last executing test programs: 5m46.20943324s ago: executing program 1 (id=1014): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) 5m44.596559761s ago: executing program 1 (id=1020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd2d, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x5, 0x6a, 0x0, 0x0, 0x4, 0x8}, [""]}, 0x1c}}, 0x0) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000580)=0x1, 0x4) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = landlock_create_ruleset(&(0x7f0000000b00)={0x40, 0x1, 0x2}, 0x30, 0x0) (rerun: 64) landlock_restrict_self(r3, 0x0) (async) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000010000000100000008000100030000002c000480050003000500000005000300010000000500030005000000050003000100000005000300210000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x2000508b}, 0x24004080) (async, rerun: 32) bind$netlink(r1, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfc}, 0xc) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000001800070127bd351af6f168a5255500000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x20004000) (async, rerun: 64) syz_usb_connect(0x5, 0x27, 0x0, 0x0) (async, rerun: 64) syz_open_dev$I2C(&(0x7f0000000600), 0x1, 0x2003) setns(0xc9, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x5, &(0x7f00000007c0)=0x1, 0x1e) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYRESOCT=r1], 0xa) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000200025a729bd7000fdfbdf250a0000cdfe0000010200010008000600fe7f00000c001400d01d4e054ae3731c"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000370100000e000100"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x330, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x3ebf, 0x8000]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x29d, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4d9}, @device_a, @device_b, @initial, {0x1, 0x6}}, 0x8000000000000001, @default, 0x4c18, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x0, 0x10, 0x7e, 0xdfc}}, @val={0x6, 0x2, 0x100}, @val={0x2d, 0x1a, {0x8, 0x3, 0x4, 0x0, {0x4, 0x3, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x80000000}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x40}}, [{0xdd, 0xd0, "4564257e23609cb21cf917f7e0768455a0e73a25b8e38c812bbb6fa6f9f10aa81e4d3d30bd80fd14d3891c62e13866e31b3d3483401beaa605321204675d4e8480840cc92e904696ac00649a313ba4ba1367de1804919930cac01aeb8dfe86c3deab5e0ee21559f3bbe6331be8e3081ecd1e5abd3eaac48e0a3e1ef78aae367a936964f8f7977cbb30df753af16e408c91667967d7b32a90914b658d88248c78aa55b5a39dae1d547a2cb44c8408848aa2dd7b700e4f4fe23fa91a94903cefb309562a9db6deeba822ae39498d4d19b7"}, {0xdd, 0x20, "94c629ada10dbfb91871e10f3badf842b268bf9f9a8e52f06f53e2fee3794ba9"}, {0xdd, 0xa, "787488b506f548e5955a"}, {0xdd, 0x88, "d8df0c33fbd39450f584e5d06110f4fb959a69cdc039e0845163b5ccbfbc64941048a219acd25d1184e009ad0729eb78dfb747c598ae2c9e646422062ddccbe2754d759eab3186f2798d091757720875febfc0b9913b7415956f5dc9adb7a863a15d2c5b280f1bb9a494141a97a4e8dcd519126874838c62e37d5fa9337e36f9abb4d6166a0996e0"}, {0xdd, 0x7f, "b3c56d0e0cb2364e4d349ac03c9bd3843a49904a22bb04f2c6ec950b32494843f420393403f2c0daaee73dc00b8e76a23685899b5499436de3f7810ebecff5b216382b9d87653329e9a583ed138ada3ef87c0993b2e00134ae122adb012bc7adb12c317820bb604c9946adff9b601acbf25551e0911ea4cd9f7bd8a0484e3d"}, {0xdd, 0x27, "ad6d949ff3b494a3734238b8440cc03e1f7dca85c7dd73f97804888f3cb60d8f1270649b18dd0f"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc3a}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9d26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb99c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x14c}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40880}, 0x200040c1) 5m41.051229699s ago: executing program 1 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000033c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 5m40.570526633s ago: executing program 1 (id=1036): syz_usb_connect(0x5, 0x2b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000200000040341278560000010200010902190001010080fa0904000001ffffff00070581020002"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40850) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4008800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000080)="790d529706", 0x5, 0x2404c081, &(0x7f00000000c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) shutdown(r2, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f00000009c0)=@ccm_128={{0x303}, "f0440b3592d1c34e", "ab87d02c6138913618041885c665e38f", "f233df8b", "9ffe8c2c45929dc9"}, 0x28) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="88", 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000009d6c49938653ac0052392000000800000001", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x884}}], 0x1, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)=ANY=[@ANYBLOB="20020000130000022dbd7000fcdbdf2564010101000000000000000000000000ac1414aa0000002100000000000000004e2000094e23d241020080a060000000", @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @dev}, 0x2, 0x3}}, 0x2e) getsockopt(0xffffffffffffffff, 0x111, 0x2, 0x0, &(0x7f0000000400)) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000c00), 0x1e5442) ioctl$DRM_IOCTL_INFO_BUFS(r12, 0xc0106418, &(0x7f0000000340)={0x7f, 0x101, 0x40, 0x0, 0x12, 0xaf9e}) 5m35.135758028s ago: executing program 1 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) r4 = semget$private(0x0, 0x7, 0x195) semtimedop(r4, &(0x7f0000019680)=[{0x4, 0x3, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 5m33.622009727s ago: executing program 1 (id=1051): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001a40)={0x20002005}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000440)="0303ec58000000004500001c0000000040110000ac11140b7f000001", 0x1c, 0x0, &(0x7f0000000940)={0x2, 0x4e23, @local}, 0x10) 5m17.860349329s ago: executing program 32 (id=1051): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001a40)={0x20002005}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000440)="0303ec58000000004500001c0000000040110000ac11140b7f000001", 0x1c, 0x0, &(0x7f0000000940)={0x2, 0x4e23, @local}, 0x10) 15.396202901s ago: executing program 3 (id=1879): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000180)="0bbb268dd6ffa80800000000002a16000000210d0000aaa8fa0172429a9380d41000000000000000290000000b000000", 0x30) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20402, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1c5}]}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03b, 0x6e}) io_uring_setup(0x3131, &(0x7f00000000c0)={0x0, 0x875d, 0x80000, 0x1, 0x12c}) 14.770552807s ago: executing program 3 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019240)=0x7) r4 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x1) close(r5) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1810040, &(0x7f0000019280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 2) 13.384401695s ago: executing program 3 (id=1883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4ea0, 0x8001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) pipe(&(0x7f0000000280)) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r5, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) write(r4, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) 10.137870486s ago: executing program 0 (id=1890): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, &(0x7f0000000380), &(0x7f00000003c0)=0xc) move_mount(r0, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80900) move_mount(r2, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x40, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x410, 0xf7, 0xe5, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000400)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)="b38ab8b464bb779d8450ad0ee9d8ee25f129f039632dedbdff", 0x19}, {&(0x7f00000004c0)="71990bc199d0feda4afeda8ea69c0fbf434d0d0838f33db38a72cb054700f120732c544a7775f8a7bfe36bd182da3fef0cd92ee8277df8a6213b47b2274fdd5d25505c50814426d04aba7f96cc7dbfe4b10f78dd92b5f2bfaf870fb4adabe58a360e29f000c6b340bb26c9c0dbcc7171f3e2a486254dab1c4ad3ec772ccadaa036447b80f04d50", 0x87}], 0x2}, 0x40084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x3, 0xffffffffffffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000007c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000840)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r4, &(0x7f00000009c0)='8\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000ac0)='dummy_udc.0\n', 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0222180000005501494917799c78df47ae566bf2277a2384da7508c2a993"], 0x0}, 0x0) 7.123911022s ago: executing program 3 (id=1894): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000600)={{0x80, 0xbd}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x32cbe4cd, 0x5, 0x0, 0x2, 0xfe}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000006c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x3}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000900)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r5, 0x1) sendmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e0000001001"], 0x138}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020b0e0806fedbdf25040003000400000005000000000000000f00000000000000ebffffff00001000"], 0x30}}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd09, 0x3, 0xe054}, {0x3, 0xc66, 0x101, 0x80000000}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) r9 = socket$pppoe(0x18, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000a00)={0x19}) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppoe(r9, &(0x7f0000000440)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, 0x0) 6.594535235s ago: executing program 4 (id=1896): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000440)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xb, &(0x7f0000000480)={0x4, 0xfffffffa, 0x3}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x6ba]}, 0x8) read(r4, &(0x7f00000007c0)=""/240, 0xf0) getsockopt$inet_opts(r1, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000400)) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='secret\x00', &(0x7f0000000340)='AQAA+e\x1bA0E\x8dV7N\xdbC\xeb\x9eAAA=ACAAA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x006z\xd7\x13M\x8e\x96\xe3\x05\x04\x00\xa3.a\x1e\xbac]uo\xb8\xa8\x00h=\xb2\xb5\xba\b\xe6\x8a\xf9\xdc\xf7\x97\xc7\x1b\xd4\xfb\xc5\x85bk\xec#\xbd\xda\x11\xb7\x89%a+;\xb6\xc9\x1d\xf1\xc4\xa0d|/\x16\x8c\x1fP$\x8awI\x18S\x89\x99\x9b$\xa0\x9e\x0f\xbe\xffsG!\xe4\'wT\x15)/\xd9B\xc7l\xb0B#Q\xe7\x89\x1e(*\a\x80\x8f\xd95', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000200)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880200d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c562dabf591fa22e7af9272d5ff4de98302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd362", 0xc2) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r8}, [@crypt={0x0, 0x1080, 0x0, 0xa0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram_num={'1:', 0x1}, 0x20, '8191'}, ' 0'}}]}) 6.433182261s ago: executing program 0 (id=1898): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000bc0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000000d00)='GPL\x00', 0x2, 0xc3, &(0x7f0000000d40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000012c0)={r7, r7, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x40000003, 0x81, 0x50323234, 0x4, 0x1, [{0x7, 0x200}, {0x7ff, 0x2}, {0x1, 0xe2be}, {0x7, 0xb}, {0x1, 0x1ffffffd}, {0x800, 0xfffffffc}, {0x7}, {0x9, 0x8}], 0x5, 0x4, 0x6, 0x1, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000940)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 6.409413464s ago: executing program 5 (id=1899): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000003c0)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000880)="13", 0x1}], 0x1}, 0x48043) r1 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0xce20, 0xffff, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r1, &(0x7f00000006c0)=ANY=[], 0xfdef) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x4, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6.299932191s ago: executing program 5 (id=1900): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r1, &(0x7f0000000240)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f00000002c0)='\x00', 0x34000, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='autogroup\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000380)={@id={0x2, 0x0, @a}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xc8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0xfec9, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x8, 0x8, 0x0, 0x4, 0x6}}, {0x4}}]}]}, 0xc8}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x200}, 0x8) (async) bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0x80) (async) connect(r1, &(0x7f0000000240)=@in={0x2, 0x4e20, @loopback}, 0x10) (async) sendto(r1, &(0x7f00000002c0)='\x00', 0x34000, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='autogroup\x00') (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000380)={@id={0x2, 0x0, @a}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xc8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0xfec9, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x8, 0x8, 0x0, 0x4, 0x6}}, {0x4}}]}]}, 0xc8}}, 0x0) (async) 6.181101804s ago: executing program 3 (id=1901): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mtdblock0\x00', 0x0, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x161642, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x280000, 0x20) syz_emit_ethernet(0x54, &(0x7f00000009c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "cb2891", 0x1e, 0x2b, 0x0, @remote, @local, {[], {0x3b00, 0x0, 0x1e, 0x0, @gue={{0x2, 0x1, 0x3}, "51807e6820726a953757d85a6ecc"}}}}}}}, 0x0) linkat(r0, &(0x7f0000000380)='./dev\x00', r2, &(0x7f0000000400)='./dev\x00', 0x200) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000940)=0x9, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/set_event\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)='!*oo:mod:', 0x9) bind$inet(r4, &(0x7f0000000a40)={0x2, 0x4e22, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000980)={0xa, 0x4e22, 0x380000, @empty}, 0x1c) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000480)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) r7 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x100, 0x30, 0x216822a75a8bdd29, 0x70bd2a, 0x0, {}, [{0xec, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x69, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28, 0x20000000}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x23b5, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x100}}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 5.086287212s ago: executing program 0 (id=1902): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/kernel/hostname/file0\x00', &(0x7f0000000180)={0x0, 0xa4, 0x8}, 0x18) mkdirat(r0, &(0x7f0000000200)='./proc/sys/kernel/hostname\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x2, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffcef}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$cgroup_int(r2, &(0x7f00000001c0)=0x2, 0x12) 4.988016061s ago: executing program 2 (id=1903): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1, 0x7f, 0x10) 4.849180931s ago: executing program 4 (id=1904): sysfs$2(0x2, 0x100000000, &(0x7f0000001100)=""/30) (fail_nth: 1) 4.642216414s ago: executing program 0 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={0x0, 0x5, 0x4000003, 0x1000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r5, &(0x7f0000001100)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000001140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0) 3.419251049s ago: executing program 2 (id=1906): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (fail_nth: 1) 3.419067007s ago: executing program 4 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000001940)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000006a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000006a80)="2f0000001100030102030405060708090a0b", 0x12) 3.320666034s ago: executing program 3 (id=1908): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, &(0x7f0000000380), &(0x7f00000003c0)=0xc) move_mount(r0, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80900) move_mount(r2, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x40, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x410, 0xf7, 0xe5, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000400)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)="b38ab8b464bb779d8450ad0ee9d8ee25f129f039632dedbdff", 0x19}, {&(0x7f00000004c0)="71990bc199d0feda4afeda8ea69c0fbf434d0d0838f33db38a72cb054700f120732c544a7775f8a7bfe36bd182da3fef0cd92ee8277df8a6213b47b2274fdd5d25505c50814426d04aba7f96cc7dbfe4b10f78dd92b5f2bfaf870fb4adabe58a360e29f000c6b340bb26c9c0dbcc7171f3e2a486254dab1c4ad3ec772ccadaa036447b80f04d50", 0x87}], 0x2}, 0x40084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x3, 0xffffffffffffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000007c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000840)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r4, &(0x7f00000009c0)='8\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000ac0)='dummy_udc.0\n', 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0222180000005501494917799c78df47ae566bf2277a2384da7508c2a993"], 0x0}, 0x0) 2.583962948s ago: executing program 0 (id=1909): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000080)={0x0, 0xa02da726a9b588e2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) 2.583242743s ago: executing program 4 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellink={0x28, 0x11, 0x1, 0x70bd0b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffffc}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x101}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4002040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008011}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) 2.516220875s ago: executing program 2 (id=1911): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mtdblock0\x00', 0x0, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x161642, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x280000, 0x20) syz_emit_ethernet(0x54, &(0x7f00000009c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "cb2891", 0x1e, 0x2b, 0x0, @remote, @local, {[], {0x3b00, 0x0, 0x1e, 0x0, @gue={{0x2, 0x1, 0x3}, "51807e6820726a953757d85a6ecc"}}}}}}}, 0x0) linkat(r0, &(0x7f0000000380)='./dev\x00', r2, &(0x7f0000000400)='./dev\x00', 0x200) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000940)=0x9, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/set_event\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)='!