.944815][ T5783] DVB: Unable to find symbol stb0899_attach() [ 301.951524][ T5783] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 302.029366][ T5783] rc_core: IR keymap rc-tt-1500 not found [ 302.035180][ T5783] Registered IR keymap rc-empty [ 302.049624][ T5783] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 302.062300][ T5783] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input41 [ 302.075863][ T5783] dvb-usb: schedule remote query interval to 100 msecs. [ 302.083437][ T5783] pctv452e: pctv452e_power_ctrl: 0 [ 302.083437][ T5783] [ 302.091313][ T5783] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 302.121568][ T5783] usb 4-1: USB disconnect, device number 15 [ 302.195436][ T5783] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 302.969192][ T5810] usb 1-1: USB disconnect, device number 21 [ 303.410487][ T27] audit: type=1804 audit(1785641187.444:37): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.674" name="/newroot/179/file0/file1" dev="overlay" ino=1019 res=1 errno=0 [ 303.495197][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.525515][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.543646][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.560832][ T7857] random: crng reseeded on system resumption [ 303.573948][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.591926][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.604126][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.618710][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.631010][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.643514][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.655709][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.669635][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.681905][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.499400][ T5810] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 305.605997][ T7880] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 306.598791][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 306.615228][ T5810] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 306.640360][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.650653][ T5810] usb 1-1: Product: syz [ 306.654865][ T5810] usb 1-1: Manufacturer: syz [ 306.841741][ T5810] usb 1-1: SerialNumber: syz [ 306.874074][ T5810] usb 1-1: config 0 descriptor?? [ 306.896063][ T5810] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 306.905773][ T5810] pctv452e: pctv452e_power_ctrl: 1 [ 306.905773][ T5810] [ 306.926791][ T5810] usb 1-1: selecting invalid altsetting 3 [ 306.991899][ T5810] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 306.991899][ T5810] [ 307.049270][ T27] audit: type=1804 audit(1785641191.104:38): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.685" name="/newroot/150/file0/file1" dev="overlay" ino=832 res=1 errno=0 [ 307.073417][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 307.093540][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.219680][ T5810] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 307.255247][ T5810] usb 1-1: media controller created [ 307.266460][ T5810] dvb-usb: bulk message failed: -22 (8/0) [ 307.309010][ T5810] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 307.317006][ T5810] dvb-usb: MAC address reading failed. [ 307.403446][ T7893] random: crng reseeded on system resumption [ 307.420306][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.833523][ T5810] DVB: Unable to find symbol stb0899_attach() [ 307.885383][ T5810] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 308.029632][ T5810] rc_core: IR keymap rc-tt-1500 not found [ 308.042364][ T5810] Registered IR keymap rc-empty [ 308.059572][ T5810] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 308.094662][ T5810] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input42 [ 308.110783][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 308.118995][ T5810] pctv452e: pctv452e_power_ctrl: 0 [ 308.118995][ T5810] [ 308.126404][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 308.142624][ T5810] usb 1-1: USB disconnect, device number 22 [ 308.243877][ T5810] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 308.718723][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 308.878956][ T9] usb 2-1: device descriptor read/64, error -71 [ 310.088791][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 311.893125][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 311.896036][ T9] usb 2-1: device descriptor read/64, error -71 [ 311.968493][ T5810] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 312.040162][ T9] usb usb2-port1: attempt power cycle [ 312.111394][ T7925] random: crng reseeded on system resumption [ 312.128377][ T5810] usb 3-1: device descriptor read/64, error -71 [ 312.409008][ T5810] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 312.569035][ T5810] usb 3-1: device descriptor read/64, error -71 [ 312.921499][ T5810] usb usb3-port1: attempt power cycle [ 313.237986][ T27] audit: type=1804 audit(1785641197.294:39): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.704" name="/newroot/181/file0/file1" dev="overlay" ino=1002 res=1 errno=0 [ 316.457834][ T5827] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 316.618142][ T5827] usb 2-1: device descriptor read/64, error -71 [ 316.920751][ T5827] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 317.098632][ T5827] usb 2-1: device descriptor read/64, error -71 [ 317.255885][ T5827] usb usb2-port1: attempt power cycle [ 317.390748][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399938][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.628043][ T5808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 317.808288][ T5808] usb 3-1: device descriptor read/64, error -71 [ 319.618307][ T7986] dvmrp0: entered allmulticast mode [ 319.727907][ T5808] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 319.888110][ T5808] usb 3-1: device descriptor read/64, error -71 [ 320.071645][ T5808] usb usb3-port1: attempt power cycle [ 320.200256][ T7984] syz.0.721 invoked oom-killer: gfp_mask=0x2cc0(GFP_KERNEL|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 320.212338][ T7984] CPU: 1 PID: 7984 Comm: syz.0.721 Not tainted syzkaller #0 [ 320.219683][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.229784][ T7984] Call Trace: [ 320.233107][ T7984] [ 320.236062][ T7984] dump_stack_lvl+0x18c/0x250 [ 320.240796][ T7984] ? show_regs_print_info+0x20/0x20 [ 320.246045][ T7984] ? load_image+0x420/0x420 [ 320.250601][ T7984] ? ___ratelimit+0x478/0x610 [ 320.255328][ T7984] ? radix_tree_cpu_dead+0x160/0x160 [ 320.260689][ T7984] dump_header+0xd8/0x820 [ 320.265134][ T7984] oom_kill_process+0x390/0x580 [ 320.270047][ T7984] out_of_memory+0xe0e/0x1200 [ 320.274787][ T7984] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 320.280562][ T7984] ? mutex_lock_nested+0x20/0x20 [ 320.285548][ T7984] ? unregister_oom_notifier+0x20/0x20 [ 320.291078][ T7984] mem_cgroup_out_of_memory+0x2c2/0x390 [ 320.296667][ T7984] ? try_charge_memcg+0xc91/0x17c0 [ 320.301823][ T7984] ? drain_local_stock+0x630/0x630 [ 320.306978][ T7984] ? do_raw_spin_unlock+0x121/0x230 [ 320.312238][ T7984] try_charge_memcg+0xca1/0x17c0 [ 320.317239][ T7984] ? folio_flags+0x120/0x120 [ 320.321868][ T7984] ? percpu_ref_tryget+0x15/0x180 [ 320.326927][ T7984] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 320.332705][ T7984] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 320.338735][ T7984] ? percpu_ref_tryget+0x15/0x180 [ 320.343806][ T7984] ? percpu_ref_tryget+0x15/0x180 [ 320.348879][ T7984] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 320.354645][ T7984] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 320.360420][ T7984] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 320.366279][ T7984] obj_cgroup_charge+0x36e/0x630 [ 320.371271][ T7984] ? get_obj_cgroup_from_current+0xd4/0x280 [ 320.377220][ T7984] ? obj_cgroup_charge+0xed/0x630 [ 320.382280][ T7984] ? mod_objcg_mlstate+0x320/0x320 [ 320.387426][ T7984] ? percpu_ref_tryget+0x15/0x180 [ 320.392490][ T7984] ? percpu_ref_tryget+0x15/0x180 [ 320.397559][ T7984] ? get_obj_cgroup_from_current+0xd4/0x280 [ 320.403500][ T7984] slab_pre_alloc_hook+0x2e2/0x300 [ 320.408658][ T7984] ? _raw_spin_unlock+0x28/0x40 [ 320.413570][ T7984] kmem_cache_alloc_bulk+0x52/0x5a0 [ 320.418859][ T7984] __io_alloc_req_refill+0x279/0x4b0 [ 320.424184][ T7984] ? io_poll_add+0x2b0/0x2b0 [ 320.428836][ T7984] ? io_queue_deferred+0x300/0x300 [ 320.434011][ T7984] ? io_issue_sqe+0x4ee/0xc60 [ 320.438741][ T7984] io_submit_sqes+0xcaf/0x1d30 [ 320.443596][ T7984] __se_sys_io_uring_enter+0x318/0x2510 [ 320.449211][ T7984] ? __fdget_pos+0x1ee/0x330 [ 320.453857][ T7984] ? do_futex+0x2ff/0x3e0 [ 320.458227][ T7984] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 320.463816][ T7984] ? __ia32_sys_get_robust_list+0x110/0x110 [ 320.469764][ T7984] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 320.475787][ T7984] ? lock_chain_count+0x20/0x20 [ 320.480720][ T7984] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 320.486318][ T7984] do_syscall_64+0x55/0xb0 [ 320.490770][ T7984] ? clear_bhb_loop+0x40/0x90 [ 320.495485][ T7984] ? clear_bhb_loop+0x40/0x90 [ 320.500199][ T7984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.506141][ T7984] RIP: 0033:0x7fd0bb59e019 [ 320.510608][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.530260][ T7984] RSP: 002b:00007fd0bc381028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 320.538735][ T7984] RAX: ffffffffffffffda RBX: 00007fd0bb825fa0 RCX: 00007fd0bb59e019 [ 320.546829][ T7984] RDX: 000000000000cf74 RSI: 0000000000002219 RDI: 0000000000000000 [ 320.554869][ T7984] RBP: 00007fd0bb63500c R08: 0000000000000000 R09: 0000000000000000 [ 320.562873][ T7984] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 320.570896][ T7984] R13: 00007fd0bb826038 R14: 00007fd0bb825fa0 R15: 00007ffd4ebbe0a8 [ 320.578916][ T7984] [ 320.668216][ T5808] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 320.675379][ T7984] memory: usage 3416kB, limit 3416kB, failcnt 178107 [ 320.703223][ T5808] usb 3-1: device descriptor read/8, error -71 [ 320.759766][ T7984] memory+swap: usage 8440kB, limit 9007199254740988kB, failcnt 0 [ 320.783055][ T7984] kmem: usage 2792kB, limit 9007199254740988kB, failcnt 0 [ 320.790971][ T27] audit: type=1804 audit(1785641204.804:40): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.724" name="/newroot/190/file0/file1" dev="overlay" ino=1077 res=1 errno=0 [ 320.908710][ T7984] Memory cgroup stats for /syz0: [ 320.909000][ T7984] cache 114688 [ 321.133378][ T7984] rss 512000 [ 321.136657][ T7984] rss_huge 0 [ 321.916158][ T7984] shmem 0 [ 322.030870][ T7984] mapped_file 114688 [ 322.034857][ T7984] dirty 114688 [ 322.058922][ T7984] writeback 0 [ 322.062286][ T7984] workingset_refault_anon 2789 [ 322.067065][ T7984] workingset_refault_file 8809 [ 322.108465][ T7984] swap 5144576 [ 322.111884][ T7984] pgpgin 237018 [ 322.115373][ T7984] pgpgout 236862 [ 322.148880][ T7984] pgfault 169320 [ 322.172119][ T7984] pgmajfault 1963 [ 322.175815][ T7984] inactive_anon 0 [ 322.208763][ T7984] active_anon 262144 [ 322.212710][ T7984] inactive_file 0 [ 322.216361][ T7984] active_file 114688 [ 322.258800][ T7984] unevictable 0 [ 322.262301][ T7984] hierarchical_memory_limit 3497984 [ 322.308867][ T7984] hierarchical_memsw_limit 9223372036854771712 [ 322.315068][ T7984] total_cache 114688 [ 322.335311][ T7984] total_rss 512000 [ 322.345452][ T7984] total_rss_huge 0 [ 322.368478][ T7984] total_shmem 0 [ 322.371980][ T7984] total_mapped_file 114688 [ 322.376452][ T7984] total_dirty 114688 [ 322.426971][ T7984] total_writeback 0 [ 322.437095][ T7984] total_workingset_refault_anon 2789 [ 322.448287][ T7984] total_workingset_refault_file 8809 [ 322.453612][ T7984] total_swap 5144576 [ 322.481054][ T7984] total_pgpgin 237018 [ 322.485089][ T7984] total_pgpgout 236862 [ 322.523135][ T7984] total_pgfault 169320 [ 322.706307][ T7984] total_pgmajfault 1963 [ 322.720630][ T7984] total_inactive_anon 0 [ 322.724882][ T7984] total_active_anon 262144 [ 322.737096][ T7984] total_inactive_file 0 [ 322.747070][ T7984] total_active_file 114688 [ 323.424844][ T7984] total_unevictable 0 [ 323.435322][ T7984] anon_cost 0 [ 323.448894][ T7984] file_cost 0 [ 323.452377][ T7984] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.721,pid=7983,uid=0 [ 323.485931][ T7984] Memory cgroup out of memory: Killed process 7983 (syz.0.721) total-vm:102376kB, anon-rss:1764kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 325.087826][ T8008] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 325.508989][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 325.626914][ T30] oom_reaper: reaped process 7983 (syz.0.721), now anon-rss:24kB, file-rss:21952kB, shmem-rss:0kB [ 325.669971][ T8] usb 2-1: device descriptor read/64, error -71 [ 325.791830][ T5782] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 325.826128][ T5782] CPU: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 [ 325.833774][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.843959][ T5782] Call Trace: [ 325.847280][ T5782] [ 325.850246][ T5782] dump_stack_lvl+0x18c/0x250 [ 325.854976][ T5782] ? show_regs_print_info+0x20/0x20 [ 325.860228][ T5782] ? load_image+0x420/0x420 [ 325.864780][ T5782] ? ___ratelimit+0x478/0x610 [ 325.869494][ T5782] ? radix_tree_cpu_dead+0x160/0x160 [ 325.874844][ T5782] dump_header+0xd8/0x820 [ 325.879242][ T5782] oom_kill_process+0x390/0x580 [ 325.884145][ T5782] out_of_memory+0xe0e/0x1200 [ 325.888875][ T5782] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 325.894543][ T5782] ? print_unlock_imbalance_bug+0x160/0x160 [ 325.900488][ T5782] ? mutex_lock_nested+0x20/0x20 [ 325.905472][ T5782] ? unregister_oom_notifier+0x20/0x20 [ 325.911004][ T5782] mem_cgroup_out_of_memory+0x2c2/0x390 [ 325.916595][ T5782] ? try_charge_memcg+0xc91/0x17c0 [ 325.921747][ T5782] ? drain_local_stock+0x630/0x630 [ 325.926908][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 325.932151][ T5782] try_charge_memcg+0xca1/0x17c0 [ 325.937145][ T5782] ? verify_lock_unused+0x140/0x140 [ 325.942382][ T5782] ? folio_flags+0x120/0x120 [ 325.947007][ T5782] ? __next_zones_zonelist+0x9d/0x130 [ 325.952447][ T5782] charge_memcg+0x11b/0x3b0 [ 325.956995][ T5782] ? __mem_cgroup_charge+0x80/0x80 [ 325.962167][ T5782] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 325.968358][ T5782] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 325.974470][ T5782] __read_swap_cache_async+0x3f4/0x9c0 [ 325.979999][ T5782] swap_cluster_readahead+0x385/0x670 [ 325.985434][ T5782] ? read_swap_cache_async+0x90/0x90 [ 325.990775][ T5782] ? xas_load+0x12b/0x140 [ 325.995141][ T5782] ? filemap_get_entry+0xce/0x3f0 [ 326.000216][ T5782] ? filemap_get_entry+0xce/0x3f0 [ 326.005285][ T5782] ? filemap_get_entry+0x375/0x3f0 [ 326.010448][ T5782] swapin_readahead+0x108/0xa60 [ 326.015358][ T5782] ? get_swap_device+0x96/0x3f0 [ 326.020252][ T5782] ? exit_swap_address_space+0x290/0x290 [ 326.025937][ T5782] ? __filemap_get_folio+0x939/0xbe0 [ 326.031307][ T5782] ? swap_cache_get_folio+0xad/0x590 [ 326.036641][ T5782] ? get_swap_device+0x26e/0x3f0 [ 326.041635][ T5782] do_swap_page+0x435/0x3f50 [ 326.046264][ T5782] ? print_unlock_imbalance_bug+0x160/0x160 [ 326.052217][ T5782] ? do_swap_page+0xcf/0x3f50 [ 326.056932][ T5782] ? pte_offset_map_nolock+0xb9/0x130 [ 326.062344][ T5782] ? handle_mm_fault+0xe6/0x4a50 [ 326.067322][ T5782] handle_mm_fault+0x10a6/0x4a50 [ 326.072308][ T5782] ? handle_mm_fault+0xe6/0x4a50 [ 326.077287][ T5782] ? lock_vma_under_rcu+0x52c/0x660 [ 326.082521][ T5782] ? numa_migrate_prep+0x350/0x350 [ 326.087682][ T5782] ? lock_vma_under_rcu+0xe5/0x660 [ 326.092856][ T5782] ? do_user_addr_fault+0x1cb/0x12d0 [ 326.098192][ T5782] do_user_addr_fault+0xad2/0x12d0 [ 326.103354][ T5782] ? rcu_is_watching+0x15/0xb0 [ 326.108282][ T5782] exc_page_fault+0x64/0x100 [ 326.112920][ T5782] ? clear_bhb_loop+0x40/0x90 [ 326.117648][ T5782] asm_exc_page_fault+0x26/0x30 [ 326.122540][ T5782] RIP: 0033:0x7fd0bb55e84e [ 326.127019][ T5782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.146679][ T5782] RSP: 002b:00007ffd4ebbe388 