last executing test programs: 16.587425471s ago: executing program 2 (id=921): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x1c, &(0x7f0000019f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000cc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019d00)=0xf) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 14.927765881s ago: executing program 2 (id=925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000500)) close_range(r0, 0xffffffffffffffff, 0x0) 12.471076332s ago: executing program 4 (id=932): openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x1a1) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="28213d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0x10}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x7, 0xa, 0x4000000, 0x70000004}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4000080) landlock_create_ruleset(&(0x7f0000000780)={0x0, 0x3}, 0x10, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000007c0)={0x10000000}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000021180)={0x1, &(0x7f00000211c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_generic(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) close_range(r9, 0xffffffffffffffff, 0x0) 12.38410688s ago: executing program 3 (id=933): gettid() timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 10.636685494s ago: executing program 0 (id=937): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.29433744s ago: executing program 0 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.934937152s ago: executing program 4 (id=939): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x41, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x1, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x3f, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x6, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000003, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000002900000036000000330000800000000014"], 0x30}}], 0x1, 0x4001c00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x2007fffffffffffe, 0x7, 0x5, 0xb, 0x6, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0xb04}) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.830035136s ago: executing program 2 (id=940): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.477000381s ago: executing program 2 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x14, r5, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) 9.449372572s ago: executing program 3 (id=943): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.023518809s ago: executing program 2 (id=944): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4004014) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x20004080) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x200080c4) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400d4}, 0x80) 8.006171882s ago: executing program 3 (id=945): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffff600000) 7.784185653s ago: executing program 3 (id=946): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000cc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019d00)=0xf) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 7.694342029s ago: executing program 1 (id=948): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x10000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = memfd_create(0x0, 0x3) close(r1) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, 0xfffffffffffffffe) 7.645283838s ago: executing program 0 (id=949): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syz_tun\x00', 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='8\n', 0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000800)={0xb6, 0x0, 0x100}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000500), 0x12) listen(r3, 0x5) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000008050010010b"], 0xa) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000805001001"], 0xa) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) 6.15161925s ago: executing program 3 (id=950): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000500)) close_range(r0, 0xffffffffffffffff, 0x0) 6.04171249s ago: executing program 4 (id=951): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.033365526s ago: executing program 1 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/nullb0/queue/scheduler\x00', 0x8082, 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f00000002c0)="308201d430", 0x5, 0xfffffffffffffffe) write(r0, &(0x7f00000001c0)='ky', 0x2) 5.492321427s ago: executing program 1 (id=953): syz_emit_ethernet(0x4d0, &(0x7f0000000f00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x4c2, 0x3, 0x0, 0x0, 0x84, 0x0, @private=0xa010100, @broadcast}, "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"}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d40)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000d80)=[0x0, 0xee00]) read$msr(r0, 0x0, 0x0) 5.232255499s ago: executing program 0 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x38, r5, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x2, 0x34005}, 0x0) 5.152234597s ago: executing program 1 (id=955): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, 0x0, 0x0, 0x0) 3.64786119s ago: executing program 0 (id=956): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000800)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 3.413567769s ago: executing program 1 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r3], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/47, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0xffff, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x4, 0x8004, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r3}, 0xc) setsockopt$inet6_int(r8, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r8, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0}, 0x2d8}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r6, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0xff47, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) 3.14132969s ago: executing program 2 (id=958): syz_open_dev$vim2m(0x0, 0x5, 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c001300"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2.305389578s ago: executing program 4 (id=959): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.084766457s ago: executing program 1 (id=960): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) pread64(r1, &(0x7f0000000d00)=""/4096, 0x1000, 0xfffffff7) 1.892728261s ago: executing program 4 (id=961): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000cc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019d00)=0xf) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 275.393602ms ago: executing program 4 (id=962): r0 = socket$key(0xf, 0x3, 0x2) shmat(0x0, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(0xffffffffffffffff, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000193c0)=0x410000002) sendmsg$key(r0, &(0x7f00000002c0)={0xa, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 100.290618ms ago: executing program 0 (id=963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 3 (id=964): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9000e000a000500"], 0x13) kernel console output (not intermixed with test programs): 13][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.350830][ T6907] RSP: 002b:00007f50768f5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 272.350853][ T6907] RAX: ffffffffffffffda RBX: 0000200000001040 RCX: 00007f507869e559 [ 272.350869][ T6907] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 272.350881][ T6907] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000008 [ 272.350894][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000dc0 [ 272.350908][ T6907] R13: 0000200000000dc8 R14: 0000000000000e26 R15: 0000000000000000 [ 272.350941][ T6907] [ 272.964204][ T5743] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 273.147160][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.150948][ T5743] usb 3-1: not running at top speed; connect to a high speed hub [ 273.150988][ T5743] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 273.154241][ T5743] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 273.154267][ T5743] usb 3-1: config 0 has no interface number 0 [ 273.154299][ T5743] usb 3-1: config 0 interface 15 has no altsetting 0 [ 273.246686][ T5743] usb 3-1: string descriptor 0 read error: -22 [ 273.246826][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.382988][ T5743] usb 3-1: config 0 descriptor?? [ 275.064124][ T5727] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 275.194125][ T5727] usb 4-1: device descriptor read/64, error -71 [ 275.436441][ T5727] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 276.174103][ T5727] usb 4-1: device descriptor read/64, error -71 [ 276.218567][ T6012] usb 3-1: USB disconnect, device number 4 [ 276.288512][ T5727] usb usb4-port1: attempt power cycle [ 277.554273][ T5743] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 277.728855][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.733069][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 277.733112][ T5743] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 277.759245][ T5743] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 277.759272][ T5743] usb 5-1: config 0 has no interface number 0 [ 277.759455][ T5743] usb 5-1: config 0 interface 15 has no altsetting 0 [ 278.001974][ T5743] usb 5-1: string descriptor 0 read error: -22 [ 278.002113][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.892587][ T5743] usb 5-1: config 0 descriptor?? [ 280.694170][ T5727] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 280.860446][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.863378][ T5727] usb 4-1: not running at top speed; connect to a high speed hub [ 280.863418][ T5727] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 280.890629][ T5727] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 280.890657][ T5727] usb 4-1: config 0 has no interface number 0 [ 280.890689][ T5727] usb 4-1: config 0 interface 15 has no altsetting 0 [ 280.917869][ T5727] usb 4-1: string descriptor 0 read error: -22 [ 280.918012][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.963163][ T5727] usb 4-1: config 0 descriptor?? [ 281.008681][ T5757] usb 5-1: USB disconnect, device number 5 [ 282.853921][ T49] usb 4-1: USB disconnect, device number 10 [ 284.551474][ T36] audit: type=1326 audit(1792037552.021:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2034cbe559 code=0x0 [ 286.529652][ T7004] jffs2: notice: (7004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.435145][ T61] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 290.453114][ T49] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 290.894141][ T49] usb 4-1: device descriptor read/64, error -71 [ 291.204233][ T49] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.274927][ T5757] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 291.334122][ T49] usb 4-1: device descriptor read/64, error -71 [ 291.436047][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.437951][ T5757] usb 3-1: not running at top speed; connect to a high speed hub [ 291.437987][ T5757] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 291.441917][ T5757] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 291.441944][ T5757] usb 3-1: config 0 has no interface number 0 [ 291.441976][ T5757] usb 3-1: config 0 interface 15 has no altsetting 0 [ 291.450495][ T49] usb usb4-port1: attempt power cycle [ 291.459766][ T5757] usb 3-1: string descriptor 0 read error: -22 [ 291.459910][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.479380][ T5757] usb 3-1: config 0 descriptor?? [ 294.446431][ T36] audit: type=1326 audit(1792037560.541:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7038 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85591e559 code=0x0 [ 295.761120][ T5727] usb 3-1: USB disconnect, device number 5 [ 298.542258][ T36] audit: type=1326 audit(1792037566.