*oo:mod:', 0x9) bind$inet(r4, &(0x7f0000000a40)={0x2, 0x4e22, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000980)={0xa, 0x4e22, 0x380000, @empty}, 0x1c) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000480)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) r7 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x100, 0x30, 0x216822a75a8bdd29, 0x70bd2a, 0x0, {}, [{0xec, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x69, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28, 0x20000000}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x23b5, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x100}}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 2.515876978s ago: executing program 5 (id=1912): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000bc0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000000d00)='GPL\x00', 0x2, 0xc3, &(0x7f0000000d40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000012c0)={r7, r7, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x40000003, 0x81, 0x50323234, 0x4, 0x1, [{0x7, 0x200}, {0x7ff, 0x2}, {0x1, 0xe2be}, {0x7, 0xb}, {0x1, 0x1ffffffd}, {0x800, 0xfffffffc}, {0x7}, {0x9, 0x8}], 0x5, 0x4, 0x6, 0x1, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000940)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2.394503812s ago: executing program 4 (id=1913): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80c42, 0x0) read(r1, &(0x7f00000002c0)=""/148, 0xffffff96) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x24001844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000069000b00000000000000000000000061"], 0x18}}, 0x4000000) 1.431960688s ago: executing program 2 (id=1914): socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x80) semop(r0, &(0x7f0000000040)=[{0x4, 0x6, 0x800}], 0x1f4) 1.39673293s ago: executing program 5 (id=1915): ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f0000000080)={0x0, 0xffff, 0x70, &(0x7f0000000000)={0x70, 0x1, {0xc, 0xc, 0xb, 0x4, 0xf9, 0x40, 0xd0, 0x7, 0x1}, {0x4, 0x9, 0x3, 0x24, 0x3}, {0x0, 0x7, 0x5, 0xffff198b}, {0x7, 0x2, 0x6}}}) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000240), r0, 0x2ca840) pread64$ublk_ch(r1, 0x0, 0x0, 0xe916) 1.280030156s ago: executing program 5 (id=1916): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1, 0x7f, 0x10) 1.218322377s ago: executing program 4 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000001c0)="02", 0x1, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a14204003000006fffffff014000100ff020000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async, rerun: 64) recvfrom$inet_nvme(r0, &(0x7f0000000400)=""/70, 0x46, 0x40010002, &(0x7f0000000480)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80) (rerun: 64) sendmmsg(r1, &(0x7f0000000380), 0x40000000000009f, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d793"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc800) 1.008617559s ago: executing program 2 (id=1918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000040000000400000001000000000000006e40524779577078a947471eef69ae001f4f3e31f4f7c2b076fc774110072abc3aa37586856aa78736b464497e7b9d3a2d139790db32de159dd40a54d52e2154da8f4eb02ccaa8005a238dda5a983c14f03769b2a2dfb8e78fa346442913b2bc73fa0b18bbe4ab159ff1aa20d761112adae9da9342b47d9db1598af3", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000003a01fd07b953bcb", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000b704000000000000850000003c0000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee01, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x5220, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000680)={0x0, 0xc691, 0x0, 0xfffffffe, 0x20002}, 0x0, 0x1, &(0x7f0000000700)={0x2e, 0x4c, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4004, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 194.716993ms ago: executing program 2 (id=1919): socket$key(0xf, 0x3, 0x2) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x0, 0xf, 0x4, "b911fede"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x0, 0xf, 0x10, "d7b75a7ce9e00e4338124ee4d8e634c2"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, &(0x7f00000001c0)}) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 154.435759ms ago: executing program 5 (id=1920): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000500)={0x28, 0x0, r2, 0x1004, &(0x7f0000000d40)=""/4100}) 0s ago: executing program 0 (id=1921): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x1, 0x2, 0x3, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="c8306700c1df76f41864f141da7afce33a2d8b717b26aa48a086ef778883983c7d5d55fbe85bcc3ed26afb61e5243ee0b1809b1992bb79afcdf42d1736870922d1455e2187f6effe20f926e67f5d408281d92d2c1e5b3fea783c0c679c5f8a26129bcaf835df16b7f4164551271d46f999253743aec3aee613baaa1b15d5ca174b77b6a36a1b662b9aa6e8a10d1b21dc1257dd1ea4f9c76c8bec370c61be279a0b592103f9a75ec3f87df9cc36c653886ccb2c93b8432586c08f5f791894747bf1fbe8661702dca42de722ac7c3ec084ba11d68145b836aded07b4a2f1bad6ef8a84435671", @ANYRES16=r3, @ANYBLOB="010127bd7000fcdbdf252500000008002f000e00000008000200", @ANYRES32=r2, @ANYBLOB="0500290001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mount$nfs(&(0x7f00000003c0)='..\x00', &(0x7f0000000400)='./file1\x00', 0x0, 0x85000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r5 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) statfs(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000500)=@buf={0x500, &(0x7f0000000900)}) kernel console output (not intermixed with test programs): c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.843171][T11038] RSP: 002b:00007fb474c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 552.843191][T11038] RAX: ffffffffffffffda RBX: 00007fb476c65fa0 RCX: 00007fb4769df559 [ 552.843205][T11038] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 552.843217][T11038] RBP: 00007fb474c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 552.843229][T11038] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 552.843241][T11038] R13: 00007fb476c66038 R14: 00007fb476c65fa0 R15: 00007fffa4e9ae28 [ 552.843272][T11038] [ 553.126536][T10926] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 553.449523][T10926] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 553.453085][T10926] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 553.453130][T10926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.453155][T10926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.453177][T10926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 553.453202][T10926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 553.453227][T10926] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 553.453284][T10926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.469205][T10926] usb 5-1: config 0 descriptor?? [ 553.472348][T11040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 553.703183][T11040] UDC core: g1: couldn't find an available UDC or it's busy [ 553.709864][T10926] usb 5-1: string descriptor 0 read error: -71 [ 553.730934][T10926] usbhid 5-1:0.0: can't add hid device: -71 [ 553.731074][T10926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 553.752503][T10926] usb 5-1: USB disconnect, device number 80 [ 553.831329][T11059] NILFS (nullb0): couldn't find nilfs on the device [ 553.856537][ T35] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 554.018957][ T35] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 554.019013][ T35] usb 1-1: no configurations [ 554.019026][ T35] usb 1-1: can't read configurations, error -22 [ 554.166473][ T35] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 554.557394][ T35] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 554.557446][ T35] usb 1-1: no configurations [ 554.557458][ T35] usb 1-1: can't read configurations, error -22 [ 554.558158][ T35] usb usb1-port1: attempt power cycle [ 555.117310][ T35] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 555.144991][ T35] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 555.145045][ T35] usb 1-1: no configurations [ 555.145058][ T35] usb 1-1: can't read configurations, error -22 [ 555.466552][ T35] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 555.488668][ T35] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 555.488718][ T35] usb 1-1: no configurations [ 555.488731][ T35] usb 1-1: can't read configurations, error -22 [ 555.494030][ T35] usb usb1-port1: unable to enumerate USB device [ 556.752180][ C1] Unknown status report in ack skb [ 557.034671][T11097] futex_wake_op: syz.5.1583 tries to shift op by -1; fix this program [ 557.096470][ T6693] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 557.247762][ T6693] usb 4-1: Using ep0 maxpacket: 32 [ 558.565319][ C0] net_ratelimit: 41 callbacks suppressed [ 559.080536][ T6693] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 559.216758][ T6693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.216775][ T6693] usb 4-1: Product: syz [ 559.216787][ T6693] usb 4-1: Manufacturer: syz [ 559.216808][ T6693] usb 4-1: SerialNumber: syz [ 559.443413][ T6693] usb 4-1: config 0 descriptor?? [ 559.906170][ T6693] airspy 4-1:0.0: Board ID: 00 [ 559.906184][ T6693] airspy 4-1:0.0: Firmware version: [ 560.112710][ T6693] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 560.171501][ T6693] airspy 4-1:0.0: Registered as swradio24 [ 560.171519][ T6693] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 560.201320][ T6693] usb 4-1: USB disconnect, device number 58 [ 560.343843][ C0] Unknown status report in ack skb [ 560.852437][T11135] NILFS (nullb0): couldn't find nilfs on the device [ 561.451488][ C1] Unknown status report in ack skb [ 561.914814][T11146] FAULT_INJECTION: forcing a failure. [ 561.914814][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 561.914847][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.4.1600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.914873][T11146] Tainted: [L]=SOFTLOCKUP [ 561.914880][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 561.914891][T11146] Call Trace: [ 561.914899][T11146] [ 561.914909][T11146] dump_stack_lvl+0xe8/0x150 [ 561.914939][T11146] should_fail_ex+0x46b/0x600 [ 561.914967][T11146] should_failslab+0xa8/0x100 [ 561.914996][T11146] __kmalloc_cache_noprof+0x9c/0x670 [ 561.915022][T11146] ? proc_thread_self_get_link+0xfc/0x190 [ 561.915045][T11146] ? proc_thread_self_get_link+0xfc/0x190 [ 561.915068][T11146] ? __task_pid_nr_ns+0x399/0x470 [ 561.915097][T11146] proc_thread_self_get_link+0xfc/0x190 [ 561.915118][T11146] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 561.915143][T11146] pick_link+0x72a/0xfd0 [ 561.915174][T11146] step_into_slowpath+0x58a/0x820 [ 561.915197][T11146] ? __pfx_step_into_slowpath+0x10/0x10 [ 561.915223][T11146] ? bpf_lsm_inode_permission+0x9/0x20 [ 561.915245][T11146] link_path_walk+0xd50/0x1910 [ 561.915283][T11146] path_openat+0x1bc/0x2100 [ 561.915328][T11146] do_file_open+0x23e/0x4a0 [ 561.915350][T11146] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 561.915383][T11146] ? __pfx_do_file_open+0x10/0x10 [ 561.915428][T11146] ? alloc_fd+0x6b2/0x760 [ 561.915459][T11146] do_sys_openat2+0x115/0x200 [ 561.915494][T11146] ? __se_sys_futex+0x3a8/0x450 [ 561.915521][T11146] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.915553][T11146] ? rcu_is_watching+0x16/0xb0 [ 561.915583][T11146] __x64_sys_openat+0x138/0x170 [ 561.915607][T11146] do_syscall_64+0x166/0x520 [ 561.915632][T11146] ? trace_irq_disable+0x3b/0x140 [ 561.915654][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.915673][T11146] ? clear_bhb_loop+0x70/0xc0 [ 561.915696][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.915715][T11146] RIP: 0033:0x7fd21c39fd8e [ 561.915734][T11146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.915750][T11146] RSP: 002b:00007fd21a635f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 561.915770][T11146] RAX: ffffffffffffffda RBX: 00007fd21a6366c0 RCX: 00007fd21c39fd8e [ 561.915784][T11146] RDX: 0000000000000002 RSI: 00007fd21c47641a RDI: ffffffffffffff9c [ 561.915797][T11146] RBP: 00007fd21c476b20 R08: 0000000000000000 R09: 0000000000000000 [ 561.915809][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.915820][T11146] R13: 00007fd21c666038 R14: 00007fd21c665fa0 R15: 00007fff468445d8 [ 561.915850][T11146] [ 562.176482][ T5642] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 562.254316][T11150] comedi comedi0: No hardware detected at I/O base 0x294 [ 562.348372][ T5642] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 562.352110][ T5642] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 562.352159][ T5642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.352185][ T5642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.352206][ T5642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 562.352230][ T5642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 562.352254][ T5642] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 562.352312][ T5642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.445918][ T5642] usb 4-1: config 0 descriptor?? [ 562.450551][T11142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.676370][T11142] Config c/1 of g1 needs at least one function. [ 562.676537][T11142] udc dummy_udc.0: failed to start g1: -22 [ 562.676559][T11142] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 562.677709][T11142] UDC core: g1: couldn't find an available UDC or it's busy [ 562.730251][ T5642] usb 4-1: string descriptor 0 read error: -71 [ 562.856705][T11159] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1603'. [ 563.573893][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.573953][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.601356][ T5721] net_ratelimit: 49 callbacks suppressed [ 563.687685][ T5642] usbhid 4-1:0.0: can't add hid device: -71 [ 563.687932][ T5642] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 563.737187][ T5642] usb 4-1: USB disconnect, device number 59 [ 563.862635][T11164] FAULT_INJECTION: forcing a failure. [ 563.862635][T11164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.862668][T11164] CPU: 0 UID: 0 PID: 11164 Comm: syz.0.1608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.862694][T11164] Tainted: [L]=SOFTLOCKUP [ 563.862700][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 563.862711][T11164] Call Trace: [ 563.862718][T11164] [ 563.862727][T11164] dump_stack_lvl+0xe8/0x150 [ 563.862757][T11164] should_fail_ex+0x46b/0x600 [ 563.862783][T11164] _copy_from_user+0x2d/0xb0 [ 563.862804][T11164] ___sys_sendmsg+0x1c6/0x360 [ 563.862831][T11164] ? __lock_acquire+0x747/0x2de0 [ 563.862859][T11164] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.862915][T11164] ? __fget_files+0x3a8/0x420 [ 563.862934][T11164] ? __fget_files+0x2a/0x420 [ 563.862961][T11164] __x64_sys_sendmsg+0x1b7/0x290 [ 563.862987][T11164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.863030][T11164] do_syscall_64+0x166/0x520 [ 563.863054][T11164] ? trace_irq_disable+0x3b/0x140 [ 563.863075][T11164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.863093][T11164] ? clear_bhb_loop+0x70/0xc0 [ 563.863114][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.863132][T11164] RIP: 0033:0x7fb4769df559 [ 563.863149][T11164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.863165][T11164] RSP: 002b:00007fb474c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.863184][T11164] RAX: ffffffffffffffda RBX: 00007fb476c65fa0 RCX: 00007fb4769df559 [ 563.863196][T11164] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 563.863206][T11164] RBP: 00007fb474c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 563.863218][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.863229][T11164] R13: 00007fb476c66038 R14: 00007fb476c65fa0 R15: 00007fffa4e9ae28 [ 563.863258][T11164] [ 565.146581][ T5721] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 565.239321][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 565.316492][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 565.317249][ T5721] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 565.320941][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.320951][ T5721] usb 1-1: Product: syz [ 565.320959][ T5721] usb 1-1: Manufacturer: syz [ 565.320967][ T5721] usb 1-1: SerialNumber: syz [ 565.325416][ T5721] usb 1-1: config 0 descriptor?? [ 568.245110][ T5721] airspy 1-1:0.0: Board ID: 00 [ 568.245123][ T5721] airspy 1-1:0.0: Firmware version: [ 568.719956][ T1189] net_ratelimit: 45 callbacks suppressed [ 568.794341][ T5721] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 568.854821][ T5721] airspy 1-1:0.0: Registered as swradio24 [ 568.854839][ T5721] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 568.878360][ T5721] usb 1-1: USB disconnect, device number 83 [ 569.206450][ T5690] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 569.336514][ T5690] usb 4-1: device descriptor read/64, error -71 [ 569.586472][ T5690] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 569.726589][ T5690] usb 4-1: device descriptor read/64, error -71 [ 569.839638][ T5690] usb usb4-port1: attempt power cycle [ 569.974719][T11234] kAFS: Can only specify source 'none' with -o dyn [ 570.691464][T11239] NILFS (nullb0): couldn't find nilfs on the device [ 570.871318][ T5690] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 570.887842][ T5690] usb 4-1: device descriptor read/8, error -71 [ 570.931707][T11244] FAULT_INJECTION: forcing a failure. [ 570.931707][T11244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.931737][T11244] CPU: 0 UID: 0 PID: 11244 Comm: syz.0.1631 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 570.931752][T11244] Tainted: [L]=SOFTLOCKUP [ 570.931756][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 570.931763][T11244] Call Trace: [ 570.931767][T11244] [ 570.931772][T11244] dump_stack_lvl+0xe8/0x150 [ 570.931792][T11244] should_fail_ex+0x46b/0x600 [ 570.931807][T11244] _copy_from_user+0x2d/0xb0 [ 570.931820][T11244] ___sys_sendmsg+0x1c6/0x360 [ 570.931835][T11244] ? __lock_acquire+0x747/0x2de0 [ 570.931849][T11244] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.931881][T11244] ? __fget_files+0x3a8/0x420 [ 570.931892][T11244] ? __fget_files+0x2a/0x420 [ 570.931907][T11244] __x64_sys_sendmsg+0x1b7/0x290 [ 570.931923][T11244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.931948][T11244] do_syscall_64+0x166/0x520 [ 570.931962][T11244] ? trace_irq_disable+0x3b/0x140 [ 