last executing test programs: 14m13.762208523s ago: executing program 4 (id=143): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 14m12.942385762s ago: executing program 4 (id=148): syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x802) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x800007fffffff, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x2, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x1, 0x0, 0x0, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m11.181048235s ago: executing program 4 (id=151): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x1ff, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0x26000, 0x43102}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) 14m10.431324544s ago: executing program 4 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0x84) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) r4 = gettid() r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r5, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) (async, rerun: 64) pause() (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) tkill(r4, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r6, &(0x7f0000000400)='wwnn=0x33333333', 0xf) (async) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) 14m7.364151849s ago: executing program 4 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x20, 0xa, 0xc90}, {0x16, 0x0, 0x6}]}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "baac6c0b0f05a1e2", "34a3d9f0e95f96b8f6892a34257396dc", "d30d4e9e"}, 0x28) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x3, 0x51, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) 14m5.797527491s ago: executing program 4 (id=163): fchdir(0xffffffffffffffff) unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2, &(0x7f0000000040)='9e', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) fcntl$getflags(0xffffffffffffffff, 0x401) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40c03) 13m48.435152004s ago: executing program 32 (id=163): fchdir(0xffffffffffffffff) unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2, &(0x7f0000000040)='9e', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) fcntl$getflags(0xffffffffffffffff, 0x401) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40c03) 13m42.630396897s ago: executing program 0 (id=194): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/image_size', 0x400000, 0x90) fsync(r0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000300)=""/153, 0x99}], 0x3) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) 13m42.27544327s ago: executing program 0 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8044001}, 0x0) 13m41.234580424s ago: executing program 0 (id=198): r0 = fsopen(&(0x7f00000002c0)='bpf\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x800, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private0}, 0x1c) syz_emit_ethernet(0x19e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1}, 0xfffffff8}], 0x1, 0x100, 0x0) pipe2$9p(&(0x7f0000000040), 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$P9_RFSYNC(r1, &(0x7f0000000080)={0xfffffffffffffdac, 0x33, 0xfffe}, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 13m39.609486435s ago: executing program 0 (id=204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52042, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 13m34.519256981s ago: executing program 0 (id=216): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) (fail_nth: 3) 13m32.883135144s ago: executing program 0 (id=217): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) readv(r0, &(0x7f00000008c0)=[{&(0x7f00000016c0)=""/237, 0xed}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f0000000140)=""/19, 0x13}], 0x7) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x6c, r2, 0x111, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x9, 0x3, "8ff66329703df91f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d35b6f81c8599d4bca1d0cae9221b7aa2e9ff2e7b25e6f356d7740247a8fe33c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bcc22b0bf9ef9dffb3bc9ff840a847ce6ee436707fdecc54"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 13m17.542550181s ago: executing program 33 (id=217): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) readv(r0, &(0x7f00000008c0)=[{&(0x7f00000016c0)=""/237, 0xed}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f0000000140)=""/19, 0x13}], 0x7) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x6c, r2, 0x111, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x9, 0x3, "8ff66329703df91f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d35b6f81c8599d4bca1d0cae9221b7aa2e9ff2e7b25e6f356d7740247a8fe33c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bcc22b0bf9ef9dffb3bc9ff840a847ce6ee436707fdecc54"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 11m28.192780715s ago: executing program 3 (id=403): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xe, 0x4001) (rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000300)={0x2, 'wg2\x00', {0x800000}, 0x2}) (async) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64", 0x27}], 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x1, 0x4, 0x6}, {0xf6}, 0x70bd26, 0x0, 0xa, 0x1, 0x9}}, 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfffffffffffffead) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m25.968140597s ago: executing program 3 (id=406): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000009000000000000000006000000be43540ecb01963ca1c978a9199375941c8c855846b59de0d4c70035bd2e6aba634358ac15345c35e6a6bc42f259c0a62860ca35f1a91a7f42c2285b532c2618caf8c75435b929d0eb95d23a41a22c08ea421489946f8b7afc34043eb8c4ab587835f4bd39d63f9da34019c77227f27f13ae2cc50024d2b1e41c28e7f4872c310ff9d2d98a8aa108499fd72e012cdd", @ANYRESHEX, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x20040005) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x4f, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000100)={0x15, 0x3, 0x9}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20) utime(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x0, 0x100000001}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 11m25.641585736s ago: executing program 3 (id=407): fchdir(0xffffffffffffffff) unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2, &(0x7f0000000040)='9e', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) fcntl$getflags(0xffffffffffffffff, 0x401) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40c03) 11m18.395126101s ago: executing program 1 (id=411): futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000200004b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d000000850000005000f5ff9400000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$P9_RREAD(r2, &(0x7f0000004fc0)=ANY=[@ANYBLOB="bf060000750100b40600000645dd30c822b6e51e5c9c593945ac3ce9295b3d3226019fe9fb1d348dcf22d5d3c58d5cfca8ef572b227d24fe3097a98d9eb9ba825d22e5f071c5f1ebd11b69c33748ad86dd7e185d4aaf9fe884fe9f2a60d19b4ee91de078f5c0b4ba7def396a016f5de5e7262d95f9acdbe9c756d8b46c99f1548a7cd446b3c695e91fdbd219c142f5e50b6a87d3c30b86c0195cc0bc2d5d2b5c1ee6ce63cd95eac29b905b41b23eb58cae118e2ab67d589c7de9ac55952e451d519fe383a42508753c8d935cff6fc09cdecd32f98336cdf4a03718bb0c0a8225e1366e18bb53d816e5269e0000c3f498d6e4da9ef9c449a2ad8c16991afa94360d32bea2a4005b09a944b415b655038c8d830caf36c398f6fd1fc9a635cf64770a7c227c5fcdebebd5e5af8d8a43bd04703832f5274cc3575bf613da3c444fd47850ccfe01b872749fd3dc636d5c75a44500c454fd1476e94869518c4c69c85470120b858a5ff5986b591ef50865b69710eec3af4e5f593e085b7e2a29161251484c5b835f2c52ddccd908037038f9cb4f7d32a799629c936242a2b2882b53ff33b0c69377540db016b5eff4268f1c52630db5b3c0e78252e0ee9d4c0123c93b2fdcba10bc4fde3b520ad27f8fc5b5c2fb9a34bf5d2f5e62e5e5a6456298a8011bc69afb7d0fa6fce53087e11b08cd76568de36172d30df46fac972de33589a7de7a20787bd1c5b9453ffd928a6473a0a63ea9db1b2b0af42b1d2c9db91f98b44ca2612c4b96edc92f206e7a2962d51f63c8a722c357e8cddb87bef4adee139128b31f40c754d91535b37215e6941895900e2d71569b173109027bbb0c97970a1979f52acc4ba88e4eaa6f976a7d31eb0a55316821e4983b44a74348514597dd98b0d7bfcd83ec2961de2f44b78512ba41a0777e01842b82747567a6bc2bba56ed346da46c8b4e6dafcc05d9fa35b2307e4c0d1143173d91aeb5df50c6c1de06704486aa7375a1ff4219589fbb5f09b0625c71b4bc9838a5912bbe3e1880193f3fcfe0e785f3197e3db8ff6788577db36ca39a5d0704d0c058a5edb43e4765ec5c24f0b1f65d95a885caed4a6b99c237b96ca4d7f6d36d42a3f19492c1cf81c4408ac24e0023a04681bf792b0d7abb77827e9ce562188a8d0148dc7b84ab88b656d2e062759c6dcd40430b6bb8a287ea750352180511f687a24c4d8c107bca26c74eb0d272b2a5c9c3bc3b787bcc70248d25292bee6442a5ad1851a567cef43c682dd290350ccf6d21f335cd8b0e4a0815cba5ff0c90da471f75b86c88075a8b0b0e9f793774f9ca5551d9d50332d00057b2896bb9e37596d600595242c38a22438ad2987039afa8ebccaae8b57c59eff434f3d50accb4a95bc04481b6cdb052fdbee0d1e00e75057f9a2f2f76114c69bd71777a4921877cc0df6a8793db57b164333712b214b4e675489913445a99c8f911d8b19878af75962216ee6e34d5f114737c6126d40ec04d7670245776927d5e74491f7e5f86862c2704dcc4b57cd73e1c7a19f408156fbe8829f8835221de44393453358391dd7ad770efa0424a6564967bcde9cbcb3bc69fded7f0831b7164702acbfd7ca6d0dea25bd151a9c56fc6ef5174c1db2e72c61c927a083ced58040f5096e71edaabf5dfe8e3bb9f9f73bc350c6d53e5a610fa918a9e00a09cea99387ff5154ea503cdd10ce66c9a3de9794cdc55b66171c3414698c3cf74ae957874f2f47d0974f4502e15fc2e4d5af29fccf4c159f6f516878a04fb06c988f1f2743ce1560c91ea7ae641eb5b31683a9d2b16e405988f3649c6b965bd450cd5fe71447b29efa6629b55985fd523600a0c80bc4b273978f28eefc2d24d77e5374e862738f95f7aa0eb0cb489a571b6d14d3f5bce1398ddc33f2b8f8d334269e87bd87a811dc4c86d14ab3d673fe83e7e0335ea2ab0ca2b16a76722db89627903d1086d72a0560d6f2d5b319fa672485cfb27bf2aef9dc2278f58ce694b0d2047ee62d4b48d4b692fbaa297172590f3442ae571c63355ec1aee014ba185438915770e4d127f4a6c485c481d9b1acbc76439490bf1a8ba101bc2e6031df68fbfca0ea277cabaf9071fdc92ecff91c4b117c24a0427014c7695e786fba10a79556fbe44cb0052343e158b40f78c03605493ff92ee745650d7e63b54bc451e2c31bfec2697cfc77b2e6637a218fc2847684f5fd00ab4b4d998922f463d4edc2e12553e0056c618dbe3d3b2d27078a0fec9e2f52e5808476e64fa3a1a3c2b9af1da7443c4baadf09a149ea2aab222698bf4cd1cb3ea2c96d2ab3eb5aebe82c1d9b1388fdbe783a36040c239be55900f5f548d774d699446af175be59e7f891639efa7d044463e897524ee4f9434931ec7e55f64687bc9bca2bb27b7e39b1a6a476f387d5e39a749c43366f25ef0ece3cfa8"], 0x6bf) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(0x0) 11m15.645145451s ago: executing program 3 (id=414): socket(0x1a, 0x5, 0x8) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b14"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = semget$private(0x0, 0x3, 0x4d0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x8, "4600d3cb1574065bdc7500"}) semop(r5, &(0x7f0000000000)=[{0x2, 0xf711, 0x1000}, {0x1, 0x4, 0x1800}], 0x2) 11m15.070918219s ago: executing program 1 (id=415): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e02", 0x1a, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (fail_nth: 1) 11m14.613264171s ago: executing program 1 (id=416): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52042, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 11m9.361241068s ago: executing program 3 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4008004) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b020000000000000003"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000100)=0x5, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) (async) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000040)={0x2c, @private=0x2, 0x4e23, 0x4, 'rr\x00', 0x14, 0x0, 0xf}, 0x2c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) (async) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000880)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x9, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0xb}, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) 11m8.757855539s ago: executing program 1 (id=421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = dup3(r2, r0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802"], 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) 11m5.662594569s ago: executing program 3 (id=424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3, 0x9}, {0xffffffffffffffff}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x8}}]}, 0x158}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'geneve1\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0x4112, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) sendto$packet(r3, &(0x7f0000000280)="1412a2c8587b8664dddfd23ccdb4", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) 11m4.833442279s ago: executing program 1 (id=427): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52042, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 11m2.52414962s ago: executing program 1 (id=430): fchdir(0xffffffffffffffff) unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2, &(0x7f0000000040)='9e', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) fcntl$getflags(0xffffffffffffffff, 0x401) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40c03) 10m46.289621019s ago: executing program 34 (id=424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3, 0x9}, {0xffffffffffffffff}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x8}}]}, 0x158}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'geneve1\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0x4112, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) sendto$packet(r3, &(0x7f0000000280)="1412a2c8587b8664dddfd23ccdb4", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) 10m45.902655506s ago: executing program 35 (id=430): fchdir(0xffffffffffffffff) unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2, &(0x7f0000000040)='9e', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) fcntl$getflags(0xffffffffffffffff, 0x401) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40c03) 1m30.225416671s ago: executing program 2 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m29.09539829s ago: executing program 2 (id=1532): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb00040, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x1008}, {r1, 0x440}], 0x2, 0x101) 1m24.328321441s ago: executing program 2 (id=1544): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) 1m24.016573948s ago: executing program 2 (id=1547): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') 1m23.850468381s ago: executing program 2 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8a5, 0x7, 0x10}, 0xffffffffffffffba) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0028010}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1m21.419675219s ago: executing program 2 (id=1556): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xb, 0x5, "0894dc4287"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x40, 0x16, 0x8, "ba5603bca84c9879"}, 0x0, 0x0, 0x0, 0x0}) 1m20.502011187s ago: executing program 36 (id=1556): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xb, 0x5, "0894dc4287"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x40, 0x16, 0x8, "ba5603bca84c9879"}, 0x0, 0x0, 0x0, 0x0}) 8.661560695s ago: executing program 5 (id=1690): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x43241000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.42802437s ago: executing program 6 (id=1691): ioperm(0x4, 0x8, 0x5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ff) 8.029912994s ago: executing program 6 (id=1693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.751998319s ago: executing program 6 (id=1694): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) 6.170505061s ago: executing program 6 (id=1698): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="0800fbfaffb9", 0x6}], 0x1, 0x0, 0x0, 0xe0000000}, 0x28004010) 6.053626723s ago: executing program 6 (id=1700): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000002c0)={0x3}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.473873874s ago: executing program 6 (id=1704): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) unshare(0x48000400) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, 0x0, 0x89101) syz_emit_ethernet(0x60, &(0x7f0000000200)=ANY=[], 0x0) fcntl$setsig(r0, 0xa, 0x21) 5.467874439s ago: executing program 5 (id=1705): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000180)={{0xf4, 0x4f}, 'port1\x00', 0x9, 0x16, 0x7, 0x9c8, 0xd88c, 0xfffffff7, 0xfffffffc}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendto(r0, &(0x7f00000002c0)="695db2402910e0c41181223cda7331521c59490714a698b1c2fb3eb97609a9d36332e2b80a4efba93c07464954553a1d6049bcfcf886e439c40fed47e8483d28b15b545aaa335bc9a6f3e127c17fcafb5261dbd3d127", 0x56, 0xc041, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.306590179s ago: executing program 7 (id=1706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001000), 