EFLAGS: 00010246 [ 326.152790][ T5782] RAX: 0000000000000000 RBX: 0000555555729500 RCX: 00007fd0bb55e84e [ 326.160795][ T5782] RDX: 00007ffd4ebbe3e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.168802][ T5782] RBP: 00007ffd4ebbe44c R08: 0000000000000000 R09: 0000000000000000 [ 326.176835][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 326.184844][ T5782] R13: 00000000000927c0 R14: 000000000004e07b R15: 00007ffd4ebbe4a0 [ 326.192869][ T5782] [ 326.248220][ T5782] memory: usage 3416kB, limit 3416kB, failcnt 178328 [ 326.254966][ T5782] memory+swap: usage 8284kB, limit 9007199254740988kB, failcnt 0 [ 326.288968][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 326.352645][ T5782] kmem: usage 2792kB, limit 9007199254740988kB, failcnt 0 [ 326.398994][ T5782] Memory cgroup stats for /syz0: [ 326.399151][ T5782] cache 114688 [ 326.413127][ T5782] rss 0 [ 326.415937][ T5782] rss_huge 0 [ 326.425497][ T5782] shmem 0 [ 326.449016][ T8] usb 2-1: device descriptor read/64, error -71 [ 326.457926][ T5782] mapped_file 114688 [ 326.461942][ T5782] dirty 114688 [ 326.465341][ T5782] writeback 0 [ 326.498044][ T5782] workingset_refault_anon 2789 [ 326.535936][ T5782] workingset_refault_file 8809 [ 326.545944][ T5782] swap 4984832 [ 326.557880][ T5782] pgpgin 237018 [ 326.564352][ T5782] pgpgout 236862 [ 326.569553][ T8] usb usb2-port1: attempt power cycle [ 326.582723][ T5782] pgfault 169322 [ 326.593093][ T5782] pgmajfault 1963 [ 326.596767][ T5782] inactive_anon 0 [ 326.612251][ T5782] active_anon 262144 [ 326.616238][ T5782] inactive_file 0 [ 326.623516][ T5782] active_file 114688 [ 326.628444][ T5782] unevictable 0 [ 326.631938][ T5782] hierarchical_memory_limit 3497984 [ 326.646129][ T5782] hierarchical_memsw_limit 9223372036854771712 [ 326.653380][ T5782] total_cache 114688 [ 326.661169][ T5782] total_rss 0 [ 326.664506][ T5782] total_rss_huge 0 [ 326.668764][ T5782] total_shmem 0 [ 326.672263][ T5782] total_mapped_file 114688 [ 326.676711][ T5782] total_dirty 114688 [ 326.681643][ T5782] total_writeback 0 [ 326.685496][ T5782] total_workingset_refault_anon 2789 [ 326.691799][ T5782] total_workingset_refault_file 8809 [ 326.697126][ T5782] total_swap 4984832 [ 326.712191][ T5782] total_pgpgin 237018 [ 326.716388][ T5782] total_pgpgout 236862 [ 326.734291][ T5782] total_pgfault 169322 [ 326.739457][ T5782] total_pgmajfault 1963 [ 326.743685][ T5782] total_inactive_anon 0 [ 326.748783][ T5782] total_active_anon 262144 [ 326.753316][ T5782] total_inactive_file 0 [ 326.758549][ T5782] total_active_file 114688 [ 326.763012][ T5782] total_unevictable 0 [ 326.767094][ T5782] anon_cost 0 [ 326.786824][ T5782] file_cost 0 [ 326.831443][ T5782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.390,pid=7017,uid=0 [ 326.853141][ T5782] Memory cgroup out of memory: Killed process 7017 (syz.0.390) total-vm:104556kB, anon-rss:1252kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 327.541187][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 327.581276][ T8] usb 2-1: device descriptor read/8, error -71 [ 328.783789][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 328.864303][ T8] usb 2-1: device descriptor read/8, error -71 [ 329.072873][ T8] usb usb2-port1: unable to enumerate USB device [ 329.434027][ T27] audit: type=1804 audit(1785641213.494:41): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.751" name="/newroot/201/file0/file1" dev="overlay" ino=1143 res=1 errno=0 [ 329.628181][ T8069] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 333.668630][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 333.880687][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.041700][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.525726][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.639045][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.648595][ T8] usb 4-1: SerialNumber: syz [ 334.949032][ T8088] netlink: 104 bytes leftover after parsing attributes in process `syz.1.757'. [ 334.999806][ T8] usb 4-1: 0:2 : does not exist [ 335.070471][ T8] usb 4-1: USB disconnect, device number 16 [ 335.142435][ T8079] udevd[8079]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.218420][ T27] audit: type=1804 audit(1785641224.554:42): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.767" name="/newroot/170/file0/file1" dev="overlay" ino=950 res=1 errno=0 [ 347.002798][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'. [ 347.754492][ T8145] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 347.908751][ T8150] input: syz1 as /devices/virtual/input/input43 [ 351.666382][ T27] audit: type=1804 audit(1785641235.724:43): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.777" name="/newroot/204/file0/file1" dev="overlay" ino=1161 res=1 errno=0 [ 352.137993][ T56] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 352.330633][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.358045][ T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.392203][ T56] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.433306][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.456741][ T56] usb 1-1: SerialNumber: syz [ 353.333175][ T56] usb 1-1: 0:2 : does not exist [ 353.349034][ T56] usb 1-1: USB disconnect, device number 23 [ 353.562566][ T8149] udevd[8149]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.102196][ T8179] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 354.350348][ T8190] input: syz1 as /devices/virtual/input/input44 [ 356.426433][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 358.106413][ T27] audit: type=1804 audit(1785641242.164:44): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.795" name="/newroot/178/file0/file1" dev="overlay" ino=1002 res=1 errno=0 [ 358.259142][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 358.720252][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.743587][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.757116][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.774617][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.785526][ T9] usb 1-1: SerialNumber: syz [ 359.015287][ T9] usb 1-1: 0:2 : does not exist [ 359.099011][ T8222] input: syz1 as /devices/virtual/input/input45 [ 359.134221][ T9] usb 1-1: USB disconnect, device number 24 [ 359.901654][ T8149] udevd[8149]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.282372][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 367.518318][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 367.738928][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 367.749820][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 367.771406][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.788964][ T9] usb 4-1: Product: syz [ 367.793258][ T9] usb 4-1: Manufacturer: syz [ 367.808911][ T9] usb 4-1: SerialNumber: syz [ 367.825063][ T9] usb 4-1: config 0 descriptor?? [ 367.854743][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 367.878990][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 367.878990][ T9] [ 367.886804][ T9] usb 4-1: selecting invalid altsetting 3 [ 367.920876][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 367.920876][ T9] [ 367.938537][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 367.971855][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.009221][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 368.036931][ T9] usb 4-1: media controller created [ 368.110307][ T8276] input: syz1 as /devices/virtual/input/input46 [ 368.142725][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 368.214464][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 368.335899][ T9] dvb-usb: MAC address reading failed. [ 368.398579][ T173] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 368.761757][ T173] usb 1-1: no configurations [ 368.851075][ T173] usb 1-1: can't read configurations, error -22 [ 369.200009][ T173] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 369.540489][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.661076][ T173] usb 1-1: no configurations [ 369.725985][ T173] usb 1-1: can't read configurations, error -22 [ 369.854957][ T173] usb usb1-port1: attempt power cycle [ 370.348999][ T173] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 370.483500][ T173] usb 1-1: no configurations [ 370.559194][ T173] usb 1-1: can't read configurations, error -22 [ 371.004859][ T9] DVB: Unable to find symbol stb0899_attach() [ 371.025922][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 371.035553][ T5810] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 371.059049][ T173] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 371.113248][ T27] audit: type=1804 audit(1785641255.174:45): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.821" name="/newroot/183/file0/file1" dev="overlay" ino=1038 res=1 errno=0 [ 371.131937][ T173] usb 1-1: device descriptor read/8, error -71 [ 371.280426][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.299045][ T173] usb usb1-port1: unable to enumerate USB device [ 371.508959][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.544707][ T5810] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 371.559590][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 371.569528][ T9] rc_core: IR keymap rc-tt-1500 not found [ 371.575270][ T9] Registered IR keymap rc-empty [ 371.590281][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 371.611407][ T5810] usb 2-1: SerialNumber: syz [ 371.659488][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input47 [ 371.723753][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 371.759002][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 371.759002][ T9] [ 371.793745][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 371.839296][ T9] usb 4-1: USB disconnect, device number 17 [ 371.880347][ T5810] usb 2-1: 0:2 : does not exist [ 371.955239][ T5810] usb 2-1: USB disconnect, device number 34 [ 371.976851][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 372.166129][ T8280] udevd[8280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.608745][ T8298] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 375.068919][ T5810] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 375.199188][ T5808] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 375.430941][ T5810] usb 1-1: no configurations [ 375.968894][ T5810] usb 1-1: can't read configurations, error -22 [ 376.077385][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 376.112334][ T5808] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 376.148654][ T5810] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 376.156805][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.183345][ T5808] usb 2-1: Product: syz [ 376.195052][ T5808] usb 2-1: Manufacturer: syz [ 376.207348][ T5808] usb 2-1: SerialNumber: syz [ 376.228629][ T5808] usb 2-1: config 0 descriptor?? [ 376.239654][ T5808] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 376.259333][ T5808] pctv452e: pctv452e_power_ctrl: 1 [ 376.259333][ T5808] [ 376.266704][ T5808] usb 2-1: selecting invalid altsetting 3 [ 376.279164][ T5808] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 376.279164][ T5808] [ 376.291651][ T5808] dvb-usb: bulk message failed: -22 (5/0) [ 376.323322][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 376.342560][ T5810] usb 1-1: no configurations [ 376.348475][ T5808] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 376.348547][ T5808] usb 2-1: media controller created [ 376.348624][ T5808] dvb-usb: bulk message failed: -22 (8/0) [ 376.348658][ T5808] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 376.348728][ T5808] dvb-usb: MAC address reading failed. [ 376.401097][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.435494][ T5810] usb 1-1: can't read configurations, error -22 [ 376.453813][ T5810] usb usb1-port1: attempt power cycle [ 376.598578][ T5808] DVB: Unable to find symbol stb0899_attach() [ 376.604904][ T5808] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 376.702384][ T5808] rc_core: IR keymap rc-tt-1500 not found [ 376.708818][ T5808] Registered IR keymap rc-empty [ 376.714857][ T5808] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 376.733964][ T5808] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input48 [ 376.822678][ T8327] input: syz1 as /devices/virtual/input/input49 [ 376.899173][ T5810] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 376.944481][ T5810] usb 1-1: no configurations [ 376.982616][ T5810] usb 1-1: can't read configurations, error -22 [ 377.311834][ T5810] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 377.525493][ T5810] usb 1-1: no configurations [ 377.588751][ T5810] usb 1-1: can't read configurations, error -22 [ 377.612924][ T5808] dvb-usb: schedule remote query interval to 100 msecs. [ 377.620734][ T5808] pctv452e: pctv452e_power_ctrl: 0 [ 377.620734][ T5808] [ 377.628604][ T5808] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 377.641626][ T5808] usb 2-1: USB disconnect, device number 35 [ 377.649987][ T5810] usb usb1-port1: unable to enumerate USB device [ 377.756606][ T5808] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 382.005178][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.040699][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.309658][ T8361] input: syz1 as /devices/virtual/input/input50 [ 383.868308][ T5808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 384.160850][ T5808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.180664][ T5808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.210433][ T5808] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 384.246127][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.392615][ T5808] usb 4-1: config 0 descriptor?? [ 384.688767][ T5808] usb 4-1: string descriptor 0 read error: -71 [ 384.832742][ T5808] usb 4-1: USB disconnect, device number 18 [ 387.258966][ T5810] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 387.491397][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.523655][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.546857][ T5810] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 387.603526][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 387.686848][ T5810] usb 2-1: SerialNumber: syz [ 388.320338][ T5810] usb 2-1: 0:2 : does not exist [ 388.380038][ T5810] usb 2-1: USB disconnect, device number 36 [ 389.034734][ T8395] input: syz1 as /devices/virtual/input/input51 [ 389.360461][ T8350] udevd[8350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.110012][ T8402] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 390.438790][ T5810] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 390.630130][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.654245][ T5810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.693222][ T5810] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 390.729434][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.750563][ T5810] usb 3-1: config 0 descriptor?? [ 390.973480][ T5810] usb 3-1: string descriptor 0 read error: -71 [ 390.994371][ T5810] usb 3-1: USB disconnect, device number 26 [ 393.161155][ T27] audit: type=1804 audit(1785641276.844:46): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.853" name="/newroot/190/file0/file1" dev="overlay" ino=1087 res=1 errno=0 [ 395.399581][ T8428] input: syz1 as /devices/virtual/input/input52 [ 396.269321][ T5810] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 398.004233][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.068918][ T5810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.095098][ T5810] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.119097][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.142242][ T5810] usb 1-1: SerialNumber: syz [ 398.381593][ T5810] usb 1-1: 0:2 : does not exist [ 398.554081][ T5810] usb 1-1: USB disconnect, device number 33 [ 399.036133][ T8350] udevd[8350]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.500688][ T173] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 399.753774][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.900730][ T173] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.274403][ T173] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 