570.931975][T11244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.931985][T11244] ? clear_bhb_loop+0x70/0xc0 [ 570.931999][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.932010][T11244] RIP: 0033:0x7fb4769df559 [ 570.932020][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.932029][T11244] RSP: 002b:00007fb474c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.932041][T11244] RAX: ffffffffffffffda RBX: 00007fb476c65fa0 RCX: 00007fb4769df559 [ 570.932048][T11244] RDX: 0000000000008010 RSI: 0000200000000140 RDI: 0000000000000003 [ 570.932056][T11244] RBP: 00007fb474c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 570.932062][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.932068][T11244] R13: 00007fb476c66038 R14: 00007fb476c65fa0 R15: 00007fffa4e9ae28 [ 570.932084][T11244] [ 571.108119][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806406f400: rx timeout, send abort [ 571.112398][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806406f400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 571.306600][ T5690] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 571.332021][ T5690] usb 4-1: device descriptor read/8, error -71 [ 571.437032][ T5690] usb usb4-port1: unable to enumerate USB device [ 572.016106][T11262] FAULT_INJECTION: forcing a failure. [ 572.016106][T11262] name failslab, interval 1, probability 0, space 0, times 0 [ 572.016137][T11262] CPU: 0 UID: 0 PID: 11262 Comm: syz.3.1637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 572.016162][T11262] Tainted: [L]=SOFTLOCKUP [ 572.016169][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 572.016181][T11262] Call Trace: [ 572.016189][T11262] [ 572.016198][T11262] dump_stack_lvl+0xe8/0x150 [ 572.016230][T11262] should_fail_ex+0x46b/0x600 [ 572.016257][T11262] should_failslab+0xa8/0x100 [ 572.016289][T11262] __kmalloc_noprof+0xf6/0x790 [ 572.016310][T11262] ? kernfs_fop_write_iter+0x158/0x540 [ 572.016327][T11262] ? kernfs_fop_write_iter+0x158/0x540 [ 572.016349][T11262] kernfs_fop_write_iter+0x158/0x540 [ 572.016372][T11262] vfs_write+0x61e/0xbb0 [ 572.016402][T11262] ? __pfx_vfs_write+0x10/0x10 [ 572.016425][T11262] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.016456][T11262] ? mutex_lock_nested+0x14d/0x1d0 [ 572.016474][T11262] ? fdget_pos+0x11e/0x160 [ 572.016501][T11262] ksys_write+0x156/0x270 [ 572.016524][T11262] ? __pfx_ksys_write+0x10/0x10 [ 572.016557][T11262] do_syscall_64+0x166/0x520 [ 572.016582][T11262] ? trace_irq_disable+0x3b/0x140 [ 572.016603][T11262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.016622][T11262] ? clear_bhb_loop+0x70/0xc0 [ 572.016654][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.016672][T11262] RIP: 0033:0x7fcab56df559 [ 572.016688][T11262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.016703][T11262] RSP: 002b:00007fcab392e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.016722][T11262] RAX: ffffffffffffffda RBX: 00007fcab5965fa0 RCX: 00007fcab56df559 [ 572.016735][T11262] RDX: 0000000000000006 RSI: 0000200000000440 RDI: 0000000000000004 [ 572.016747][T11262] RBP: 00007fcab392e090 R08: 0000000000000000 R09: 0000000000000000 [ 572.016758][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.016770][T11262] R13: 00007fcab5966038 R14: 00007fcab5965fa0 R15: 00007ffdfeacc438 [ 572.016800][T11262] [ 573.376522][T10926] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 573.528317][T10926] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 573.530951][T10926] usb 6-1: config index 0 descriptor too short (expected 69, got 51) [ 573.530967][T10926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.531019][T10926] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.533379][T10926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.533390][T10926] usb 6-1: Product: syz [ 573.533398][T10926] usb 6-1: Manufacturer: syz [ 573.533405][T10926] usb 6-1: SerialNumber: syz [ 573.673069][T10926] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 573.673104][T10926] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 573.756626][ T5690] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 573.757511][ T48] net_ratelimit: 54 callbacks suppressed [ 574.049010][ T5690] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 574.051220][ T5690] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 574.051269][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.051294][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.051315][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 574.051339][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 574.051364][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 574.051423][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.075554][T10926] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 574.169083][ T5690] usb 4-1: config 0 descriptor?? [ 574.170200][T11289] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 574.256503][T10926] usb 6-1: USB disconnect, device number 5 [ 574.266257][T10545] udevd[10545]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.427656][T11289] Config c/1 of g1 needs at least one function. [ 574.427925][T11289] udc dummy_udc.0: failed to start g1: -22 [ 574.427947][T11289] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 574.435050][T11289] UDC core: g1: couldn't find an available UDC or it's busy [ 574.485420][ T5690] usb 4-1: string descriptor 0 read error: -71 [ 574.517457][ T5690] usbhid 4-1:0.0: can't add hid device: -71 [ 574.517600][ T5690] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 574.524230][ T5690] usb 4-1: USB disconnect, device number 64 [ 574.956106][T11311] FAULT_INJECTION: forcing a failure. [ 574.956106][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 574.956140][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.0.1655 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 574.956165][T11311] Tainted: [L]=SOFTLOCKUP [ 574.956172][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 574.956183][T11311] Call Trace: [ 574.956191][T11311] [ 574.956200][T11311] dump_stack_lvl+0xe8/0x150 [ 574.956231][T11311] should_fail_ex+0x46b/0x600 [ 574.956259][T11311] should_failslab+0xa8/0x100 [ 574.956290][T11311] __kvmalloc_node_noprof+0x171/0x880 [ 574.956312][T11311] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 574.956338][T11311] ? file_tty_write+0x2a6/0xa30 [ 574.956360][T11311] ? file_tty_write+0x2a6/0xa30 [ 574.956388][T11311] file_tty_write+0x2a6/0xa30 [ 574.956422][T11311] vfs_write+0x61e/0xbb0 [ 574.956452][T11311] ? __pfx_vfs_write+0x10/0x10 [ 574.956475][T11311] ? __fget_files+0x3a8/0x420 [ 574.956494][T11311] ? __fget_files+0x2a/0x420 [ 574.956516][T11311] ? fdget+0x1b2/0x250 [ 574.956541][T11311] ksys_write+0x156/0x270 [ 574.956562][T11311] ? __pfx_ksys_write+0x10/0x10 [ 574.956595][T11311] do_syscall_64+0x166/0x520 [ 574.956620][T11311] ? trace_irq_disable+0x3b/0x140 [ 574.956642][T11311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.956661][T11311] ? clear_bhb_loop+0x70/0xc0 [ 574.956684][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.956702][T11311] RIP: 0033:0x7fb4769df559 [ 574.956720][T11311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.956735][T11311] RSP: 002b:00007fb474c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.956756][T11311] RAX: ffffffffffffffda RBX: 00007fb476c65fa0 RCX: 00007fb4769df559 [ 574.956770][T11311] RDX: 0000000000001006 RSI: 0000200000000340 RDI: 0000000000000004 [ 574.956783][T11311] RBP: 00007fb474c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 574.956794][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.956814][T11311] R13: 00007fb476c66038 R14: 00007fb476c65fa0 R15: 00007fffa4e9ae28 [ 574.956846][T11311] [ 575.286543][ T5690] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 575.547517][ T5690] usb 6-1: Using ep0 maxpacket: 16 [ 575.569062][ T5690] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 575.570464][ T5690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 575.661320][T11322] NILFS (nullb0): couldn't find nilfs on the device [ 576.593614][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.593633][ T5690] usb 6-1: Product: syz [ 576.593646][ T5690] usb 6-1: Manufacturer: syz [ 576.593658][ T5690] usb 6-1: SerialNumber: syz [ 576.599806][ T5690] usb 6-1: config 0 descriptor?? [ 577.316407][ T5690] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 577.374993][ T5690] usb 6-1: USB disconnect, device number 6 [ 577.463098][ T1189] usb 6-1: Failed to submit usb control message: -71 [ 577.463136][ T1189] usb 6-1: unable to send the bmi data to the device: -71 [ 577.463154][ T1189] usb 6-1: unable to get target info from device [ 577.463186][ T1189] usb 6-1: could not get target info (-71) [ 577.463613][ T1189] usb 6-1: could not probe fw (-71) [ 577.922239][T11345] netlink: 'syz.4.1664': attribute type 12 has an invalid length. [ 579.017876][ C1] net_ratelimit: 89 callbacks suppressed [ 580.085661][T11345] device-mapper: ioctl: device has been removed from the dev hash table. [ 580.450821][T11373] NILFS (nullb0): couldn't find nilfs on the device [ 580.824911][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 583.706711][ T5721] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 583.857397][ T5721] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 583.860613][ T5721] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 583.860629][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 583.860663][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.921447][ T5721] usb 6-1: config 0 descriptor?? [ 584.163850][ T5721] ath6kl: Failed to submit usb control message: -71 [ 584.163876][ T5721] ath6kl: unable to send the bmi data to the device: -71 [ 584.163884][ T5721] ath6kl: Unable to send get target info: -71 [ 584.189510][ T5721] ath6kl: Failed to init ath6kl core: -71 [ 584.220570][ T5721] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 584.231325][ T5721] usb 6-1: USB disconnect, device number 7 [ 584.236557][ T153] net_ratelimit: 35 callbacks suppressed [ 584.306101][T11398] fuse: Unknown parameter ' V|$W’âË–‚ ' [ 584.796523][ T5721] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 584.876665][ T6693] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 584.947859][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 584.951062][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 584.951092][ T5721] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 584.952908][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.952929][ T5721] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 584.967870][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.967890][ T5721] usb 1-1: Product: syz [ 584.967903][ T5721] usb 1-1: Manufacturer: syz [ 584.967918][ T5721] usb 1-1: SerialNumber: syz [ 585.087217][ T6693] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 585.091254][ T6693] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 585.091374][ T6693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.091400][ T6693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.091422][ T6693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 585.091447][ T6693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 585.091527][ T6693] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 585.091586][ T6693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.253361][ T6693] usb 4-1: config 0 descriptor?? [ 585.254657][T11402] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 586.502874][T11402] UDC core: g1: couldn't find an available UDC or it's busy [ 586.594577][ T6693] usb 4-1: string descriptor 0 read error: -71 [ 586.635800][ T6693] usbhid 4-1:0.0: can't add hid device: -71 [ 586.635994][ T6693] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 586.667789][ T6693] usb 4-1: USB disconnect, device number 65 [ 588.547436][ T5721] usb 1-1: USB disconnect, device number 84 [ 588.785776][T10436] udevd[10436]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.882899][ C0] Unknown status report in ack skb [ 589.306508][ T5690] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 589.459522][ T5690] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 589.462650][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 589.462662][ T5690] usb 5-1: Product: syz [ 589.462669][ T5690] usb 5-1: Manufacturer: syz [ 589.509440][ T5690] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input38 [ 589.516428][ C0] net_ratelimit: 26 callbacks suppressed [ 589.616477][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 589.849518][ T9] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 590.085530][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 590.085548][ T9] usb 6-1: Product: syz [ 590.085561][ T9] usb 6-1: Manufacturer: syz [ 590.896198][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 590.896211][ T36] audit: type=1326 audit(1792689356.728:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.898218][ T36] audit: type=1326 audit(1792689356.738:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.898262][ T36] audit: type=1326 audit(1792689356.738:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.901416][ T36] audit: type=1326 audit(1792689356.738:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.902705][ T36] audit: type=1326 audit(1792689356.738:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.908892][ T36] audit: type=1326 audit(1792689356.738:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.908938][ T36] audit: type=1326 audit(1792689356.748:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.912078][ T36] audit: type=1326 audit(1792689356.748:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.912124][ T36] audit: type=1326 audit(1792689356.748:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 590.914787][ T36] audit: type=1326 audit(1792689356.748:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11439 comm="syz.2.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 591.008585][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input39 [ 591.156483][ T5690] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 591.306392][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 591.307325][ T5690] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 591.353110][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.353130][ T5690] usb 4-1: Product: syz [ 591.353143][ T5690] usb 4-1: Manufacturer: syz [ 591.353157][ T5690] usb 4-1: SerialNumber: syz [ 591.384486][ T5690] usb 4-1: config 0 descriptor?? [ 591.517613][T11443] FAULT_INJECTION: forcing a failure. [ 591.517613][T11443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.517779][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.0.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.517804][T11443] Tainted: [L]=SOFTLOCKUP [ 591.517812][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 591.517823][T11443] Call Trace: [ 591.517831][T11443] [ 591.517840][T11443] dump_stack_lvl+0xe8/0x150 [ 591.517875][T11443] should_fail_ex+0x46b/0x600 [ 591.517901][T11443] _copy_from_user+0x2d/0xb0 [ 591.517922][T11443] __sys_bpf+0x2e7/0xd90 [ 591.517941][T11443] ? __pfx___sys_bpf+0x10/0x10 [ 591.517953][T11443] ? __schedule+0x1733/0x56e0 [ 591.517978][T11443] ? __resched_curr+0x25f/0x6a0 [ 591.518023][T11443] ? preempt_schedule_thunk+0x16/0x40 [ 591.518057][T11443] __x64_sys_bpf+0xba/0xd0 [ 591.518083][T11443] do_syscall_64+0x166/0x520 [ 591.518107][T11443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.518117][T11443] ? clear_bhb_loop+0x70/0xc0 [ 591.518129][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.518143][T11443] RIP: 0033:0x7fb4769df559 [ 591.518161][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.518177][T11443] RSP: 002b:00007fb474c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.518197][T11443] RAX: ffffffffffffffda RBX: 00007fb476c65fa0 RCX: 00007fb4769df559 [ 591.518210][T11443] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000012 [ 591.518222][T11443] RBP: 00007fb474c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 591.518234][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.518246][T11443] R13: 00007fb476c66038 R14: 00007fb476c65fa0 R15: 00007fffa4e9ae28 [ 591.518276][T11443] [ 591.937793][ T5690] airspy 4-1:0.0: Board ID: 00 [ 591.937807][ T5690] airspy 4-1:0.0: Firmware version: [ 592.141162][ T5690] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 592.174599][ T5690] airspy 4-1:0.0: Registered as swradio24 [ 592.174615][ T5690] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 592.208080][ T5690] usb 4-1: USB disconnect, device number 66 [ 592.833047][T11448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1695'. [ 594.356480][ T9] usb 6-1: USB disconnect, device number 8 [ 594.402239][ T5690] usb 5-1: USB disconnect, device number 81 [ 594.402382][ C0] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 594.641481][T11462] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1703'. [ 594.672892][ T5688] net_ratelimit: 44 callbacks suppressed [ 595.899175][ C0] Unknown status report in ack skb [ 595.951330][T11480] FAULT_INJECTION: forcing a failure. [ 595.951330][T11480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.951357][T11480] CPU: 1 UID: 0 PID: 11480 Comm: syz.4.1708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.951378][T11480] Tainted: [L]=SOFTLOCKUP [ 595.951383][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 595.951392][T11480] Call Trace: [ 595.951398][T11480] [ 595.951405][T11480] dump_stack_lvl+0xe8/0x150 [ 595.951432][T11480] should_fail_ex+0x46b/0x600 [ 595.951454][T11480] _copy_from_user+0x2d/0xb0 [ 595.951471][T11480] ___sys_sendmsg+0x1c6/0x360 [ 595.951493][T11480] ? __lock_acquire+0x747/0x2de0 [ 595.951515][T11480] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.951564][T11480] ? __fget_files+0x3a8/0x420 [ 595.951582][T11480] ? __fget_files+0x2a/0x420 [ 595.951608][T11480] __x64_sys_sendmsg+0x1b7/0x290 [ 595.951630][T11480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.951665][T11480] do_syscall_64+0x166/0x520 [ 595.951684][T11480] ? trace_irq_disable+0x3b/0x140 [ 595.951701][T11480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.951715][T11480] ? clear_bhb_loop+0x70/0xc0 [ 595.951731][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.951745][T11480] RIP: 0033:0x7fd21c3df559 [ 595.951760][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.951773][T11480] RSP: 002b:00007fd21a636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.951788][T11480] RAX: ffffffffffffffda RBX: 00007fd21c665fa0 RCX: 00007fd21c3df559 [ 595.951801][T11480] RDX: 0000000000000802 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 595.951811][T11480] RBP: 