0x0, 0x2000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0xc0045520, 0xffefff1f00000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0', 0x1) 5.168088256s ago: executing program 5 (id=1708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1d, 0x2, 0x4, '\x00', 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.144363939s ago: executing program 7 (id=1709): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="0800fbfaffb9", 0x6}], 0x1, 0x0, 0x0, 0xe0000000}, 0x28004010) 5.00671047s ago: executing program 8 (id=1710): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 4.923161376s ago: executing program 7 (id=1711): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$key(0xf, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000140)=0x3, 0x4) 4.895109723s ago: executing program 8 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) 4.617868264s ago: executing program 8 (id=1713): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0c602f20"], 0xf) 4.340041377s ago: executing program 8 (id=1714): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000002c0)={0x3}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.61830171s ago: executing program 5 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044080) 3.391884735s ago: executing program 8 (id=1716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 2.601429466s ago: executing program 7 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 2.376051612s ago: executing program 7 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) clock_settime(0x5, 0x0) sysfs$3(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000b40)={'#! ', './file1'}, 0xb) lseek(r4, 0x7, 0x4) 892.263508ms ago: executing program 7 (id=1719): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 255.42034ms ago: executing program 5 (id=1720): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="0800fbfaffb9", 0x6}], 0x1, 0x0, 0x0, 0xe0000000}, 0x28004010) 14.474054ms ago: executing program 5 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1c0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100f700000000000000280000002800000002000000030000000100000f0200000001000000000000000200000034aa00007455e61d614b3300000000000f0200000003740000"], &(0x7f00000003c0)=""/143, 0x42, 0x8f, 0x1}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='off\n\x00', 0x4) rmdir(0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x4, 0x0, &(0x7f0000000000)="e06921e8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 0s ago: executing program 8 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): [T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.7.1094 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 754.408852][T10822] Tainted: [L]=SOFTLOCKUP [ 754.408861][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.408875][T10822] Call Trace: [ 754.408884][T10822] [ 754.408894][T10822] dump_stack_lvl+0xe8/0x150 [ 754.408934][T10822] should_fail_ex+0x46b/0x600 [ 754.408965][T10822] copy_fpstate_to_sigframe+0xac0/0xd80 [ 754.409112][T10822] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 754.409164][T10822] ? do_raw_spin_lock+0x12b/0x2f0 [ 754.409193][T10822] ? fpu__alloc_mathframe+0xac/0x130 [ 754.409228][T10822] get_sigframe+0x603/0x830 [ 754.409316][T10822] ? __pfx_get_sigframe+0x10/0x10 [ 754.409354][T10822] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 754.409396][T10822] x64_setup_rt_frame+0x164/0xc50 [ 754.409427][T10822] ? rt_spin_unlock+0x159/0x200 [ 754.409465][T10822] ? rt_spin_unlock+0x165/0x200 [ 754.409500][T10822] ? get_signal+0x10de/0x12c0 [ 754.409562][T10822] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 754.409607][T10822] arch_do_signal_or_restart+0x45b/0x860 [ 754.409646][T10822] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 754.409699][T10822] exit_to_user_mode_loop+0x10e/0x770 [ 754.409754][T10822] ? rcu_is_watching+0x16/0xb0 [ 754.409814][T10822] do_syscall_64+0x328/0x520 [ 754.409845][T10822] ? trace_irq_disable+0x3b/0x140 [ 754.409874][T10822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.409898][T10822] ? clear_bhb_loop+0x70/0xc0 [ 754.409927][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.409950][T10822] RIP: 0033:0x7ff6995de98e [ 754.409971][T10822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 754.409991][T10822] RSP: 002b:00007ff697874e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 754.410017][T10822] RAX: fffffffffffffffc RBX: 00007ff6978766c0 RCX: 00007ff6995de98e [ 754.410034][T10822] RDX: 0000000000000020 RSI: 00007ff697875000 RDI: 0000000000000003 [ 754.410049][T10822] RBP: 0000000000000000 R08: 00007ff697874f04 R09: 000000000000000c [ 754.410064][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 754.410079][T10822] R13: 00007ff697874f58 R14: 00007ff697875000 R15: 0000000000000000 [ 754.410113][T10822] [ 755.138658][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1098'. [ 756.172177][ T8435] usb 9-1: USB disconnect, device number 34 [ 756.779970][ T8435] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 756.930278][ T8435] usb 7-1: Using ep0 maxpacket: 8 [ 756.939049][ T8435] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 756.958723][ T8435] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 756.966533][ T8435] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 756.966572][ T8435] usb 7-1: config 0 interface 0 has no altsetting 0 [ 756.966615][ T8435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.015998][ T8435] usb 7-1: config 0 descriptor?? [ 758.433787][ T8435] microsoft 0003:045E:00F9.000E: unknown main item tag 0x2 [ 758.444859][ T8435] microsoft 0003:045E:00F9.000E: unknown main item tag 0x6 [ 758.444968][ T8435] microsoft 0003:045E:00F9.000E: ignoring exceeding usage max [ 758.500351][ T8435] microsoft 0003:045E:00F9.000E: hidraw0: USB HID v0.02 Device [HID 045e:00f9] on usb-dummy_hcd.6-1/input0 [ 758.573659][T10884] FAULT_INJECTION: forcing a failure. [ 758.573659][T10884] name failslab, interval 1, probability 0, space 0, times 0 [ 758.586456][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.7.1108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.586501][T10884] Tainted: [L]=SOFTLOCKUP [ 758.586510][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.586524][T10884] Call Trace: [ 758.586534][T10884] [ 758.586544][T10884] dump_stack_lvl+0xe8/0x150 [ 758.586586][T10884] should_fail_ex+0x46b/0x600 [ 758.586616][T10884] should_failslab+0xa8/0x100 [ 758.586651][T10884] ? do_getname+0x2e/0x250 [ 758.586684][T10884] kmem_cache_alloc_noprof+0x9e/0x690 [ 758.586714][T10884] ? do_getname+0x2e/0x250 [ 758.586747][T10884] ? rt_mutex_slowunlock+0x219/0x460 [ 758.586784][T10884] do_getname+0x2e/0x250 [ 758.586813][T10884] ? getname_flags+0x11/0x20 [ 758.586848][T10884] do_sys_openat2+0xcc/0x200 [ 758.586884][T10884] ? __pfx_do_sys_openat2+0x10/0x10 [ 758.586919][T10884] ? ksys_write+0x248/0x270 [ 758.586946][T10884] ? __pfx_ksys_write+0x10/0x10 [ 758.586976][T10884] __x64_sys_creat+0x8f/0xc0 [ 758.587014][T10884] do_syscall_64+0x166/0x520 [ 758.587039][T10884] ? trace_irq_disable+0x3b/0x140 [ 758.587067][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.587092][T10884] ? clear_bhb_loop+0x70/0xc0 [ 758.587121][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.587145][T10884] RIP: 0033:0x7ff69961e159 [ 758.587167][T10884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.587187][T10884] RSP: 002b:00007ff697876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 758.587211][T10884] RAX: ffffffffffffffda RBX: 00007ff6998a5fa0 RCX: 00007ff69961e159 [ 758.587227][T10884] RDX: 0000000000000000 RSI: 0000000000000111 RDI: 0000200000000080 [ 758.587241][T10884] RBP: 00007ff697876090 R08: 0000000000000000 R09: 0000000000000000 [ 758.587256][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.587268][T10884] R13: 00007ff6998a6038 R14: 00007ff6998a5fa0 R15: 00007ffda2362848 [ 758.587303][T10884] [ 758.880005][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 758.991243][T10887] netlink: 132732 bytes leftover after parsing attributes in process `syz.5.1110'. [ 759.070089][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 759.095991][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 759.113312][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.151754][ T9] usb 3-1: config 0 descriptor?? [ 759.468974][T10895] overlayfs: failed to resolve 'subj_type=mouMts': -2 [ 759.774329][ T8383] usb 7-1: USB disconnect, device number 34 [ 759.820569][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 759.820779][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 759.855946][ T9] usb 3-1: USB disconnect, device number 48 [ 759.911727][T10899] < [ 760.186988][T10906] < [ 760.190091][T10906] FAULT_INJECTION: forcing a failure. [ 760.190091][T10906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.190130][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.8.1117 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 760.190162][T10906] Tainted: [L]=SOFTLOCKUP [ 760.190170][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.190184][T10906] Call Trace: [ 760.190192][T10906] [ 760.190202][T10906] dump_stack_lvl+0xe8/0x150 [ 760.190252][T10906] should_fail_ex+0x46b/0x600 [ 760.190284][T10906] _copy_to_user+0x31/0xb0 [ 760.190316][T10906] simple_read_from_buffer+0xe1/0x170 [ 760.190345][T10906] proc_fail_nth_read+0x1be/0x230 [ 760.190378][T10906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.190409][T10906] ? rw_verify_area+0x250/0x4d0 [ 760.190437][T10906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.190463][T10906] vfs_read+0x219/0xa90 [ 760.190497][T10906] ? __pfx_vfs_read+0x10/0x10 [ 760.190525][T10906] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 760.190555][T10906] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 760.190579][T10906] ? mutex_lock_nested+0x152/0x1d0 [ 760.190613][T10906] ? fdget_pos+0x252/0x320 [ 760.190644][T10906] ksys_read+0x156/0x270 [ 760.190669][T10906] ? __pfx_ksys_read+0x10/0x10 [ 760.190704][T10906] do_syscall_64+0x166/0x520 [ 760.190727][T10906] ? trace_irq_disable+0x3b/0x140 [ 760.190755][T10906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.190778][T10906] ? clear_bhb_loop+0x70/0xc0 [ 760.190807][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.190830][T10906] RIP: 0033:0x7f87f056e98e [ 760.190851][T10906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.190871][T10906] RSP: 002b:00007f87ee805fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.190895][T10906] RAX: ffffffffffffffda RBX: 00007f87ee8066c0 RCX: 00007f87f056e98e [ 760.190911][T10906] RDX: 000000000000000f RSI: 00007f87ee8060a0 RDI: 0000000000000004 [ 760.190925][T10906] RBP: 00007f87ee806090 R08: 0000000000000000 R09: 0000000000000000 [ 760.190939][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.190952][T10906] R13: 00007f87f0836038 R14: 00007f87f0835fa0 R15: 00007ffc37283838 [ 760.190989][T10906] [ 760.830221][T10745] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 760.954428][T10918] syz_tun: entered allmulticast mode [ 760.973222][T10745] usb 7-1: device descriptor read/64, error -71 [ 761.015996][T10918] syz_tun: left allmulticast mode [ 761.220065][T10745] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 761.350000][T10745] usb 7-1: device descriptor read/64, error -71 [ 761.460694][T10745] usb usb7-port1: attempt power cycle [ 761.627311][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1128'. [ 761.642338][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1128'. [ 761.668275][T10942] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1127'. [ 761.840012][T10745] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 761.861994][T10745] usb 7-1: device descriptor read/8, error -71 [ 762.104097][T10745] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 762.125903][T10745] usb 7-1: device descriptor read/8, error -71 [ 762.230411][T10745] usb usb7-port1: unable to enumerate USB device [ 762.289971][ T8383] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 762.444294][ T8383] usb 6-1: unable to get BOS descriptor or descriptor too short [ 762.452957][ T8383] usb 6-1: not running at top speed; connect to a high speed hub [ 762.452999][ T8383] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 762.454515][ T8383] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 4 [ 762.457075][ T8383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.457101][ T8383] usb 6-1: Product: syz [ 762.457118][ T8383] usb 6-1: Manufacturer: syz [ 762.457134][ T8383] usb 6-1: SerialNumber: syz [ 762.558958][ T8383] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 762.973308][ T5584] usb 6-1: USB disconnect, device number 33 [ 763.519727][T10964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1137'. [ 763.697764][T10969] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1139'. [ 766.537081][T10995] Ø [ 766.880708][ T5584] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 766.986343][T11011] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1152'. [ 767.050633][ T5584] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 767.062515][ T5584] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.062574][ T5584] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 767.062605][ T5584] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.062643][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.090122][ T8435] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 767.121015][ T5584] usb 3-1: config 0 descriptor?? [ 767.545095][ T8435] usb 9-1: Using ep0 maxpacket: 32 [ 767.831843][ T8435] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 767.845607][ T8435] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 767.845921][ T8435] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 767.845947][ T8435] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.845969][ T8435] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 767.853633][ T8435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.122379][ T5584] usb 3-1: string descriptor 0 read error: -71 [ 768.162039][ T5584] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 768.182311][ T5584] usb 3-1: USB disconnect, device number 49 [ 768.257298][ T5920] usb 9-1: USB disconnect, device number 35 [ 768.312231][T11026] netlink: 'syz.5.1157': attribute type 8 has an invalid length. [ 768.409614][T11027] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 768.409665][T11027] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 768.452821][T11027] size and base must be multiples of 4 kiB [ 768.452848][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.6.1158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.452870][T11027] Tainted: [L]=SOFTLOCKUP [ 768.452876][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.452886][T11027] Call Trace: [ 768.452892][T11027] [ 768.452899][T11027] dump_stack_lvl+0xe8/0x150 [ 768.452930][T11027] mtrr_add+0xd5/0x100 [ 768.453013][T11027] mtrr_ioctl+0xca4/0x13c0 [ 768.453036][T11027] ? smk_tskacc+0x2fb/0x370 [ 768.453083][T11027] ? __pfx_mtrr_ioctl+0x10/0x10 [ 768.453120][T11027] ? smack_file_ioctl+0x265/0x370 [ 768.453156][T11027] ? __fget_files+0x2a/0x420 [ 768.453171][T11027] ? __fget_files+0x3a8/0x420 [ 768.453185][T11027] ? __fget_files+0x2a/0x420 [ 768.453200][T11027] ? __pfx_mtrr_ioctl+0x10/0x10 [ 768.453225][T11027] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 768.453273][T11027] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 768.453295][T11027] __se_sys_ioctl+0xff/0x170 [ 768.453317][T11027] do_syscall_64+0x166/0x520 [ 768.453335][T11027] ? trace_irq_disable+0x3b/0x140 [ 768.453355][T11027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.453371][T11027] ? clear_bhb_loop+0x70/0xc0 [ 768.453390][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.453407][T11027] RIP: 0033:0x7fc2503ce159 [ 768.453427][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.453442][T11027] RSP: 002b:00007fc24e605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.453459][T11027] RAX: ffffffffffffffda RBX: 00007fc250656090 RCX: 00007fc2503ce159 [ 768.453471][T11027] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000007 [ 768.453482][T11027] RBP: 00007fc250465024 R08: 0000000000000000 R09: 0000000000000000 [ 768.453492][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.453501][T11027] R13: 00007fc250656128 R14: 00007fc250656090 R15: 00007ffc1752caf8 [ 768.453525][T11027] [ 768.533708][T11027] netlink: 'syz.6.1158': attribute type 4 has an invalid length. [ 771.322636][T11056] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1165'. [ 771.471363][ T8435] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 