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7074 comm="syz.4.296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f507869e559 code=0x0 [ 300.115857][ T36] audit: type=1326 audit(1792037567.671:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85591e559 code=0x0 [ 301.010528][ T7087] jffs2: notice: (7087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 302.542137][ T36] audit: type=1326 audit(1792037569.991:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.2.292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2034cbe559 code=0x0 [ 304.630740][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 307.039846][ T36] audit: type=1326 audit(1792037574.511:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7116 comm="syz.0.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 307.116956][ T7124] CIFS: Attempting to mount //127.0.0.1/share [ 307.380779][ T7124] CIFS: VFS: Error connecting to socket. Aborting operation. [ 307.381052][ T7124] CIFS: VFS: cifs_mount failed w/return code = -4 [ 308.504356][ T36] audit: type=1326 audit(1792037576.931:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.3.311" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdabce559 code=0x0 [ 308.691823][ T5609] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 308.692046][ T5609] Bluetooth: hci0: Injecting HCI hardware error event [ 308.692716][ T5609] Bluetooth: hci0: hardware error 0x00 [ 309.244084][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 310.925053][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 312.502007][ T7161] FAULT_INJECTION: forcing a failure. [ 312.502007][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 312.502045][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.502069][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 312.502082][ T7161] Call Trace: [ 312.502089][ T7161] [ 312.502098][ T7161] dump_stack_lvl+0xe8/0x150 [ 312.502134][ T7161] should_fail_ex+0x46b/0x600 [ 312.502170][ T7161] should_failslab+0xa8/0x100 [ 312.502194][ T7161] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 312.502226][ T7161] ? x509_get_sig_params+0xdb/0x630 [ 312.502280][ T7161] ? x509_get_sig_params+0xdb/0x630 [ 312.502311][ T7161] kmemdup_noprof+0x2b/0x70 [ 312.502346][ T7161] x509_get_sig_params+0xdb/0x630 [ 312.502381][ T7161] x509_cert_parse+0x514/0x7a0 [ 312.502413][ T7161] x509_key_preparse+0x64/0x6d0 [ 312.502438][ T7161] ? __pfx_smack_key_permission+0x10/0x10 [ 312.502474][ T7161] asymmetric_key_preparse+0xb9/0x1b0 [ 312.502496][ T7161] __key_create_or_update+0x354/0xa70 [ 312.502542][ T7161] ? __pfx___key_create_or_update+0x10/0x10 [ 312.502570][ T7161] ? lookup_user_key+0xb68/0x1150 [ 312.502604][ T7161] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 312.502636][ T7161] key_create_or_update+0x42/0x60 [ 312.502670][ T7161] __se_sys_add_key+0x349/0x420 [ 312.502703][ T7161] ? __pfx___se_sys_add_key+0x10/0x10 [ 312.502741][ T7161] ? __x64_sys_add_key+0x20/0xc0 [ 312.502780][ T7161] do_syscall_64+0x166/0x520 [ 312.502809][ T7161] ? trace_irq_disable+0x3b/0x140 [ 312.502841][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.502863][ T7161] ? clear_bhb_loop+0x70/0xc0 [ 312.502888][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.502908][ T7161] RIP: 0033:0x7fafdabce559 [ 312.502928][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.502946][ T7161] RSP: 002b:00007fafd8e26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 312.502970][ T7161] RAX: ffffffffffffffda RBX: 00007fafdae55fa0 RCX: 00007fafdabce559 [ 312.502986][ T7161] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000540 [ 312.503000][ T7161] RBP: 00007fafdac658b0 R08: fffffffffffffffe R09: 0000000000000000 [ 312.503015][ T7161] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 312.503028][ T7161] R13: 00007fafdae56038 R14: 00007fafdae55fa0 R15: 00007ffc368338e8 [ 312.503061][ T7161] [ 312.784910][ T5727] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 312.826559][ T36] audit: type=1326 audit(1792037581.241:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.0.310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 313.037886][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.048230][ T5727] usb 2-1: not running at top speed; connect to a high speed hub [ 313.048271][ T5727] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 313.054015][ T5727] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 313.054042][ T5727] usb 2-1: config 0 has no interface number 0 [ 313.054072][ T5727] usb 2-1: config 0 interface 15 has no altsetting 0 [ 313.064897][ T5727] usb 2-1: string descriptor 0 read error: -22 [ 313.065036][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.101915][ T5727] usb 2-1: config 0 descriptor?? [ 314.628217][ T36] audit: type=1326 audit(1792037582.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7174 comm="syz.3.320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdabce559 code=0x0 [ 314.834125][ T5743] usb 2-1: USB disconnect, device number 6 [ 317.511887][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.511954][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.590741][ T36] audit: type=1326 audit(1792037586.011:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85591e559 code=0x0 [ 325.343548][ T36] audit: type=1326 audit(1792037593.761:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f507869e559 code=0x0 [ 327.424199][ T201] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 327.595715][ T201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 327.596282][ T201] usb 2-1: not running at top speed; connect to a high speed hub [ 327.596317][ T201] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 327.603233][ T201] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 327.603250][ T201] usb 2-1: config 0 has no interface number 0 [ 327.603268][ T201] usb 2-1: config 0 interface 15 has no altsetting 0 [ 327.716736][ T201] usb 2-1: string descriptor 0 read error: -22 [ 327.716818][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.805165][ T201] usb 2-1: config 0 descriptor?? [ 329.330407][ T5756] usb 2-1: USB disconnect, device number 7 [ 331.924155][ T7356] program syz.3.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.934257][ T5727] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 333.096522][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.097262][ T5727] usb 1-1: not running at top speed; connect to a high speed hub [ 333.097298][ T5727] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 333.098775][ T5727] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 333.098801][ T5727] usb 1-1: config 0 has no interface number 0 [ 333.098832][ T5727] usb 1-1: config 0 interface 15 has no altsetting 0 [ 333.103432][ T5727] usb 1-1: string descriptor 0 read error: -22 [ 333.103579][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.177538][ T5727] usb 1-1: config 0 descriptor?? [ 336.379834][ T7384] program syz.1.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.582947][ T5610] usb 1-1: USB disconnect, device number 10 [ 339.541554][ T7414] FAULT_INJECTION: forcing a failure. [ 339.541554][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 339.541592][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.541616][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.541629][ T7414] Call Trace: [ 339.541637][ T7414] [ 339.541646][ T7414] dump_stack_lvl+0xe8/0x150 [ 339.541687][ T7414] should_fail_ex+0x46b/0x600 [ 339.541728][ T7414] should_failslab+0xa8/0x100 [ 339.541755][ T7414] __kmalloc_noprof+0xfb/0x790 [ 339.541786][ T7414] ? x509_get_sig_params+0x458/0x630 [ 339.541813][ T7414] ? asymmetric_key_generate_id+0x60/0x170 [ 339.541834][ T7414] ? asymmetric_key_generate_id+0x60/0x170 [ 339.541863][ T7414] asymmetric_key_generate_id+0x60/0x170 [ 339.541890][ T7414] x509_cert_parse+0x5bb/0x7a0 [ 339.541919][ T7414] x509_key_preparse+0x64/0x6d0 [ 339.541947][ T7414] ? __pfx_smack_key_permission+0x10/0x10 [ 339.541975][ T7414] asymmetric_key_preparse+0xb9/0x1b0 [ 339.542001][ T7414] __key_create_or_update+0x354/0xa70 [ 339.542037][ T7414] ? __pfx___key_create_or_update+0x10/0x10 [ 339.542076][ T7414] ? lookup_user_key+0xb68/0x1150 [ 339.542111][ T7414] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 339.542145][ T7414] key_create_or_update+0x42/0x60 [ 339.542176][ T7414] __se_sys_add_key+0x349/0x420 [ 339.542210][ T7414] ? __pfx___se_sys_add_key+0x10/0x10 [ 339.542245][ T7414] ? __x64_sys_add_key+0x20/0xc0 [ 339.542273][ T7414] do_syscall_64+0x166/0x520 [ 339.542300][ T7414] ? trace_irq_disable+0x3b/0x140 [ 339.542330][ T7414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.542352][ T7414] ? clear_bhb_loop+0x70/0xc0 [ 339.542377][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.542397][ T7414] RIP: 0033:0x7f2034cbe559 [ 339.542415][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.542432][ T7414] RSP: 002b:00007f2032f16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 339.542454][ T7414] RAX: ffffffffffffffda RBX: 00007f2034f45fa0 RCX: 00007f2034cbe559 [ 339.542474][ T7414] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000540 [ 339.542488][ T7414] RBP: 00007f2034d558b0 R08: fffffffffffffffe R09: 0000000000000000 [ 339.542502][ T7414] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 339.542515][ T7414] R13: 00007f2034f46038 R14: 00007f2034f45fa0 R15: 00007ffe1c1a0e48 [ 339.542552][ T7414] [ 344.212663][ T7431] program syz.4.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.694147][ T6468] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 344.854115][ T6468] usb 2-1: unable to get BOS descriptor or descriptor too short [ 344.854715][ T6468] usb 2-1: not running at top speed; connect to a high speed hub [ 344.854753][ T6468] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 344.856112][ T6468] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 344.856136][ T6468] usb 2-1: config 0 has no interface number 0 [ 344.856175][ T6468] usb 2-1: config 0 interface 15 has no altsetting 0 [ 344.910926][ T6468] usb 2-1: string descriptor 0 read error: -22 [ 344.911086][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.945050][ T6468] usb 2-1: config 0 descriptor?? [ 346.898763][ T5727] usb 2-1: USB disconnect, device number 8 [ 349.513295][ T7470] FAULT_INJECTION: forcing a failure. [ 349.513295][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 349.513337][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.2.