00007fd21a636090 R08: 0000000000000000 R09: 0000000000000000 [ 595.951819][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.951828][T11480] R13: 00007fd21c666038 R14: 00007fd21c665fa0 R15: 00007fff468445d8 [ 595.951850][T11480] [ 597.540782][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 597.690020][ T9] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 597.702636][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 597.702655][ T9] usb 6-1: Product: syz [ 597.702668][ T9] usb 6-1: Manufacturer: syz [ 597.750493][ T36] kauditd_printk_skb: 121 callbacks suppressed [ 597.750506][ T36] audit: type=1326 audit(1792689363.588:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.752186][ T36] audit: type=1326 audit(1792689363.588:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.752231][ T36] audit: type=1326 audit(1792689363.588:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.752966][ T36] audit: type=1326 audit(1792689363.588:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.754153][ T36] audit: type=1326 audit(1792689363.588:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.755330][ T36] audit: type=1326 audit(1792689363.588:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.796876][ T36] audit: type=1326 audit(1792689363.588:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.796920][ T36] audit: type=1326 audit(1792689363.588:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.796957][ T36] audit: type=1326 audit(1792689363.628:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.796994][ T36] audit: type=1326 audit(1792689363.628:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.2.1712" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7ffc0000 [ 597.802223][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input40 [ 599.397474][ T9] usb 6-1: USB disconnect, device number 9 [ 599.397711][ C1] usbtouchscreen 6-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 600.648556][ C1] net_ratelimit: 105 callbacks suppressed [ 602.139778][T11527] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 602.376710][T11527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.383275][T11527] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 602.396521][ T5642] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 603.346545][ T36] kauditd_printk_skb: 266 callbacks suppressed [ 603.346559][ T36] audit: type=1326 audit(1792689369.178:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11517 comm="syz.4.1719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd21c39fd8e code=0x7ffc0000 [ 603.370836][ T5642] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 603.372261][ T5642] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 603.372281][ T5642] usb 4-1: config 6 has no interface number 0 [ 603.372338][ T5642] usb 4-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.372362][ T5642] usb 4-1: config 6 interface 240 has no altsetting 0 [ 603.385882][ T5642] usb 4-1: string descriptor 0 read error: -22 [ 603.386030][ T5642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 603.416382][ T5642] cdc_ether 4-1:6.240: skipping garbage [ 603.416396][ T5642] cdc_ether 4-1:6.240: skipping garbage [ 603.416409][ T5642] usb 4-1: No union descriptors [ 603.420994][ T5642] usb 4-1: unsupported MDLM descriptors [ 603.425490][ T5642] cdc_acm 4-1:6.240: skipping garbage [ 603.425503][ T5642] cdc_acm 4-1:6.240: skipping garbage [ 603.446615][ T36] audit: type=1326 audit(1792689369.278:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11517 comm="syz.4.1719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 603.813300][T11544] FAULT_INJECTION: forcing a failure. [ 603.813300][T11544] name failslab, interval 1, probability 0, space 0, times 0 [ 603.813345][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.4.1726 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 603.813376][T11544] Tainted: [L]=SOFTLOCKUP [ 603.813383][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 603.813395][T11544] Call Trace: [ 603.813404][T11544] [ 603.813413][T11544] dump_stack_lvl+0xe8/0x150 [ 603.813449][T11544] should_fail_ex+0x46b/0x600 [ 603.813482][T11544] should_failslab+0xa8/0x100 [ 603.813514][T11544] __kmalloc_cache_noprof+0x9c/0x670 [ 603.813541][T11544] ? iommu_fwspec_init+0x302/0x470 [ 603.813566][T11544] ? iommu_fwspec_init+0x302/0x470 [ 603.813597][T11544] iommu_fwspec_init+0x302/0x470 [ 603.813625][T11544] iommu_mock_device_add+0x56/0x1e0 [ 603.813650][T11544] iommufd_test+0x38d9/0x6370 [ 603.813687][T11544] ? __lock_acquire+0x747/0x2de0 [ 603.813710][T11544] ? __pfx_iommufd_test+0x10/0x10 [ 603.813748][T11544] ? tomoyo_path_number_perm+0x219/0x5f0 [ 603.813779][T11544] ? tomoyo_path_number_perm+0x219/0x5f0 [ 603.813810][T11544] ? lock_acquire+0x115/0x350 [ 603.813857][T11544] iommufd_fops_ioctl+0x468/0x600 [ 603.813886][T11544] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 603.813929][T11544] ? bpf_lsm_file_ioctl+0x9/0x20 [ 603.813953][T11544] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 603.813974][T11544] __se_sys_ioctl+0xff/0x170 [ 603.814004][T11544] do_syscall_64+0x166/0x520 [ 603.814034][T11544] ? trace_irq_disable+0x3b/0x140 [ 603.814058][T11544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.814080][T11544] ? clear_bhb_loop+0x70/0xc0 [ 603.814119][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.814141][T11544] RIP: 0033:0x7fd21c3df559 [ 603.814161][T11544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.814179][T11544] RSP: 002b:00007fd21a636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.814202][T11544] RAX: ffffffffffffffda RBX: 00007fd21c665fa0 RCX: 00007fd21c3df559 [ 603.814217][T11544] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 603.814231][T11544] RBP: 00007fd21c476b20 R08: 0000000000000000 R09: 0000000000000000 [ 603.814243][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.814255][T11544] R13: 00007fd21c666038 R14: 00007fd21c665fa0 R15: 00007fff468445d8 [ 603.814283][T11544] [ 604.266445][ T5721] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 605.146978][ T5721] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.155056][ T5721] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 605.155128][ T5721] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 605.155159][ T5721] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 605.155185][ T5721] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.155243][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.459592][ T6693] usb 4-1: USB disconnect, device number 67 [ 605.576473][T10926] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 605.723808][ T5721] usb 1-1: GET_CAPABILITIES returned 0 [ 605.723845][ T5721] usbtmc 1-1:16.0: can't read capabilities [ 605.758519][T10926] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 605.762993][T10926] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 605.763009][T10926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 605.763043][T10926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.817368][T10926] usb 6-1: config 0 descriptor?? [ 606.060660][T10926] ath6kl: Failed to submit usb control message: -71 [ 606.060704][T10926] ath6kl: unable to send the bmi data to the device: -71 [ 606.060719][T10926] ath6kl: Unable to send get target info: -71 [ 606.105370][T10926] ath6kl: Failed to init ath6kl core: -71 [ 606.149698][T10926] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 606.192426][T10926] usb 6-1: USB disconnect, device number 10 [ 606.293087][ T5642] usb 1-1: USB disconnect, device number 85 [ 606.556388][ C1] net_ratelimit: 48 callbacks suppressed [ 608.536435][ T5721] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 608.686565][T11593] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 608.813704][T11593] ALSA: mixer_oss: invalid OSS volume 'SPEAKE' [ 608.870937][ T5721] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 609.672888][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 609.672915][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 609.672940][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 609.672962][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 609.746134][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.746153][ T5721] usb 1-1: Product: syz [ 609.746166][ T5721] usb 1-1: Manufacturer: syz [ 609.746180][ T5721] usb 1-1: SerialNumber: syz [ 609.774784][ T5721] usb 1-1: config 0 descriptor?? [ 609.987794][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.988337][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.988876][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.989663][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.990177][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.990672][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.991159][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.991710][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.992241][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.992691][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.993074][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.995289][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 609.995821][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.080172][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.080755][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.081304][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.082381][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.112367][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.113264][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.114090][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 610.114131][ T5721] input input41: Timeout waiting for response from device. [ 610.151541][ T5721] usb 1-1: USB disconnect, device number 86 [ 610.696139][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 610.937724][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 611.742727][ C0] net_ratelimit: 37 callbacks suppressed [ 611.750136][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 611.945382][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.945400][ T10] usb 6-1: Product: syz [ 611.945413][ T10] usb 6-1: Manufacturer: syz [ 611.945426][ T10] usb 6-1: SerialNumber: syz [ 612.015759][ T10] usb 6-1: config 0 descriptor?? [ 612.438373][ T10] airspy 6-1:0.0: Board ID: 00 [ 612.438387][ T10] airspy 6-1:0.0: Firmware version: [ 612.568083][T11621] FAULT_INJECTION: forcing a failure. [ 612.568083][T11621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.568118][T11621] CPU: 1 UID: 0 PID: 11621 Comm: syz.3.1750 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.568143][T11621] Tainted: [L]=SOFTLOCKUP [ 612.568150][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 612.568199][T11621] Call Trace: [ 612.568209][T11621] [ 612.568217][T11621] dump_stack_lvl+0xe8/0x150 [ 612.568248][T11621] should_fail_ex+0x46b/0x600 [ 612.568275][T11621] _copy_from_user+0x2d/0xb0 [ 612.568297][T11621] ___sys_sendmsg+0x1c6/0x360 [ 612.568323][T11621] ? __lock_acquire+0x747/0x2de0 [ 612.568350][T11621] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.568409][T11621] ? __fget_files+0x3a8/0x420 [ 612.568433][T11621] ? __fget_files+0x2a/0x420 [ 612.568462][T11621] __x64_sys_sendmsg+0x1b7/0x290 [ 612.568491][T11621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.568538][T11621] do_syscall_64+0x166/0x520 [ 612.568564][T11621] ? trace_irq_disable+0x3b/0x140 [ 612.568585][T11621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.568604][T11621] ? clear_bhb_loop+0x70/0xc0 [ 612.568627][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.568646][T11621] RIP: 0033:0x7fcab56df559 [ 612.568664][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.568680][T11621] RSP: 002b:00007fcab392e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.568701][T11621] RAX: ffffffffffffffda RBX: 00007fcab5965fa0 RCX: 00007fcab56df559 [ 612.568715][T11621] RDX: 0000000020000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 612.568727][T11621] RBP: 00007fcab392e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.568739][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.568750][T11621] R13: 00007fcab5966038 R14: 00007fcab5965fa0 R15: 00007ffdfeacc438 [ 612.568781][T11621] [ 612.662543][ T10] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 612.730096][ T10] airspy 6-1:0.0: Registered as swradio24 [ 612.730117][ T10] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 612.779355][ T10] usb 6-1: USB disconnect, device number 11 [ 612.873991][T11624] netlink: 'syz.3.1752': attribute type 10 has an invalid length. [ 612.874341][T11624] veth0_vlan: entered allmulticast mode [ 612.909519][ T5721] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 612.984732][T11624] team0: Device veth0_vlan failed to register rx_handler [ 613.132431][ T5721] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 613.136068][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.136100][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.142616][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 613.142635][ T5721] usb 1-1: Product: syz [ 613.142648][ T5721] usb 1-1: Manufacturer: syz [ 613.195450][ T5721] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 613.485354][ T5721] mos7840 1-1:1.0: probe with driver mos7840 failed with error -71 [ 613.581742][ T5721] usb 1-1: USB disconnect, device number 87 [ 613.976429][ T5719] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 614.128447][ T5719] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 614.133144][ T5719] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 614.133174][ T5719] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 614.133229][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.189005][T11631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 614.225177][ T5719] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.527066][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 614.696891][T11640] netlink: 'syz.0.1756': attribute type 3 has an invalid length. [ 614.710363][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 614.809280][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 614.818733][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 614.818754][ T10] usb 6-1: config 0 has no interface number 0 [ 614.818796][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 614.842401][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.842420][ T10] usb 6-1: Product: syz [ 614.842433][ T10] usb 6-1: Manufacturer: syz [ 614.842447][ T10] usb 6-1: SerialNumber: syz [ 614.892058][ T10] usb 6-1: config 0 descriptor?? [ 615.040814][ T5719] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 615.236407][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 615.237302][ T5719] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.238934][ T5719] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 615.238958][ T5719] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 615.239023][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.361343][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 616.361367][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 616.425675][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 616.425963][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 616.425982][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 616.426000][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 616.431952][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 616.498765][ T10] usb 6-1: USB disconnect, device number 12 [ 616.956390][ C1] net_ratelimit: 41 callbacks suppressed [ 617.220358][T11646] FAULT_INJECTION: forcing a failure. [ 617.220358][T11646] name failslab, interval 1, probability 0, space 0, times 0 [ 617.220388][T11646] CPU: 1 UID: 0 PID: 11646 Comm: syz.5.1759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.220413][T11646] Tainted: [L]=SOFTLOCKUP [ 617.220420][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 617.220430][T11646] Call Trace: [ 617.220438][T11646] [ 617.220446][T11646] dump_stack_lvl+0xe8/0x150 [ 617.220477][T11646] should_fail_ex+0x46b/0x600 [ 617.220504][T11646] should_failslab+0xa8/0x100 [ 617.220533][T11646] __kmalloc_noprof+0xf6/0x790 [ 617.220558][T11646] ? tomoyo_realpath_from_path+0xef/0x640 [ 617.220581][T11646] ? tomoyo_realpath_from_path+0xef/0x640 [ 617.220609][T11646] tomoyo_realpath_from_path+0xef/0x640 [ 617.220639][T11646] ? tomoyo_path_number_perm+0x219/0x5f0 [ 617.220665][T11646] tomoyo_path_number_perm+0x246/0x5f0 [ 617.220703][T11646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 617.220726][T11646] ? __lock_acquire+0x747/0x2de0 [ 617.220762][T11646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 617.220809][T11646] ? __fget_files+0x2a/0x420 [ 617.220832][T11646] ? __fget_files+0x2a/0x420 [ 617.220852][T11646] ? __fget_files+0x2a/0x420 [ 617.220876][T11646] security_file_ioctl+0xc3/0x2a0 [ 617.220906][T11646] __se_sys_ioctl+0x47/0x170 [ 617.220933][T11646] do_syscall_64+0x166/0x520 [ 617.220958][T11646] ? trace_irq_disable+0x3b/0x140 [ 617.220980][T11646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.221000][T11646] ? clear_bhb_loop+0x70/0xc0 [ 617.221023][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.221041][T11646] RIP: 0033:0x7fbe85a5f559 [ 617.221059][T11646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.221075][T11646] RSP: 002b:00007fbe83c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.221095][T11646] RAX: ffffffffffffffda RBX: 00007fbe85ce6090 RCX: 00007fbe85a5f559 [ 617.221109][T11646] RDX: 0000000000000800 RSI: 0000000000004c09 RDI: 0000000000000003 [ 617.221121][T11646] RBP: 00007fbe83c95090 R08: 0000000000000000 R09: 0000000000000000 [ 617.221132][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.221144][T11646] R13: 00007fbe85ce6128 R14: 00007fbe85ce6090 R15: 00007ffc3aebe7c8 [ 617.221175][T11646] [ 617.403776][T11646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 617.874658][ C1] Unknown status report in ack skb [ 617.893366][ T5690] usb 1-1: USB disconnect, device number 88 [ 620.616246][T11652] FAULT_INJECTION: forcing a failure. [ 620.616246][T11652] name failslab, interval 1, probability 0, space 0, times 0 [ 620.617735][T11652] CPU: 1 UID: 0 PID: 11652 Comm: syz.0.1762 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.617763][T11652] Tainted: [L]=SOFTLOCKUP [ 620.617771][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 620.617782][T11652] Call Trace: [ 620.617790][T11652] [ 620.617798][T11652] dump_stack_lvl+0xe8/0x150 [ 620.617830][T11652] should_fail_ex+0x46b/0x600 [ 