771.574515][T11053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1164'. [ 771.629998][ T8435] usb 7-1: Using ep0 maxpacket: 32 [ 771.636562][ T8435] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 771.661903][ T8435] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 771.673078][ T8435] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 771.673109][ T8435] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.673129][ T8435] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 771.673195][ T8435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.883235][T11063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1164'. [ 772.043811][ T8435] usb 7-1: USB disconnect, device number 39 [ 772.984473][T11075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 773.468406][T11080] binder: 11079:11080 ioctl 4b35 7 returned -22 [ 775.555997][T11093] netlink: 'syz.7.1162': attribute type 5 has an invalid length. [ 778.176208][T11110] FAULT_INJECTION: forcing a failure. [ 778.176208][T11110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.176323][T11110] CPU: 0 UID: 0 PID: 11110 Comm: syz.5.1178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 778.176377][T11110] Tainted: [L]=SOFTLOCKUP [ 778.176406][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.176455][T11110] Call Trace: [ 778.176484][T11110] [ 778.176500][T11110] dump_stack_lvl+0xe8/0x150 [ 778.176566][T11110] should_fail_ex+0x46b/0x600 [ 778.176610][T11110] _copy_from_user+0x2d/0xb0 [ 778.176640][T11110] ext4_ioctl+0xb10/0x4b80 [ 778.176803][T11110] ? __pfx_ext4_ioctl+0x10/0x10 [ 778.176832][T11110] ? is_bpf_text_address+0x292/0x2b0 [ 778.176858][T11110] ? is_bpf_text_address+0x26/0x2b0 [ 778.176884][T11110] ? kernel_text_address+0xa5/0xe0 [ 778.176903][T11110] ? __kernel_text_address+0xd/0x30 [ 778.176921][T11110] ? unwind_get_return_address+0x4d/0x90 [ 778.176941][T11110] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 778.176961][T11110] ? arch_stack_walk+0xfb/0x150 [ 778.176989][T11110] ? stack_trace_save+0xa9/0x100 [ 778.177013][T11110] ? __pfx_stack_trace_save+0x10/0x10 [ 778.177030][T11110] ? kasan_save_track+0x4f/0x80 [ 778.177076][T11110] ? stack_depot_save_flags+0x33/0x7f0 [ 778.177093][T11110] ? __lock_acquire+0x6df/0x2e40 [ 778.177116][T11110] ? kasan_save_track+0x4f/0x80 [ 778.177135][T11110] ? kasan_save_track+0x3e/0x80 [ 778.177153][T11110] ? kasan_save_free_info+0x40/0x50 [ 778.177169][T11110] ? __kasan_slab_free+0x5c/0x80 [ 778.177189][T11110] ? kfree+0x1c5/0x6d0 [ 778.177205][T11110] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 778.177220][T11110] ? security_file_ioctl+0xc3/0x2a0 [ 778.177236][T11110] ? __se_sys_ioctl+0x47/0x170 [ 778.177254][T11110] ? do_syscall_64+0x166/0x520 [ 778.177274][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.177320][T11110] ? kasan_quarantine_put+0xbb/0x1f0 [ 778.177347][T11110] ? tomoyo_path_number_perm+0x219/0x5f0 [ 778.177363][T11110] ? tomoyo_path_number_perm+0x219/0x5f0 [ 778.177381][T11110] ? do_vfs_ioctl+0x1184/0x1550 [ 778.177403][T11110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 778.177423][T11110] ? __pfx_smack_log+0x10/0x10 [ 778.177452][T11110] ? smk_tskacc+0x2fb/0x370 [ 778.177477][T11110] ? smack_file_ioctl+0x265/0x370 [ 778.177505][T11110] ? __pfx_smack_file_ioctl+0x10/0x10 [ 778.177537][T11110] ? __fget_files+0x2a/0x420 [ 778.177551][T11110] ? __fget_files+0x3a8/0x420 [ 778.177565][T11110] ? __fget_files+0x2a/0x420 [ 778.177582][T11110] ? bpf_lsm_file_ioctl+0x9/0x20 [ 778.177598][T11110] ? __pfx_ext4_ioctl+0x10/0x10 [ 778.177617][T11110] __se_sys_ioctl+0xff/0x170 [ 778.177639][T11110] do_syscall_64+0x166/0x520 [ 778.177655][T11110] ? trace_irq_disable+0x3b/0x140 [ 778.177675][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.177691][T11110] ? clear_bhb_loop+0x70/0xc0 [ 778.177711][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.177727][T11110] RIP: 0033:0x7fdb2fe3e159 [ 778.177743][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.177757][T11110] RSP: 002b:00007fdb2e096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.177799][T11110] RAX: ffffffffffffffda RBX: 00007fdb300c5fa0 RCX: 00007fdb2fe3e159 [ 778.177823][T11110] RDX: 0000000000000000 RSI: 0000000040286608 RDI: 0000000000000003 [ 778.177834][T11110] RBP: 00007fdb2e096090 R08: 0000000000000000 R09: 0000000000000000 [ 778.177844][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.177854][T11110] R13: 00007fdb300c6038 R14: 00007fdb300c5fa0 R15: 00007ffe2f74e668 [ 778.177878][T11110] [ 778.252970][T11111] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1177'. [ 779.795074][T11122] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 779.795183][T11122] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 780.409281][T11130] netlink: 'syz.7.1185': attribute type 8 has an invalid length. [ 782.023549][T11136] IPv6: Can't replace route, no match found [ 782.980307][T11145] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1190'. [ 783.299981][ T5838] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 783.451996][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 783.454224][ T5838] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 783.474906][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.504060][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.504154][ T5838] usb 6-1: Product: syz [ 783.504174][ T5838] usb 6-1: Manufacturer: syz [ 783.504235][ T5838] usb 6-1: SerialNumber: syz [ 783.558370][ T5838] usb 6-1: config 0 descriptor?? [ 783.840014][ T5920] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 783.979994][ T5920] usb 7-1: device descriptor read/64, error -71 [ 784.241219][ T5920] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 784.369978][ T5920] usb 7-1: device descriptor read/64, error -71 [ 784.490429][ T5920] usb usb7-port1: attempt power cycle [ 784.520052][ T8435] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 784.671073][ T8435] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 784.675519][ T8435] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 784.675608][ T8435] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 784.675702][ T8435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.724045][ T8435] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 784.735617][ T8435] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 784.840013][ T5920] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 784.860584][ T5920] usb 7-1: device descriptor read/8, error -71 [ 785.216326][ T5920] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 785.241207][ T5920] usb 7-1: device descriptor read/8, error -71 [ 785.351077][ T5920] usb usb7-port1: unable to enumerate USB device [ 785.635667][T11191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1202'. [ 786.104491][T11196] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1204'. [ 786.388059][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 786.419617][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.733953][ T5920] usb 6-1: USB disconnect, device number 34 [ 787.055755][T11209] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 787.399941][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 787.429298][ T5584] usb 9-1: USB disconnect, device number 36 [ 787.493896][ T5584] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 787.504568][ T5584] spcp8x5 9-1:1.0: device disconnected [ 787.533057][T11217] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:2 [ 787.552562][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 787.570737][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 128, using maximum allowed: 30 [ 787.570844][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 787.571036][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 787.614290][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.614372][ T9] usb 3-1: Product: syz [ 787.614390][ T9] usb 3-1: Manufacturer: syz [ 787.614445][ T9] usb 3-1: SerialNumber: syz [ 787.656813][ T9] usb 3-1: config 0 descriptor?? [ 787.864789][T11223] cgroup: subsys name conflicts with all [ 788.250461][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 050 [ 788.256441][ T9] (null): error -EIO: failure setting delay to 10us [ 788.256627][ T9] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 788.301670][ T9] usb 3-1: USB disconnect, device number 50 [ 788.383135][T11229] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1216'. [ 789.006609][ T5838] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 789.458996][T11241] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1219'. [ 789.650075][ T5838] usb 9-1: Using ep0 maxpacket: 32 [ 789.658718][ T5838] usb 9-1: New USB device found, idVendor=1740, idProduct=9703, bcdDevice=4f.09 [ 789.660288][ T5838] usb 9-1: config 3 has an invalid interface number: 178 but max is 1 [ 789.660350][ T5838] usb 9-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 789.660401][ T5838] usb 9-1: config 3 has an invalid interface number: 138 but max is 1 [ 789.660453][ T5838] usb 9-1: config 3 has an invalid interface number: 56 but max is 1 [ 789.660503][ T5838] usb 9-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 789.660555][ T5838] usb 9-1: config 3 has no interface number 0 [ 789.660599][ T5838] usb 9-1: config 3 has no interface number 1 [ 789.660646][ T5838] usb 9-1: config 3 has no interface number 2 [ 789.660755][ T5838] usb 9-1: config 3 interface 178 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 789.660815][ T5838] usb 9-1: config 3 interface 178 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 789.660872][ T5838] usb 9-1: config 3 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 789.660926][ T5838] usb 9-1: config 3 interface 178 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 8 [ 789.660997][ T5838] usb 9-1: config 3 interface 138 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 789.661062][ T5838] usb 9-1: config 3 interface 138 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 789.661117][ T5838] usb 9-1: config 3 interface 138 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 789.661176][ T5838] usb 9-1: too many endpoints for config 3 interface 56 altsetting 104: 80, using maximum allowed: 30 [ 789.661256][ T5838] usb 9-1: config 3 interface 56 altsetting 104 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 789.661315][ T5838] usb 9-1: config 3 interface 56 altsetting 104 has 2 endpoint descriptors, different from the interface descriptor's value: 80 [ 789.661374][ T5838] usb 9-1: config 3 interface 178 has no altsetting 0 [ 789.661422][ T5838] usb 9-1: config 3 interface 138 has no altsetting 0 [ 789.661485][ T5838] usb 9-1: config 3 interface 56 has no altsetting 0 [ 789.679947][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.680023][ T5838] usb 9-1: Product: 橵ꑅ妪૎治㢀㳀沭憣풖ﴌ혯ᓓﰪᙫ쩨龆쇑樠袩柅 [ 789.680080][ T5838] usb 9-1: Manufacturer: äŠ [ 789.680126][ T5838] usb 9-1: SerialNumber: syz [ 789.924023][T11231] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 790.017953][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.027518][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.033859][ T5727] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 790.105392][T11245] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.215007][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 790.226457][ T5727] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 790.255585][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.289105][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.289187][ T5727] usb 3-1: Product: syz [ 790.289203][ T5727] usb 3-1: Manufacturer: syz [ 790.289219][ T5727] usb 3-1: SerialNumber: syz [ 790.320234][T11231] loop4: detected capacity change from 0 to 7 [ 790.337780][ T5727] usb 3-1: config 0 descriptor?? [ 790.506695][T11231] Dev loop4: unable to read RDB block 7 [ 790.512467][T11231] loop4: unable to read partition table [ 790.512697][T11231] loop4: partition table beyond EOD, truncated [ 790.512735][T11231] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 790.548161][ T1554] Bluetooth: hci0: Frame reassembly failed (-90) [ 790.567084][T11240] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.583747][T11244] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.639947][T11240] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.700764][T11247] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 790.712508][T11247] binder: 11246:11247 ioctl 40046210 0 returned -14 [ 792.107918][ T5838] usb 9-1: USB disconnect, device number 37 [ 792.430510][ T5613] Bluetooth: hci0: command 0x1003 tx timeout [ 792.540060][ T5612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 793.012987][T11265] jffs2: notice: (11265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 794.387784][ T9] usb 3-1: USB disconnect, device number 51 [ 795.041792][T11271] cgroup: subsys name conflicts with all [ 795.631500][ T38] audit: type=1326 audit(1788093495.138:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11283 comm="syz.7.1233" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff69961e159 code=0x0 [ 795.809266][T11281] Dead loop on virtual device ip6_vti0 (net 39), fix it urgently! [ 796.509036][T11297] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1237'. [ 796.710077][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 796.731510][T11300] bond1: Unable to set up delay as MII monitoring is disabled [ 796.782324][T11300] bond1 (unregistering): Released all slaves [ 796.810025][T10745] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 796.884117][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 796.898706][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 796.909283][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.979022][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.979096][ T9] usb 7-1: Product: syz [ 796.979114][ T9] usb 7-1: Manufacturer: syz [ 796.979131][ T9] usb 7-1: SerialNumber: syz [ 797.010720][ T9] usb 7-1: config 0 descriptor?? [ 797.028833][T10745] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 797.040548][T10745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 797.040636][T10745] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 797.040736][T10745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.377740][T11303] can0: slcan on pty30. [ 797.501200][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 797.682001][ T9] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 797.694657][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.694686][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 797.695995][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 797.696021][ T9] usb 9-1: SerialNumber: syz [ 797.945032][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.977437][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.341882][ T9] usb 9-1: 0:2 : does not exist [ 798.614851][ T9] usb 9-1: USB disconnect, device number 38 [ 798.828375][ T9345] udevd[9345]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.189576][T10745] gud 3-1:1.0: Failed to add properties (error=-71) [ 799.189677][T10745] gud 3-1:1.0: probe with driver gud failed with error -71 [ 799.354651][ T9] usb 7-1: USB disconnect, device number 44 [ 799.380713][T11302] can0 (unregistered): slcan off pty30. [ 799.696535][T10745] usb 3-1: USB disconnect, device number 52 [ 799.864660][T11348] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1241'. [ 800.557297][T11350] netlink: 'syz.2.1243': attribute type 8 has an invalid length. [ 801.339084][ T5584] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 801.559945][ T5584] usb 6-1: Using ep0 maxpacket: 32 [ 801.567522][ T5584] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 801.569567][ T5584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.628655][ T5584] usb 6-1: config 0 descriptor?? [ 802.109139][ T5584] hid (null): report_id 0 is invalid [ 802.117342][ T5584] hid (null): nested delimiters [ 802.118471][ T5584] hid (null): bogus close delimiter [ 802.179233][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.188888][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.188926][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.188955][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.188985][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.189015][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.189044][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.189072][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.189101][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.189130][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: unknown main