400.308911][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.339863][ T173] usb 3-1: config 0 descriptor?? [ 400.468348][ T8467] input: syz1 as /devices/virtual/input/input53 [ 403.029271][ T173] usb 3-1: string descriptor 0 read error: -71 [ 403.056186][ T173] usb 3-1: USB disconnect, device number 27 [ 406.262731][ T5808] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 407.314772][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.329254][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.341834][ T5808] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.351812][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.363938][ T5808] usb 2-1: SerialNumber: syz [ 407.563035][ T8502] input: syz1 as /devices/virtual/input/input54 [ 408.314213][ T5808] usb 2-1: 0:2 : does not exist [ 408.413391][ T5808] usb 2-1: USB disconnect, device number 37 [ 408.535870][ T8474] udevd[8474]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.609081][ T5810] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 409.748907][ T8492] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 414.338342][ T5810] usb 3-1: device not accepting address 28, error -71 [ 414.685236][ T8526] input: syz1 as /devices/virtual/input/input55 [ 416.939227][ T5810] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 417.260452][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.271684][ T5810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.283346][ T5810] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.075029][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.084793][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 418.095131][ T5810] usb 4-1: SerialNumber: syz [ 418.280867][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.316941][ T5810] usb 4-1: 0:2 : does not exist [ 418.338656][ T5876] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.377170][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 418.400200][ T5810] usb 4-1: USB disconnect, device number 19 [ 418.418336][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.119741][ T5876] usb 2-1: config 0 descriptor?? [ 420.154393][ T5876] usb 2-1: can't set config #0, error -71 [ 420.173777][ T5876] usb 2-1: USB disconnect, device number 38 [ 420.185015][ T8474] udevd[8474]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.012068][ T8564] input: syz1 as /devices/virtual/input/input56 [ 428.312528][ T8582] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 430.358289][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 430.883190][ T27] audit: type=1804 audit(1785641314.944:47): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.906" name="/newroot/247/file0/file1" dev="overlay" ino=1392 res=1 errno=0 [ 430.957851][ T56] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 431.067831][ T5783] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 431.324510][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.595387][ T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.935895][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.969392][ T5783] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.987628][ T56] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.017994][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.030771][ T56] usb 1-1: SerialNumber: syz [ 432.036609][ T5783] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 432.059637][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.077878][ T5783] usb 4-1: config 0 descriptor?? [ 432.294246][ T56] usb 1-1: 0:2 : does not exist [ 432.322196][ T173] usb 4-1: USB disconnect, device number 20 [ 432.387758][ T56] usb 1-1: USB disconnect, device number 34 [ 432.500970][ T8604] udevd[8604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.650685][ T8616] input: syz1 as /devices/virtual/input/input57 [ 435.897075][ T8627] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 436.958262][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 437.467439][ T5808] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 437.682826][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.703949][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.756490][ T5808] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 437.766497][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.788324][ T5808] usb 2-1: SerialNumber: syz [ 438.012304][ T5808] usb 2-1: 0:2 : does not exist [ 438.069635][ T5808] usb 2-1: USB disconnect, device number 39 [ 438.162260][ T8604] udevd[8604]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.230513][ T27] audit: type=1804 audit(1785641322.294:48): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.930" name="/newroot/220/file0/file1" dev="overlay" ino=1222 res=1 errno=0 [ 439.617861][ T5808] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 439.840016][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.867846][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 439.883013][ T5808] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 439.904098][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.932377][ T5808] usb 3-1: config 0 descriptor?? [ 439.958281][ T5808] em28xx 3-1:0.0: audio device (2040:1605): interface 0, class 1 [ 441.604031][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.611954][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.705088][ T5808] usb 3-1: USB disconnect, device number 30 [ 441.990536][ T8660] input: syz1 as /devices/virtual/input/input58 [ 444.412737][ T8663] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 449.018060][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 451.756799][ T5876] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 454.671422][ T5876] usb 2-1: device not accepting address 40, error -71 [ 454.778699][ T8703] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 455.893460][ T51] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 458.350408][ T27] audit: type=1804 audit(1785641341.704:49): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.958" name="/newroot/252/file0/file1" dev="overlay" ino=1430 res=1 errno=0 [ 458.458262][ T8730] input: syz1 as /devices/virtual/input/input59 [ 458.538916][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 461.138399][ T51] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 463.764218][ T8758] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 465.127428][ T27] audit: type=1804 audit(1785641348.794:50): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.968" name="/newroot/256/file0/file1" dev="overlay" ino=1462 res=1 errno=0 [ 465.409034][ T8768] input: syz1 as /devices/virtual/input/input60 [ 466.488008][ T5808] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 466.721071][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.742027][ T5808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.769778][ T5808] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.788129][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.817194][ T5808] usb 1-1: SerialNumber: syz [ 467.126278][ T5808] usb 1-1: 0:2 : does not exist [ 467.206744][ T5808] usb 1-1: USB disconnect, device number 35 [ 467.301250][ T8776] udevd[8776]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.479362][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 473.911525][ T8817] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 474.132317][ T51] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 474.707364][ T56] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 474.908345][ T56] usb 4-1: device descriptor read/64, error -71 [ 474.926571][ T8832] input: syz1 as /devices/virtual/input/input61 [ 475.977936][ T56] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 476.148840][ T56] usb 4-1: device descriptor read/64, error -71 [ 476.288588][ T56] usb usb4-port1: attempt power cycle [ 476.797810][ T56] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 478.841011][ T56] usb 4-1: device descriptor read/8, error -71 [ 479.505286][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 480.633448][ T8862] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 483.314596][ T8869] input: syz1 as /devices/virtual/input/input62 [ 486.317825][ T5827] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 486.477968][ T5827] usb 3-1: device descriptor read/64, error -71 [ 487.647877][ T5827] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 487.827739][ T5827] usb 3-1: device descriptor read/64, error -71 [ 488.100134][ T5827] usb usb3-port1: attempt power cycle [ 488.356963][ T27] audit: type=1804 audit(1785641372.314:51): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1004" name="/newroot/227/file0/file1" dev="overlay" ino=1301 res=1 errno=0 [ 488.902782][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 489.801071][ T8896] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 492.367719][ T5827] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 492.434141][ T5827] usb 3-1: device descriptor read/8, error -71 [ 492.508278][ T8904] input: syz1 as /devices/virtual/input/input63 [ 497.489346][ T8920] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 497.882648][ T27] audit: type=1804 audit(1785641380.644:52): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1018" name="/newroot/231/file0/file1" dev="overlay" ino=1332 res=1 errno=0 [ 500.096551][ T5876] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 500.142070][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 500.278934][ T5876] usb 3-1: device descriptor read/64, error -71 [ 500.293071][ T8946] input: syz1 as /devices/virtual/input/input64 [ 502.604384][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.685203][ T5876] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 502.686112][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.155750][ T27] audit: type=1804 audit(1785641387.754:53): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1029" name="/newroot/235/file0/file1" dev="overlay" ino=1365 res=1 errno=0 [ 504.192209][ T5876] usb 3-1: device descriptor read/64, error -71 [ 505.140033][ T8962] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 508.119384][ T5876] usb usb3-port1: attempt power cycle [ 511.878287][ T8993] input: syz1 as /devices/virtual/input/input65 [ 513.857770][ T27] audit: type=1804 audit(1785641397.164:54): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1040" name="/newroot/239/file0/file1" dev="overlay" ino=1398 res=1 errno=0 [ 514.749247][ T9013] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 515.750823][ T5810] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 516.541422][ T51] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 518.941096][ T5810] usb 2-1: device descriptor read/64, error -71 [ 521.052586][ T9039] input: syz1 as /devices/virtual/input/input66 [ 522.874054][ T27] audit: type=1804 audit(1785641406.594:55): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1051" name="/newroot/276/file0/file1" dev="overlay" ino=1581 res=1 errno=0 [ 523.968805][ T9050] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 527.685646][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 528.204852][ T9076] input: syz1 as /devices/virtual/input/input67 [ 529.074328][ T56] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 531.836943][ T27] audit: type=1804 audit(1785641414.684:56): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1063" name="/newroot/251/file0/file1" dev="overlay" ino=1398 res=1 errno=0 [ 531.967840][ T56] usb 3-1: device descriptor read/64, error -71 [ 534.182114][ T51] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 538.125833][ T9119] input: syz1 as /devices/virtual/input/input68 [ 539.800769][ T27] audit: type=1804 audit(1785641423.804:57): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1076" name="/newroot/284/file0/file1" dev="overlay" ino=1634 res=1 errno=0 [ 540.544202][ T5876] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 540.729080][ T5876] usb 3-1: device descriptor read/64, error -71 [ 540.998973][ T5876] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 541.218998][ T5876] usb 3-1: device descriptor read/64, error -71 [ 541.396788][ T5876] usb usb3-port1: attempt power cycle [ 543.392060][ T5876] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 548.046170][ T5876] usb 3-1: device descriptor read/8, error -71 [ 548.097071][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 551.788843][ T9187] input: syz1 as /devices/virtual/input/input69 [ 558.399862][ T56] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 560.079883][ T51] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 560.151558][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.170248][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.196460][ T56] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.213447][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.224696][ T56] usb 2-1: SerialNumber: syz [ 560.312305][ T9226] input: syz1 as /devices/virtual/input/input70 [ 560.625996][ T56] usb 2-1: invalid UAC_HEADER (v1) [ 561.176723][ T56] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 561.196798][ T56] usb 2-1: USB disconnect, device number 44 [ 561.332613][ T9215] udevd[9215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.227724][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.234191][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.309876][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 568.613680][ T9257] input: syz1 as /devices/virtual/input/input71 [ 573.787714][ T5783] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 573.990232][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.023872][ T5783] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.049468][ T51] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 574.057161][ T5783] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 574.076838][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.097684][ T5783] usb 1-1: SerialNumber: syz [ 574.350960][ T9290] input: syz1 as /devices/virtual/input/input72 [ 574.558045][ T5783] usb 1-1: invalid UAC_HEADER (v1) [ 575.134491][ T5783] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 575.259626][ T5783] usb 1-1: USB disconnect, device number 36 [ 575.325866][ T9298] udevd[9298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.225823][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 578.393374][ T9329] input: syz1 as /devices/virtual/input/input73 [ 578.739723][ T5808] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 579.439836][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.472636][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.510950][ T5808] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 579.547774][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.585097][ T5808] usb 3-1: SerialNumber: syz [ 585.673766][ T5808] usb 3-1: invalid UAC_HEADER (v1) [ 585.773465][ T5808] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 585.810160][ T5808] usb 3-1: USB disconnect, device number 45 [ 585.895158][ T9298] udevd[9298]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.792783][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 587.454628][ T9362] input: syz1 as /devices/virtual/input/input74 [ 592.725973][ T9395] input: syz1 as /devices/virtual/input/input75 [ 594.457209][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 595.800775][ T9028] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 595.991311][ T9028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.015793][ T9028] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.030548][ T9028] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 596.054163][ T9028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 596.064405][ T9028] usb 3-1: SerialNumber: syz [ 596.168680][ T27] audit: type=1804 audit(1785641480.204:58): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1159" name="/newroot/267/file0/file1" dev="overlay" ino=1561 res=1 errno=0 [ 596.316508][ T9028] usb 3-1: 0:2 : does not exist [ 596.380982][ T9028] usb 3-1: USB disconnect, device number 46 [ 596.469335][ T9298] udevd[9298]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.138565][ T9429] input: syz1 as /devices/virtual/input/input76 [ 599.862861][ T56] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 