620.617857][T11652] should_failslab+0xa8/0x100 [ 620.617886][T11652] __kmalloc_noprof+0xf6/0x790 [ 620.617910][T11652] ? tomoyo_realpath_from_path+0xef/0x640 [ 620.617931][T11652] ? tomoyo_realpath_from_path+0xef/0x640 [ 620.617957][T11652] tomoyo_realpath_from_path+0xef/0x640 [ 620.617991][T11652] ? tomoyo_path_number_perm+0x219/0x5f0 [ 620.618018][T11652] tomoyo_path_number_perm+0x246/0x5f0 [ 620.618045][T11652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.618069][T11652] ? __lock_acquire+0x747/0x2de0 [ 620.618105][T11652] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 620.618151][T11652] ? __fget_files+0x2a/0x420 [ 620.618174][T11652] ? __fget_files+0x2a/0x420 [ 620.618194][T11652] ? __fget_files+0x2a/0x420 [ 620.618218][T11652] security_file_ioctl+0xc3/0x2a0 [ 620.618249][T11652] __se_sys_ioctl+0x47/0x170 [ 620.618275][T11652] do_syscall_64+0x166/0x520 [ 620.618301][T11652] ? trace_irq_disable+0x3b/0x140 [ 620.618322][T11652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.618341][T11652] ? clear_bhb_loop+0x70/0xc0 [ 620.618373][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.618391][T11652] RIP: 0033:0x7fb4769df559 [ 620.618409][T11652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.618425][T11652] RSP: 002b:00007fb474c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.618445][T11652] RAX: ffffffffffffffda RBX: 00007fb476c65fa0 RCX: 00007fb4769df559 [ 620.618458][T11652] RDX: 0000000000000000 RSI: 0000000040104d07 RDI: 0000000000000003 [ 620.618470][T11652] RBP: 00007fb474c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 620.618482][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.618493][T11652] R13: 00007fb476c66038 R14: 00007fb476c65fa0 R15: 00007fffa4e9ae28 [ 620.618523][T11652] [ 620.624773][T11652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.488177][ T36] audit: type=1326 audit(1792689387.318:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.488230][ T36] audit: type=1326 audit(1792689387.318:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.536441][ T36] audit: type=1326 audit(1792689387.378:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.604548][ T36] audit: type=1326 audit(1792689387.438:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.604599][ T36] audit: type=1326 audit(1792689387.438:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.774320][ T36] audit: type=1326 audit(1792689387.588:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.774376][ T36] audit: type=1326 audit(1792689387.608:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.774472][ T36] audit: type=1326 audit(1792689387.608:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 621.998710][ T36] audit: type=1326 audit(1792689387.828:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 622.076385][ C0] net_ratelimit: 61 callbacks suppressed [ 622.181438][ T36] audit: type=1326 audit(1792689388.018:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11655 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 624.321597][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321660][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.976998][ T9] usb 4-1: USB disconnect, device number 68 [ 626.339851][T11706] FAULT_INJECTION: forcing a failure. [ 626.339851][T11706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.339886][T11706] CPU: 1 UID: 0 PID: 11706 Comm: syz.5.1776 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.339912][T11706] Tainted: [L]=SOFTLOCKUP [ 626.339919][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 626.339930][T11706] Call Trace: [ 626.339938][T11706] [ 626.339947][T11706] dump_stack_lvl+0xe8/0x150 [ 626.339979][T11706] should_fail_ex+0x46b/0x600 [ 626.340006][T11706] _copy_to_user+0x31/0xb0 [ 626.340030][T11706] simple_read_from_buffer+0xe1/0x170 [ 626.340062][T11706] proc_fail_nth_read+0x1be/0x230 [ 626.340092][T11706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 626.340119][T11706] ? rw_verify_area+0x250/0x4d0 [ 626.340143][T11706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 626.340166][T11706] vfs_read+0x219/0xa90 [ 626.340200][T11706] ? __pfx_vfs_read+0x10/0x10 [ 626.340228][T11706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.340259][T11706] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 626.340284][T11706] ? mutex_lock_nested+0x14d/0x1d0 [ 626.340305][T11706] ? fdget_pos+0x11e/0x160 [ 626.340332][T11706] ksys_read+0x156/0x270 [ 626.340352][T11706] ? __fget_files+0x3a8/0x420 [ 626.340374][T11706] ? __pfx_ksys_read+0x10/0x10 [ 626.340407][T11706] do_syscall_64+0x166/0x520 [ 626.340433][T11706] ? trace_irq_disable+0x3b/0x140 [ 626.340455][T11706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.340474][T11706] ? clear_bhb_loop+0x70/0xc0 [ 626.340497][T11706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.340516][T11706] RIP: 0033:0x7fbe85a1fd8e [ 626.340534][T11706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 626.340550][T11706] RSP: 002b:00007fbe83c94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 626.340570][T11706] RAX: ffffffffffffffda RBX: 00007fbe83c956c0 RCX: 00007fbe85a1fd8e [ 626.340584][T11706] RDX: 000000000000000f RSI: 00007fbe83c950a0 RDI: 0000000000000005 [ 626.340596][T11706] RBP: 00007fbe83c95090 R08: 0000000000000000 R09: 0000000000000000 [ 626.340609][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.340620][T11706] R13: 00007fbe85ce6128 R14: 00007fbe85ce6090 R15: 00007ffc3aebe7c8 [ 626.340652][T11706] [ 627.436382][ C1] net_ratelimit: 38 callbacks suppressed [ 627.656460][T10926] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 627.818440][T10926] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 627.819912][T10926] usb 1-1: config 6 has an invalid interface number: 240 but max is 0 [ 627.819926][T10926] usb 1-1: config 6 has no interface number 0 [ 627.819962][T10926] usb 1-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.819976][T10926] usb 1-1: config 6 interface 240 has no altsetting 0 [ 627.840047][T10926] usb 1-1: string descriptor 0 read error: -22 [ 627.840230][T10926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 627.900120][T10926] cdc_ether 1-1:6.240: skipping garbage [ 627.900130][T10926] cdc_ether 1-1:6.240: skipping garbage [ 627.900139][T10926] usb 1-1: No union descriptors [ 627.900897][T10926] usb 1-1: unsupported MDLM descriptors [ 627.908010][T10926] cdc_acm 1-1:6.240: skipping garbage [ 627.908024][T10926] cdc_acm 1-1:6.240: skipping garbage ** 8075 printk messages dropped ** [ 628.541614][ T10] usb 1-1: USB disconnect, device number 89 [ 628.557331][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 628.558727][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.558792][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.733794][ T9] usb 4-1: config 0 descriptor?? [ 629.226585][T11723] 9p: p9: multiple sources not supported [ 629.242461][ T9] usb 4-1: can't set config #0, error -71 [ 629.265384][ T9] usb 4-1: USB disconnect, device number 69 [ 629.557444][T11722] ip6erspan0: entered allmulticast mode [ 630.186418][ T5690] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 630.296890][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 630.446487][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 630.449865][ T5690] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 630.455415][ T5690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 630.455452][ T5690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 630.455504][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.458103][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 630.469543][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 630.483262][ T5690] usb 5-1: config 0 descriptor?? [ 630.516599][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 630.516624][ T10] usb 1-1: config 0 has no interface number 0 [ 630.516667][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.516692][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 630.523360][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.523381][ T10] usb 1-1: Product: syz [ 630.523395][ T10] usb 1-1: Manufacturer: syz [ 630.523409][ T10] usb 1-1: SerialNumber: syz [ 631.593864][ T10] usb 1-1: config 0 descriptor?? [ 631.923812][ T5690] kye 0003:0458:5014.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 631.947713][ T5690] hid_parser_main: 465 callbacks suppressed [ 631.947737][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947770][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947807][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947833][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947859][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947881][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947904][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947930][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947957][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 631.947984][ T5690] kye 0003:0458:5014.0025: unknown main item tag 0x0 [ 632.152588][ T5690] kye 0003:0458:5014.0025: hidraw0: USB HID v0.03 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 632.152622][ T5690] kye 0003:0458:5014.0025: tablet-enabling feature report not found [ 632.152637][ T5690] kye 0003:0458:5014.0025: tablet enabling failed [ 632.348982][ T10] appletouch 1-1:0.85: Geyser mode initialized. [ 632.374025][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input42 [ 632.470179][T11734] net_ratelimit: 60 callbacks suppressed [ 632.470193][T11734] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 632.531337][ C1] Illegal XDP return value 16128 on prog (id 109) dev veth0, expect packet loss! [ 632.556059][ T5719] usb 5-1: USB disconnect, device number 82 [ 632.727274][T11749] fido_id[11749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 633.792018][ T5690] usb 1-1: USB disconnect, device number 90 [ 633.840442][ T5842] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 633.955400][ T5690] appletouch 1-1:0.85: input: appletouch disconnected [ 633.996476][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 633.998335][ T5842] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 633.999829][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.999861][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.105411][ T5842] usb 5-1: config 0 descriptor?? [ 634.143636][ T5842] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 634.383691][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 634.383722][ T36] audit: type=1326 audit(1792689400.218:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.383765][ T36] audit: type=1326 audit(1792689400.218:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.384159][ T36] audit: type=1326 audit(1792689400.218:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.384433][ T36] audit: type=1326 audit(1792689400.218:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.456432][ T36] audit: type=1326 audit(1792689400.248:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.526447][ T5690] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 634.526953][ T36] audit: type=1326 audit(1792689400.358:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.527017][ T36] audit: type=1326 audit(1792689400.358:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.622658][ T36] audit: type=1326 audit(1792689400.458:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.622686][ T36] audit: type=1326 audit(1792689400.458:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.622707][ T36] audit: type=1326 audit(1792689400.458:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11756 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c3df559 code=0x7ffc0000 [ 634.709874][ T5690] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 634.719366][ T5690] usb 1-1: config 6 has an invalid interface number: 240 but max is 0 [ 634.719386][ T5690] usb 1-1: config 6 has no interface number 0 [ 634.719447][ T5690] usb 1-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.719615][ T5690] usb 1-1: config 6 interface 240 has no altsetting 0 [ 634.758085][ T5690] usb 1-1: string descriptor 0 read error: -22 [ 634.758231][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 634.891516][ T5690] cdc_ether 1-1:6.240: skipping garbage [ 634.891538][ T5690] cdc_ether 1-1:6.240: skipping garbage [ 634.891552][ T5690] usb 1-1: No union descriptors [ 634.912618][ T5690] usb 1-1: unsupported MDLM descriptors [ 634.915039][ T5690] cdc_acm 1-1:6.240: skipping garbage [ 634.915052][ T5690] cdc_acm 1-1:6.240: skipping garbage [ 635.137972][ T5690] usb 1-1: USB disconnect, device number 91 [ 636.006486][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 636.157330][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 636.158757][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 636.165024][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.165055][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.227790][ T10] usb 4-1: config 0 descriptor?? [ 636.295288][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 636.407518][T11791] netlink: 'syz.5.1803': attribute type 5 has an invalid length. [ 636.713699][T11793] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 637.323821][ T5604] Bluetooth: hci5: command tx timeout [ 637.421129][T11797] FAULT_INJECTION: forcing a failure. [ 637.421129][T11797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.421162][T11797] CPU: 0 UID: 0 PID: 11797 Comm: syz.0.1805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 637.421187][T11797] Tainted: [L]=SOFTLOCKUP [ 637.421194][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 637.421205][T11797] Call Trace: [ 637.421213][T11797] [ 637.421222][T11797] dump_stack_lvl+0xe8/0x150 [ 637.421254][T11797] should_fail_ex+0x46b/0x600 [ 637.421281][T11797] _copy_to_user+0x31/0xb0 [ 637.421305][T11797] simple_read_from_buffer+0xe1/0x170 [ 637.421332][T11797] proc_fail_nth_read+0x1be/0x230 [ 637.421359][T11797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.421387][T11797] ? rw_verify_area+0x250/0x4d0 [ 637.421410][T11797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.421433][T11797] vfs_read+0x219/0xa90 [ 637.421464][T11797] ? __pfx_vfs_read+0x10/0x10 [ 637.421487][T11797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 637.421517][T11797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 637.421543][T11797] ? mutex_lock_nested+0x14d/0x1d0 [ 637.421563][T11797] ? fdget_pos+0x11e/0x160 [ 637.421592][T11797] ksys_read+0x156/0x270 [ 637.421611][T11797] ? __fget_files+0x3a8/0x420 [ 637.421633][T11797] ? __pfx_ksys_read+0x10/0x10 [ 637.421666][T11797] do_syscall_64+0x166/0x520 [ 637.421693][T11797] ? trace_irq_disable+0x3b/0x140 [ 637.421714][T11797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.421734][T11797] ? clear_bhb_loop+0x70/0xc0 [ 637.421757][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.421776][T11797] RIP: 0033:0x7fb47699fd8e [ 637.421793][T11797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 637.421809][T11797] RSP: 002b:00007fb474c0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 637.421829][T11797] RAX: ffffffffffffffda RBX: 00007fb474c0d6c0 RCX: 00007fb47699fd8e [ 637.421842][T11797] RDX: 000000000000000f RSI: 00007fb474c0d0a0 RDI: 0000000000000005 [ 637.421861][T11797] RBP: 00007fb474c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 637.421873][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.421885][T11797] R13: 00007fb476c66128 R14: 00007fb476c66090 R15: 00007fffa4e9ae28 [ 637.421919][T11797] [ 637.710762][ T5690] usb 5-1: USB disconnect, device number 83 [ 637.766904][ C0] net_ratelimit: 61 callbacks suppressed [ 639.233607][ T5690] usb 4-1: USB disconnect, device number 70 [ 639.307028][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 639.503560][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 639.506035][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 639.506072][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.506097][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.506118][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 639.506143][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 639.506168][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 639.506235][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.530023][ T10] usb 5-1: config 0 descriptor?? [ 639.550005][T11804] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 639.783347][T11804] Config c/1 of g1 needs at least one function. [ 639.783482][T11804] udc dummy_udc.0: failed to start g1: -22 [ 639.783502][T11804] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 639.785053][T11804] UDC core: g1: couldn't find an available UDC or it's busy [ 639.820229][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 639.820965][ T10] usb 5-1: string descriptor 0 read error: -71 [ 639.867322][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 639.867410][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 639.895575][ T10] usb 5-1: USB disconnect, device number 84 [ 640.706425][ T5690] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 640.856850][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 640.859610][ T5690] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 640.861564][ T5690] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 640.861576][ T5690] usb 4-1: config 0 has no interface number 0 [ 640.861601][ T5690] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 640.861614][ T5690] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 640.896144][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.896154][ T5690] usb 4-1: Product: syz [ 640.896161][ T5690] usb 4-1: Manufacturer: syz [ 640.896169][ T5690] usb 4-1: SerialNumber: syz [ 640.944491][ T5690] usb 4-1: config 0 descriptor?? [ 640.950807][T11822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 640.950919][T11822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.184101][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.186860][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.203265][T11822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.203470][T11822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.230246][T11830] team0: entered allmulticast mode [ 641.230264][T11830] team_slave_0: entered allmulticast mode [ 641.230289][T11830] team_slave_1: entered allmulticast mode [ 641.270574][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'. [ 641.329642][T11829] team_slave_0 (unregistering): left allmulticast mode [ 641.372145][T11829] team0: Port device team_slave_0 removed [ 642.136392][ T10] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 