item tag 0x0 [ 802.274207][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: report_id 0 is invalid [ 802.281947][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: item 0 0 1 8 parsing failed [ 802.282840][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: parse failed (reason: -22) [ 802.282958][ T5584] hid-corsair-void 0003:1B1C:1B27.000F: probe with driver hid-corsair-void failed with error -22 [ 802.359049][ T5584] usb 6-1: USB disconnect, device number 35 [ 802.862005][T11377] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1250'. [ 802.959213][T11380] input: syz0 as /devices/virtual/input/input23 [ 803.105425][T11384] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 803.169993][ T5584] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 803.320371][ T5584] usb 3-1: Using ep0 maxpacket: 16 [ 803.326688][ T5584] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 803.339445][ T5584] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 803.347845][ T5584] usb 3-1: config 252 has no interface number 0 [ 803.347921][ T5584] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 803.347950][ T5584] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 803.385543][ T5584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.397773][ T5584] usb 3-1: Product: syz [ 803.397796][ T5584] usb 3-1: Manufacturer: syz [ 803.397812][ T5584] usb 3-1: SerialNumber: syz [ 803.424044][T11381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 803.516945][ T5584] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 804.350209][ T38] audit: type=1326 audit(1788093503.858:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 804.375259][ T8435] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 804.380676][ T38] audit: type=1326 audit(1788093503.888:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 804.385974][ T38] audit: type=1326 audit(1788093503.898:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 804.387371][ T38] audit: type=1326 audit(1788093503.898:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 804.387493][ T38] audit: type=1326 audit(1788093503.898:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 804.458359][ T38] audit: type=1326 audit(1788093503.968:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2fdfe98e code=0x7ffc0000 [ 804.461697][ T38] audit: type=1326 audit(1788093503.978:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2fdfe98e code=0x7ffc0000 [ 804.463132][ T38] audit: type=1326 audit(1788093503.978:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2fdfe98e code=0x7ffc0000 [ 804.465723][ T38] audit: type=1326 audit(1788093503.978:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2fdfe98e code=0x7ffc0000 [ 804.468252][ T38] audit: type=1326 audit(1788093503.978:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz.5.1258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2fdfe98e code=0x7ffc0000 [ 804.519986][ T8435] usb 9-1: Using ep0 maxpacket: 16 [ 804.522442][ T8435] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 804.583343][ T8435] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.583436][ T8435] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.583466][ T8435] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 804.583563][ T8435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.681028][ T8435] usb 9-1: config 0 descriptor?? [ 804.716308][ T13] usb 3-1: Failed to submit usb control message: -110 [ 804.737885][ T13] usb 3-1: unable to send the bmi data to the device: -110 [ 804.737924][ T13] usb 3-1: unable to get target info from device [ 804.738020][ T13] usb 3-1: could not get target info (-110) [ 804.738468][ T13] usb 3-1: could not probe fw (-110) [ 805.180683][ T8435] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0010/input/input24 [ 805.698920][ T8435] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 805.765862][ T8435] usb 9-1: USB disconnect, device number 39 [ 805.875379][T11413] FAULT_INJECTION: forcing a failure. [ 805.875379][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 805.899943][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.5.1261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 805.899982][T11413] Tainted: [L]=SOFTLOCKUP [ 805.899991][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.900007][T11413] Call Trace: [ 805.900017][T11413] [ 805.900027][T11413] dump_stack_lvl+0xe8/0x150 [ 805.900073][T11413] should_fail_ex+0x46b/0x600 [ 805.900107][T11413] should_failslab+0xa8/0x100 [ 805.900143][T11413] ? alloc_empty_file+0x5b/0x1d0 [ 805.900177][T11413] kmem_cache_alloc_noprof+0x9e/0x690 [ 805.900210][T11413] ? alloc_empty_file+0x5b/0x1d0 [ 805.900250][T11413] alloc_empty_file+0x5b/0x1d0 [ 805.900285][T11413] alloc_file_pseudo+0x115/0x1e0 [ 805.900323][T11413] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 805.900361][T11413] ? alloc_fd+0x654/0x6d0 [ 805.900401][T11413] sock_alloc_file+0xb8/0x2f0 [ 805.900498][T11413] ? __sys_socket+0x12b/0x1b0 [ 805.900525][T11413] __sys_socket+0x13f/0x1b0 [ 805.900555][T11413] __x64_sys_socket+0x7a/0x90 [ 805.900583][T11413] do_syscall_64+0x166/0x520 [ 805.900609][T11413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.900635][T11413] ? clear_bhb_loop+0x70/0xc0 [ 805.900668][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.900692][T11413] RIP: 0033:0x7fdb2fe3e159 [ 805.900715][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.900741][T11413] RSP: 002b:00007fdb2e096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 805.900767][T11413] RAX: ffffffffffffffda RBX: 00007fdb300c5fa0 RCX: 00007fdb2fe3e159 [ 805.900784][T11413] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 805.900797][T11413] RBP: 00007fdb2fed5024 R08: 0000000000000000 R09: 0000000000000000 [ 805.900812][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.900833][T11413] R13: 00007fdb300c6038 R14: 00007fdb300c5fa0 R15: 00007ffe2f74e668 [ 805.900869][T11413] [ 806.203705][T11414] fido_id[11414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 806.260346][ T5584] usb 3-1: USB disconnect, device number 53 [ 806.458760][T11421] netlink: 'syz.2.1264': attribute type 8 has an invalid length. [ 806.559966][ T8383] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 807.205909][ T8383] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 807.215064][ T8383] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 807.215153][ T8383] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 807.215270][ T8383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.584432][ T8383] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 807.863286][ T8383] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 808.072226][T10745] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 808.072583][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 808.199999][T10745] usb 7-1: device descriptor read/64, error -32 [ 808.223461][ T8383] usb 6-1: USB disconnect, device number 36 [ 808.439994][T10745] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 808.449200][ T8383] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 808.460991][ T8383] spcp8x5 6-1:1.0: device disconnected [ 808.571459][T10745] usb 7-1: device descriptor read/64, error -71 [ 808.681938][T10745] usb usb7-port1: attempt power cycle [ 809.080043][T10745] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 809.100781][T10745] usb 7-1: device descriptor read/8, error -71 [ 809.345230][T10745] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 809.360845][T10745] usb 7-1: device descriptor read/8, error -71 [ 809.545771][T10745] usb usb7-port1: unable to enumerate USB device [ 810.932477][ T8383] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 811.100093][ T8383] usb 9-1: Using ep0 maxpacket: 16 [ 811.103215][ T8383] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 811.122166][ T8383] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 811.122256][ T8383] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.122280][ T8383] usb 9-1: config 0 has no interface number 0 [ 811.161868][ T8383] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.161970][ T8383] usb 9-1: Product: syz [ 811.161989][ T8383] usb 9-1: Manufacturer: syz [ 811.162027][ T8383] usb 9-1: SerialNumber: syz [ 811.207447][ T8383] usb 9-1: config 0 descriptor?? [ 811.228299][ T8383] uvcvideo 9-1:0.105: Found Unit with invalid ID 0 [ 811.228426][ T8383] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 811.228502][ T8383] uvcvideo 9-1:0.105: No valid video chain found. [ 813.493406][T11493] FAULT_INJECTION: forcing a failure. [ 813.493406][T11493] name failslab, interval 1, probability 0, space 0, times 0 [ 813.506693][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.6.1284 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 813.506720][T11493] Tainted: [L]=SOFTLOCKUP [ 813.506726][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.506737][T11493] Call Trace: [ 813.506744][T11493] [ 813.506752][T11493] dump_stack_lvl+0xe8/0x150 [ 813.506784][T11493] should_fail_ex+0x46b/0x600 [ 813.506828][T11493] should_failslab+0xa8/0x100 [ 813.506866][T11493] kmem_cache_alloc_node_noprof+0xac/0x660 [ 813.506898][T11493] ? __alloc_skb+0x1db/0x7a0 [ 813.506925][T11493] ? __alloc_skb+0x1db/0x7a0 [ 813.506961][T11493] __alloc_skb+0x1db/0x7a0 [ 813.506997][T11493] netlink_sendmsg+0x5d4/0xb40 [ 813.507030][T11493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.507056][T11493] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 813.507081][T11493] ? __kernel_text_address+0xd/0x30 [ 813.507102][T11493] ? unwind_get_return_address+0x4d/0x90 [ 813.507126][T11493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.507149][T11493] sock_sendmsg_nosec+0x13a/0x180 [ 813.507168][T11493] ____sys_sendmsg+0x565/0x870 [ 813.507197][T11493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.507225][T11493] ? import_iovec+0x73/0xa0 [ 813.507249][T11493] ___sys_sendmsg+0x2a5/0x360 [ 813.507270][T11493] ? __lock_acquire+0x6df/0x2e40 [ 813.507295][T11493] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.507341][T11493] ? __fget_files+0x2a/0x420 [ 813.507356][T11493] ? __fget_files+0x3a8/0x420 [ 813.507379][T11493] __x64_sys_sendmsg+0x1b7/0x290 [ 813.507403][T11493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 813.507440][T11493] do_syscall_64+0x166/0x520 [ 813.507459][T11493] ? trace_irq_disable+0x3b/0x140 [ 813.507481][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.507498][T11493] ? clear_bhb_loop+0x70/0xc0 [ 813.507518][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.507535][T11493] RIP: 0033:0x7fc2503ce159 [ 813.507551][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.507565][T11493] RSP: 002b:00007fc24e626028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.507583][T11493] RAX: ffffffffffffffda RBX: 00007fc250655fa0 RCX: 00007fc2503ce159 [ 813.507612][T11493] RDX: 0000000000000080 RSI: 0000200000000480 RDI: 0000000000000003 [ 813.507623][T11493] RBP: 00007fc24e626090 R08: 0000000000000000 R09: 0000000000000000 [ 813.507633][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.507643][T11493] R13: 00007fc250656038 R14: 00007fc250655fa0 R15: 00007ffc1752caf8 [ 813.507668][T11493] [ 813.539983][ T8383] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 813.801605][ T8383] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 813.827867][ T8383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.864897][ T8383] usb 3-1: config 0 descriptor?? [ 813.873331][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.873407][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.061481][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1285'. [ 814.165233][ T8383] usb 3-1: Cannot read MAC address [ 814.165862][ T8383] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 814.244859][ T8383] usb 3-1: USB disconnect, device number 54 [ 814.405729][ T5838] usb 9-1: USB disconnect, device number 40 [ 814.750581][ T5727] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 815.060035][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 815.067264][ T5727] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 815.068813][ T5727] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 815.068844][ T5727] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 815.068868][ T5727] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 815.068901][ T5727] usb 7-1: config 1 has no interface number 0 [ 815.068950][ T5727] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 815.068980][ T5727] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 815.069027][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.218714][ T5727] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 815.590336][ T5838] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 815.664803][ T5727] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 815.779492][ T5838] usb 6-1: device descriptor read/64, error -71 [ 816.030062][ T5838] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 816.160048][ T5838] usb 6-1: device descriptor read/64, error -71 [ 816.270568][ T5838] usb usb6-port1: attempt power cycle [ 816.900885][ T5838] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 816.920703][ T5838] usb 6-1: device descriptor read/8, error -71 [ 816.930566][ T1238] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 817.169975][ T5838] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 817.192200][ T5838] usb 6-1: device descriptor read/8, error -71 [ 817.300408][ T5838] usb usb6-port1: unable to enumerate USB device [ 817.525118][ T1238] usb 7-1: USB disconnect, device number 49 [ 817.541825][ T1238] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 817.694975][T11531] FAULT_INJECTION: forcing a failure. [ 817.694975][T11531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.708254][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.7.1295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 817.708292][T11531] Tainted: [L]=SOFTLOCKUP [ 817.708302][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.708317][T11531] Call Trace: [ 817.708328][T11531] [ 817.708338][T11531] dump_stack_lvl+0xe8/0x150 [ 817.708382][T11531] should_fail_ex+0x46b/0x600 [ 817.708414][T11531] _copy_from_user+0x2d/0xb0 [ 817.708444][T11531] snd_ctl_ioctl+0x4cd/0x1df0 [ 817.708568][T11531] ? stack_trace_save+0xa9/0x100 [ 817.708598][T11531] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 817.708626][T11531] ? kasan_save_track+0x4f/0x80 [ 817.708661][T11531] ? stack_depot_save_flags+0x33/0x7f0 [ 817.708686][T11531] ? __lock_acquire+0x6df/0x2e40 [ 817.708726][T11531] ? kasan_save_track+0x4f/0x80 [ 817.708755][T11531] ? kasan_save_track+0x3e/0x80 [ 817.708782][T11531] ? kasan_save_free_info+0x40/0x50 [ 817.708806][T11531] ? __kasan_slab_free+0x5c/0x80 [ 817.708836][T11531] ? kfree+0x1c5/0x6d0 [ 817.708861][T11531] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 817.708888][T11531] ? security_file_ioctl+0xc3/0x2a0 [ 817.708912][T11531] ? __se_sys_ioctl+0x47/0x170 [ 817.708940][T11531] ? do_syscall_64+0x166/0x520 [ 817.708965][T11531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.709046][T11531] ? tomoyo_path_number_perm+0x219/0x5f0 [ 817.709072][T11531] ? tomoyo_path_number_perm+0x219/0x5f0 [ 817.709100][T11531] ? do_vfs_ioctl+0x1184/0x1550 [ 817.709132][T11531] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 817.709163][T11531] ? __pfx_smack_log+0x10/0x10 [ 817.709208][T11531] ? smk_tskacc+0x2fb/0x370 [ 817.709245][T11531] ? smack_file_ioctl+0x2c4/0x370 [ 817.709284][T11531] ? __pfx_smack_file_ioctl+0x10/0x10 [ 817.709331][T11531] ? __fget_files+0x2a/0x420 [ 817.709353][T11531] ? __fget_files+0x3a8/0x420 [ 817.709374][T11531] ? __fget_files+0x2a/0x420 [ 817.709401][T11531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 817.709427][T11531] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 817.709457][T11531] __se_sys_ioctl+0xff/0x170 [ 817.709490][T11531] do_syscall_64+0x166/0x520 [ 817.709515][T11531] ? trace_irq_disable+0x3b/0x140 [ 817.709545][T11531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.709568][T11531] ? clear_bhb_loop+0x70/0xc0 [ 817.709598][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.709622][T11531] RIP: 0033:0x7ff69961e159 [ 817.709644][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.709665][T11531] RSP: 002b:00007ff697876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.709691][T11531] RAX: ffffffffffffffda RBX: 00007ff6998a5fa0 RCX: 00007ff69961e159 [ 817.709716][T11531] RDX: 0000200000000740 RSI: 00000000c1105517 RDI: 0000000000000003 [ 817.709732][T11531] RBP: 00007ff697876090 R08: 0000000000000000 R09: 0000000000000000 [ 