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 349.513362][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.513374][ T7470] Call Trace: [ 349.513382][ T7470] [ 349.513391][ T7470] dump_stack_lvl+0xe8/0x150 [ 349.513430][ T7470] should_fail_ex+0x46b/0x600 [ 349.513471][ T7470] should_failslab+0xa8/0x100 [ 349.513496][ T7470] __kmalloc_noprof+0xfb/0x790 [ 349.513527][ T7470] ? x509_get_sig_params+0x458/0x630 [ 349.513554][ T7470] ? asymmetric_key_generate_id+0x60/0x170 [ 349.513575][ T7470] ? asymmetric_key_generate_id+0x60/0x170 [ 349.513605][ T7470] asymmetric_key_generate_id+0x60/0x170 [ 349.513631][ T7470] x509_cert_parse+0x5bb/0x7a0 [ 349.513661][ T7470] x509_key_preparse+0x64/0x6d0 [ 349.513701][ T7470] ? __pfx_smack_key_permission+0x10/0x10 [ 349.513729][ T7470] asymmetric_key_preparse+0xb9/0x1b0 [ 349.513753][ T7470] __key_create_or_update+0x354/0xa70 [ 349.513794][ T7470] ? __pfx___key_create_or_update+0x10/0x10 [ 349.513825][ T7470] ? lookup_user_key+0xb68/0x1150 [ 349.513861][ T7470] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 349.513904][ T7470] key_create_or_update+0x42/0x60 [ 349.513934][ T7470] __se_sys_add_key+0x349/0x420 [ 349.513968][ T7470] ? __pfx___se_sys_add_key+0x10/0x10 [ 349.514002][ T7470] ? __x64_sys_add_key+0x20/0xc0 [ 349.514030][ T7470] do_syscall_64+0x166/0x520 [ 349.514057][ T7470] ? trace_irq_disable+0x3b/0x140 [ 349.514084][ T7470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.514105][ T7470] ? clear_bhb_loop+0x70/0xc0 [ 349.514129][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.514150][ T7470] RIP: 0033:0x7f2034cbe559 [ 349.514169][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.514187][ T7470] RSP: 002b:00007f2032f16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 349.514210][ T7470] RAX: ffffffffffffffda RBX: 00007f2034f45fa0 RCX: 00007f2034cbe559 [ 349.514226][ T7470] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000540 [ 349.514241][ T7470] RBP: 00007f2034d558b0 R08: fffffffffffffffe R09: 0000000000000000 [ 349.514255][ T7470] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 349.514269][ T7470] R13: 00007f2034f46038 R14: 00007f2034f45fa0 R15: 00007ffe1c1a0e48 [ 349.514305][ T7470] [ 349.647071][ T5610] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 349.824088][ T5610] usb 1-1: Using ep0 maxpacket: 8 [ 349.841670][ T5610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 349.841743][ T5610] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 349.843701][ T5610] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 349.843719][ T5610] usb 1-1: config 0 has no interface number 0 [ 349.843814][ T5610] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 349.843836][ T5610] usb 1-1: config 0 interface 88 has no altsetting 0 [ 349.928183][ T5610] usb 1-1: string descriptor 0 read error: -22 [ 349.928349][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 349.989681][ T5610] usb 1-1: config 0 descriptor?? [ 350.011309][ T5610] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input12 [ 351.526275][ T36] audit: type=1326 audit(1792037618.981:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.2.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2034cbe559 code=0x0 [ 351.951153][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 352.142714][ T5610] usb 1-1: USB disconnect, device number 11 [ 352.463318][ T7288] udevd[7288]: Error opening device "/dev/input/event4": No such file or directory [ 352.463451][ T7288] udevd[7288]: Unable to EVIOCGABS device "/dev/input/event4" [ 352.463559][ T7288] udevd[7288]: Unable to EVIOCGABS device "/dev/input/event4" [ 355.124194][ T49] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 355.291061][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.291819][ T49] usb 2-1: not running at top speed; connect to a high speed hub [ 355.291856][ T49] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 355.321425][ T49] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 355.321454][ T49] usb 2-1: config 0 has no interface number 0 [ 355.321486][ T49] usb 2-1: config 0 interface 15 has no altsetting 0 [ 355.337948][ T49] usb 2-1: string descriptor 0 read error: -22 [ 355.338143][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.385365][ T49] usb 2-1: config 0 descriptor?? [ 355.445486][ T7519] FAULT_INJECTION: forcing a failure. [ 355.445486][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 355.445512][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.0.395 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.445525][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.445533][ T7519] Call Trace: [ 355.445537][ T7519] [ 355.445545][ T7519] dump_stack_lvl+0xe8/0x150 [ 355.445568][ T7519] should_fail_ex+0x46b/0x600 [ 355.445590][ T7519] should_failslab+0xa8/0x100 [ 355.445604][ T7519] __kmalloc_noprof+0xfb/0x790 [ 355.445620][ T7519] ? x509_get_sig_params+0x458/0x630 [ 355.445635][ T7519] ? asymmetric_key_generate_id+0x60/0x170 [ 355.445645][ T7519] ? asymmetric_key_generate_id+0x60/0x170 [ 355.445660][ T7519] asymmetric_key_generate_id+0x60/0x170 [ 355.445674][ T7519] x509_cert_parse+0x5bb/0x7a0 [ 355.445691][ T7519] x509_key_preparse+0x64/0x6d0 [ 355.445705][ T7519] ? __pfx_smack_key_permission+0x10/0x10 [ 355.445719][ T7519] asymmetric_key_preparse+0xb9/0x1b0 [ 355.445732][ T7519] __key_create_or_update+0x354/0xa70 [ 355.445750][ T7519] ? __pfx___key_create_or_update+0x10/0x10 [ 355.445766][ T7519] ? lookup_user_key+0xb68/0x1150 [ 355.445783][ T7519] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 355.445800][ T7519] key_create_or_update+0x42/0x60 [ 355.445815][ T7519] __se_sys_add_key+0x349/0x420 [ 355.445833][ T7519] ? __pfx___se_sys_add_key+0x10/0x10 [ 355.445853][ T7519] ? __x64_sys_add_key+0x20/0xc0 [ 355.445880][ T7519] do_syscall_64+0x166/0x520 [ 355.445896][ T7519] ? trace_irq_disable+0x3b/0x140 [ 355.445912][ T7519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.445924][ T7519] ? clear_bhb_loop+0x70/0xc0 [ 355.445937][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.445949][ T7519] RIP: 0033:0x7f662d3de559 [ 355.445960][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.445972][ T7519] RSP: 002b:00007f662b636028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 355.445986][ T7519] RAX: ffffffffffffffda RBX: 00007f662d665fa0 RCX: 00007f662d3de559 [ 355.445995][ T7519] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000540 [ 355.446002][ T7519] RBP: 00007f662d4758b0 R08: fffffffffffffffe R09: 0000000000000000 [ 355.446010][ T7519] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 355.446016][ T7519] R13: 00007f662d666038 R14: 00007f662d665fa0 R15: 00007ffd44f2d448 [ 355.446034][ T7519] [ 355.605828][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 357.360609][ T5610] usb 2-1: USB disconnect, device number 9 [ 359.281764][ T7571] CIFS: Attempting to mount //127.0.0.1/share [ 359.805809][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 359.890031][ T7571] CIFS: VFS: Error connecting to socket. Aborting operation. [ 359.890086][ T7571] CIFS: VFS: cifs_mount failed w/return code = -4 [ 360.306791][ T7592] FAULT_INJECTION: forcing a failure. [ 360.306791][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 360.306843][ T7592] CPU: 1 UID: 0 PID: 7592 Comm: syz.1.407 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.306866][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.306883][ T7592] Call Trace: [ 360.306891][ T7592] [ 360.306900][ T7592] dump_stack_lvl+0xe8/0x150 [ 360.306939][ T7592] should_fail_ex+0x46b/0x600 [ 360.306979][ T7592] should_failslab+0xa8/0x100 [ 360.307008][ T7592] __kmalloc_noprof+0xfb/0x790 [ 360.307040][ T7592] ? x509_key_preparse+0x21c/0x6d0 [ 360.307066][ T7592] ? x509_key_preparse+0x21c/0x6d0 [ 360.307108][ T7592] x509_key_preparse+0x21c/0x6d0 [ 360.307142][ T7592] asymmetric_key_preparse+0xb9/0x1b0 [ 360.307167][ T7592] __key_create_or_update+0x354/0xa70 [ 360.307204][ T7592] ? __pfx___key_create_or_update+0x10/0x10 [ 360.307234][ T7592] ? lookup_user_key+0xb68/0x1150 [ 360.307269][ T7592] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 360.307302][ T7592] key_create_or_update+0x42/0x60 [ 360.307332][ T7592] __se_sys_add_key+0x349/0x420 [ 360.307365][ T7592] ? __pfx___se_sys_add_key+0x10/0x10 [ 360.307404][ T7592] ? __x64_sys_add_key+0x20/0xc0 [ 360.307435][ T7592] do_syscall_64+0x166/0x520 [ 360.307465][ T7592] ? trace_irq_disable+0x3b/0x140 [ 360.307493][ T7592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.307515][ T7592] ? clear_bhb_loop+0x70/0xc0 [ 360.307541][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.307567][ T7592] RIP: 0033:0x7fe85591e559 [ 360.307586][ T7592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.307603][ T7592] RSP: 002b:00007fe853b76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 360.307627][ T7592] RAX: ffffffffffffffda RBX: 00007fe855ba5fa0 RCX: 00007fe85591e559 [ 360.307643][ T7592] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000540 [ 360.307658][ T7592] RBP: 00007fe8559b58b0 R08: fffffffffffffffe R09: 0000000000000000 [ 360.307672][ T7592] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 360.307686][ T7592] R13: 00007fe855ba6038 R14: 00007fe855ba5fa0 R15: 00007ffeea3defe8 [ 360.307721][ T7592] [ 360.746621][ T5757] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 360.931813][ T5757] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.932793][ T5757] usb 1-1: not running at top speed; connect to a high speed hub [ 360.932840][ T5757] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 360.938327][ T5757] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 360.938353][ T5757] usb 1-1: config 0 has no interface number 0 [ 360.938383][ T5757] usb 1-1: config 0 interface 15 has no altsetting 0 [ 360.952706][ T5757] usb 1-1: string descriptor 0 read error: -22 [ 360.952840][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.394085][ T5757] usb 1-1: config 0 descriptor?? [ 361.960296][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 362.835317][ T6468] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 363.389104][ T6468] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 363.391930][ T6468] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 363.391948][ T6468] usb 2-1: config 1 has no interface number 0 [ 363.407504][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.407533][ T6468] usb 2-1: Product: syz [ 363.407547][ T6468] usb 2-1: Manufacturer: syz [ 363.407561][ T6468] usb 2-1: SerialNumber: syz [ 363.454505][ T5727] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 363.620548][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.621727][ T5727] usb 3-1: not running at top speed; connect to a high speed hub [ 363.621750][ T5727] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 363.623829][ T5727] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 363.623855][ T5727] usb 3-1: config 0 has no interface number 0 [ 363.623894][ T5727] usb 3-1: config 0 interface 15 has no altsetting 0 [ 363.626030][ T6468] usb 2-1: 3:0 : does not exist [ 363.626051][ T6468] usb 2-1: 3:0 : does not exist [ 363.711446][ T5727] usb 3-1: string descriptor 0 read error: -22 [ 363.711552][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.755014][ T5727] usb 3-1: config 0 descriptor?? [ 366.497074][ T36] audit: type=1326 audit(1792037634.911:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz.3.420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdabce559 code=0x0 [ 366.774421][ T5610] usb 3-1: USB disconnect, device number 6 [ 367.188480][ T7650] loop0: detected capacity change from 0 to 4096 [ 367.599630][ T7651] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 367.599660][ T7651] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 367.599730][ T7651] loop0: [ 368.156660][ T6468] usb 2-1: USB disconnect, device number 10 [ 368.300689][ T5610] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 368.357858][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 368.480854][ T5610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 368.481346][ T5610] usb 3-1: not running at top speed; connect to a high speed hub [ 368.481370][ T5610] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 368.482252][ T5610] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 368.482266][ T5610] usb 3-1: config 0 has no interface number 0 [ 368.482283][ T5610] usb 3-1: config 0 interface 15 has no altsetting 0 [ 368.485678][ T5610] usb 3-1: string descriptor 0 read error: -22 [ 368.485822][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.692223][ T5610] usb 3-1: config 0 descriptor?? [ 371.144493][ T5756] usb 3-1: USB disconnect, device number 7 [ 372.216797][ T36] audit: type=1326 audit(1792037640.621:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.0.432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 372.344127][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 372.504944][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 372.508170][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 372.508198][ T9] usb 5-1: config 1 has no interface number 0 [ 372.561469][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.561499][ T9] usb 5-1: Product: syz [ 372.561514][ T9] usb 5-1: Manufacturer: syz [ 372.561529][ T9] usb 5-1: SerialNumber: syz [ 372.690505][ T9] usb 5-1: 3:0 : does not exist [ 372.690536][ T9] usb 5-1: 3:0 : does not exist [ 372.999771][ T9] usb 5-1: USB disconnect, device number 6 [ 373.205275][ T6468] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 373.358144][ T6468] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 373.363836][ T6468] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.363892][ T6468] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.401589][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.401617][ T6468] usb 2-1: Product: syz [ 373.401633][ T6468] usb 2-1: Manufacturer: syz [ 373.401647][ T6468] usb 2-1: SerialNumber: syz [ 376.221514][ T5610] usb 2-1: USB disconnect, device number 11 [ 377.116118][ T5610] usb 1-1: USB disconnect, device number 12 [ 377.202922][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 378.822092][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.822164][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.934173][ T6468] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 379.034824][ T7742] FAULT_INJECTION: forcing a failure. [ 379.034824][ T7742] name failslab, interval 1, probability 0, space 0, times 0 [ 379.034861][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.4.446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.034885][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 379.034898][ T7742] Call Trace: [ 379.034906][ T7742] [ 379.034916][ T7742] dump_stack_lvl+0xe8/0x150 [ 379.034958][ T7742] should_fail_ex+0x46b/0x600 [ 379.035000][ T7742] should_failslab+0xa8/0x100 [ 379.035026][ T7742] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 379.035061][ T7742] ? __kernfs_new_node+0xac/0xa70 [ 379.035132][ T7742] ? __kernfs_new_node+0xac/0xa70 [ 379.035168][ T7742] kstrdup+0x42/0x100 [ 379.035200][ T7742] __kernfs_new_node+0xac/0xa70 [ 379.035232][ T7742] ? vsnprintf+0xe42/0xef0 [ 379.035261][ T7742] ? __pfx___kernfs_new_node+0x10/0x10 [ 379.035290][ T7742] ? kernfs_root+0x1c/0x230 [ 379.035322][ T7742] ? kernfs_root+0x1c/0x230 [ 379.035347][ T7742] ? kernfs_root+0x1c/0x230 [ 379.035379][ T7742] kernfs_new_node+0xea/0x140 [ 379.035413][ T7742] __kernfs_create_file+0x4b/0x2e0 [ 379.035441][ T7742] cgroup_addrm_files+0x837/0xd70 [ 379.035492][ T7742] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 379.035516][ T7742] ? reacquire_held_locks+0x117/0x1a0 [ 379.035579][ T7742] ? xa_store+0x3e/0x50 [ 379.035611][ T7742] ? mem_cgroup_css_online+0x45a/0x760 [ 379.035651][ T7742] css_populate_dir+0x123/0x3d0 [ 379.035681][ T7742] ? cgroup_apply_control_enable+0x95b/0xd40 [ 379.035714][ T7742] cgroup_apply_control_enable+0x764/0xd40 [ 379.035765][ T7742] cgroup_mkdir+0xd22/0xf70 [ 379.035808][ T7742] ? __pfx_cgroup_mkdir+0x10/0x10 [ 379.035840][ T7742] kernfs_iop_mkdir+0x213/0x360 [ 379.035878][ T7742] vfs_mkdir+0x408/0x620 [ 379.035917][ T7742] filename_mkdirat+0x289/0x520 [ 379.035956][ T7742] ? __pfx_filename_mkdirat+0x10/0x10 [ 379.035991][ T7742] ? do_getname+0x151/0x250 [ 379.036018][ T7742] __se_sys_mkdirat+0x35/0x150 [ 379.036053][ T7742] do_syscall_64+0x166/0x520 [ 379.036081][ T7742] ? trace_irq_disable+0x3b/0x140 [ 379.036108][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.036131][ T7742] ? clear_bhb_loop+0x70/0xc0 [ 379.036157][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.036178][ T7742] RIP: 0033:0x7f507869e559 [ 379.036205][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.036224][ T7742] RSP: 002b:00007f50768f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 379.036248][ T7742] RAX: ffffffffffffffda RBX: 00007f5078925fa0 RCX: 00007f507869e559 [ 379.036264][ T7742] RDX: 0000000000000777 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 379.036280][ T7742] RBP: 00007f50787358b0 R08: 0000000000000000 R09: 0000000000000000 [ 379.036293][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.036306][ T7742] R13: 00007f5078926038 R14: 00007f5078925fa0 R15: 00007ffda3de4298 [ 379.036342][ T7742] [ 379.036532][ T7742] cgroup: cgroup_addrm_files: failed to add kmem.tcp.failcnt, err=-12 [ 379.155022][ T6468] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 379.168444][ T6468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.168501][ T6468] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.212187][ T5610] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 379.226639][ T6468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.226668][ T6468] usb 3-1: Product: syz [ 379.226682][ T6468] usb 3-1: Manufacturer: syz [ 379.226697][ T6468] usb 3-1: SerialNumber: syz [ 379.410366][ T5610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 379.425338][ T5610] usb 1-1: not running at top speed; connect to a high speed hub [ 379.425378][ T5610] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 379.427592][ T5610] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 379.427617][ T5610] usb 1-1: config 0 has no interface number 0 [ 379.427648][ T5610] usb 1-1: config 0 interface 15 has no altsetting 0 [ 379.504266][ T5610] usb 1-1: string descriptor 0 read error: -22 [ 379.504412][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.595968][ T5610] usb 1-1: config 0 descriptor?? [ 381.953668][ T6468] usb 3-1: USB disconnect, device number 8 [ 382.551511][ T5727] usb 1-1: USB disconnect, device number 13 [ 384.934527][ T6012] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 385.695055][ T6012] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 385.696521][ T6012] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 385.696545][ T6012] usb 3-1: config 1 has no interface number 0 [ 385.713459][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.713488][ T6012] usb 3-1: Product: syz [ 385.713503][ T6012] usb 3-1: Manufacturer: syz [ 385.713518][ T6012] usb 3-1: SerialNumber: syz [ 385.828071][ T6012] usb 3-1: skipping empty audio interface (v1) [ 385.991784][ T6012] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 386.067179][ T6468] usb 3-1: USB disconnect, device number 9 [ 386.158260][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.461493][ T7785] program syz.4.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.522989][ T7793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.462'. [ 392.966879][ T6468] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 393.114979][ T6468] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 393.116515][ T6468] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.116541][ T6468] usb 2-1: config 0 has no interface number 0 [ 393.119769][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.119796][ T6468] usb 2-1: Product: syz [ 393.119811][ T6468] usb 2-1: Manufacturer: syz [ 393.119826][ T6468] usb 2-1: SerialNumber: syz [ 393.179127][ T6468] usb 2-1: config 0 descriptor?? [ 393.206694][ T6468] usb 2-1: selecting invalid altsetting 1 [ 393.211262][ T6468] dvb_ttusb_budget: ttusb_init_controller: error [ 393.211486][ T6468] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 393.296052][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 393.334190][ T5757] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 393.452908][ T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 393.464119][ T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 393.464147][ T9] usb 4-1: config 1 has no interface number 0 [ 393.489707][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.489737][ T9] usb 4-1: Product: syz [ 393.489752][ T9] usb 4-1: Manufacturer: syz [ 393.489767][ T9] usb 4-1: SerialNumber: syz [ 393.539929][ T5757] usb 3-1: Using ep0 maxpacket: 8 [ 393.552018][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.552075][ T5757] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 393.573241][ T5757] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 393.573270][ T5757] usb 3-1: config 0 has no interface number 0 [ 393.573316][ T5757] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 393.573345][ T5757] usb 3-1: config 0 interface 88 has no altsetting 0 [ 393.628288][ T5757] usb 3-1: string descriptor 0 read error: -22 [ 393.628457][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 393.633202][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.471'. [ 393.704517][ T7830] netlink: 64 bytes leftover after parsing attributes in process `syz.1.471'. [ 393.735823][ T5757] usb 3-1: config 0 descriptor?? [ 393.784172][ T7853] netlink: 72 bytes leftover after parsing attributes in process `syz.0.478'. [ 393.837225][ T9] usb 4-1: skipping empty audio interface (v1) [ 393.995128][ T5757] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input13 [ 394.328622][ T5757] usb 3-1: USB disconnect, device number 10 [ 394.527340][ T9] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 394.553436][ T9] usb 4-1: USB disconnect, device number 14 [ 394.596136][ T6468] DVB: Unable to find symbol stv0299_attach() [ 395.478544][ T7288] udevd[7288]: Error opening device "/dev/input/event4": No such device [ 395.478596][ T7288] udevd[7288]: Unable to EVIOCGABS device "/dev/input/event4" [ 395.478636][ T7288] udevd[7288]: Unable to EVIOCGABS device "/dev/input/event4" [ 395.478682][ T7288] udevd[7288]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 395.916670][ T6468] DVB: Unable to find symbol tda8083_attach() [ 395.916685][ T6468] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 396.030275][ T4968] udevd[4968]: worker [7288] terminated by signal 6 (Aborted) [ 396.030307][ T4968] udevd[4968]: worker [7288] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input13/event4' [ 396.063833][ T6468] usb 2-1: USB disconnect, device number 12 [ 396.136917][ T7861] udevd[7861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.213628][ T7877] jffs2: notice: (7877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.704610][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 397.087802][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 397.090774][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 397.090812][ T9] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 397.092506][ T9] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 397.092531][ T9] usb 4-1: config 0 has no interface number 0 [ 397.092562][ T9] usb 4-1: config 0 interface 15 has no altsetting 0 [ 397.162518][ T9] usb 4-1: string descriptor 0 read error: -22 [ 397.162666][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.201116][ T9] usb 4-1: config 0 descriptor?? [ 399.004605][ T5757] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 399.165276][ T5757] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 399.167743][ T5757] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.167770][ T5757] usb 3-1: config 0 has no interface number 0 [ 399.172015][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.172057][ T5757] usb 3-1: Product: syz [ 399.172098][ T5757] usb 3-1: Manufacturer: syz [ 399.172131][ T5757] usb 3-1: SerialNumber: syz [ 399.244610][ T5757] usb 3-1: config 0 descriptor?? [ 399.339254][ T5757] usb 3-1: selecting invalid altsetting 1 [ 399.339388][ T5757] dvb_ttusb_budget: ttusb_init_controller: error [ 399.339401][ T5757] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 399.373927][ T5610] usb 4-1: USB disconnect, device number 15 [ 399.380101][ T6468] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 399.470957][ T7898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.491'. [ 399.510703][ T7898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.491'. [ 399.526921][ T6468] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 399.528378][ T6468] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 399.528403][ T6468] usb 1-1: config 1 has no interface number 0 [ 399.537796][ T6468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.537822][ T6468] usb 1-1: Product: syz [ 399.537837][ T6468] usb 1-1: Manufacturer: syz [ 399.537851][ T6468] usb 1-1: SerialNumber: syz [ 399.616213][ T6468] usb 1-1: skipping empty audio interface (v1) [ 399.915709][ T5757] DVB: Unable to find symbol stv0299_attach() [ 400.543126][ T6468] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 400.596090][ T6468] usb 1-1: USB disconnect, device number 14 [ 400.738747][ T7861] udevd[7861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.431716][ T5757] DVB: Unable to find symbol tda8083_attach() [ 401.431733][ T5757] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 401.461766][ T5757] usb 3-1: USB disconnect, device number 11 [ 403.046473][ T7938] netlink: 72 bytes leftover after parsing attributes in process `syz.4.500'. [ 404.904541][ T6468] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 405.159802][ T6468] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 405.210982][ T6468] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 405.211055][ T6468] usb 3-1: config 1 has no interface number 0 [ 405.304238][ T6468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.304268][ T6468] usb 3-1: Product: syz [ 405.304283][ T6468] usb 3-1: Manufacturer: syz [ 405.304298][ T6468] usb 3-1: SerialNumber: syz [ 405.350308][ T6468] usb 3-1: skipping empty audio interface (v1) [ 405.418960][ T6468] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 405.486390][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.609773][ T6468] usb 3-1: USB disconnect, device number 12 [ 405.614826][ T5610] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 405.614983][ T5727] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 405.686698][ T5743] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 405.785101][ T5727] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 405.787126][ T5610] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 405.787945][ T5727] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.788023][ T5727] usb 1-1: config 0 has no interface number 0 [ 405.790544][ T5610] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 405.790568][ T5610] usb 4-1: config 1 has no interface number 0 [ 405.795476][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.795499][ T5727] usb 1-1: Product: syz [ 405.795513][ T5727] usb 1-1: Manufacturer: syz [ 405.795527][ T5727] usb 1-1: SerialNumber: syz [ 405.805288][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.805315][ T5610] usb 4-1: Product: syz [ 405.805331][ T5610] usb 4-1: Manufacturer: syz [ 405.805346][ T5610] usb 4-1: SerialNumber: syz [ 405.826147][ T5727] usb 1-1: config 0 descriptor?? [ 405.847171][ T5727] usb 1-1: selecting invalid altsetting 1 [ 405.847329][ T5727] dvb_ttusb_budget: ttusb_init_controller: error [ 405.847344][ T5727] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 405.861333][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.862580][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 405.862615][ T5743] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 405.874201][ T5743] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 405.874228][ T5743] usb 5-1: config 0 has no interface number 0 [ 405.874260][ T5743] usb 5-1: config 0 interface 15 has no altsetting 0 [ 405.885945][ T5743] usb 5-1: string descriptor 0 read error: -22 [ 405.886083][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.931425][ T5743] usb 5-1: config 0 descriptor?? [ 405.940691][ T5610] usb 4-1: 3:0 : does not exist [ 405.940715][ T5610] usb 4-1: 3:0 : does not exist [ 406.059561][ T7955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.508'. [ 406.071525][ T7955] netlink: 64 bytes leftover after parsing attributes in process `syz.0.508'. [ 406.152548][ T5727] DVB: Unable to find symbol stv0299_attach() [ 406.220109][ T5727] DVB: Unable to find symbol tda8083_attach() [ 406.220125][ T5727] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 406.236707][ T5727] usb 1-1: USB disconnect, device number 15 [ 406.340510][ T5610] usb 4-1: USB disconnect, device number 16 [ 406.591442][ T7861] udevd[7861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.355180][ T7985] jffs2: notice: (7985) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 409.275691][ T5610] usb 5-1: USB disconnect, device number 7 [ 409.344246][ T49] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 409.521369][ T49] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 409.525079][ T49] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 409.525105][ T49] usb 3-1: config 1 has no interface number 0 [ 409.562248][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.562266][ T49] usb 3-1: Product: syz [ 409.562274][ T49] usb 3-1: Manufacturer: syz [ 409.562282][ T49] usb 3-1: SerialNumber: syz [ 409.614927][ T49] usb 3-1: 3:0 : does not exist [ 409.614943][ T49] usb 3-1: 3:0 : does not exist [ 409.977443][ T49] usb 3-1: USB disconnect, device number 13 [ 410.018088][ T8001] netlink: 72 bytes leftover after parsing attributes in process `syz.1.523'. [ 410.134508][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.354174][ T5610] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 410.504350][ T5727] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 410.511208][ T5610] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 410.513050][ T5610] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 410.513076][ T5610] usb 4-1: config 1 has no interface number 0 [ 410.546877][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.546904][ T5610] usb 4-1: Product: syz [ 410.546978][ T5610] usb 4-1: Manufacturer: syz [ 410.546994][ T5610] usb 4-1: SerialNumber: syz [ 410.580692][ T5610] usb 4-1: skipping empty audio interface (v1) [ 410.804241][ T5727] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 410.816214][ T5727] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.816243][ T5727] usb 1-1: config 0 has no interface number 0 [ 410.825989][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.826016][ T5727] usb 1-1: Product: syz [ 410.826030][ T5727] usb 1-1: Manufacturer: syz [ 410.826045][ T5727] usb 1-1: SerialNumber: syz [ 410.871768][ T5727] usb 1-1: config 0 descriptor?? [ 410.934416][ T5727] usb 1-1: selecting invalid altsetting 1 [ 410.934519][ T5727] dvb_ttusb_budget: ttusb_init_controller: error [ 410.934529][ T5727] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 410.958434][ T5610] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 411.728527][ T5610] usb 4-1: USB disconnect, device number 17 [ 411.758026][ T8008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.527'. [ 411.805442][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.966868][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 413.457610][ T5727] DVB: Unable to find symbol stv0299_attach() [ 413.532017][ T5727] DVB: Unable to find symbol tda8083_attach() [ 413.532048][ T5727] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 413.583335][ T5727] usb 1-1: USB disconnect, device number 16 [ 414.329030][ T8054] CIFS: Attempting to mount //127.0.0.1/share [ 414.834161][ T5743] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 414.996812][ T5743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 414.997535][ T5743] usb 1-1: not running at top speed; connect to a high speed hub [ 414.997570][ T5743] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 414.999251][ T5743] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 414.999276][ T5743] usb 1-1: config 0 has no interface number 0 [ 414.999306][ T5743] usb 1-1: config 0 interface 15 has no altsetting 0 [ 415.109634][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'. [ 415.238334][ T5743] usb 1-1: string descriptor 0 read error: -22 [ 415.241026][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.017948][ T5743] usb 1-1: config 0 descriptor?? [ 416.119780][ T8054] CIFS: VFS: cifs_mount failed w/return code = -512 [ 417.726755][ T6468] usb 1-1: USB disconnect, device number 17 [ 417.764101][ T5743] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 417.831231][ T8077] netlink: 72 bytes leftover after parsing attributes in process `syz.1.543'. [ 418.260180][ T5743] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 418.399422][ T5743] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 418.399544][ T5743] usb 3-1: config 1 has no interface number 0 [ 418.549866][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.549896][ T5743] usb 3-1: Product: syz [ 418.549910][ T5743] usb 3-1: Manufacturer: syz [ 418.549924][ T5743] usb 3-1: SerialNumber: syz [ 418.600677][ T5743] usb 3-1: skipping empty audio interface (v1) [ 418.734835][ T5743] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 418.841313][ T6468] usb 3-1: USB disconnect, device number 14 [ 418.858990][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.184423][ T5743] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 419.345830][ T5743] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 419.349631][ T5743] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.349660][ T5743] usb 4-1: config 0 has no interface number 0 [ 419.352839][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.352864][ T5743] usb 4-1: Product: syz [ 419.352880][ T5743] usb 4-1: Manufacturer: syz [ 419.352895][ T5743] usb 4-1: SerialNumber: syz [ 419.411651][ T5743] usb 4-1: config 0 descriptor?? [ 419.428276][ T5743] usb 4-1: selecting invalid altsetting 1 [ 419.428444][ T5743] dvb_ttusb_budget: ttusb_init_controller: error [ 419.428457][ T5743] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 419.637582][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 419.637607][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 419.663609][ T5743] DVB: Unable to find symbol stv0299_attach() [ 419.754122][ T5757] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 419.864240][ T8118] netlink: 64 bytes leftover after parsing attributes in process `syz.3.547'. [ 420.017507][ T5743] DVB: Unable to find symbol tda8083_attach() [ 420.017522][ T5743] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 420.047922][ T5743] usb 4-1: USB disconnect, device number 18 [ 420.105441][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 420.106215][ T5757] usb 2-1: not running at top speed; connect to a high speed hub [ 420.106253][ T5757] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 420.108048][ T5757] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 420.108073][ T5757] usb 2-1: config 0 has no interface number 0 [ 420.108104][ T5757] usb 2-1: config 0 interface 15 has no altsetting 0 [ 420.120758][ T5757] usb 2-1: string descriptor 0 read error: -22 [ 420.120962][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.268024][ T5757] usb 2-1: config 0 descriptor?? [ 422.037461][ T8135] CIFS: Attempting to mount //127.0.0.1/share [ 422.299332][ T6468] usb 2-1: USB disconnect, device number 13 [ 422.524143][ T5757] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 422.679573][ T5757] usb 1-1: unable to get BOS descriptor or descriptor too short [ 422.680886][ T5757] usb 1-1: not running at top speed; connect to a high speed hub [ 422.705616][ T5757] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 422.708570][ T5757] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 422.708597][ T5757] usb 1-1: config 0 has no interface number 0 [ 422.708628][ T5757] usb 1-1: config 0 interface 15 has no altsetting 0 [ 422.746840][ T5757] usb 1-1: string descriptor 0 read error: -22 [ 422.746997][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.779059][ T5757] usb 1-1: config 0 descriptor?? [ 422.872585][ T8135] CIFS: VFS: cifs_mount failed w/return code = -512 [ 423.569750][ T8164] netlink: 72 bytes leftover after parsing attributes in process `syz.2.558'. [ 425.366173][ T5743] usb 1-1: USB disconnect, device number 18 [ 426.020047][ T8187] netlink: 'syz.3.562': attribute type 4 has an invalid length. [ 426.020129][ T8187] netlink: 17 bytes leftover after parsing attributes in process `syz.3.562'. [ 427.441765][ T5727] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 427.914961][ T5727] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 427.916074][ T5727] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 427.916099][ T5727] usb 3-1: config 0 has no interface number 0 [ 427.918424][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.918449][ T5727] usb 3-1: Product: syz [ 427.918477][ T5727] usb 