642.184578][ T5690] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 642.184594][ T5690] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 642.209702][ T5690] asix 4-1:0.34: probe with driver asix failed with error -71 [ 642.263127][ T5690] usb 4-1: USB disconnect, device number 71 [ 642.318504][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 642.322167][ T10] usb 1-1: config 6 has an invalid interface number: 240 but max is 0 [ 642.322189][ T10] usb 1-1: config 6 has no interface number 0 [ 642.322251][ T10] usb 1-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.322277][ T10] usb 1-1: config 6 interface 240 has no altsetting 0 [ 642.366523][ T5719] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 642.382369][ T10] usb 1-1: string descriptor 0 read error: -22 [ 642.382475][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 642.420354][ T10] cdc_ether 1-1:6.240: skipping garbage [ 642.420368][ T10] cdc_ether 1-1:6.240: skipping garbage [ 642.420379][ T10] usb 1-1: No union descriptors [ 642.421969][ T10] usb 1-1: unsupported MDLM descriptors [ 642.450572][ T10] cdc_acm 1-1:6.240: skipping garbage [ 642.450587][ T10] cdc_acm 1-1:6.240: skipping garbage [ 642.579391][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 642.586850][ T5719] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 642.602733][ T5719] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 642.602750][ T5719] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 642.602761][ T5719] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 642.602772][ T5719] usb 5-1: config 1 has no interface number 0 [ 642.602798][ T5719] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.602811][ T5719] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 642.602844][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.715635][ T5719] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 642.799904][ T5690] usb 1-1: USB disconnect, device number 92 [ 642.878068][ T1424] net_ratelimit: 30 callbacks suppressed [ 642.916872][T11850] netlink: 'syz.5.1822': attribute type 4 has an invalid length. [ 643.109478][ T5719] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 643.266462][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 643.418248][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 643.422915][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 643.422945][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.422959][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.422970][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 643.422986][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 643.423010][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 643.423472][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.522398][ T10] usb 4-1: config 0 descriptor?? [ 643.525106][T11854] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 643.561153][ T5690] usb 5-1: USB disconnect, device number 85 [ 643.650708][ T5690] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 643.812218][T11854] Config c/1 of g1 needs at least one function. [ 643.812491][T11854] udc dummy_udc.0: failed to start g1: -22 [ 643.812512][T11854] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 643.860516][T11854] UDC core: g1: couldn't find an available UDC or it's busy [ 643.955029][ T10] usb 4-1: string descriptor 0 read error: -71 [ 643.989022][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 643.989049][ T36] audit: type=1326 audit(1792689409.818:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 643.989090][ T36] audit: type=1326 audit(1792689409.828:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 643.989115][ T36] audit: type=1326 audit(1792689409.828:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 643.989144][ T36] audit: type=1326 audit(1792689409.828:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 643.989166][ T36] audit: type=1326 audit(1792689409.828:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 644.133349][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 644.133494][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 644.199046][ T36] audit: type=1326 audit(1792689409.828:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 644.199075][ T36] audit: type=1326 audit(1792689410.028:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 644.199098][ T36] audit: type=1326 audit(1792689410.028:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 644.199128][ T36] audit: type=1326 audit(1792689410.028:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 644.199151][ T36] audit: type=1326 audit(1792689410.028:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11861 comm="syz.0.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7ffc0000 [ 644.353511][ T10] usb 4-1: USB disconnect, device number 72 [ 645.392213][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 645.587107][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 645.588299][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 645.588314][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 645.588347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.610499][ T10] usb 4-1: config 0 descriptor?? [ 645.823634][ T10] ath6kl: Failed to submit usb control message: -71 [ 645.823678][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 645.823693][ T10] ath6kl: Unable to send get target info: -71 [ 645.835866][T11894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.869307][ T10] ath6kl: Failed to init ath6kl core: -71 [ 645.872413][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 645.920777][ T10] usb 4-1: USB disconnect, device number 73 [ 646.826477][ T5719] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 646.886947][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 646.977416][ T5719] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 646.979147][ T5719] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 646.979169][ T5719] usb 4-1: config 6 has no interface number 0 [ 646.979229][ T5719] usb 4-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.979257][ T5719] usb 4-1: config 6 interface 240 has no altsetting 0 [ 647.007074][ T5719] usb 4-1: string descriptor 0 read error: -22 [ 647.007224][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 647.022025][ T5719] cdc_ether 4-1:6.240: skipping garbage [ 647.022039][ T5719] cdc_ether 4-1:6.240: skipping garbage [ 647.022053][ T5719] usb 4-1: No union descriptors [ 647.023645][ T5719] usb 4-1: unsupported MDLM descriptors [ 647.024829][ T5719] cdc_acm 4-1:6.240: skipping garbage [ 647.024843][ T5719] cdc_acm 4-1:6.240: skipping garbage [ 647.050687][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 647.055917][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 647.084937][ T10] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 647.106007][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.106018][ T10] usb 1-1: Product: syz [ 647.106025][ T10] usb 1-1: Manufacturer: syz [ 647.106033][ T10] usb 1-1: SerialNumber: syz [ 647.139629][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 647.139667][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 647.227231][ T5719] usb 4-1: USB disconnect, device number 74 [ 648.003615][ T153] net_ratelimit: 48 callbacks suppressed [ 651.561950][ T5842] r8152-cfgselector 1-1: USB disconnect, device number 93 [ 653.051670][ C1] net_ratelimit: 30 callbacks suppressed [ 653.386454][ T5842] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 653.569758][ T5842] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 653.576719][ T5842] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 653.576766][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.576791][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.576812][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 653.576834][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 653.576856][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 653.576913][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.596011][ T5842] usb 1-1: config 0 descriptor?? [ 653.597205][T11950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 654.131303][T11950] UDC core: g1: couldn't find an available UDC or it's busy [ 654.167303][ T5842] usb 1-1: string descriptor 0 read error: -71 [ 654.270630][ T5842] usbhid 1-1:0.0: can't add hid device: -71 [ 654.270785][ T5842] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 654.311712][ T5842] usb 1-1: USB disconnect, device number 94 [ 655.862800][ T153] rpcbind: server 127.0.0.1 not responding, timed out [ 656.736950][T11977] FAULT_INJECTION: forcing a failure. [ 656.736950][T11977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.737006][T11977] CPU: 0 UID: 0 PID: 11977 Comm: syz.0.1861 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 656.737032][T11977] Tainted: [L]=SOFTLOCKUP [ 656.737039][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 656.737049][T11977] Call Trace: [ 656.737056][T11977] [ 656.737061][T11977] dump_stack_lvl+0xe8/0x150 [ 656.737081][T11977] should_fail_ex+0x46b/0x600 [ 656.737096][T11977] strncpy_from_user+0x36/0x2c0 [ 656.737109][T11977] do_getname+0x77/0x250 [ 656.737127][T11977] do_sys_openat2+0xce/0x200 [ 656.737143][T11977] ? __pfx_do_sys_openat2+0x10/0x10 [ 656.737158][T11977] ? ksys_write+0x248/0x270 [ 656.737171][T11977] ? __pfx_ksys_write+0x10/0x10 [ 656.737184][T11977] __x64_sys_openat+0x138/0x170 [ 656.737197][T11977] do_syscall_64+0x166/0x520 [ 656.737212][T11977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.737222][T11977] ? clear_bhb_loop+0x70/0xc0 [ 656.737235][T11977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.737245][T11977] RIP: 0033:0x7fb4769df559 [ 656.737255][T11977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.737264][T11977] RSP: 002b:00007fb474c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.737277][T11977] RAX: ffffffffffffffda RBX: 00007fb476c66090 RCX: 00007fb4769df559 [ 656.737284][T11977] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 656.737291][T11977] RBP: 00007fb474c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 656.737297][T11977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.737304][T11977] R13: 00007fb476c66128 R14: 00007fb476c66090 R15: 00007fffa4e9ae28 [ 656.737319][T11977] [ 657.781475][T11974] geneve2: entered allmulticast mode [ 657.854578][T11974] batman_adv: batadv0: Adding interface: geneve2 [ 657.854606][T11974] batman_adv: batadv0: Interface activated: geneve2 [ 659.818089][ C1] net_ratelimit: 57 callbacks suppressed [ 660.483284][T11985] FAULT_INJECTION: forcing a failure. [ 660.483284][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 660.483341][T11985] CPU: 0 UID: 0 PID: 11985 Comm: syz.4.1857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 660.483369][T11985] Tainted: [L]=SOFTLOCKUP [ 660.483376][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 660.483387][T11985] Call Trace: [ 660.483395][T11985] [ 660.483401][T11985] dump_stack_lvl+0xe8/0x150 [ 660.483421][T11985] should_fail_ex+0x46b/0x600 [ 660.483436][T11985] should_failslab+0xa8/0x100 [ 660.483454][T11985] __kmalloc_noprof+0xf6/0x790 [ 660.483467][T11985] ? tomoyo_encode+0x2ad/0x570 [ 660.483478][T11985] ? tomoyo_encode+0x2ad/0x570 [ 660.483491][T11985] tomoyo_encode+0x2ad/0x570 [ 660.483505][T11985] tomoyo_realpath_from_path+0x5fa/0x640 [ 660.483521][T11985] ? tomoyo_path_number_perm+0x219/0x5f0 [ 660.483536][T11985] tomoyo_path_number_perm+0x246/0x5f0 [ 660.483551][T11985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 660.483564][T11985] ? __lock_acquire+0x747/0x2de0 [ 660.483602][T11985] ? __fget_files+0x2a/0x420 [ 660.483615][T11985] ? __fget_files+0x2a/0x420 [ 660.483625][T11985] ? __fget_files+0x2a/0x420 [ 660.483638][T11985] security_file_ioctl+0xc3/0x2a0 [ 660.483655][T11985] __se_sys_ioctl+0x47/0x170 [ 660.483670][T11985] do_syscall_64+0x166/0x520 [ 660.483685][T11985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.483696][T11985] ? clear_bhb_loop+0x70/0xc0 [ 660.483708][T11985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.483718][T11985] RIP: 0033:0x7fd21c3df559 [ 660.483728][T11985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.483737][T11985] RSP: 002b:00007fd21a615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.483750][T11985] RAX: ffffffffffffffda RBX: 00007fd21c666090 RCX: 00007fd21c3df559 [ 660.483757][T11985] RDX: 00002000000000c0 RSI: 000000004058534c RDI: 0000000000000004 [ 660.483764][T11985] RBP: 00007fd21a615090 R08: 0000000000000000 R09: 0000000000000000 [ 660.483770][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.483776][T11985] R13: 00007fd21c666128 R14: 00007fd21c666090 R15: 00007fff468445d8 [ 660.483792][T11985] [ 660.483826][T11985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 661.711213][T11995] fuse: Bad value for 'fd' [ 661.714455][T11995] fuse: Bad value for 'fd' [ 661.714760][T11995] fuse: Bad value for 'fd' [ 661.715038][T11995] fuse: Bad value for 'fd' [ 661.715310][T11995] fuse: Bad value for 'fd' [ 661.742004][T11995] fuse: Bad value for 'fd' [ 661.743152][T11995] fuse: Bad value for 'fd' [ 661.743448][T11995] fuse: Bad value for 'fd' [ 661.743736][T11995] fuse: Bad value for 'fd' [ 661.744017][T11995] fuse: Bad value for 'fd' [ 661.744291][T11995] fuse: Bad value for 'fd' [ 661.774900][T11995] fuse: Bad value for 'fd' [ 661.775207][T11995] fuse: Bad value for 'fd' [ 661.775500][T11995] fuse: Bad value for 'fd' [ 661.775767][T11995] fuse: Bad value for 'fd' [ 661.776065][T11995] fuse: Bad value for 'fd' [ 661.803103][T11995] fuse: Bad value for 'fd' [ 661.803402][T11995] fuse: Bad value for 'fd' [ 661.803683][T11995] fuse: Bad value for 'fd' [ 661.803988][T11995] fuse: Bad value for 'fd' [ 661.804326][T11995] fuse: Bad value for 'fd' [ 661.804608][T11995] fuse: Bad value for 'fd' [ 661.804884][T11995] fuse: Bad value for 'fd' [ 661.805159][T11995] fuse: Bad value for 'fd' [ 661.805420][T11995] fuse: Bad value for 'fd' [ 661.805695][T11995] fuse: Bad value for 'fd' [ 661.858477][T11995] fuse: Bad value for 'fd' [ 661.860348][T11995] fuse: Bad value for 'fd' [ 661.860630][T11995] fuse: Bad value for 'fd' [ 661.860846][T11995] fuse: Bad value for 'fd' [ 661.861062][T11995] fuse: Bad value for 'fd' [ 661.861269][T11995] fuse: Bad value for 'fd' [ 661.861471][T11995] fuse: Bad value for 'fd' [ 664.452339][ T35] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 664.616370][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 664.617337][ T35] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 664.618868][ T35] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 664.621960][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.621980][ T35] usb 5-1: Product: syz [ 664.621994][ T35] usb 5-1: Manufacturer: syz [ 664.622008][ T35] usb 5-1: SerialNumber: syz [ 664.627319][ T5642] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 664.680100][ T35] r8152-cfgselector 5-1: Unknown version 0x0000 [ 664.680141][ T35] r8152-cfgselector 5-1: config 0 descriptor?? [ 664.796052][ T5642] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 664.809595][ T5642] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 664.809633][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.809657][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.809678][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 664.809702][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 664.809725][ T5642] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 664.809783][ T5642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.822523][ T5642] usb 1-1: config 0 descriptor?? [ 664.823736][T12019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 664.960183][ T70] net_ratelimit: 73 callbacks suppressed [ 666.059943][T12019] UDC core: g1: couldn't find an available UDC or it's busy [ 666.187113][T12035] FAULT_INJECTION: forcing a failure. [ 666.187113][T12035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.187147][T12035] CPU: 1 UID: 0 PID: 12035 Comm: syz.3.1876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.187172][T12035] Tainted: [L]=SOFTLOCKUP [ 666.187180][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 666.187190][T12035] Call Trace: [ 666.187198][T12035] [ 666.187207][T12035] dump_stack_lvl+0xe8/0x150 [ 666.187242][T12035] should_fail_ex+0x46b/0x600 [ 666.187267][T12035] _copy_to_user+0x31/0xb0 [ 666.187290][T12035] simple_read_from_buffer+0xe1/0x170 [ 666.187317][T12035] proc_fail_nth_read+0x1be/0x230 [ 666.187344][T12035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.187371][T12035] ? rw_verify_area+0x250/0x4d0 [ 666.187395][T12035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.187418][T12035] vfs_read+0x219/0xa90 [ 666.187448][T12035] ? __pfx_vfs_read+0x10/0x10 [ 666.187471][T12035] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 666.187499][T12035] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 666.187525][T12035] ? mutex_lock_nested+0x14d/0x1d0 [ 666.187545][T12035] ? fdget_pos+0x11e/0x160 [ 666.187575][T12035] ksys_read+0x156/0x270 [ 666.187598][T12035] ? __pfx_ksys_read+0x10/0x10 [ 666.187631][T12035] do_syscall_64+0x166/0x520 [ 666.187657][T12035] ? trace_irq_disable+0x3b/0x140 [ 666.187678][T12035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.187697][T12035] ? clear_bhb_loop+0x70/0xc0 [ 666.187720][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.187739][T12035] RIP: 0033:0x7fcab569fd8e [ 666.187757][T12035] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 666.187772][T12035] RSP: 002b:00007fcab390cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.187793][T12035] RAX: ffffffffffffffda RBX: 00007fcab390d6c0 RCX: 00007fcab569fd8e [ 666.187807][T12035] RDX: 000000000000000f RSI: 00007fcab390d0a0 RDI: 0000000000000008 [ 666.187818][T12035] RBP: 00007fcab390d090 R08: 0000000000000000 R09: 0000000000000000 [ 666.187830][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.187842][T12035] R13: 00007fcab5966128 R14: 00007fcab5966090 R15: 00007ffdfeacc438 [ 666.187874][T12035] [ 666.211715][ T5642] usb 1-1: string descriptor 0 read error: -71 [ 666.243391][ T5642] usbhid 1-1:0.0: can't add hid device: -71 [ 666.243540][ T5642] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 666.274238][ T5642] usb 1-1: USB disconnect, device number 95 [ 666.806376][ T5842] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 666.956634][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 666.957805][ T5842] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 666.961085][ T5842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.961107][ T5842] usb 6-1: config 0 has no interface