600.080490][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.098477][ T56] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.138961][ T56] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.158455][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.193923][ T56] usb 4-1: SerialNumber: syz [ 600.367881][ T9461] input: syz1 as /devices/virtual/input/input77 [ 601.144364][ T56] usb 4-1: 0:2 : does not exist [ 601.246198][ T56] usb 4-1: USB disconnect, device number 25 [ 601.302843][ T9464] udevd[9464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.979127][ T27] audit: type=1804 audit(1785641486.634:59): pid=9476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1179" name="/newroot/312/file0/file1" dev="overlay" ino=1751 res=1 errno=0 [ 604.218720][ T9492] input: syz1 as /devices/virtual/input/input78 [ 607.707876][ T5808] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 607.960490][ T27] audit: type=1804 audit(1785641492.024:60): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1195" name="/newroot/272/file0/file1" dev="overlay" ino=1600 res=1 errno=0 [ 608.219598][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.251097][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.274898][ T5808] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 608.314388][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 608.503120][ T5808] usb 3-1: SerialNumber: syz [ 608.644144][ T9529] input: syz1 as /devices/virtual/input/input79 [ 609.429642][ T5808] usb 3-1: 0:2 : does not exist [ 609.466683][ T5808] usb 3-1: USB disconnect, device number 47 [ 609.541230][ T9464] udevd[9464]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.019565][ T9553] input: syz1 as /devices/virtual/input/input80 [ 613.723288][ T9028] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 613.740003][ T27] audit: type=1804 audit(1785641497.404:61): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1210" name="/newroot/326/file0/file1" dev="overlay" ino=1871 res=1 errno=0 [ 614.890477][ T9028] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.029888][ T9028] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.200791][ T9028] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 615.240970][ T9028] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 615.258285][ T9028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 615.276574][ T9028] usb 4-1: SerialNumber: syz [ 615.528972][ T9028] usb 4-1: 0:2 : does not exist [ 615.576694][ T9028] usb 4-1: USB disconnect, device number 26 [ 615.759574][ T9578] input: syz1 as /devices/virtual/input/input81 [ 617.861287][ T27] audit: type=1804 audit(1785641501.604:62): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1223" name="/newroot/324/file0/file1" dev="overlay" ino=1823 res=1 errno=0 [ 619.888555][ T5810] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 620.079157][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 620.119019][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.161381][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 620.246562][ T9613] input: syz1 as /devices/virtual/input/input82 [ 620.943895][ T5810] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 621.078803][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.122115][ T5810] usb 4-1: config 0 descriptor?? [ 621.196422][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'. [ 621.226136][ T9619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'. [ 621.246666][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'. [ 621.288831][ T9619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'. [ 621.722613][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x1 [ 621.738890][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 621.746713][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 622.512618][ T27] audit: type=1804 audit(1785641506.314:63): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1234" name="/newroot/326/file0/file1" dev="overlay" ino=1844 res=1 errno=0 [ 622.558649][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 622.566360][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 622.598818][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 622.617820][ T28] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 622.621134][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 622.662049][ T5810] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 622.734015][ T5810] hid-multitouch 0003:0EEF:72D0.0001: hidraw0: USB HID v0.08 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 622.800440][ T5810] usb 4-1: USB disconnect, device number 27 [ 623.057186][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.076966][ T28] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.085923][ T28] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 623.102250][ T28] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 623.161215][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 623.208511][ T28] usb 2-1: SerialNumber: syz [ 623.524480][ T28] usb 2-1: 0:2 : does not exist [ 623.612145][ T28] usb 2-1: USB disconnect, device number 45 [ 623.857061][ T9631] fido_id[9631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 624.082395][ T9635] udevd[9635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.581647][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.589740][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.016432][ T9645] input: syz1 as /devices/virtual/input/input83 [ 627.198789][ T27] audit: type=1804 audit(1785641510.604:64): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1244" name="/newroot/330/file0/file1" dev="overlay" ino=1877 res=1 errno=0 [ 630.398981][ T5810] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 630.590726][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.610911][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.650559][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 630.726492][ T5810] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.764797][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.825861][ T5810] usb 3-1: SerialNumber: syz [ 631.076119][ T5810] usb 3-1: 0:2 : does not exist [ 631.123195][ T5810] usb 3-1: USB disconnect, device number 48 [ 631.440713][ T9686] input: syz1 as /devices/virtual/input/input84 [ 633.988902][ T27] audit: type=1804 audit(1785641518.024:65): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1254" name="/newroot/333/file0/file1" dev="overlay" ino=1904 res=1 errno=0 [ 636.847853][ T5827] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 637.055215][ T5827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.090243][ T5827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.115800][ T5827] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 637.132103][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 637.151501][ T5827] usb 3-1: SerialNumber: syz [ 637.271708][ T9732] input: syz1 as /devices/virtual/input/input85 [ 637.648332][ T5827] usb 3-1: 0:2 : does not exist [ 637.738241][ T5827] usb 3-1: unit 5 not found! [ 638.052040][ T5827] usb 3-1: USB disconnect, device number 49 [ 638.206071][ T9723] udevd[9723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.008702][ T27] audit: type=1804 audit(1785641524.074:66): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1272" name="/newroot/287/file0/file1" dev="overlay" ino=1689 res=1 errno=0 [ 641.632428][ T9772] input: syz1 as /devices/virtual/input/input86 [ 643.398725][ T51] Bluetooth: hci3: unexpected event for opcode 0x2000 [ 644.045140][ T56] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 644.430547][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.440906][ T56] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.486743][ T56] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 644.496478][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 644.524920][ T56] usb 3-1: SerialNumber: syz [ 644.819862][ T56] usb 3-1: 0:2 : does not exist [ 644.824876][ T56] usb 3-1: unit 5 not found! [ 644.877728][ T56] usb 3-1: USB disconnect, device number 50 [ 645.022315][ T9723] udevd[9723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.482552][ T9802] input: syz1 as /devices/virtual/input/input87 [ 647.459504][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 647.468800][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 647.477057][ T51] Bluetooth: hci3: hardware error 0x00 [ 648.775008][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 649.009854][ T9808] [ 649.012229][ T9808] ====================================================== [ 649.019264][ T9808] WARNING: possible circular locking dependency detected [ 649.026299][ T9808] syzkaller #0 Not tainted [ 649.030718][ T9808] ------------------------------------------------------ [ 649.035532][ T9805] Bluetooth: hci1: unexpected event for opcode 0x2000 [ 649.037735][ T9808] syz.1.1291/9808 is trying to acquire lock: [ 649.037747][ T9808] ffff888148cbc670 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 649.037810][ T9808] [ 649.037810][ T9808] but task is already holding lock: [ 649.037816][ T9808] ffff88805f7efd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 649.037865][ T9808] [ 649.037865][ T9808] which lock already depends on the new lock. [ 649.037865][ T9808] [ 649.037871][ T9808] [ 649.037871][ T9808] the existing dependency chain (in reverse order) is: [ 649.037878][ T9808] [ 649.037878][ T9808] -> #3 (&opts->dep_lock){+.+.}-{3:3}: [ 649.037905][ T9808] __mutex_lock+0x135/0xc80 [ 649.037928][ T9808] usbg_make_tpg+0x148/0x580 [ 649.037952][ T9808] target_fabric_make_tpg+0xa4/0x6d0 [ 649.037976][ T9808] configfs_mkdir+0x515/0x9e0 [ 649.037995][ T9808] vfs_mkdir+0x2a5/0x470 [ 649.038012][ T9808] do_mkdirat+0x1dc/0x450 [ 649.038028][ T9808] __x64_sys_mkdir+0x6e/0x80 [ 649.038046][ T9808] do_syscall_64+0x55/0xb0 [ 649.038064][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.038083][ T9808] [ 649.038083][ T9808] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 649.038116][ T9808] __mutex_lock+0x135/0xc80 [ 649.038137][ T9808] usbg_make_tpg+0xf8/0x580 [ 649.038161][ T9808] target_fabric_make_tpg+0xa4/0x6d0 [ 649.038183][ T9808] configfs_mkdir+0x515/0x9e0 [ 649.038203][ T9808] vfs_mkdir+0x2a5/0x470 [ 649.038219][ T9808] do_mkdirat+0x1dc/0x450 [ 649.038236][ T9808] __x64_sys_mkdir+0x6e/0x80 [ 649.038254][ T9808] do_syscall_64+0x55/0xb0 [ 649.038271][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.038289][ T9808] [ 649.038289][ T9808] -> #1 (&subsys->su_mutex){+.+.}-{3:3}: [ 649.038316][ T9808] __mutex_lock+0x135/0xc80 [ 649.038337][ T9808] configfs_rmdir+0x63c/0x980 [ 649.038356][ T9808] vfs_rmdir+0x352/0x4b0 [ 649.038372][ T9808] do_rmdir+0x29f/0x590 [ 649.038389][ T9808] __x64_sys_rmdir+0x49/0x50 [ 649.038406][ T9808] do_syscall_64+0x55/0xb0 [ 649.038424][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.038442][ T9808] [ 649.038442][ T9808] -> #0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}: [ 649.038473][ T9808] __lock_acquire+0x37ef/0x7d80 [ 649.038494][ T9808] lock_acquire+0x19e/0x420 [ 649.038512][ T9808] down_write+0x97/0x200 [ 649.038534][ T9808] configfs_depend_item_unlocked+0x157/0x430 [ 649.038555][ T9808] usbg_make_tpg+0x1f7/0x580 [ 649.038578][ T9808] target_fabric_make_tpg+0xa4/0x6d0 [ 649.038600][ T9808] configfs_mkdir+0x515/0x9e0 [ 649.038619][ T9808] vfs_mkdir+0x2a5/0x470 [ 649.038635][ T9808] do_mkdirat+0x1dc/0x450 [ 649.038651][ T9808] __x64_sys_mkdir+0x6e/0x80 [ 649.038669][ T9808] do_syscall_64+0x55/0xb0 [ 649.038686][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.038705][ T9808] [ 649.038705][ T9808] other info that might help us debug this: [ 649.038705][ T9808] [ 649.038711][ T9808] Chain exists of: [ 649.038711][ T9808] &sb->s_type->i_mutex_key#21 --> tpg_instances_lock --> &opts->dep_lock [ 649.038711][ T9808] [ 649.038749][ T9808] Possible unsafe locking scenario: [ 649.038749][ T9808] [ 649.038754][ T9808] CPU0 CPU1 [ 649.038759][ T9808] ---- ---- [ 649.038764][ T9808] lock(&opts->dep_lock); [ 649.038776][ T9808] lock(tpg_instances_lock); [ 649.038790][ T9808] lock(&opts->dep_lock); [ 649.038804][ T9808] lock(&sb->s_type->i_mutex_key#21); [ 649.038822][ T9808] [ 649.038822][ T9808] *** DEADLOCK *** [ 649.038822][ T9808] [ 649.038827][ T9808] 5 locks held by syz.1.1291/9808: [ 649.038838][ T9808] #0: ffff888141eea418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 649.038898][ T9808] #1: ffff88805d23f910 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 649.038953][ T9808] #2: ffffffff8db2b450 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 649.039002][ T9808] #3: ffffffff8de58aa8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 649.039054][ T9808] #4: ffff88805f7efd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 649.039113][ T9808] [ 649.039113][ T9808] stack backtrace: [ 649.039119][ T9808] CPU: 1 PID: 9808 Comm: syz.1.1291 Not tainted syzkaller #0 [ 649.039138][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.039149][ T9808] Call Trace: [ 649.039157][ T9808] [ 649.039164][ T9808] dump_stack_lvl+0x18c/0x250 [ 649.039185][ T9808] ? load_image+0x420/0x420 [ 649.492751][ T9808] ? show_regs_print_info+0x20/0x20 [ 649.497990][ T9808] ? print_circular_bug+0x12b/0x1a0 [ 649.503238][ T9808] check_noncircular+0x2fc/0x400 [ 649.508201][ T9808] ? print_deadlock_bug+0x5d0/0x5d0 [ 649.513417][ T9808] ? lockdep_lock+0xf5/0x230 [ 649.518034][ T9808] ? __lock_acquire+0x357f/0x7d80 [ 649.523086][ T9808] ? _find_first_zero_bit+0xd6/0x100 [ 649.528397][ T9808] __lock_acquire+0x37ef/0x7d80 [ 649.533280][ T9808] ? is_bpf_text_address+0x28f/0x2a0 [ 649.538580][ T9808] ? verify_lock_unused+0x140/0x140 [ 649.543834][ T9808] lock_acquire+0x19e/0x420 [ 649.548357][ T9808] ? configfs_depend_item_unlocked+0x157/0x430 [ 649.554537][ T9808] ? trace_raw_output_contention_end+0xd0/0xd0 [ 649.560706][ T9808] ? __might_sleep+0xe0/0xe0 [ 649.565313][ T9808] ? rcu_is_watching+0x15/0xb0 [ 649.570082][ T9808] ? read_lock_is_recursive+0x20/0x20 [ 649.575465][ T9808] ? trace_contention_end+0x39/0xe0 [ 649.580684][ T9808] ? __mutex_lock+0x30d/0xc80 [ 649.585369][ T9808] ? do_syscall_64+0x55/0xb0 [ 649.589961][ T9808] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.596056][ T9808] down_write+0x97/0x200 [ 649.600316][ T9808] ? configfs_depend_item_unlocked+0x157/0x430 [ 649.606497][ T9808] ? down_read_killable+0x340/0x340 [ 649.611742][ T9808] configfs_depend_item_unlocked+0x157/0x430 [ 649.617738][ T9808] usbg_make_tpg+0x1f7/0x580 [ 649.622354][ T9808] ? usbg_drop_tport+0x20/0x20 [ 649.627144][ T9808] ? vscnprintf+0x80/0x80 [ 649.631617][ T9808] target_fabric_make_tpg+0xa4/0x6d0 [ 649.636904][ T9808] ? target_fabric_release_wwn+0xb0/0xb0 [ 649.642540][ T9808] configfs_mkdir+0x515/0x9e0 [ 649.647238][ T9808] vfs_mkdir+0x2a5/0x470 [ 649.651515][ T9808] do_mkdirat+0x1dc/0x450 [ 649.655881][ T9808] ? vfs_mkdir+0x470/0x470 [ 649.660309][ T9808] ? getname_flags+0x20a/0x500 [ 649.665120][ T9808] __x64_sys_mkdir+0x6e/0x80 [ 649.669718][ T9808] do_syscall_64+0x55/0xb0 [ 649.674341][ T9808] ? clear_bhb_loop+0x40/0x90 [ 649.679061][ T9808] ? clear_bhb_loop+0x40/0x90 [ 649.683740][ T9808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.689680][ T9808] RIP: 0033:0x7f1eb199e019 [ 649.694119][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.713746][ T9808] RSP: 002b:00007f1eb2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 649.722196][ T9808] RAX: ffffffffffffffda RBX: 00007f1eb1c25fa0 RCX: 00007f1eb199e019 [ 649.730180][ T9808] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 649.738266][ T9808] RBP: 00007f1eb1a3500c R08: 0000000000000000 R09: 0000000000000000 [ 649.746283][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.754281][ T9808] R13: 00007f1eb1c26038 R14: 00007f1eb1c25fa0 R15: 00007ffda2b8bf78 [ 649.762266][ T9808] [ 650.898218][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 653.057753][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 653.066072][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 653.073542][ T51] Bluetooth: hci1: hardware error 0x00 [ 655.137213][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 655.179206][ T9634] syz.0.1236 (9634) used greatest stack depth: 17584 bytes left