3-1: Manufacturer: syz [ 427.918485][ T5727] usb 3-1: SerialNumber: syz [ 427.970279][ T5727] usb 3-1: config 0 descriptor?? [ 427.988600][ T5727] usb 3-1: selecting invalid altsetting 1 [ 427.988695][ T5727] dvb_ttusb_budget: ttusb_init_controller: error [ 428.032625][ T5727] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 428.254751][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 428.254777][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 428.272528][ T5727] DVB: Unable to find symbol stv0299_attach() [ 428.383817][ T8203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.565'. [ 428.459841][ T8205] CIFS: Attempting to mount //127.0.0.1/share [ 428.500220][ T5727] DVB: Unable to find symbol tda8083_attach() [ 428.500232][ T5727] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 428.513534][ T5727] usb 3-1: USB disconnect, device number 15 [ 428.664147][ T49] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 428.837757][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 428.838520][ T49] usb 5-1: not running at top speed; connect to a high speed hub [ 428.838558][ T49] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 428.840040][ T49] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 428.840067][ T49] usb 5-1: config 0 has no interface number 0 [ 428.840100][ T49] usb 5-1: config 0 interface 15 has no altsetting 0 [ 428.855867][ T49] usb 5-1: string descriptor 0 read error: -22 [ 428.856107][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.873522][ T49] usb 5-1: config 0 descriptor?? [ 430.164740][ T8205] CIFS: VFS: cifs_mount failed w/return code = -512 [ 430.290917][ T6468] usb 5-1: USB disconnect, device number 8 [ 431.308905][ T8250] loop0: detected capacity change from 0 to 4096 [ 431.543871][ T8250] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 431.543897][ T8250] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 431.544155][ T8250] loop0: [ 432.132821][ T8260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.576'. [ 436.004980][ T5757] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 436.210189][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.211229][ T5757] usb 2-1: not running at top speed; connect to a high speed hub [ 436.211252][ T5757] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 436.240369][ T5757] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 436.240397][ T5757] usb 2-1: config 0 has no interface number 0 [ 436.240428][ T5757] usb 2-1: config 0 interface 15 has no altsetting 0 [ 436.273218][ T5757] usb 2-1: string descriptor 0 read error: -22 [ 436.273360][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.305196][ T5757] usb 2-1: config 0 descriptor?? [ 436.490750][ T8304] loop0: detected capacity change from 0 to 4096 [ 437.784181][ T6468] usb 2-1: USB disconnect, device number 14 [ 437.830249][ T8306] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 437.830276][ T8306] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 437.830332][ T8306] loop0: [ 439.214098][ T5610] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 439.369759][ T5610] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.370502][ T5610] usb 5-1: not running at top speed; connect to a high speed hub [ 439.370538][ T5610] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 439.373040][ T5610] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 439.373065][ T5610] usb 5-1: config 0 has no interface number 0 [ 439.373097][ T5610] usb 5-1: config 0 interface 15 has no altsetting 0 [ 439.382623][ T5610] usb 5-1: string descriptor 0 read error: -22 [ 439.382764][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.477029][ T5610] usb 5-1: config 0 descriptor?? [ 439.666484][ T8322] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 441.076590][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.076637][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.545995][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 441.583920][ T49] usb 5-1: USB disconnect, device number 9 [ 441.696510][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 441.698864][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.698890][ T9] usb 1-1: config 0 has no interface number 0 [ 441.721251][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.721279][ T9] usb 1-1: Product: syz [ 441.721294][ T9] usb 1-1: Manufacturer: syz [ 441.721309][ T9] usb 1-1: SerialNumber: syz [ 441.762619][ T9] usb 1-1: config 0 descriptor?? [ 441.781357][ T9] usb 1-1: selecting invalid altsetting 1 [ 441.781521][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 441.796823][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 442.021132][ T9] DVB: Unable to find symbol stv0299_attach() [ 442.039337][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 442.039360][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 442.100877][ T8332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.579'. [ 442.376836][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 443.292990][ T9] DVB: Unable to find symbol tda8083_attach() [ 443.293008][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 443.386127][ T9] usb 1-1: USB disconnect, device number 19 [ 446.604131][ T49] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 446.796556][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 446.797760][ T49] usb 4-1: not running at top speed; connect to a high speed hub [ 446.797784][ T49] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 446.800097][ T49] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 446.800113][ T49] usb 4-1: config 0 has no interface number 0 [ 446.800133][ T49] usb 4-1: config 0 interface 15 has no altsetting 0 [ 446.809570][ T49] usb 4-1: string descriptor 0 read error: -22 [ 446.809728][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.827725][ T49] usb 4-1: config 0 descriptor?? [ 448.398964][ T36] audit: type=1326 audit(1792037715.901:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 448.466915][ T201] usb 4-1: USB disconnect, device number 19 [ 448.469927][ T8389] netlink: 72 bytes leftover after parsing attributes in process `syz.1.603'. [ 450.014113][ T5610] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 450.090206][ T8405] FAULT_INJECTION: forcing a failure. [ 450.090206][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 450.090245][ T8405] CPU: 1 UID: 0 PID: 8405 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 450.090271][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 450.090284][ T8405] Call Trace: [ 450.090292][ T8405] [ 450.090302][ T8405] dump_stack_lvl+0xe8/0x150 [ 450.090343][ T8405] should_fail_ex+0x46b/0x600 [ 450.090382][ T8405] should_failslab+0xa8/0x100 [ 450.090408][ T8405] __kmalloc_cache_noprof+0xa1/0x680 [ 450.090441][ T8405] ? io_drain_req+0xa6/0x560 [ 450.090495][ T8405] ? io_drain_req+0xa6/0x560 [ 450.090522][ T8405] io_drain_req+0xa6/0x560 [ 450.090548][ T8405] io_submit_sqes+0x147a/0x2310 [ 450.090609][ T8405] __se_sys_io_uring_enter+0x364/0x1bb0 [ 450.090647][ T8405] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 450.090682][ T8405] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 450.090716][ T8405] ? rcu_is_watching+0x16/0xb0 [ 450.090745][ T8405] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 450.090772][ T8405] do_syscall_64+0x166/0x520 [ 450.090801][ T8405] ? trace_irq_disable+0x3b/0x140 [ 450.090837][ T8405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.090860][ T8405] ? clear_bhb_loop+0x70/0xc0 [ 450.090887][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.090908][ T8405] RIP: 0033:0x7fe85591e559 [ 450.090928][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.090945][ T8405] RSP: 002b:00007fe853b75f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 450.090969][ T8405] RAX: ffffffffffffffda RBX: 0000200000001040 RCX: 00007fe85591e559 [ 450.090985][ T8405] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 450.090997][ T8405] RBP: 000000000000004d R08: 0000000000000000 R09: 0000000000000008 [ 450.091010][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000dc0 [ 450.091024][ T8405] R13: 0000200000000dc8 R14: 0000000000000e26 R15: 0000000000000000 [ 450.091059][ T8405] [ 450.165049][ T5610] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 450.169584][ T5610] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.169611][ T5610] usb 4-1: config 0 has no interface number 0 [ 450.215808][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.215837][ T5610] usb 4-1: Product: syz [ 450.215852][ T5610] usb 4-1: Manufacturer: syz [ 450.215866][ T5610] usb 4-1: SerialNumber: syz [ 450.244276][ T5610] usb 4-1: config 0 descriptor?? [ 450.283019][ T5610] usb 4-1: selecting invalid altsetting 1 [ 450.313209][ T5610] dvb_ttusb_budget: ttusb_init_controller: error [ 450.313231][ T5610] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 450.518017][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 450.518044][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 450.612743][ T8413] netlink: 64 bytes leftover after parsing attributes in process `syz.3.607'. [ 450.613653][ T5610] DVB: Unable to find symbol stv0299_attach() [ 451.767049][ T5610] DVB: Unable to find symbol tda8083_attach() [ 451.767066][ T5610] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 451.785980][ T5610] usb 4-1: USB disconnect, device number 20 [ 452.211355][ T8424] binder_alloc: 8422: binder_alloc_buf, no vma [ 452.324925][ T8426] loop0: detected capacity change from 0 to 4096 [ 454.084936][ T8446] netlink: 72 bytes leftover after parsing attributes in process `syz.4.618'. [ 454.484169][ T6012] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 456.697944][ T8451] netlink: 'syz.0.620': attribute type 4 has an invalid length. [ 456.697963][ T8451] netlink: 17 bytes leftover after parsing attributes in process `syz.0.620'. [ 456.733224][ T6012] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 456.737110][ T6012] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.737137][ T6012] usb 4-1: config 0 has no interface number 0 [ 456.769189][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.769218][ T6012] usb 4-1: Product: syz [ 456.769234][ T6012] usb 4-1: Manufacturer: syz [ 456.769248][ T6012] usb 4-1: SerialNumber: syz [ 456.787330][ T6012] usb 4-1: config 0 descriptor?? [ 456.813174][ T6012] usb 4-1: selecting invalid altsetting 1 [ 456.813340][ T6012] dvb_ttusb_budget: ttusb_init_controller: error [ 456.813354][ T6012] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 457.106968][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 457.106994][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 457.399054][ T8456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.623'. [ 457.405880][ T6012] DVB: Unable to find symbol stv0299_attach() [ 457.462853][ T6012] DVB: Unable to find symbol tda8083_attach() [ 457.462870][ T6012] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 457.473472][ T6012] usb 4-1: USB disconnect, device number 21 [ 458.444383][ T8502] netlink: 72 bytes leftover after parsing attributes in process `syz.3.637'. [ 459.521466][ T8514] netlink: 'syz.4.642': attribute type 4 has an invalid length. [ 459.521513][ T8514] netlink: 17 bytes leftover after parsing attributes in process `syz.4.642'. [ 460.646915][ T8517] FAULT_INJECTION: forcing a failure. [ 460.646915][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 460.646954][ T8517] CPU: 0 UID: 0 PID: 8517 Comm: syz.2.644 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.646979][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.646992][ T8517] Call Trace: [ 460.647001][ T8517] [ 460.647012][ T8517] dump_stack_lvl+0xe8/0x150 [ 460.647052][ T8517] should_fail_ex+0x46b/0x600 [ 460.647091][ T8517] should_failslab+0xa8/0x100 [ 460.647118][ T8517] __kmalloc_cache_noprof+0xa1/0x680 [ 460.647151][ T8517] ? __se_sys_memfd_create+0x227/0x420 [ 460.647174][ T8517] ? __se_sys_memfd_create+0x227/0x420 [ 460.647205][ T8517] __se_sys_memfd_create+0x227/0x420 [ 460.647232][ T8517] do_syscall_64+0x166/0x520 [ 460.647262][ T8517] ? trace_irq_disable+0x3b/0x140 [ 460.647292][ T8517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.647314][ T8517] ? clear_bhb_loop+0x70/0xc0 [ 460.647340][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.647362][ T8517] RIP: 0033:0x7f2034cbe559 [ 460.647383][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.647401][ T8517] RSP: 002b:00007f2032f16028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 460.647425][ T8517] RAX: ffffffffffffffda RBX: 00007f2034f45fa0 RCX: 00007f2034cbe559 [ 460.647441][ T8517] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 460.647454][ T8517] RBP: 00007f2034d558b0 R08: 0000000000000000 R09: 0000000000000000 [ 460.647468][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.647481][ T8517] R13: 00007f2034f46038 R14: 00007f2034f45fa0 R15: 00007ffe1c1a0e48 [ 460.647515][ T8517] [ 460.962199][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'. [ 463.692752][ T36] audit: type=1326 audit(1792037731.181:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8538 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdabce559 code=0x0 [ 464.363256][ T8547] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 464.363302][ T8547] netlink: 17 bytes leftover after parsing attributes in process `syz.0.653'. [ 465.800271][ T8555] netlink: 72 bytes leftover after parsing attributes in process `syz.1.658'. [ 468.974135][ T6012] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 468.974185][ T5757] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 469.067270][ T49] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 469.134938][ T5757] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 469.135989][ T5757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.136042][ T5757] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.138957][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.138982][ T5757] usb 3-1: Product: syz [ 469.138997][ T5757] usb 3-1: Manufacturer: syz [ 469.139012][ T5757] usb 3-1: SerialNumber: syz [ 469.139247][ T6012] usb 1-1: unable to get BOS descriptor or descriptor too short [ 469.139976][ T6012] usb 1-1: not running at top speed; connect to a high speed hub [ 469.140010][ T6012] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 469.141717][ T6012] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 469.141741][ T6012] usb 1-1: config 0 has no interface number 0 [ 469.141773][ T6012] usb 1-1: config 0 interface 15 has no altsetting 0 [ 469.148962][ T6012] usb 1-1: string descriptor 0 read error: -22 [ 469.149094][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.177700][ T6012] usb 1-1: config 0 descriptor?? [ 469.197544][ T201] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 469.215522][ T49] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 469.245025][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 469.245064][ T49] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 469.245106][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.372576][ T49] usb 5-1: probing VID:PID(0424:012C) [ 469.384892][ T201] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 469.386219][ T201] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 469.386245][ T201] usb 2-1: config 1 has no interface number 0 [ 469.390434][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.390461][ T201] usb 2-1: Product: syz [ 469.390476][ T201] usb 2-1: Manufacturer: syz [ 469.390491][ T201] usb 2-1: SerialNumber: syz [ 469.439873][ T49] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 469.439909][ T49] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 469.439929][ T49] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 469.439948][ T49] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 469.439967][ T49] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 469.713232][ T201] usb 2-1: 3:0 : does not exist [ 469.713260][ T201] usb 2-1: 3:0 : does not exist [ 469.939526][ T49] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 470.079419][ T6012] usb 2-1: USB disconnect, device number 15 [ 470.161147][ T49] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 470.166666][ T5610] usb 3-1: USB disconnect, device number 16 [ 470.362531][ T5743] usb 1-1: USB disconnect, device number 20 [ 471.257080][ T8596] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 471.257124][ T8596] netlink: 17 bytes leftover after parsing attributes in process `syz.3.667'. [ 472.252585][ T49] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 472.384733][ T49] usb 5-1: USB disconnect, device number 10 [ 473.305659][ T5610] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 474.478145][ T5609] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 474.558646][ T8624] CIFS: Attempting to mount //127.0.0.1/share [ 474.589613][ T8624] CIFS: VFS: Error connecting to socket. Aborting operation. [ 474.589667][ T8624] CIFS: VFS: cifs_mount failed w/return code = -111 [ 475.712379][ T8632] netlink: 'syz.4.678': attribute type 4 has an invalid length. [ 475.712398][ T8632] netlink: 17 bytes leftover after parsing attributes in process `syz.4.678'. [ 476.944178][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 477.107815][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 477.108875][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 477.108915][ T9] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 477.112417][ T9] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 477.112524][ T9] usb 3-1: config 0 has no interface number 0 [ 477.112556][ T9] usb 3-1: config 0 interface 15 has no altsetting 0 [ 477.168155][ T9] usb 3-1: string descriptor 0 read error: -22 [ 477.168294][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.194721][ T8657] netlink: 72 bytes leftover after parsing attributes in process `syz.3.684'. [ 477.203876][ T9] usb 3-1: config 0 descriptor?? [ 479.338339][ T5727] usb 3-1: USB disconnect, device number 17 [ 479.364144][ T201] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 480.334913][ T8673] netlink: 'syz.3.689': attribute type 4 has an invalid length. [ 480.334931][ T8673] netlink: 17 bytes leftover after parsing attributes in process `syz.3.689'. [ 480.514960][ T201] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 480.516432][ T201] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 480.516458][ T201] usb 1-1: config 1 has no interface number 0 [ 480.519856][ T201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.519882][ T201] usb 1-1: Product: syz [ 480.519897][ T201] usb 1-1: Manufacturer: syz [ 480.519912][ T201] usb 1-1: SerialNumber: syz [ 480.680825][ T201] usb 1-1: 3:0 : does not exist [ 480.680850][ T201] usb 1-1: 3:0 : does not exist [ 480.795547][ T8678] FAULT_INJECTION: forcing a failure. [ 480.795547][ T8678] name failslab, interval 1, probability 0, space 0, times 0 [ 480.795584][ T8678] CPU: 1 UID: 0 PID: 8678 Comm: syz.1.692 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.795611][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 480.795624][ T8678] Call Trace: [ 480.795633][ T8678] [ 480.795643][ T8678] dump_stack_lvl+0xe8/0x150 [ 480.795683][ T8678] should_fail_ex+0x46b/0x600 [ 480.795724][ T8678] should_failslab+0xa8/0x100 [ 480.795751][ T8678] __kmalloc_noprof+0xfb/0x790 [ 480.795781][ T8678] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 480.795804][ T8678] ? mpi_alloc+0x77/0x140 [ 480.795844][ T8678] ? mpi_alloc+0x77/0x140 [ 480.795879][ T8678] mpi_alloc+0x77/0x140 [ 480.795902][ T8678] mpi_read_raw_data+0x139/0x970 [ 480.795956][ T8678] rsa_set_pub_key+0x30a/0x5b0 [ 480.796000][ T8678] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 480.796049][ T8678] ? __kmalloc_noprof+0x43e/0x790 [ 480.796078][ T8678] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 480.796107][ T8678] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 480.796141][ T8678] public_key_verify_signature+0x57a/0x9e0 [ 480.796183][ T8678] ? __pfx_public_key_verify_signature+0x10/0x10 [ 480.796223][ T8678] ? asymmetric_key_generate_id+0x60/0x170 [ 480.796243][ T8678] ? asymmetric_key_id_same+0x67/0xe0 [ 480.796272][ T8678] x509_check_for_self_signed+0x326/0x430 [ 480.796304][ T8678] x509_cert_parse+0x622/0x7a0 [ 480.796333][ T8678] x509_key_preparse+0x64/0x6d0 [ 480.796364][ T8678] ? __pfx_smack_key_permission+0x10/0x10 [ 480.796391][ T8678] asymmetric_key_preparse+0xb9/0x1b0 [ 480.796416][ T8678] __key_create_or_update+0x354/0xa70 [ 480.796444][ T8678] ? wait_for_completion_timeout+0x430/0x610 [ 480.796562][ T8678] ? __pfx___key_create_or_update+0x10/0x10 [ 480.796593][ T8678] ? lookup_user_key+0xb68/0x1150 [ 480.796627][ T8678] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 480.796651][ T8678] ? __pfx_keyring_search_iterator+0x10/0x10 [ 480.796685][ T8678] key_create_or_update+0x42/0x60 [ 480.796715][ T8678] __se_sys_add_key+0x349/0x420 [ 480.796757][ T8678] ? __pfx___se_sys_add_key+0x10/0x10 [ 480.796797][ T8678] ? __x64_sys_add_key+0x20/0xc0 [ 480.796829][ T8678] do_syscall_64+0x166/0x520 [ 480.796858][ T8678] ? trace_irq_disable+0x3b/0x140 [ 480.796886][ T8678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.796908][ T8678] ? clear_bhb_loop+0x70/0xc0 [ 480.796935][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.796954][ T8678] RIP: 0033:0x7fe85591e559 [ 480.796974][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.796993][ T8678] RSP: 002b:00007fe853b76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 480.797017][ T8678] RAX: ffffffffffffffda RBX: 00007fe855ba5fa0 RCX: 00007fe85591e559 [ 480.797034][ T8678] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 480.797049][ T8678] RBP: 00007fe8559b58b0 R08: 00000000059cd17e R09: 0000000000000000 [ 480.797064][ T8678] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 480.797078][ T8678] R13: 00007fe855ba6038 R14: 00007fe855ba5fa0 R15: 00007ffeea3defe8 [ 480.797124][ T8678] [ 481.171164][ T201] usb 1-1: USB disconnect, device number 21 [ 481.272413][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.224160][ T5756] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 482.383343][ T5756] usb 3-1: unable to get BOS descriptor or descriptor too short [ 482.393433][ T5756] usb 3-1: not running at top speed; connect to a high speed hub [ 482.393483][ T5756] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 482.395206][ T5756] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 482.395286][ T5756] usb 3-1: config 0 has no interface number 0 [ 482.395318][ T5756] usb 3-1: config 0 interface 15 has no altsetting 0 [ 482.410779][ T5756] usb 3-1: string descriptor 0 read error: -22 [ 482.410916][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.506343][ T5756] usb 3-1: config 0 descriptor?? [ 484.400621][ T8727] netlink: 'syz.4.701': attribute type 4 has an invalid length. [ 484.400639][ T8727] netlink: 17 bytes leftover after parsing attributes in process `syz.4.701'. [ 484.982568][ T5743] usb 3-1: USB disconnect, device number 18 [ 487.209252][ T36] audit: type=1326 audit(1792037754.701:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.704" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85591e559 code=0x0 [ 487.668746][ T8760] jffs2: notice: (8760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 487.784305][ T5743] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 487.935090][ T5743] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 487.943679][ T5743] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 487.943709][ T5743] usb 1-1: config 1 has no interface number 0 [ 487.948470][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.948499][ T5743] usb 1-1: Product: syz [ 487.948515][ T5743] usb 1-1: Manufacturer: syz [ 487.948529][ T5743] usb 1-1: SerialNumber: syz [ 488.158739][ T5743] usb 1-1: 3:0 : does not exist [ 488.158767][ T5743] usb 1-1: 3:0 : does not exist [ 489.016590][ T5743] usb 1-1: USB disconnect, device number 22 [ 490.536960][ T36] audit: type=1326 audit(1792037758.021:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8776 comm="syz.0.710" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 494.637165][ T8796] program syz.2.