number 0 [ 666.961169][ T5842] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.961194][ T5842] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.961307][ T5842] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.961333][ T5842] usb 6-1: config 0 interface 1 has no altsetting 0 [ 666.961383][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.970166][ T5842] usb 6-1: config 0 descriptor?? [ 666.997966][ T5842] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 667.219002][ T9] r8152-cfgselector 5-1: USB disconnect, device number 86 [ 667.878708][T12055] FAULT_INJECTION: forcing a failure. [ 667.878708][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.878824][T12055] CPU: 0 UID: 0 PID: 12055 Comm: syz.3.1881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 667.878850][T12055] Tainted: [L]=SOFTLOCKUP [ 667.878857][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 667.878868][T12055] Call Trace: [ 667.878876][T12055] [ 667.878886][T12055] dump_stack_lvl+0xe8/0x150 [ 667.878917][T12055] should_fail_ex+0x46b/0x600 [ 667.878944][T12055] _copy_from_user+0x2d/0xb0 [ 667.878965][T12055] memdup_user+0x5e/0xd0 [ 667.878985][T12055] strndup_user+0x68/0xd0 [ 667.879004][T12055] __se_sys_mount+0x9d/0x420 [ 667.879030][T12055] ? __pfx___se_sys_mount+0x10/0x10 [ 667.879056][T12055] ? __x64_sys_mount+0x20/0xc0 [ 667.879078][T12055] do_syscall_64+0x166/0x520 [ 667.879105][T12055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.879124][T12055] ? clear_bhb_loop+0x70/0xc0 [ 667.879146][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.879165][T12055] RIP: 0033:0x7fcab56df559 [ 667.879184][T12055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.879199][T12055] RSP: 002b:00007fcab390d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 667.879219][T12055] RAX: ffffffffffffffda RBX: 00007fcab5966090 RCX: 00007fcab56df559 [ 667.879233][T12055] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 667.879245][T12055] RBP: 00007fcab390d090 R08: 0000200000019280 R09: 0000000000000000 [ 667.879258][T12055] R10: 0000000001810040 R11: 0000000000000246 R12: 0000000000000001 [ 667.879270][T12055] R13: 00007fcab5966128 R14: 00007fcab5966090 R15: 00007ffdfeacc438 [ 667.879300][T12055] [ 668.598722][ T5842] elan 0003:04F3:074D.0026: failed to start in urb: -90 [ 668.944650][T12059] FAULT_INJECTION: forcing a failure. [ 668.944650][T12059] name failslab, interval 1, probability 0, space 0, times 0 [ 668.944689][T12059] CPU: 0 UID: 0 PID: 12059 Comm: syz.0.1880 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 668.944716][T12059] Tainted: [L]=SOFTLOCKUP [ 668.944723][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 668.944736][T12059] Call Trace: [ 668.944744][T12059] [ 668.944753][T12059] dump_stack_lvl+0xe8/0x150 [ 668.944785][T12059] should_fail_ex+0x46b/0x600 [ 668.944812][T12059] should_failslab+0xa8/0x100 [ 668.944841][T12059] kmem_cache_alloc_node_noprof+0xa7/0x660 [ 668.944865][T12059] ? __alloc_skb+0x1db/0x7a0 [ 668.944888][T12059] ? __alloc_skb+0x1db/0x7a0 [ 668.944918][T12059] __alloc_skb+0x1db/0x7a0 [ 668.944945][T12059] alloc_skb_with_frags+0xc6/0x760 [ 668.944975][T12059] ? hrtimer_start_range_ns_common+0x7d3/0xb70 [ 668.945008][T12059] virtio_transport_alloc_skb+0xf6/0x13e0 [ 668.945050][T12059] ? lock_acquire+0x115/0x350 [ 668.945072][T12059] ? virtio_transport_get_local_cid+0x19/0x250 [ 668.945093][T12059] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 668.945121][T12059] ? virtio_transport_get_local_cid+0x19/0x250 [ 668.945141][T12059] ? virtio_transport_get_local_cid+0x19/0x250 [ 668.945160][T12059] ? virtio_transport_get_local_cid+0x19/0x250 [ 668.945182][T12059] virtio_transport_send_pkt_info+0x868/0x1170 [ 668.945227][T12059] ? __pfx_virtio_transport_send_pkt_info+0x10/0x10 [ 668.945252][T12059] ? __lock_acquire+0x1511/0x2de0 [ 668.945289][T12059] virtio_transport_notify_buffer_size+0x1cd/0x250 [ 668.945312][T12059] ? lockdep_hardirqs_on+0x7b/0x110 [ 668.945340][T12059] ? __pfx_virtio_transport_notify_buffer_size+0x10/0x10 [ 668.945378][T12059] ? __pfx_virtio_transport_notify_buffer_size+0x10/0x10 [ 668.945402][T12059] vsock_update_buffer_size+0x153/0x1c0 [ 668.945433][T12059] ? __pfx_vsock_update_buffer_size+0x10/0x10 [ 668.945469][T12059] vsock_connectible_setsockopt+0x77d/0x7e0 [ 668.945496][T12059] ? lock_acquire+0x115/0x350 [ 668.945520][T12059] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 668.945549][T12059] ? __fget_files+0x2a/0x420 [ 668.945574][T12059] ? __fget_files+0x3a8/0x420 [ 668.945592][T12059] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 668.945610][T12059] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 668.945639][T12059] do_sock_setsockopt+0x17c/0x1b0 [ 668.945669][T12059] __x64_sys_setsockopt+0x143/0x1b0 [ 668.945699][T12059] do_syscall_64+0x166/0x520 [ 668.945726][T12059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.945745][T12059] ? clear_bhb_loop+0x70/0xc0 [ 668.945767][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.945785][T12059] RIP: 0033:0x7fb4769df559 [ 668.945803][T12059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.945819][T12059] RSP: 002b:00007fb474bec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 668.945840][T12059] RAX: ffffffffffffffda RBX: 00007fb476c66180 RCX: 00007fb4769df559 [ 668.945853][T12059] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000004 [ 668.945865][T12059] RBP: 00007fb474bec090 R08: 0000000000000008 R09: 0000000000000000 [ 668.945878][T12059] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 668.945890][T12059] R13: 00007fb476c66218 R14: 00007fb476c66180 R15: 00007fffa4e9ae28 [ 668.945919][T12059] [ 669.037544][ T5842] elan 0003:04F3:074D.0026: Get report error for parm 6: 0 [ 669.197217][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1882'. [ 670.636391][ C1] net_ratelimit: 68 callbacks suppressed [ 670.688917][ T5842] elan 0003:04F3:074D.0026: Set report error for parm 8: -71 [ 670.700619][ T5842] elan 0003:04F3:074D.0026: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.5-1/input1 [ 670.700646][ T5842] elan 0003:04F3:074D.0026: Input device is not registered [ 671.706833][ T5842] elan 0003:04F3:074D.0026: probe with driver elan failed with error -119 [ 671.778662][ T5842] usb 6-1: USB disconnect, device number 13 [ 671.999854][T12075] fido_id[12075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 673.035381][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 673.035517][ T36] audit: type=1326 audit(1792689438.858:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.2.1887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9e3af559 code=0x7fc00000 [ 673.304679][ T5842] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 673.456404][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 673.463703][ T5842] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 673.465514][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 673.465541][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 673.465565][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 673.465588][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 673.465612][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 673.539792][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.539810][ T5842] usb 6-1: Product: syz [ 673.539823][ T5842] usb 6-1: Manufacturer: syz [ 673.539836][ T5842] usb 6-1: SerialNumber: syz [ 673.544171][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 673.582030][ T5842] usb 6-1: config 0 descriptor?? [ 673.606557][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 673.787473][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 673.789781][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 673.789880][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.789905][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.789928][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 673.789952][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 673.790032][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 673.790088][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.907211][ T9] usb 1-1: config 0 descriptor?? [ 673.913773][T12092] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 674.805069][T12092] UDC core: g1: couldn't find an available UDC or it's busy [ 674.814631][ T9] usb 1-1: string descriptor 0 read error: -71 [ 674.909702][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.910275][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.910820][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.912217][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.913639][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.914202][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.914760][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.960707][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.961564][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.962036][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.967860][T12096] ceph: No mds server is up or the cluster is laggy [ 674.992988][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.993514][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 674.995237][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.014832][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.015233][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.015584][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.015971][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.018044][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.026350][ T5842] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 675.026378][ T5842] input input44: Timeout waiting for response from device. [ 675.064378][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 675.064464][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 675.090076][ T5842] usb 6-1: USB disconnect, device number 14 [ 675.103292][ T9] usb 1-1: USB disconnect, device number 96 [ 675.764350][ C1] net_ratelimit: 40 callbacks suppressed [ 675.878915][T12126] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1900'. [ 676.909428][T12119] workqueue: Failed to create a rescuer kthread for wq "kcryptd-248:1-1": -EINTR [ 677.110639][T12119] device-mapper: table: 248:1: crypt: Couldn't create kcryptd queue (-ENOMEM) [ 677.110659][T12119] device-mapper: ioctl: error adding target to table [ 677.127727][T12148] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1900'. [ 677.251896][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1901'. [ 677.252281][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1901'. [ 677.333141][T12155] FAULT_INJECTION: forcing a failure. [ 677.333141][T12155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.333174][T12155] CPU: 1 UID: 0 PID: 12155 Comm: syz.4.1904 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 677.333199][T12155] Tainted: [L]=SOFTLOCKUP [ 677.333206][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 677.333218][T12155] Call Trace: [ 677.333226][T12155] [ 677.333234][T12155] dump_stack_lvl+0xe8/0x150 [ 677.333266][T12155] should_fail_ex+0x46b/0x600 [ 677.333293][T12155] _copy_to_user+0x31/0xb0 [ 677.333317][T12155] __se_sys_sysfs+0x3e1/0x700 [ 677.333344][T12155] do_syscall_64+0x166/0x520 [ 677.333370][T12155] ? trace_irq_disable+0x3b/0x140 [ 677.333391][T12155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.333410][T12155] ? clear_bhb_loop+0x70/0xc0 [ 677.333442][T12155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.333461][T12155] RIP: 0033:0x7fd21c3df559 [ 677.333479][T12155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.333495][T12155] RSP: 002b:00007fd21a636028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 677.333515][T12155] RAX: ffffffffffffffda RBX: 00007fd21c665fa0 RCX: 00007fd21c3df559 [ 677.333529][T12155] RDX: 0000200000001100 RSI: 0000000100000000 RDI: 0000000000000002 [ 677.333541][T12155] RBP: 00007fd21a636090 R08: 0000000000000000 R09: 0000000000000000 [ 677.333553][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.333563][T12155] R13: 00007fd21c666038 R14: 00007fd21c665fa0 R15: 00007fff468445d8 [ 677.333594][T12155] [ 679.084674][ T36] audit: type=1326 audit(1792689444.918:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12158 comm="syz.0.1905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4769df559 code=0x7fc00000 [ 679.591609][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'. [ 679.591938][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'. [ 679.887345][ T5690] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 680.659630][ T5690] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 680.662385][ T5690] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 680.662421][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.662445][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.662466][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 680.662488][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 680.662510][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 680.662565][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.914220][ T5690] usb 4-1: config 0 descriptor?? [ 680.917779][T12171] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.650088][T12171] Config c/1 of g1 needs at least one function. [ 681.650298][T12171] udc dummy_udc.0: failed to start g1: -22 [ 681.650373][T12171] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 681.653409][T12171] UDC core: g1: couldn't find an available UDC or it's busy [ 681.676724][ C1] net_ratelimit: 33 callbacks suppressed [ 681.881604][ T5690] usb 4-1: string descriptor 0 read error: -71 [ 681.908950][ T5690] usbhid 4-1:0.0: can't add hid device: -71 [ 681.909103][ T5690] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 681.968827][ T5690] usb 4-1: USB disconnect, device number 75 [ 685.759001][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.759057][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.876457][ C1] net_ratelimit: 52 callbacks suppressed [ 691.996483][ C0] net_ratelimit: 45 callbacks suppressed [ 697.046387][ C0] net_ratelimit: 32 callbacks suppressed [ 702.476545][ C1] net_ratelimit: 40 callbacks suppressed [ 707.676479][ C1] net_ratelimit: 43 callbacks suppressed [ 712.876389][ C1] net_ratelimit: 34 callbacks suppressed [ 718.076543][ C1] net_ratelimit: 33 callbacks suppressed [ 723.276378][ C1] net_ratelimit: 39 callbacks suppressed [ 728.476436][ C1] net_ratelimit: 54 callbacks suppressed [ 733.516349][ C0] net_ratelimit: 35 callbacks suppressed [ 738.876398][ C0] net_ratelimit: 37 callbacks suppressed [ 744.076462][ C1] net_ratelimit: 42 callbacks suppressed [ 747.204707][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.204770][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.116646][ T89] net_ratelimit: 37 callbacks suppressed [ 754.156508][ T2974] net_ratelimit: 34 callbacks suppressed [ 759.196397][ C1] net_ratelimit: 36 callbacks suppressed [ 764.316398][ C1] net_ratelimit: 37 callbacks suppressed [ 769.596435][ T1425] net_ratelimit: 40 callbacks suppressed [ 774.716526][ T89] net_ratelimit: 43 callbacks suppressed [ 779.756435][ T2974] net_ratelimit: 48 callbacks suppressed [ 785.196390][ C0] net_ratelimit: 46 callbacks suppressed [ 790.716342][ C0] net_ratelimit: 39 callbacks suppressed [ 795.836644][ T2974] net_ratelimit: 50 callbacks suppressed [ 801.276506][ C1] net_ratelimit: 64 callbacks suppressed [ 805.597845][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 806.476369][ C1] net_ratelimit: 36 callbacks suppressed [ 808.639967][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.640032][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.676382][ C1] net_ratelimit: 36 callbacks suppressed [ 816.796400][ C0] net_ratelimit: 49 callbacks suppressed [ 822.076458][ C0] net_ratelimit: 35 callbacks suppressed [ 827.116351][ C1] net_ratelimit: 47 callbacks suppressed [ 831.036316][ C1] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 20) [ 831.036419][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 20) [ 831.036466][ C1] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 831.036508][ T38] INFO: task syz-executor:5574 blocked in I/O wait for more than 143 seconds. [ 831.036531][ T38] Tainted: G L syzkaller #0 [ 831.036542][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.036551][ T38] task:syz-executor state:D stack:21288 pid:5574 tgid:5574 ppid:5572 task_flags:0x440100 flags:0x00080000 [ 831.036598][ T38] Call Trace: [ 831.036605][ T38] [ 831.036619][ T38] __schedule+0x171d/0x56e0 [ 831.036658][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.036695][ T38] ? __pfx___schedule+0x10/0x10 [ 831.036724][ T38] ? schedule+0x90/0x2b0 [ 831.036749][ T38] schedule+0x164/0x2b0 [ 831.036776][ T38] io_schedule+0x80/0xe0 [ 831.036802][ T38] bit_wait_io+0x13/0x110 [ 831.036830][ T38] __wait_on_bit+0xac/0x2f0 [ 831.036855][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.036881][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 831.036906][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.036928][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 831.036956][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 831.036989][ T38] do_get_write_access+0x667/0x10d0 [ 831.037026][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 831.037051][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 831.037079][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 831.037103][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 831.037145][ T38] ext4_reserve_inode_write+0x294/0x360 [ 831.037178][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 831.037210][ T38] ext4_dirty_inode+0xd0/0x110 [ 831.037234][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 831.037277][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 831.037309][ T38] file_update_time_flags+0x39f/0x450 [ 831.037337][ T38] ext4_page_mkwrite+0x220/0x12c0 [ 831.037371][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 831.037396][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 831.037429][ T38] do_page_mkwrite+0x14a/0x310 [ 831.037458][ T38] do_wp_page+0x209d/0x3d10 [ 831.037505][ T38] ? preempt_count_add+0x6a/0x140 [ 831.037527][ T38] ? __pfx_do_wp_page+0x10/0x10 [ 831.037545][ T38] ? rt_spin_lock+0x2d0/0x400 [ 831.037571][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 831.037598][ T38] ? pte_offset_map_rw_nolock+0xea/0x160 [ 831.037623][ T38] handle_mm_fault+0xd69/0x28c0 [ 831.037652][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 831.037684][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 831.037705][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 