817.709747][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.709761][T11531] R13: 00007ff6998a6038 R14: 00007ff6998a5fa0 R15: 00007ffda2362848 [ 817.709795][T11531] [ 819.720086][ T5860] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 819.874571][ T5860] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 819.888004][ T5860] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.902971][ T5860] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.911118][ T5860] usb 9-1: Product: syz [ 819.911158][ T5860] usb 9-1: Manufacturer: syz [ 819.911175][ T5860] usb 9-1: SerialNumber: syz [ 819.919496][ T5860] usb 9-1: config 0 descriptor?? [ 819.946441][ T5860] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 820.040710][ T5707] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 821.033278][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.034340][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.041247][ T8383] usb 9-1: USB disconnect, device number 41 [ 821.131885][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 821.133095][ T5707] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 821.138380][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 821.138415][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 821.180022][ T5860] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 821.187066][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.187149][ T5707] usb 3-1: Product: syz [ 821.187191][ T5707] usb 3-1: Manufacturer: syz [ 821.187239][ T5707] usb 3-1: SerialNumber: syz [ 821.214956][ T5707] usb 3-1: config 0 descriptor?? [ 821.231711][ T5707] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 821.360811][ T5860] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 821.363978][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 821.364079][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 821.364152][ T5860] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 821.364227][ T5860] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 821.364350][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.444183][T11553] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 821.444337][T11553] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 821.461459][ T5860] pl2303 7-1:1.0: pl2303 converter detected [ 821.514782][ T5860] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 821.700015][T11555] kAFS: Invalid Command on /proc/fs/afs/cells file [ 821.706367][T11555] kAFS: Invalid Command on /proc/fs/afs/cells file [ 821.776894][T11551] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 821.777484][T11551] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 821.778024][T11551] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 821.778756][T11551] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 821.778817][T11551] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 821.818617][ T5860] usb 7-1: USB disconnect, device number 50 [ 821.876612][ T5860] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 821.887296][ T5860] pl2303 7-1:1.0: device disconnected [ 822.080018][ T8383] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 822.240091][ T8383] usb 6-1: Using ep0 maxpacket: 16 [ 822.241039][ T8383] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 822.245287][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.245380][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.245450][ T8383] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.245572][ T8383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.284683][ T8383] usb 6-1: config 0 descriptor?? [ 822.496403][ T5860] usb 3-1: USB disconnect, device number 55 [ 822.780096][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.785831][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.864388][ T8383] usbhid 6-1:0.0: can't add hid device: -71 [ 822.864753][ T8383] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 822.895783][ T8383] usb 6-1: USB disconnect, device number 41 [ 822.923806][T11574] ima: policy update failed [ 822.940487][ T38] kauditd_printk_skb: 176 callbacks suppressed [ 822.940569][ T38] audit: type=1807 audit(1788093522.428:706): UNKNOWN=measu res=0 [ 822.940649][ T38] audit: type=1802 audit(1788093522.438:707): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.8.1310" res=0 errno=0 [ 822.940785][ T38] audit: type=1802 audit(1788093522.438:708): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.8.1310" res=0 errno=0 [ 822.977907][ T5707] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 823.119941][ T5707] usb 3-1: device descriptor read/64, error -71 [ 823.402123][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1312'. [ 823.412032][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1312'. [ 824.570151][ T5707] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 824.730179][ T5707] usb 3-1: device descriptor read/64, error -71 [ 825.789379][ T5707] usb usb3-port1: attempt power cycle [ 826.220054][ T5707] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 826.429916][ T5707] usb 3-1: device not accepting address 58, error -71 [ 826.519925][ T8383] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 826.566477][T11600] FAULT_INJECTION: forcing a failure. [ 826.566477][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 826.618241][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.5.1319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 826.618270][T11600] Tainted: [L]=SOFTLOCKUP [ 826.618276][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.618287][T11600] Call Trace: [ 826.618295][T11600] [ 826.618302][T11600] dump_stack_lvl+0xe8/0x150 [ 826.618340][T11600] should_fail_ex+0x46b/0x600 [ 826.618362][T11600] should_failslab+0xa8/0x100 [ 826.618414][T11600] __kmalloc_noprof+0xfb/0x790 [ 826.618442][T11600] ? tomoyo_encode+0x2ad/0x570 [ 826.618462][T11600] ? tomoyo_encode+0x2ad/0x570 [ 826.618488][T11600] tomoyo_encode+0x2ad/0x570 [ 826.618513][T11600] tomoyo_realpath_from_path+0x5fa/0x640 [ 826.618541][T11600] ? tomoyo_path_number_perm+0x219/0x5f0 [ 826.618558][T11600] tomoyo_path_number_perm+0x246/0x5f0 [ 826.618577][T11600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 826.618593][T11600] ? __lock_acquire+0x6df/0x2e40 [ 826.618625][T11600] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 826.618644][T11600] ? hook_file_ioctl+0x1f5/0x610 [ 826.618683][T11600] ? __fget_files+0x2a/0x420 [ 826.618701][T11600] ? __fget_files+0x2a/0x420 [ 826.618716][T11600] ? __fget_files+0x3a8/0x420 [ 826.618730][T11600] ? __fget_files+0x2a/0x420 [ 826.618749][T11600] security_file_ioctl+0xc3/0x2a0 [ 826.618768][T11600] __se_sys_ioctl+0x47/0x170 [ 826.618791][T11600] do_syscall_64+0x166/0x520 [ 826.618808][T11600] ? trace_irq_disable+0x3b/0x140 [ 826.618831][T11600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.618847][T11600] ? clear_bhb_loop+0x70/0xc0 [ 826.618868][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.618884][T11600] RIP: 0033:0x7fdb2fe3e159 [ 826.618900][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.618914][T11600] RSP: 002b:00007fdb2e096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.618932][T11600] RAX: ffffffffffffffda RBX: 00007fdb300c5fa0 RCX: 00007fdb2fe3e159 [ 826.618944][T11600] RDX: 0000200000000b00 RSI: 00000000000089f1 RDI: 0000000000000003 [ 826.618955][T11600] RBP: 00007fdb2e096090 R08: 0000000000000000 R09: 0000000000000000 [ 826.618966][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.618976][T11600] R13: 00007fdb300c6038 R14: 00007fdb300c5fa0 R15: 00007ffe2f74e668 [ 826.619001][T11600] [ 826.619027][T11600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 826.688620][ T8383] usb 7-1: Using ep0 maxpacket: 16 [ 826.694557][ T8383] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 826.752144][ T8383] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 826.753100][ T8383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 826.910835][ T8383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.910920][ T8383] usb 7-1: Product: syz [ 826.910939][ T8383] usb 7-1: Manufacturer: syz [ 826.910984][ T8383] usb 7-1: SerialNumber: syz [ 826.953921][ T8383] usb 7-1: config 0 descriptor?? [ 826.987367][ T8383] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 826.989393][ T8383] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 827.619272][ T8383] em28xx 7-1:0.0: unknown em28xx chip ID (37) [ 827.825293][ T8383] em28xx 7-1:0.0: Config register raw data: 0x37 [ 827.825369][ T8383] em28xx 7-1:0.0: I2S Audio (5 sample rate(s)) [ 827.825389][ T8383] em28xx 7-1:0.0: No AC97 audio processor [ 828.049982][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 828.201084][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 828.208907][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 828.233593][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 828.253309][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.253339][ T9] usb 6-1: config 0 has no interface number 0 [ 828.286526][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.297572][ T9] usb 6-1: Product: syz [ 828.297595][ T9] usb 6-1: Manufacturer: syz [ 828.297612][ T9] usb 6-1: SerialNumber: syz [ 828.340210][ T9] usb 6-1: config 0 descriptor?? [ 828.412568][ T9] uvcvideo 6-1:0.105: Found Unit with invalid ID 0 [ 828.415151][ T9] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 828.415185][ T9] uvcvideo 6-1:0.105: No valid video chain found. [ 828.463832][ T8383] usb 7-1: USB disconnect, device number 51 [ 829.156520][ T8383] usb 6-1: USB disconnect, device number 42 [ 831.312576][ T5920] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 831.599929][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 831.606334][ T5920] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 831.669185][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.743342][ T5920] usb 7-1: config 0 descriptor?? [ 832.131876][T11627] FAULT_INJECTION: forcing a failure. [ 832.131876][T11627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.134079][T11627] CPU: 1 UID: 0 PID: 11627 Comm: syz.7.1329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 832.134116][T11627] Tainted: [L]=SOFTLOCKUP [ 832.134140][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.134172][T11627] Call Trace: [ 832.134202][T11627] [ 832.134227][T11627] dump_stack_lvl+0xe8/0x150 [ 832.134277][T11627] should_fail_ex+0x46b/0x600 [ 832.134337][T11627] _copy_to_user+0x31/0xb0 [ 832.134406][T11627] simple_read_from_buffer+0xe1/0x170 [ 832.134438][T11627] proc_fail_nth_read+0x1be/0x230 [ 832.134503][T11627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 832.134571][T11627] ? rw_verify_area+0x250/0x4d0 [ 832.134600][T11627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 832.134635][T11627] vfs_read+0x219/0xa90 [ 832.134731][T11627] ? __pfx_vfs_read+0x10/0x10 [ 832.134760][T11627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 832.134798][T11627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 832.134860][T11627] ? mutex_lock_nested+0x152/0x1d0 [ 832.134916][T11627] ? fdget_pos+0x252/0x320 [ 832.134951][T11627] ksys_read+0x156/0x270 [ 832.135020][T11627] ? __pfx_ksys_read+0x10/0x10 [ 832.135095][T11627] do_syscall_64+0x166/0x520 [ 832.135121][T11627] ? trace_irq_disable+0x3b/0x140 [ 832.135208][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.135246][T11627] ? clear_bhb_loop+0x70/0xc0 [ 832.135280][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.135337][T11627] RIP: 0033:0x7ff6995de98e [ 832.135395][T11627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 832.135416][T11627] RSP: 002b:00007ff697875fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 832.135442][T11627] RAX: ffffffffffffffda RBX: 00007ff6978766c0 RCX: 00007ff6995de98e [ 832.135472][T11627] RDX: 000000000000000f RSI: 00007ff6978760a0 RDI: 0000000000000003 [ 832.135513][T11627] RBP: 00007ff697876090 R08: 0000000000000000 R09: 0000000000000000 [ 832.135551][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.135572][T11627] R13: 00007ff6998a6038 R14: 00007ff6998a5fa0 R15: 00007ffda2362848 [ 832.135608][T11627] [ 832.279917][ T8383] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 832.411188][ T5920] hid_parser_main: 83 callbacks suppressed [ 832.420861][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.428849][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.428889][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.428920][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.428950][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.428979][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.429009][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.429037][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.429066][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.429095][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: unknown main item tag 0x0 [ 832.540657][ T8383] usb 6-1: device descriptor read/64, error -71 [ 832.676148][ T5920] hid-corsair-void 0003:1B1C:1B27.0011: hidraw0: USB HID v7f.fd Device [HID 1b1c:1b27] on usb-dummy_hcd.6-1/input0 [ 832.720100][ T5920] usb 7-1: USB disconnect, device number 52 [ 832.813014][ T5838] hid-corsair-void 0003:1B1C:1B27.0011: failed to request firmware (reason: -19) [ 832.824748][ T8383] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 832.858868][ T5838] hid-corsair-void 0003:1B1C:1B27.0011: failed to request battery (reason: -19) [ 832.979941][ T8383] usb 6-1: device descriptor read/64, error -71 [ 833.075911][T11630] fido_id[11630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 833.100591][ T8383] usb usb6-port1: attempt power cycle [ 835.169901][ T8383] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 835.297167][ T8383] usb 6-1: device descriptor read/8, error -71 [ 837.646492][T11661] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1340'. [ 838.670882][ T1238] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 838.820118][ T1238] usb 6-1: Using ep0 maxpacket: 16 [ 838.977127][ T1238] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 838.987628][ T1238] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 838.987730][ T1238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 839.024756][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.024787][ T1238] usb 6-1: Product: syz [ 839.024809][ T1238] usb 6-1: Manufacturer: syz [ 839.024820][ T1238] usb 6-1: SerialNumber: syz [ 839.070166][ T1238] usb 6-1: config 0 descriptor?? [ 839.105955][ T1238] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 839.106074][ T1238] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 839.702667][ T1238] em28xx 6-1:0.0: unknown em28xx chip ID (37) [ 839.774418][T11676] FAULT_INJECTION: forcing a failure. [ 839.774418][T11676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.787912][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.2.1332 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 839.787949][T11676] Tainted: [L]=SOFTLOCKUP [ 839.787963][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.787974][T11676] Call Trace: [ 839.787981][T11676] [ 839.787994][T11676] dump_stack_lvl+0xe8/0x150 [ 839.788049][T11676] should_fail_ex+0x46b/0x600 [ 839.788102][T11676] _copy_from_iter+0x1d3/0x1660 [ 839.788139][T11676] ? __pfx__copy_from_iter+0x10/0x10 [ 839.788165][T11676] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 839.788202][T11676] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 839.788233][T11676] ? skb_put+0x112/0x210 [ 839.788267][T11676] hci_sock_sendmsg+0x42a/0xf50 [ 839.788305][T11676] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 839.788346][T11676] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 839.788367][T11676] sock_sendmsg_nosec+0x13a/0x180 [ 839.788410][T11676] sock_write_iter+0x2e4/0x3f0 [ 839.788450][T11676] ? __pfx_sock_write_iter+0x10/0x10 [ 839.788492][T11676] ? bpf_lsm_file_permission+0x9/0x20 [ 839.788518][T11676] ? security_file_permission+0x75/0x260 [ 839.788542][T11676] vfs_write+0x61e/0xbb0 [ 839.788589][T11676] ? __pfx_vfs_write+0x10/0x10 [ 839.788621][T11676] ? __fget_files+0x2a/0x420 [ 839.788655][T11676] ksys_write+0x156/0x270 [ 839.788684][T11676] ? __pfx_ksys_write+0x10/0x10 [ 839.788726][T11676] do_syscall_64+0x166/0x520 [ 839.788745][T11676] ? trace_irq_disable+0x3b/0x140 [ 839.788782][T11676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.788808][T11676] ? clear_bhb_loop+0x70/0xc0 [ 839.788838][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.788862][T11676] RIP: 0033:0x7ffb88b3e159 [ 839.788883][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.788907][T11676] RSP: 002b:00007ffb86d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.788925][T11676] RAX: ffffffffffffffda RBX: 00007ffb88dc5fa0 RCX: 00007ffb88b3e159 [ 839.788937][T11676] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000009 [ 839.788966][T11676] RBP: 00007ffb86d96090 R08: 0000000000000000 R09: 0000000000000000 [ 839.788982][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.788996][T11676] R13: 00007ffb88dc6038 R14: 00007ffb88dc5fa0 R15: 00007ffce725fc38 [ 839.789033][T11676] [ 839.958105][ T1238] em28xx 6-1:0.0: Config register raw data: 0x37 [ 839.958211][ T1238] em28xx 6-1:0.0: I2S Audio (5 sample rate(s)) [ 839.958263][ T1238] em28xx 6-1:0.0: No AC97 audio processor [ 840.658757][T11682] netlink: 'syz.2.1346': attribute type 8 has an invalid length. [ 840.846808][ T5585] usb 6-1: USB disconnect, device number 47 [ 841.001853][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1345'. [ 843.121348][T11698] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7870] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11698] [ 843.189974][ T5707] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 843.350069][ T5707] usb 6-1: Using ep0 maxpacket: 8 [ 843.368843][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.384918][ T5707] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 843.384945][ T5707] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 843.421304][ T5585] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 843.433919][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.442614][ T5707] usb 6-1: Product: syz [ 843.442647][ T5707] usb 6-1: Manufacturer: syz [ 843.442664][ T5707] usb 6-1: SerialNumber: syz [ 843.584433][ T5585] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 843.596521][ T5585] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.596552][ T5585] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.599232][ T5585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 843.599260][ T5585] usb 9-1: SerialNumber: syz [ 844.366341][ T5707] cdc_ncm 6-1:1.0: bind() failure [ 844.440745][ T5707] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 844.445629][ T5707] cdc_ncm 6-1:1.1: bind() failure [ 844.539727][ T5707] usb 6-1: USB disconnect, device number 48 [ 845.108493][ T5585] usb 9-1: 0:2 : does not exist [ 845.284840][ T5585] usb 9-1: USB disconnect, device number 42 [ 845.454015][ T9345] udevd[9345]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.511763][ T8383] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 847.613883][T11735] netlink: 'syz.5.1362': attribute type 8 has an invalid length. [ 847.679928][ T8383] usb 9-1: Using ep0 maxpacket: 16 [ 847.686698][ T8383] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 847.891783][ T8383] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 847.892908][ T8383] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 848.203620][ T8383] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.203651][ T8383] usb 9-1: Product: syz [ 848.203668][ T8383] usb 9-1: Manufacturer: syz [ 848.203685][ T8383] usb 9-1: SerialNumber: syz [ 848.724824][ T8383] usb 9-1: config 0 descriptor?? [ 848.750541][ T8383] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 848.750646][ T8383] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 849.372641][ T8383] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 849.382868][ T8383] em28xx 9-1:0.0: Config register raw data: 0x37 [ 849.382948][ T8383] em28xx 9-1:0.0: I2S Audio (3 sample rate(s)) [ 849.382968][ T8383] em28xx 9-1:0.0: No AC97 audio processor [ 849.487695][ T5920] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 849.543776][T11747] netlink: 'syz.5.1365': attribute type 8 has an invalid length. [ 849.649963][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 849.657194][ T5920] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 849.673286][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 849.673448][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 849.758288][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.758945][ T5920] usb 7-1: Product: syz [ 849.758966][ T5920] usb 7-1: Manufacturer: syz [ 849.758983][ T5920] usb 7-1: SerialNumber: syz [ 849.797675][ T38] audit: type=1326 audit(1788093549.308:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 849.799234][ T38] audit: type=1326 audit(1788093549.308:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 849.862695][ T38] audit: type=1326 audit(1788093549.378:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 849.965590][ T5920] usb 7-1: config 0 descriptor?? [ 850.038210][ T5920] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 850.038446][ T5920] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 850.258891][ T38] audit: type=1326 audit(1788093549.768:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 850.259428][ T38] audit: type=1326 audit(1788093549.768:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 850.384035][ T5707] usb 9-1: USB disconnect, device number 43 [ 850.690770][ T38] audit: type=1326 audit(1788093550.208:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6995de98e code=0x7ffc0000 [ 850.691252][ T38] audit: type=1326 audit(1788093550.208:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 850.691311][ T38] audit: type=1326 audit(1788093550.208:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 850.928294][ T38] audit: type=1326 audit(1788093550.438:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 850.956171][ T38] audit: type=1326 audit(1788093550.438:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.7.1366" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69961e159 code=0x7ffc0000 [ 851.117191][ T5920] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 851.132135][ T5920] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 851.682438][T11770] netlink: 'syz.6.1364': attribute type 5 has an invalid length. [ 851.759966][ T5707] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 851.917340][ T5707] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 851.935879][ T5707] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.936049][ T5707] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.936327][ T5707] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 851.936516][ T5707] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 851.972337][ T5707] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 851.972599][ T5707] usb 9-1: SerialNumber: syz [ 852.511913][ T5920] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 852.512134][ T5920] em28xx 7-1:0.0: No AC97 audio processor [ 852.704700][T11769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.709161][T11769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.101547][ T5707] usb 9-1: 0:2 : does not exist [ 853.101700][ T5707] usb 9-1: unit 5 not found! [ 853.431132][ T5707] usb 9-1: USB disconnect, device number 44 [ 853.612188][ T9345] udevd[9345]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.703652][ T5920] usb 7-1: USB disconnect, device number 53 [ 853.729571][ T5920] em28xx 7-1:0.0: Disconnecting em28xx [ 853.909320][ T5920] em28xx: Freeing device [ 854.709604][T11793] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 857.590147][T11799] FAULT_INJECTION: forcing a failure. [ 857.590147][T11799] name fail_futex, interval 1, probability 0, space 0, times 0 [ 857.590193][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.7.1374 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 857.590232][T11799] Tainted: [L]=SOFTLOCKUP [ 857.590242][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.590258][T11799] Call Trace: [ 857.590268][T11799] [ 857.590278][T11799] dump_stack_lvl+0xe8/0x150 [ 857.590318][T11799] should_fail_ex+0x46b/0x600 [ 857.590350][T11799] get_futex_key+0x1b4/0x1580 [ 857.590389][T11799] ? __pfx_futex_wake_mark+0x10/0x10 [ 857.590423][T11799] ? __pfx_get_futex_key+0x10/0x10 [ 857.590452][T11799] ? try_to_wake_up+0x843/0x1430 [ 857.590568][T11799] futex_wake+0x119/0x600 [ 857.590599][T11799] ? __pfx_futex_wait+0x10/0x10 [ 857.590625][T11799] ? __pfx_futex_wake+0x10/0x10 [ 857.590667][T11799] do_futex+0x458/0x4e0 [ 857.590708][T11799] ? __pfx_do_futex+0x10/0x10 [ 857.590744][T11799] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 857.590793][T11799] __se_sys_futex+0x3a8/0x450 [ 857.590838][T11799] ? __pfx___se_sys_futex+0x10/0x10 [ 857.590883][T11799] ? rcu_is_watching+0x16/0xb0 [ 857.590926][T11799] ? __x64_sys_futex+0x21/0xf0 [ 857.590966][T11799] do_syscall_64+0x166/0x520 [ 857.590991][T11799] ? trace_irq_disable+0x3b/0x140 [ 857.591021][T11799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.591046][T11799] ? clear_bhb_loop+0x70/0xc0 [ 857.591076][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.591100][T11799] RIP: 0033:0x7ff69961e159 [ 857.591123][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.591143][T11799] RSP: 002b:00007ff697855028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 857.591167][T11799] RAX: ffffffffffffffda RBX: 00007ff6998a6090 RCX: 00007ff69961e159 [ 857.591184][T11799] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 857.591197][T11799] RBP: 00007ff6996b5024 R08: 0000000000000000 R09: 0000000000000002 [ 857.591212][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.591226][T11799] R13: 00007ff6998a6128 R14: 00007ff6998a6090 R15: 00007ffda2362848 [ 857.591262][T11799] [ 859.217952][T11804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.820836][T11815] FAULT_INJECTION: forcing a failure. [ 860.820836][T11815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.820889][T11815] CPU: 0 UID: 0 PID: 11815 Comm: syz.7.1378 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 860.820915][T11815] Tainted: [L]=SOFTLOCKUP [ 860.820922][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.820934][T11815] Call Trace: [ 860.820942][T11815] [ 860.820950][T11815] dump_stack_lvl+0xe8/0x150 [ 860.820986][T11815] should_fail_ex+0x46b/0x600 [ 860.821012][T11815] _copy_from_user+0x2d/0xb0 [ 860.821035][T11815] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 860.821077][T11815] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 860.821108][T11815] ? rcu_is_watching+0x16/0xb0 [ 860.821136][T11815] ? trace_kmalloc+0x2a/0xf0 [ 860.821164][T11815] ip_generic_getfrag+0x149/0x2d0 [ 860.821308][T11815] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 860.821332][T11815] ? raw6_getfrag+0x116/0x3a0 [ 860.821417][T11815] ? __alloc_skb+0x4d0/0x7a0 [ 860.821438][T11815] ? skb_put+0x112/0x210 [ 860.821463][T11815] __ip6_append_data+0x3b26/0x40c0 [ 860.821532][T11815] ? __pfx_raw6_getfrag+0x10/0x10 [ 860.821564][T11815] ? lock_acquire+0x115/0x350 [ 860.821596][T11815] ? ip6_mtu+0x7d/0x490 [ 860.821687][T11815] ? __pfx___ip6_append_data+0x10/0x10 [ 860.821713][T11815] ? ip6_setup_cork+0x547/0xf60 [ 860.821739][T11815] ? ip6_append_data+0x1a6/0x270 [ 860.821767][T11815] ip6_append_data+0x108/0x270 [ 860.821795][T11815] ? __pfx_raw6_getfrag+0x10/0x10 [ 860.821827][T11815] rawv6_sendmsg+0x1298/0x18c0 [ 860.821869][T11815] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 860.821904][T11815] ? irqentry_exit+0x218/0x910 [ 860.821926][T11815] ? lockdep_hardirqs_on+0x7b/0x110 [ 860.821947][T11815] ? trace_irq_disable+0x3b/0x140 [ 860.821988][T11815] ? sock_rps_record_flow+0x19/0x350 [ 860.822048][T11815] ? inet_sendmsg+0x298/0x320 [ 860.822076][T11815] ? __pfx_inet_sendmsg+0x10/0x10 [ 860.822099][T11815] sock_sendmsg_nosec+0x10e/0x180 [ 860.822122][T11815] sock_write_iter+0x2e4/0x3f0 [ 860.822155][T11815] ? __pfx_sock_write_iter+0x10/0x10 [ 860.822203][T11815] do_iter_readv_writev+0x624/0x8d0 [ 860.822231][T11815] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 860.822260][T11815] ? bpf_lsm_file_permission+0x9/0x20 [ 860.822280][T11815] ? security_file_permission+0x75/0x260 [ 860.822303][T11815] ? rw_verify_area+0x209/0x4d0 [ 860.822327][T11815] vfs_writev+0x34c/0x990 [ 860.822360][T11815] ? __pfx_vfs_writev+0x10/0x10 [ 860.822397][T11815] ? __fget_files+0x2a/0x420 [ 860.822419][T11815] ? __fget_files+0x3a8/0x420 [ 860.822436][T11815] ? __fget_files+0x2a/0x420 [ 860.822460][T11815] do_writev+0x15a/0x2e0 [ 860.822488][T11815] ? __pfx_do_writev+0x10/0x10 [ 860.822523][T11815] do_syscall_64+0x166/0x520 [ 860.822545][T11815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.822564][T11815] ? clear_bhb_loop+0x70/0xc0 [ 860.822587][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.822607][T11815] RIP: 0033:0x7ff69961e159 [ 860.822627][T11815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.822645][T11815] RSP: 002b:00007ff697834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 860.822674][T11815] RAX: ffffffffffffffda RBX: 00007ff6998a6180 RCX: 00007ff69961e159 [ 860.822689][T11815] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 860.822702][T11815] RBP: 00007ff697834090 R08: 0000000000000000 R09: 0000000000000000 [ 860.822714][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.822727][T11815] R13: 00007ff6998a6218 R14: 00007ff6998a6180 R15: 00007ffda2362848 [ 860.822758][T11815] [ 861.340373][ T1238] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 861.500165][ T1238] usb 3-1: Using ep0 maxpacket: 16 [ 861.555350][ T1238] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.565463][ T1238] usb 3-1: config 0 has no interfaces? [ 861.578369][ T1238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.587818][ T1238] usb 3-1: Product: syz [ 861.587841][ T1238] usb 3-1: Manufacturer: syz [ 861.587859][ T1238] usb 3-1: SerialNumber: syz [ 861.623660][ T1238] usb 3-1: config 0 descriptor?? [ 861.710460][T10745] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 861.859907][T10745] usb 6-1: Using ep0 maxpacket: 16 [ 861.870099][T10745] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.889969][ T1238] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 861.902861][T10745] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.917651][T10745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.917680][T10745] usb 6-1: Product: syz [ 861.917697][T10745] usb 6-1: Manufacturer: syz [ 861.917714][T10745] usb 6-1: SerialNumber: syz [ 861.951653][T10745] usb 6-1: config 0 descriptor?? [ 862.039926][ T1238] usb 9-1: Using ep0 maxpacket: 32 [ 862.046324][ T1238] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 862.051533][ T1238] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.051563][ T1238] usb 9-1: Product: syz [ 862.051579][ T1238] usb 9-1: Manufacturer: syz [ 862.051596][ T1238] usb 9-1: SerialNumber: syz [ 862.094338][ T1238] usb 9-1: config 0 descriptor?? [ 862.108744][ T1238] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 863.256411][ T5920] usb 3-1: USB disconnect, device number 60 [ 863.369820][T11835] 0x000000000006-0x000000020000 : "" [ 863.784287][ T1238] gspca_ov534_9: reg_w failed -110 [ 863.954660][T11835] ftl_cs: FTL header corrupt! [ 864.209451][ T1238] gspca_ov534_9: Unknown sensor 0000 [ 864.209560][ T1238] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 864.488527][T11840] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 864.631702][ T1238] usb 6-1: USB disconnect, device number 49 [ 864.635894][T11840] bond2 (unregistering): Released all slaves [ 864.965689][T11856] FAULT_INJECTION: forcing a failure. [ 864.965689][T11856] name failslab, interval 1, probability 0, space 0, times 0 [ 865.019531][T11856] CPU: 0 UID: 0 PID: 11856 Comm: syz.5.1389 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 865.019570][T11856] Tainted: [L]=SOFTLOCKUP [ 865.019578][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.019599][T11856] Call Trace: [ 865.019610][T11856] [ 865.019621][T11856] dump_stack_lvl+0xe8/0x150 [ 865.019664][T11856] should_fail_ex+0x46b/0x600 [ 865.019696][T11856] should_failslab+0xa8/0x100 [ 865.019737][T11856] __kmalloc_cache_noprof+0xa1/0x680 [ 865.019770][T11856] ? cma_alloc_port+0xb5/0x670 [ 865.019883][T11856] ? cma_alloc_port+0xb5/0x670 [ 865.019914][T11856] cma_alloc_port+0xb5/0x670 [ 865.019978][T11856] rdma_bind_addr_dst+0xe23/0x3590 [ 865.020071][T11856] rdma_listen+0x25c/0xe90 [ 865.020111][T11856] ? __pfx_rdma_listen+0x10/0x10 [ 865.020146][T11856] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 865.020174][T11856] ? mutex_lock_nested+0x152/0x1d0 [ 865.020205][T11856] ? ucma_listen+0x328/0x440 [ 865.020288][T11856] ucma_listen+0x34c/0x440 [ 865.020327][T11856] ? __pfx_ucma_listen+0x10/0x10 [ 865.020377][T11856] ucma_write+0x257/0x2f0 [ 865.020414][T11856] ? __pfx_ucma_write+0x10/0x10 [ 865.020446][T11856] ? security_file_permission+0x75/0x260 [ 865.020474][T11856] ? rw_verify_area+0x209/0x4d0 [ 865.020505][T11856] vfs_writev+0x4c4/0x990 [ 865.020539][T11856] ? __pfx_ucma_write+0x10/0x10 [ 865.020578][T11856] ? __pfx_vfs_writev+0x10/0x10 [ 865.020635][T11856] ? __fget_files+0x2a/0x420 [ 865.020665][T11856] ? __fget_files+0x3a8/0x420 [ 865.020687][T11856] ? __fget_files+0x2a/0x420 [ 865.020720][T11856] do_writev+0x15a/0x2e0 [ 865.020755][T11856] ? __pfx_do_writev+0x10/0x10 [ 865.020802][T11856] do_syscall_64+0x166/0x520 [ 865.020827][T11856] ? trace_irq_disable+0x3b/0x140 [ 865.020857][T11856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.020882][T11856] ? clear_bhb_loop+0x70/0xc0 [ 865.020912][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.020935][T11856] RIP: 0033:0x7fdb2fe3e159 [ 865.020958][T11856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.020979][T11856] RSP: 002b:00007fdb2e096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 865.021004][T11856] RAX: ffffffffffffffda RBX: 00007fdb300c5fa0 RCX: 00007fdb2fe3e159 [ 865.021023][T11856] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 865.021039][T11856] RBP: 00007fdb2e096090 R08: 0000000000000000 R09: 0000000000000000 [ 865.021055][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.021070][T11856] R13: 00007fdb300c6038 R14: 00007fdb300c5fa0 R15: 00007ffe2f74e668 [ 865.021105][T11856] [ 867.430180][T10745] usb 9-1: USB disconnect, device number 45 [ 872.340711][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1402'. [ 875.624456][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.633083][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.819959][T10745] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 876.969897][T10745] usb 6-1: Using ep0 maxpacket: 16 [ 876.971512][T10745] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 876.986435][T10745] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 876.986972][T10745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 877.037653][T10745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.039953][T10745] usb 6-1: Product: syz [ 877.039976][T10745] usb 6-1: Manufacturer: syz [ 877.039995][T10745] usb 6-1: SerialNumber: syz [ 877.075876][T10745] usb 6-1: config 0 descriptor?? [ 877.102358][T10745] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 877.111785][T10745] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 878.302250][T10745] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 878.310325][T10745] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 878.334068][T10745] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 878.334163][T10745] em28xx 6-1:0.0: No AC97 audio processor [ 878.479936][ T8383] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 878.630548][ T8383] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 878.643275][ T8383] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 878.643305][ T8383] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 878.643329][ T8383] usb 7-1: config 4 has no interface number 0 [ 878.643376][ T8383] usb 7-1: config 4 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.643400][ T8383] usb 7-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.698363][ T8383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.706506][ T8383] usb 7-1: Product: syz [ 878.706530][ T8383] usb 7-1: Manufacturer: syz [ 878.706547][ T8383] usb 7-1: SerialNumber: syz [ 879.184965][ T8383] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 879.209754][ T8383] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 879.221034][ T8383] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 879.221098][ T8383] usb 7-1: media controller created [ 879.224121][ T8383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 879.440049][ T8383] DVB: Unable to find symbol dib7000p_attach() [ 879.440116][ T8383] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 880.970440][ T8383] rc_core: IR keymap rc-dib0700-rc5 not found [ 880.976695][ T8383] Registered IR keymap rc-empty [ 880.977004][ T8383] dvb-usb: could not initialize remote control. [ 880.977017][ T8383] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 881.166036][ T5860] usb 6-1: USB disconnect, device number 50 [ 881.211774][ T8383] usb 7-1: USB disconnect, device number 54 [ 881.349064][ T5860] em28xx 6-1:0.0: Disconnecting em28xx [ 881.464855][ T5860] em28xx: Freeing device [ 881.520724][ T8383] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 881.607373][T11954] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1420'. [ 884.335383][ T8383] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 884.407607][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1423'. [ 884.423462][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1423'. [ 884.519897][ T8383] usb 7-1: Invalid ep0 maxpacket: 32 [ 884.655002][ T8383] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 884.669990][T10745] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 884.809961][T10745] usb 6-1: device descriptor read/64, error -71 [ 884.819881][ T8383] usb 7-1: Invalid ep0 maxpacket: 32 [ 884.825685][ T8383] usb usb7-port1: attempt power cycle [ 885.049947][T10745] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 885.180160][T10745] usb 6-1: device descriptor read/64, error -71 [ 885.290416][T10745] usb usb6-port1: attempt power cycle [ 885.619921][ T5707] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 885.690676][T10745] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 885.710924][T10745] usb 6-1: device descriptor read/8, error -71 [ 885.770556][ T5707] usb 9-1: Using ep0 maxpacket: 32 [ 885.776878][ T5707] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 885.778605][ T5707] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.808911][ T5707] usb 9-1: config 0 descriptor?? [ 885.950126][T10745] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 886.012535][T10745] usb 6-1: device descriptor read/8, error -71 [ 886.122911][T10745] usb usb6-port1: unable to enumerate USB device [ 886.248620][ T5707] hid (null): report_id 0 is invalid [ 886.266131][ T5707] hid_parser_main: 470 callbacks suppressed [ 886.273843][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.281848][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.281885][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.281915][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.281945][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.281974][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.282003][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.282032][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.282062][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.282091][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: unknown main item tag 0x0 [ 886.282918][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: report_id 0 is invalid [ 886.282938][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: item 0 0 1 8 parsing failed [ 886.378985][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: parse failed (reason: -22) [ 886.387135][ T5707] hid-corsair-void 0003:1B1C:1B27.0012: probe with driver hid-corsair-void failed with error -22 [ 886.456957][T10745] usb 9-1: USB disconnect, device number 46 [ 887.259925][T10745] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 887.428048][T10745] usb 3-1: Using ep0 maxpacket: 32 [ 887.432326][T10745] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 888.051498][T10745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.086609][T10745] usb 3-1: config 0 descriptor?? [ 888.099972][ T1238] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 888.251968][ T1238] usb 6-1: Using ep0 maxpacket: 16 [ 888.256243][ T1238] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 888.294826][ T1238] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 888.295054][ T1238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.433310][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.433576][ T1238] usb 6-1: Product: syz [ 888.433847][ T1238] usb 6-1: Manufacturer: syz [ 888.434088][ T1238] usb 6-1: SerialNumber: syz [ 888.561705][ T1238] usb 6-1: config 0 descriptor?? [ 888.666123][ T1238] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 888.666809][ T1238] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 889.113374][T10745] hid-corsair-void 0003:1B1C:1B27.0013: hidraw0: USB HID v7f.fd Device [HID 1b1c:1b27] on usb-dummy_hcd.2-1/input0 [ 889.366105][T10745] usb 3-1: USB disconnect, device number 61 [ 889.378539][ T5860] hid-corsair-void 0003:1B1C:1B27.0013: failed to request battery (reason: -19) [ 889.394630][ T1238] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 889.414883][ T1238] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 889.436869][ T1238] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 889.436965][ T1238] em28xx 6-1:0.0: No AC97 audio processor [ 889.822131][ T5727] hid-corsair-void 0003:1B1C:1B27.0013: failed to request firmware (reason: -71) [ 890.155690][T12006] fido_id[12006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 890.644288][T10745] usb 6-1: USB disconnect, device number 55 [ 890.647023][T10745] em28xx 6-1:0.0: Disconnecting em28xx [ 890.821867][T10745] em28xx: Freeing device [ 896.492298][ T5707] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 901.969949][ T5585] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 902.143946][ T5585] usb 9-1: not running at top speed; connect to a high speed hub [ 902.151886][ T5585] usb 9-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 902.156027][ T5585] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 902.156064][ T5585] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.156108][ T5585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.233216][ T5585] hub 9-1:1.0: USB hub found [ 902.444323][ T5585] hub 9-1:1.0: 27 ports detected [ 902.449574][ T5585] hub 9-1:1.0: insufficient power available to use all downstream ports [ 902.710799][ T5585] hub 9-1:1.0: config failed, can't get hub status (err -5) [ 903.028419][ T5585] usb 9-1: USB disconnect, device number 47 [ 904.149929][ T5727] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 904.329919][ T5727] usb 9-1: Using ep0 maxpacket: 8 [ 904.335294][ T5727] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 904.337370][ T5727] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.337399][ T5727] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 904.337468][ T5727] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 904.365954][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.365986][ T5727] usb 9-1: Product: syz [ 904.366003][ T5727] usb 9-1: Manufacturer: syz [ 904.366019][ T5727] usb 9-1: SerialNumber: syz [ 906.973066][ T5727] usb 9-1: clock source 0 is not valid, cannot use [ 907.211950][ T5727] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 907.212564][ T5727] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 908.199674][ T5727] usb 9-1: USB disconnect, device number 48 [ 909.347110][T10228] udevd[10228]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.859951][ T5727] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 913.010798][ T5727] usb 7-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 913.021452][ T5727] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.047477][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 913.047569][ T5727] usb 7-1: Product: syz [ 913.047587][ T5727] usb 7-1: Manufacturer: syz [ 914.887417][ T5727] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:046D:C299.0014/input/input27 [ 915.186396][ T1238] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 915.445710][ T1238] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 915.456948][ T1238] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 915.457073][ T1238] usb 6-1: can't read configurations, error -71 [ 915.595835][ T5727] logitech 0003:046D:C299.0014: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.6-1/input0 [ 915.809056][ T5727] logitech 0003:046D:C299.0014: Force feedback support for Logitech Gaming Wheels [ 915.839341][ T5727] usb 7-1: USB disconnect, device number 58 [ 917.437970][T12194] usb usb8: usbfs: process 12194 (syz.8.1505) did not claim interface 0 before use [ 922.241302][T12214] fido_id[12214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 922.531532][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1512'. [ 927.290015][ T5727] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 927.439943][ T5727] usb 7-1: Using ep0 maxpacket: 16 [ 927.444092][ T5727] usb 7-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 927.455636][ T5727] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 927.455743][ T5727] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 927.455882][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.508147][ T5727] usb 7-1: config 0 descriptor?? [ 927.987960][ T5727] apple 0003:05AC:027C.0015: reserved main item tag 0xd [ 928.080614][ T5727] apple 0003:05AC:027C.0015: ignoring exceeding usage max [ 928.242168][ T5727] apple 0003:05AC:027C.0015: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.6-1/input0 [ 928.286532][ T5727] usb 7-1: USB disconnect, device number 59 [ 930.432687][T12251] fido_id[12251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 936.759053][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.759195][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.901737][ T1238] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 938.236129][ T8435] hid_parser_main: 542 callbacks suppressed [ 938.239400][ T8435] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 938.239634][ T8435] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 940.005484][ T8435] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 940.276802][ T1238] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 940.278877][ T1238] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 940.278972][ T1238] usb 6-1: can't read configurations, error -71 [ 942.664919][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 942.760415][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 942.762365][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 942.779175][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.059944][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 943.498383][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 943.506278][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 943.511503][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 943.521212][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.522777][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.465949][T12378] trusted_key: syz.6.1564 sent an empty control message without MSG_MORE. [ 946.088581][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.285236][ T5612] Bluetooth: hci0: command tx timeout [ 950.534068][ T5612] Bluetooth: hci0: command tx timeout [ 950.798256][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.910041][T10745] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 951.066443][T10745] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 951.076351][T10745] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.076383][T10745] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 951.076454][T10745] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 951.127136][T10745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.127231][T10745] usb 7-1: Product: syz [ 951.127314][T10745] usb 7-1: Manufacturer: syz [ 951.127380][T10745] usb 7-1: SerialNumber: syz [ 951.219972][ T8435] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 951.387103][ T8435] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 951.396977][ T8435] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 951.412484][ T8435] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 951.412521][ T8435] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.440625][ T8435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.440781][ T8435] usb 6-1: Product: syz [ 951.440830][ T8435] usb 6-1: Manufacturer: syz [ 951.441015][ T8435] usb 6-1: SerialNumber: syz [ 951.471035][T10745] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 951.471233][T10745] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 951.471313][T10745] usb 7-1: 1:1 : sample bitwidth 4 in over sample bytes 0 [ 951.471391][T10745] usb 7-1: 1:1 : unsupported sample bitwidth 4 in 0 bytes [ 951.602934][ T8435] hub 6-1:1.0: bad descriptor, ignoring hub [ 951.603046][ T8435] hub 6-1:1.0: probe with driver hub failed with error -5 [ 951.908188][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.976729][ T8435] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 952.000925][T10745] usb 7-1: USB disconnect, device number 60 [ 953.922477][ T5612] Bluetooth: hci0: command tx timeout [ 954.209446][ T9345] udevd[9345]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.632422][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.695977][ T5612] Bluetooth: hci0: command tx timeout [ 959.164077][ T8435] usb 6-1: USB disconnect, device number 60 [ 959.337609][ T8435] usblp0: removed [ 966.487940][ T57] bridge_slave_1: left allmulticast mode [ 966.498497][ T57] bridge_slave_1: left promiscuous mode [ 966.498806][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.656719][ T57] bridge_slave_0: left allmulticast mode [ 966.662837][ T57] bridge_slave_0: left promiscuous mode [ 966.663121][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.853051][T12491] kvm_pr_unimpl_wrmsr: 46 callbacks suppressed [ 966.853156][T12491] kvm [12490]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 966.920987][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 966.928507][ T38] audit: type=1800 audit(966.601:723): pid=12499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1599" name="(" dev="sda1" ino=2062 res=0 errno=0 [ 971.019007][ T5585] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 971.807289][T12543] input: syz1 as /devices/virtual/input/input28 [ 973.570826][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.641307][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.686055][ T57] bond0 (unregistering): Released all slaves [ 973.789546][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 973.841951][ T5585] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 973.852011][ T5585] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 973.855339][ T5585] usb 9-1: can't read configurations, error -71 [ 974.231071][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.231294][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.231549][T12361] bridge_slave_0: entered allmulticast mode [ 974.241882][T12361] bridge_slave_0: entered promiscuous mode [ 974.382134][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.389526][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.397197][T12361] bridge_slave_1: entered allmulticast mode [ 974.414903][T12361] bridge_slave_1: entered promiscuous mode [ 974.643106][T12361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.644934][ T38] audit: type=1326 audit(974.311:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12566 comm="syz.8.1618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f05ae159 code=0x7ffc0000 [ 974.645015][ T38] audit: type=1326 audit(974.311:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12566 comm="syz.8.1618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f05ae159 code=0x7ffc0000 [ 974.645066][ T38] audit: type=1326 audit(974.311:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12566 comm="syz.8.1618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f87f05ae159 code=0x7ffc0000 [ 974.645115][ T38] audit: type=1326 audit(974.311:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12566 comm="syz.8.1618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f05ae159 code=0x7ffc0000 [ 974.645163][ T38] audit: type=1326 audit(974.311:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12566 comm="syz.8.1618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f05ae159 code=0x7ffc0000 [ 974.955487][T12361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.813043][T12361] team0: Port device team_slave_0 added [ 976.813871][T12580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 976.837308][T12361] team0: Port device team_slave_1 added [ 976.843670][ T5838] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 977.021262][ T5838] usb 9-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 977.031262][ T5838] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 977.039400][ T5838] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.039430][ T5838] usb 9-1: config 0 has no interface number 0 [ 977.039490][ T5838] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.039518][ T5838] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.039550][ T5838] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.039604][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.188201][ T5838] usb 9-1: config 0 descriptor?? [ 977.248886][T12361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.248967][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.249002][T12361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.343389][T12361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.343475][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.343510][T12361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.424320][ T5838] holtek_mouse 0003:04D9:A04A.0017: report_id 27596 is invalid [ 978.439702][ T5838] holtek_mouse 0003:04D9:A04A.0017: item 0 2 1 8 parsing failed [ 978.448420][ T5838] holtek_mouse 0003:04D9:A04A.0017: hid parse failed: -22 [ 978.448508][ T5838] holtek_mouse 0003:04D9:A04A.0017: probe with driver holtek_mouse failed with error -22 [ 978.659377][ T1238] usb 9-1: USB disconnect, device number 51 [ 978.947529][ T38] audit: type=1326 audit(978.631:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12603 comm="syz.5.1630" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 978.953814][ T38] audit: type=1326 audit(978.631:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12603 comm="syz.5.1630" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 978.985996][ T38] audit: type=1326 audit(978.661:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12603 comm="syz.5.1630" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 978.987332][ T38] audit: type=1326 audit(978.661:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12603 comm="syz.5.1630" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 978.987466][ T38] audit: type=1326 audit(978.661:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12603 comm="syz.5.1630" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fe3e159 code=0x7ffc0000 [ 979.255320][T12361] hsr_slave_0: entered promiscuous mode [ 979.268049][T12361] hsr_slave_1: entered promiscuous mode [ 979.499841][ T1238] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 981.270007][ T1238] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.271476][ T1238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.271501][ T1238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.271519][ T1238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 981.271551][ T1238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.331923][ T1238] usb 6-1: config 0 descriptor?? [ 982.114063][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 984.726336][ T1238] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 984.765498][ T1238] usb 6-1: USB disconnect, device number 61 [ 985.088524][T12636] fido_id[12636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 985.702790][T12646] netlink: 'syz.8.1643': attribute type 9 has an invalid length. [ 995.014832][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 997.010100][T12361] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 997.692873][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.705142][T12361] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 997.801507][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.917632][T12361] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 998.033444][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.080040][T12361] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 998.202590][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.206238][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.218926][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.264112][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1004.335755][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1004.349230][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1004.368300][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1004.377679][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1004.738609][ T5256] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1004.860975][ T57] hsr_slave_0: left promiscuous mode [ 1004.870201][ T9] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1004.908455][ T57] hsr_slave_1: left promiscuous mode [ 1004.938050][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.940139][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.021988][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.022079][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.050163][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1005.056274][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1005.057844][ T9] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1005.080726][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.088893][ T9] usb 7-1: Product: syz [ 1005.088914][ T9] usb 7-1: Manufacturer: syz [ 1005.088930][ T9] usb 7-1: SerialNumber: syz [ 1005.121483][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1005.127910][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 1005.589434][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1674'. [ 1005.603261][ T57] veth1_macvtap: left promiscuous mode [ 1005.603459][ T57] veth0_macvtap: left promiscuous mode [ 1005.603928][ T57] veth1_vlan: left promiscuous mode [ 1005.604233][ T57] veth0_vlan: left promiscuous mode [ 1006.425100][ T38] kauditd_printk_skb: 33 callbacks suppressed [ 1006.425972][ T38] audit: type=1800 audit(1006.101:767): pid=12807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1678" name="(" dev="sda1" ino=2062 res=0 errno=0 [ 1006.589969][ T5613] Bluetooth: hci2: command tx timeout [ 1006.690567][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1006.750954][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1007.687340][ T5727] r8152-cfgselector 7-1: USB disconnect, device number 61 [ 1010.047043][ T5613] Bluetooth: hci2: command tx timeout [ 1012.669356][ T5613] Bluetooth: hci2: command tx timeout [ 1013.983599][ T57] IPVS: stop unused estimator thread 0... [ 1014.139929][ T1238] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1014.289853][ T1238] usb 7-1: Using ep0 maxpacket: 8 [ 1014.303118][ T1238] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1014.305464][ T1238] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 1014.305493][ T1238] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1014.305516][ T1238] usb 7-1: config 3 has no interface number 0 [ 1014.305566][ T1238] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.305597][ T1238] usb 7-1: config 3 interface 45 has no altsetting 0 [ 1014.375885][ T1238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.391559][ T1238] usb 7-1: Product: syz [ 1014.391583][ T1238] usb 7-1: Manufacturer: syz [ 1014.391601][ T1238] usb 7-1: SerialNumber: syz [ 1014.669900][ T5613] Bluetooth: hci2: command tx timeout [ 1014.859935][ T1238] usb 7-1: USB disconnect, device number 62 [ 1015.033680][ T9345] udevd[9345]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.170448][ T27] [ 1022.172850][ T27] ====================================================== [ 1022.179979][ T27] WARNING: possible circular locking dependency detected [ 1022.187058][ T27] syzkaller #0 Tainted: G L [ 1022.193056][ T27] ------------------------------------------------------ [ 1022.200118][ T27] migration/1/27 is trying to acquire lock: [ 1022.206038][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 1022.214729][ T27] [ 1022.214729][ T27] but task is already holding lock: [ 1022.222115][ T27] ffff88802d5e2a40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 1022.231694][ T27] [ 1022.231694][ T27] which lock already depends on the new lock. [ 1022.231694][ T27] [ 1022.242292][ T27] [ 1022.242292][ T27] the existing dependency chain (in reverse order) is: [ 1022.251341][ T27] [ 1022.251341][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 1022.258789][ T27] _raw_spin_lock+0x2e/0x40 [ 1022.263855][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 1022.269878][ T27] rt_spin_lock+0x165/0x400 [ 1022.274939][ T27] __wake_up_common_lock+0x2f/0x1f0 [ 1022.280691][ T27] rcu_exp_sel_wait_wake+0xc00/0x1170 [ 1022.286684][ T27] kthread_worker_fn+0x4eb/0xb20 [ 1022.292186][ T27] kthread+0x38b/0x470 [ 1022.296898][ T27] ret_from_fork+0x514/0xb70 [ 1022.302049][ T27] ret_from_fork_asm+0x1a/0x30 [ 1022.307364][ T27] [ 1022.307364][ T27] -> #0 (_T->lock){....}-{2:2}: [ 1022.314445][ T27] __lock_acquire+0x15ff/0x2e40 [ 1022.319860][ T27] lock_acquire+0x115/0x350 [ 1022.324916][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 1022.330668][ T27] rt_spin_trylock+0x56/0x2b0 [ 1022.335908][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 1022.341319][ T27] kvfree_call_rcu+0xa4/0x430 [ 1022.346615][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 1022.352585][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 1022.359080][ T27] select_fallback_rq+0x11e/0x200 [ 1022.364658][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 1022.370604][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 1022.376254][ T27] smpboot_thread_fn+0x565/0xa70 [ 1022.381776][ T27] kthread+0x38b/0x470 [ 1022.386391][ T27] ret_from_fork+0x514/0xb70 [ 1022.391529][ T27] ret_from_fork_asm+0x1a/0x30 [ 1022.396839][ T27] [ 1022.396839][ T27] other info that might help us debug this: [ 1022.396839][ T27] [ 1022.407086][ T27] Possible unsafe locking scenario: [ 1022.407086][ T27] [ 1022.414608][ T27] CPU0 CPU1 [ 1022.419998][ T27] ---- ---- [ 1022.425403][ T27] lock(&p->pi_lock); [ 1022.429513][ T27] lock(_T->lock); [ 1022.435883][ T27] lock(&p->pi_lock); [ 1022.442512][ T27] lock(_T->lock); [ 1022.446355][ T27] [ 1022.446355][ T27] *** DEADLOCK *** [ 1022.446355][ T27] [ 1022.454517][ T27] locks held by migration/1/27: 2, last CPU#1: [ 1022.460730][ T27] #0: ffff88802d5e2a40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 1022.470724][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 1022.481320][ T27] [ 1022.481320][ T27] stack backtrace: [ 1022.487234][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1022.498544][ T27] Tainted: [L]=SOFTLOCKUP [ 1022.502915][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1022.513021][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 1022.521498][ T27] Call Trace: [ 1022.524800][ T27] [ 1022.527760][ T27] dump_stack_lvl+0xe8/0x150 [ 1022.532400][ T27] print_circular_bug+0x2e2/0x300 [ 1022.537511][ T27] check_noncircular+0x12f/0x150 [ 1022.542527][ T27] __lock_acquire+0x15ff/0x2e40 [ 1022.547425][ T27] ? __bfs+0x153/0x290 [ 1022.551533][ T27] ? __pfx_usage_match+0x10/0x10 [ 1022.556515][ T27] ? lockdep_unlock+0x5c/0xd0 [ 1022.561227][ T27] ? __lock_acquire+0x14b9/0x2e40 [ 1022.566299][ T27] lock_acquire+0x115/0x350 [ 1022.570908][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 1022.575829][ T27] ? plist_check_list+0x2d7/0x310 [ 1022.580993][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 1022.586230][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 1022.591124][ T27] rt_spin_trylock+0x56/0x2b0 [ 1022.595850][ T27] ? enqueue_pushable_task+0x248/0x3e0 [ 1022.601418][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 1022.606320][ T27] kvfree_call_rcu+0xa4/0x430 [ 1022.611038][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 1022.616185][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 1022.621611][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 1022.627593][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 1022.633630][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 1022.639576][ T27] select_fallback_rq+0x11e/0x200 [ 1022.644644][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 1022.650669][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 1022.656086][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 1022.661324][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 1022.667351][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 1022.672437][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 1022.677518][ T27] smpboot_thread_fn+0x565/0xa70 [ 1022.682505][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 1022.687587][ T27] kthread+0x38b/0x470 [ 1022.691698][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1022.697219][ T27] ? __pfx_kthread+0x10/0x10 [ 1022.701850][ T27] ret_from_fork+0x514/0xb70 [ 1022.706480][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 1022.711627][ T27] ? __switch_to+0xc89/0x1420 [ 1022.716352][ T27] ? __pfx_kthread+0x10/0x10 [ 1022.720970][ T27] ret_from_fork_asm+0x1a/0x30 [ 1022.725772][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1022.728825][ T27] process 12939 (syz.5.1721) no longer affine to cpu1 [ 1022.779897][ T1554] process 12943 (syz.5.1721) no longer affine to cpu1