831.037729][ T38] ? __pfx_set_user_sigmask+0x10/0x10 [ 831.037772][ T38] do_user_addr_fault+0xb35/0x1480 [ 831.037972][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 831.038004][ T38] exc_page_fault+0x6a/0xc0 [ 831.038029][ T38] asm_exc_page_fault+0x26/0x30 [ 831.038048][ T38] RIP: 0033:0x7f1a31cadad6 [ 831.038066][ T38] RSP: 002b:00007ffd245dbfd0 EFLAGS: 00010202 [ 831.038082][ T38] RAX: 00007f1a2fe38000 RBX: 000055557d8e6660 RCX: 0000000000000004 [ 831.038095][ T38] RDX: 000000000000301e RSI: 000055557d8ef068 RDI: 0000000000000010 [ 831.038108][ T38] RBP: 00007ffd245dc4d0 R08: 000055557d8ef0d8 R09: 00000000000000a1 [ 831.038121][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd245dc310 [ 831.038133][ T38] R13: 00007ffd245dc100 R14: 585858582e7a7973 R15: 00007ffd245dc050 [ 831.038165][ T38] [ 831.038219][ T38] INFO: task syz.2.1919:12199 blocked in I/O wait for more than 143 seconds. [ 831.038244][ T38] Tainted: G L syzkaller #0 [ 831.038255][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.038264][ T38] task:syz.2.1919 state:D stack:27160 pid:12199 tgid:12199 ppid:5594 task_flags:0x440040 flags:0x00080002 [ 831.038316][ T38] Call Trace: [ 831.038323][ T38] [ 831.038335][ T38] __schedule+0x171d/0x56e0 [ 831.038371][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.038406][ T38] ? __pfx___schedule+0x10/0x10 [ 831.038439][ T38] ? schedule+0x90/0x2b0 [ 831.038467][ T38] schedule+0x164/0x2b0 [ 831.038494][ T38] io_schedule+0x80/0xe0 [ 831.038528][ T38] bit_wait_io+0x13/0x110 [ 831.038556][ T38] __wait_on_bit+0xac/0x2f0 [ 831.038582][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.038611][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 831.038649][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.038675][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 831.038704][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 831.038741][ T38] do_get_write_access+0x667/0x10d0 [ 831.038784][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 831.038812][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 831.038844][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 831.038868][ T38] ? jbd2__journal_start+0x145/0x5d0 [ 831.038899][ T38] ext4_reserve_inode_write+0x294/0x360 [ 831.038929][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 831.038961][ T38] ext4_dirty_inode+0xd0/0x110 [ 831.038984][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 831.039007][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 831.039032][ T38] ? mnt_get_write_access+0x26a/0x2d0 [ 831.039057][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 831.039080][ T38] touch_atime+0x568/0x670 [ 831.039102][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 831.039130][ T38] ext4_file_mmap_prepare+0x286/0x460 [ 831.039158][ T38] mmap_region+0xebb/0x25c0 [ 831.039195][ T38] ? __pfx_mmap_region+0x10/0x10 [ 831.039219][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 831.039250][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.039290][ T38] ? __lock_acquire+0x747/0x2de0 [ 831.039364][ T38] ? mt_find+0x186/0x630 [ 831.039379][ T38] ? mt_find+0x5ff/0x630 [ 831.039408][ T38] ? mt_find+0x186/0x630 [ 831.039419][ T38] ? __pfx_mt_find+0x10/0x10 [ 831.039434][ T38] ? bpf_lsm_mmap_addr+0x9/0x50 [ 831.039445][ T38] ? security_mmap_addr+0x71/0x240 [ 831.039462][ T38] ? shmem_mapping+0xd/0x50 [ 831.039472][ T38] ? memfd_check_seals_mmap+0xcb/0x230 [ 831.039484][ T38] do_mmap+0xe0e/0x1310 [ 831.039502][ T38] ? __pfx_do_mmap+0x10/0x10 [ 831.039517][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.039536][ T38] ? rwbase_write_lock+0x5ad/0x780 [ 831.039564][ T38] vm_mmap_pgoff+0x275/0x4e0 [ 831.039586][ T38] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 831.039601][ T38] ? __fget_files+0x2a/0x420 [ 831.039611][ T38] ? __fget_files+0x3a8/0x420 [ 831.039621][ T38] ? __fget_files+0x2a/0x420 [ 831.039634][ T38] ksys_mmap_pgoff+0x4a6/0x720 [ 831.039647][ T38] ? __x64_sys_mmap+0x7f/0x140 [ 831.039661][ T38] do_syscall_64+0x166/0x520 [ 831.039676][ T38] ? trace_irq_disable+0x3b/0x140 [ 831.039689][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.039699][ T38] ? clear_bhb_loop+0x70/0xc0 [ 831.039712][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.039722][ T38] RIP: 0033:0x7f7a9e3af2c2 [ 831.039732][ T38] RSP: 002b:00007fff5ace5a38 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 831.039746][ T38] RAX: ffffffffffffffda RBX: 0000001b31a64000 RCX: 00007f7a9e3af2c2 [ 831.039753][ T38] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b31a64000 [ 831.039760][ T38] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 831.039767][ T38] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000020f [ 831.039773][ T38] R13: 00000000000927c0 R14: 00000000000a664b R15: 00007fff5ace5d10 [ 831.039790][ T38] [ 831.039795][ T38] INFO: task syz.5.1920:12200 blocked in I/O wait for more than 143 seconds. [ 831.039805][ T38] Tainted: G L syzkaller #0 [ 831.039811][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.039816][ T38] task:syz.5.1920 state:D stack:25464 pid:12200 tgid:12200 ppid:10310 task_flags:0x440040 flags:0x00080002 [ 831.039842][ T38] Call Trace: [ 831.039846][ T38] [ 831.039853][ T38] __schedule+0x171d/0x56e0 [ 831.039872][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.039890][ T38] ? __pfx___schedule+0x10/0x10 [ 831.039908][ T38] ? schedule+0x90/0x2b0 [ 831.039923][ T38] schedule+0x164/0x2b0 [ 831.039937][ T38] io_schedule+0x80/0xe0 [ 831.039951][ T38] bit_wait_io+0x13/0x110 [ 831.039966][ T38] __wait_on_bit+0xac/0x2f0 [ 831.039980][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.039996][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 831.040011][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.040024][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 831.040040][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 831.040060][ T38] do_get_write_access+0x667/0x10d0 [ 831.040082][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 831.040097][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 831.040114][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 831.040127][ T38] ? jbd2__journal_start+0x145/0x5d0 [ 831.040143][ T38] ext4_reserve_inode_write+0x294/0x360 [ 831.040160][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 831.040183][ T38] ext4_dirty_inode+0xd0/0x110 [ 831.040196][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 831.040208][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 831.040221][ T38] ? mnt_get_write_access+0x26a/0x2d0 [ 831.040234][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 831.040252][ T38] touch_atime+0x568/0x670 [ 831.040264][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 831.040278][ T38] ext4_file_mmap_prepare+0x286/0x460 [ 831.040297][ T38] mmap_region+0xebb/0x25c0 [ 831.040316][ T38] ? __pfx_mmap_region+0x10/0x10 [ 831.040328][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 831.040341][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.040355][ T38] ? __lock_acquire+0x747/0x2de0 [ 831.040409][ T38] ? mt_find+0x186/0x630 [ 831.040422][ T38] ? mt_find+0x5ff/0x630 [ 831.040433][ T38] ? mt_find+0x186/0x630 [ 831.040444][ T38] ? __pfx_mt_find+0x10/0x10 [ 831.040459][ T38] ? bpf_lsm_mmap_addr+0x9/0x50 [ 831.040469][ T38] ? security_mmap_addr+0x71/0x240 [ 831.040484][ T38] ? shmem_mapping+0xd/0x50 [ 831.040494][ T38] ? memfd_check_seals_mmap+0xcb/0x230 [ 831.040505][ T38] do_mmap+0xe0e/0x1310 [ 831.040526][ T38] ? __pfx_do_mmap+0x10/0x10 [ 831.040541][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.040558][ T38] ? rwbase_write_lock+0x5ad/0x780 [ 831.040575][ T38] vm_mmap_pgoff+0x275/0x4e0 [ 831.040590][ T38] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 831.040604][ T38] ? __fget_files+0x2a/0x420 [ 831.040615][ T38] ? __fget_files+0x3a8/0x420 [ 831.040625][ T38] ? __fget_files+0x2a/0x420 [ 831.040638][ T38] ksys_mmap_pgoff+0x4a6/0x720 [ 831.040650][ T38] ? __x64_sys_mmap+0x7f/0x140 [ 831.040663][ T38] do_syscall_64+0x166/0x520 [ 831.040676][ T38] ? trace_irq_disable+0x3b/0x140 [ 831.040688][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.040698][ T38] ? clear_bhb_loop+0x70/0xc0 [ 831.040710][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.040720][ T38] RIP: 0033:0x7fbe85a5f2c2 [ 831.040729][ T38] RSP: 002b:00007ffc3aebe8e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 831.040741][ T38] RAX: ffffffffffffffda RBX: 0000001b30864000 RCX: 00007fbe85a5f2c2 [ 831.040749][ T38] RDX: 0000000000000003 RSI: 0000000000dc0000 RDI: 0000001b30864000 [ 831.040755][ T38] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 831.040762][ T38] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000046 [ 831.040769][ T38] R13: 00000000000927c0 R14: 00000000000a6686 R15: 00007ffc3aebebc0 [ 831.040785][ T38] [ 831.040789][ T38] INFO: task syz.0.1921:12201 blocked in I/O wait for more than 143 seconds. [ 831.040798][ T38] Tainted: G L syzkaller #0 [ 831.040804][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.040809][ T38] task:syz.0.1921 state:D stack:26632 pid:12201 tgid:12201 ppid:5593 task_flags:0x440040 flags:0x00080002 [ 831.040835][ T38] Call Trace: [ 831.040839][ T38] [ 831.040845][ T38] __schedule+0x171d/0x56e0 [ 831.040864][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.040882][ T38] ? __pfx___schedule+0x10/0x10 [ 831.040900][ T38] ? schedule+0x90/0x2b0 [ 831.040915][ T38] schedule+0x164/0x2b0 [ 831.040934][ T38] io_schedule+0x80/0xe0 [ 831.040948][ T38] bit_wait_io+0x13/0x110 [ 831.040964][ T38] __wait_on_bit+0xac/0x2f0 [ 831.040978][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.040993][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 831.041008][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 831.041022][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 831.041038][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 831.041058][ T38] do_get_write_access+0x667/0x10d0 [ 831.041080][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 831.041095][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 831.041111][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 831.041124][ T38] ? jbd2__journal_start+0x145/0x5d0 [ 831.041140][ T38] ext4_reserve_inode_write+0x294/0x360 [ 831.041157][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 831.041173][ T38] ext4_dirty_inode+0xd0/0x110 [ 831.041186][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 831.041198][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 831.041211][ T38] ? mnt_get_write_access+0x26a/0x2d0 [ 831.041224][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 831.041245][ T38] touch_atime+0x568/0x670 [ 831.041256][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 831.041271][ T38] ext4_file_mmap_prepare+0x286/0x460 [ 831.041285][ T38] mmap_region+0xebb/0x25c0 [ 831.041303][ T38] ? __pfx_mmap_region+0x10/0x10 [ 831.041316][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 831.041329][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.041343][ T38] ? __lock_acquire+0x747/0x2de0 [ 831.041396][ T38] ? mt_find+0x186/0x630 [ 831.041409][ T38] ? mt_find+0x5ff/0x630 [ 831.041420][ T38] ? mt_find+0x186/0x630 [ 831.041431][ T38] ? __pfx_mt_find+0x10/0x10 [ 831.041445][ T38] ? bpf_lsm_mmap_addr+0x9/0x50 [ 831.041455][ T38] ? security_mmap_addr+0x71/0x240 [ 831.041470][ T38] ? shmem_mapping+0xd/0x50 [ 831.041480][ T38] ? memfd_check_seals_mmap+0xcb/0x230 [ 831.041492][ T38] do_mmap+0xe0e/0x1310 [ 831.041508][ T38] ? __pfx_do_mmap+0x10/0x10 [ 831.041523][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.041539][ T38] ? rwbase_write_lock+0x5ad/0x780 [ 831.041556][ T38] vm_mmap_pgoff+0x275/0x4e0 [ 831.041571][ T38] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 831.041585][ T38] ? __fget_files+0x2a/0x420 [ 831.041595][ T38] ? __fget_files+0x3a8/0x420 [ 831.041605][ T38] ? __fget_files+0x2a/0x420 [ 831.041618][ T38] ksys_mmap_pgoff+0x4a6/0x720 [ 831.041630][ T38] ? __x64_sys_mmap+0x7f/0x140 [ 831.041643][ T38] do_syscall_64+0x166/0x520 [ 831.041657][ T38] ? trace_irq_disable+0x3b/0x140 [ 831.041668][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.041678][ T38] ? clear_bhb_loop+0x70/0xc0 [ 831.041690][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.041700][ T38] RIP: 0033:0x7fb4769df2c2 [ 831.041709][ T38] RSP: 002b:00007fffa4e9af48 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 831.041719][ T38] RAX: ffffffffffffffda RBX: 0000001b31864000 RCX: 00007fb4769df2c2 [ 831.041726][ T38] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b31864000 [ 831.041732][ T38] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 831.041741][ T38] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000184 [ 831.041748][ T38] R13: 00000000000927c0 R14: 00000000000a5da8 R15: 00007fffa4e9b220 [ 831.041764][ T38] [ 831.041781][ T38] [ 831.041781][ T38] Showing all locks held in the system: [ 831.041790][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 831.041798][ T38] #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 831.041849][ T38] locks held by getty/5345: 2, on CPU#0: [ 831.041857][ T38] #0: ffff88803799a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 831.041886][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 831.041919][ T38] locks held by syz-executor/5574: 3, on CPU#0: [ 831.041926][ T38] #0: ffff888035fbb308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 831.041968][ T38] #1: ffff888036e2c688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 831.041994][ T38] #2: ffff888036e28bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 831.042029][ T38] locks held by syz.2.1919/12199: 3, on CPU#0: [ 831.042036][ T38] #0: ffff8880407290b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 831.042060][ T38] #1: ffff888036e2c510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 831.042087][ T38] #2: ffff888036e28bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 831.042112][ T38] locks held by syz.5.1920/12200: 3, on CPU#1: [ 831.042119][ T38] #0: ffff88804072d1b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 831.042142][ T38] #1: ffff888036e2c510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 831.042169][ T38] #2: ffff888036e28bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 831.042194][ T38] locks held by syz.0.1921/12201: 3, on CPU#0: [ 831.042201][ T38] #0: ffff888033a4c4b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 831.042224][ T38] #1: ffff888036e2c510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 831.042256][ T38] #2: ffff888036e28bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 831.042281][ T38] [ 831.042284][ T38] ============================================= [ 831.042284][ T38] [ 831.042294][ T38] NMI backtrace for cpu 0 [ 831.042305][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.042318][ T38] Tainted: [L]=SOFTLOCKUP [ 831.042322][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 831.042328][ T38] Call Trace: [ 831.042332][ T38] [ 831.042337][ T38] dump_stack_lvl+0xe8/0x150 [ 831.042352][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 831.042365][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 831.042377][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 831.042391][ T38] sys_info+0x135/0x170 [ 831.042402][ T38] watchdog+0xfd2/0x1030 [ 831.042418][ T38] ? watchdog+0x1c7/0x1030 [ 831.042433][ T38] kthread+0x38b/0x470 [ 831.042448][ T38] ? __pfx_watchdog+0x10/0x10 [ 831.042458][ T38] ? __pfx_kthread+0x10/0x10 [ 831.042472][ T38] ret_from_fork+0x514/0xb70 [ 831.042484][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 831.042494][ T38] ? __switch_to+0xc78/0x1410 [ 831.042509][ T38] ? __pfx_kthread+0x10/0x10 [ 831.042523][ T38] ret_from_fork_asm+0x1a/0x30 [ 831.042540][ T38] [ 831.042544][ T38] Sending NMI from CPU 0 to CPUs 1: [ 831.042585][ C1] NMI backtrace for cpu 1 [ 831.042600][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.042623][ C1] Tainted: [L]=SOFTLOCKUP [ 831.042629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 831.042638][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 831.042664][ C1] Code: 7b 7b 02 e9 83 db 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 24 2d 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 831.042679][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000242 [ 831.042694][ C1] RAX: 00000000004f8c6b RBX: ffffffff819a8e40 RCX: 8000000000000001 [ 831.042707][ C1] RDX: 0000000000000001 RSI: ffffffff8dac3a29 RDI: ffffffff8bec8180 [ 831.042719][ C1] RBP: ffffc900001c7f10 R08: ffff8880b853415b R09: 1ffff110170a682b [ 831.042732][ C1] R10: dffffc0000000000 R11: ffffed10170a682c R12: 0000000000000000 [ 831.042750][ C1] R13: 1ffff11003bdc3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 831.042763][ C1] FS: 0000000000000000(0000) GS:ffff8881248ad000(0000) knlGS:0000000000000000 [ 831.042777][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.042789][ C1] CR2: 000055c717090660 CR3: 000000000f1b0000 CR4: 00000000003526f0 [ 831.042804][ C1] Call Trace: [ 831.042811][ C1] [ 831.042817][ C1] default_idle+0x9/0x20 [ 831.042834][ C1] default_idle_call+0x72/0xb0 [ 831.042851][ C1] do_idle+0x2e0/0x540 [ 831.042872][ C1] ? __pfx_do_idle+0x10/0x10 [ 831.042895][ C1] cpu_startup_entry+0x43/0x60 [ 831.042913][ C1] start_secondary+0x101/0x110 [ 831.042929][ C1] common_startup_64+0x13e/0x157 [ 831.042958][ C1] [ 831.043570][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 833.021266][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 833.032455][ T38] Tainted: [L]=SOFTLOCKUP [ 833.036770][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 833.046816][ T38] Call Trace: [ 833.050101][ T38] [ 833.053035][ T38] vpanic+0x56d/0xa60 [ 833.057017][ T38] ? __pfx_vpanic+0x10/0x10 [ 833.061515][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 833.067072][ T38] panic+0xc5/0xd0 [ 833.070795][ T38] ? __pfx_panic+0x10/0x10 [ 833.075204][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 833.080223][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 833.086372][ T38] watchdog+0x102b/0x1030 [ 833.090698][ T38] ? watchdog+0x1c7/0x1030 [ 833.095106][ T38] kthread+0x38b/0x470 [ 833.099166][ T38] ? __pfx_watchdog+0x10/0x10 [ 833.103829][ T38] ? __pfx_kthread+0x10/0x10 [ 833.108413][ T38] ret_from_fork+0x514/0xb70 [ 833.112997][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 833.118096][ T38] ? __switch_to+0xc78/0x1410 [ 833.122763][ T38] ? __pfx_kthread+0x10/0x10 [ 833.127349][ T38] ret_from_fork_asm+0x1a/0x30 [ 833.132124][ T38] [ 833.135414][ T38] Kernel Offset: disabled [ 833.139739][ T38] Rebooting in 86400 seconds..