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.686249][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.905456][ T5757] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 496.067915][ T5757] usb 1-1: unable to get BOS descriptor or descriptor too short [ 496.073524][ T5757] usb 1-1: not running at top speed; connect to a high speed hub [ 496.073566][ T5757] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 496.101237][ T5757] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 496.101268][ T5757] usb 1-1: config 0 has no interface number 0 [ 496.101302][ T5757] usb 1-1: config 0 interface 15 has no altsetting 0 [ 496.127287][ T5757] usb 1-1: string descriptor 0 read error: -22 [ 496.127440][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.148034][ T5757] usb 1-1: config 0 descriptor?? [ 497.946735][ T8817] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 497.946761][ T8817] netlink: 'syz.3.716': attribute type 2 has an invalid length. [ 498.327377][ T31] usb 1-1: USB disconnect, device number 23 [ 499.647904][ T8852] netlink: 72 bytes leftover after parsing attributes in process `syz.2.714'. [ 499.804144][ T5756] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 500.689075][ T8849] netlink: 'syz.1.713': attribute type 4 has an invalid length. [ 500.689093][ T8849] netlink: 17 bytes leftover after parsing attributes in process `syz.1.713'. [ 500.804977][ T5756] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 500.806794][ T5756] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 500.806820][ T5756] usb 4-1: config 1 has no interface number 0 [ 500.811042][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.811061][ T5756] usb 4-1: Product: syz [ 500.811070][ T5756] usb 4-1: Manufacturer: syz [ 500.811078][ T5756] usb 4-1: SerialNumber: syz [ 500.917927][ T5756] usb 4-1: 3:0 : does not exist [ 500.917958][ T5756] usb 4-1: 3:0 : does not exist [ 501.105045][ T5756] usb 4-1: USB disconnect, device number 22 [ 502.200161][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.200234][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.516586][ T8891] loop0: detected capacity change from 0 to 6 [ 504.630117][ T8891] ldm_validate_privheads(): Disk read failed. [ 504.630296][ T8891] loop0: [ 504.630318][ T8891] loop0: partition table partially beyond EOD, truncated [ 505.937258][ T8899] netlink: 'syz.1.734': attribute type 4 has an invalid length. [ 505.937275][ T8899] netlink: 17 bytes leftover after parsing attributes in process `syz.1.734'. [ 507.921482][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 509.474416][ T6468] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 509.640566][ T6468] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 509.656823][ T6468] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 509.656864][ T6468] usb 2-1: config 1 has no interface number 0 [ 509.690901][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.690946][ T6468] usb 2-1: Product: syz [ 509.690982][ T6468] usb 2-1: Manufacturer: syz [ 509.691010][ T6468] usb 2-1: SerialNumber: syz [ 509.848242][ T6468] usb 2-1: 3:0 : does not exist [ 509.848284][ T6468] usb 2-1: 3:0 : does not exist [ 510.091161][ T6468] usb 2-1: USB disconnect, device number 16 [ 510.243414][ T8803] udevd[8803]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.200824][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 516.878181][ T6468] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 517.056271][ T6468] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 517.057465][ T6468] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 517.057495][ T6468] usb 3-1: config 1 has no interface number 0 [ 517.060951][ T6468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.060978][ T6468] usb 3-1: Product: syz [ 517.060992][ T6468] usb 3-1: Manufacturer: syz [ 517.061008][ T6468] usb 3-1: SerialNumber: syz [ 517.133210][ T6468] usb 3-1: 3:0 : does not exist [ 517.133238][ T6468] usb 3-1: 3:0 : does not exist [ 517.134347][ T5756] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 518.606139][ T5756] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 518.611646][ T5756] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.611702][ T5756] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.628682][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.628712][ T5756] usb 2-1: Product: syz [ 518.628727][ T5756] usb 2-1: Manufacturer: syz [ 518.628742][ T5756] usb 2-1: SerialNumber: syz [ 518.704657][ T6468] usb 3-1: USB disconnect, device number 19 [ 519.985435][ T5756] usb 2-1: USB disconnect, device number 17 [ 520.577769][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 521.791216][ T9011] binder: BINDER_SET_CONTEXT_MGR already set [ 521.791246][ T9011] binder: 9008:9011 ioctl 4018620d 200000001840 returned -16 [ 521.840827][ T8988] udevd[8988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.494505][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 527.034236][ T9035] program syz.0.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.244263][ T6468] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 528.394903][ T6468] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 528.401153][ T6468] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 528.401183][ T6468] usb 4-1: Product: syz [ 528.401199][ T6468] usb 4-1: SerialNumber: syz [ 528.435745][ T6468] usb 4-1: config 0 descriptor?? [ 528.646531][ T6468] hso 4-1:0.0: Failed to find BULK eps [ 528.814147][ T1001] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 528.858666][ T5757] usb 4-1: USB disconnect, device number 23 [ 528.966087][ T1001] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 528.967302][ T1001] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.967355][ T1001] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.969646][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.969671][ T1001] usb 3-1: Product: syz [ 528.969686][ T1001] usb 3-1: Manufacturer: syz [ 528.969700][ T1001] usb 3-1: SerialNumber: syz [ 530.758747][ T2285] usb 3-1: USB disconnect, device number 20 [ 531.453257][ T61] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 532.503143][ T9066] netlink: 'syz.1.781': attribute type 4 has an invalid length. [ 532.503162][ T9066] netlink: 17 bytes leftover after parsing attributes in process `syz.1.781'. [ 535.863844][ T9081] program syz.1.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.324216][ T6468] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 537.494966][ T6468] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 537.503499][ T6468] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 537.503528][ T6468] usb 1-1: Product: syz [ 537.503543][ T6468] usb 1-1: SerialNumber: syz [ 537.541956][ T6468] usb 1-1: config 0 descriptor?? [ 537.785067][ T6468] hso 1-1:0.0: Failed to find BULK eps [ 539.397564][ T6468] usb 1-1: USB disconnect, device number 24 [ 541.483492][ T61] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 546.336240][ T36] audit: type=1326 audit(1792037813.791:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.0.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 546.943472][ T2285] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 547.104232][ T201] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 547.115202][ T2285] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 547.116811][ T2285] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 547.116836][ T2285] usb 4-1: config 1 has no interface number 0 [ 547.146061][ T2285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.146089][ T2285] usb 4-1: Product: syz [ 547.146104][ T2285] usb 4-1: Manufacturer: syz [ 547.146119][ T2285] usb 4-1: SerialNumber: syz [ 547.706413][ T9135] netlink: 'syz.2.796': attribute type 4 has an invalid length. [ 547.706454][ T9135] netlink: 17 bytes leftover after parsing attributes in process `syz.2.796'. [ 548.424664][ T2285] usb 4-1: 3:0 : does not exist [ 548.424690][ T2285] usb 4-1: 3:0 : does not exist [ 548.469629][ T201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.470874][ T201] usb 2-1: not running at top speed; connect to a high speed hub [ 548.470910][ T201] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 548.481721][ T201] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 548.481890][ T201] usb 2-1: config 0 has no interface number 0 [ 548.481923][ T201] usb 2-1: config 0 interface 15 has no altsetting 0 [ 548.500141][ T201] usb 2-1: string descriptor 0 read error: -22 [ 548.500283][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.538514][ T201] usb 2-1: config 0 descriptor?? [ 549.567715][ T2285] usb 4-1: USB disconnect, device number 24 [ 549.962607][ T9129] udevd[9129]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.000601][ T5756] usb 2-1: USB disconnect, device number 18 [ 552.906005][ T9170] program syz.0.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.697339][ T9176] CIFS: Attempting to mount //127.0.0.1/share [ 554.829126][ T9180] FAULT_INJECTION: forcing a failure. [ 554.829126][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 554.829165][ T9180] CPU: 1 UID: 0 PID: 9180 Comm: syz.3.811 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 554.829201][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 554.829216][ T9180] Call Trace: [ 554.829225][ T9180] [ 554.829234][ T9180] dump_stack_lvl+0xe8/0x150 [ 554.829273][ T9180] should_fail_ex+0x46b/0x600 [ 554.829313][ T9180] should_failslab+0xa8/0x100 [ 554.829339][ T9180] __kmalloc_noprof+0xfb/0x790 [ 554.829369][ T9180] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 554.829391][ T9180] ? mpi_alloc+0x77/0x140 [ 554.829411][ T9180] ? mpi_alloc+0x77/0x140 [ 554.829439][ T9180] mpi_alloc+0x77/0x140 [ 554.829462][ T9180] mpi_read_raw_data+0x139/0x970 [ 554.829504][ T9180] rsa_set_pub_key+0x30a/0x5b0 [ 554.829556][ T9180] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 554.829608][ T9180] ? __kmalloc_noprof+0x43e/0x790 [ 554.829637][ T9180] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 554.829664][ T9180] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 554.829692][ T9180] public_key_verify_signature+0x57a/0x9e0 [ 554.829731][ T9180] ? __pfx_public_key_verify_signature+0x10/0x10 [ 554.829771][ T9180] ? asymmetric_key_generate_id+0x60/0x170 [ 554.829790][ T9180] ? asymmetric_key_id_same+0x67/0xe0 [ 554.829817][ T9180] x509_check_for_self_signed+0x326/0x430 [ 554.829847][ T9180] x509_cert_parse+0x622/0x7a0 [ 554.829874][ T9180] x509_key_preparse+0x64/0x6d0 [ 554.829899][ T9180] ? __pfx_smack_key_permission+0x10/0x10 [ 554.829926][ T9180] asymmetric_key_preparse+0xb9/0x1b0 [ 554.829950][ T9180] __key_create_or_update+0x354/0xa70 [ 554.829985][ T9180] ? __pfx___key_create_or_update+0x10/0x10 [ 554.830014][ T9180] ? lookup_user_key+0xb68/0x1150 [ 554.830049][ T9180] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 554.830073][ T9180] ? __pfx_keyring_search_iterator+0x10/0x10 [ 554.830106][ T9180] key_create_or_update+0x42/0x60 [ 554.830135][ T9180] __se_sys_add_key+0x349/0x420 [ 554.830168][ T9180] ? __pfx___se_sys_add_key+0x10/0x10 [ 554.830207][ T9180] ? __x64_sys_add_key+0x20/0xc0 [ 554.830237][ T9180] do_syscall_64+0x166/0x520 [ 554.830274][ T9180] ? trace_irq_disable+0x3b/0x140 [ 554.830302][ T9180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.830325][ T9180] ? clear_bhb_loop+0x70/0xc0 [ 554.830351][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.830373][ T9180] RIP: 0033:0x7fafdabce559 [ 554.830393][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.830412][ T9180] RSP: 002b:00007fafd8e26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 554.830434][ T9180] RAX: ffffffffffffffda RBX: 00007fafdae55fa0 RCX: 00007fafdabce559 [ 554.830450][ T9180] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 554.830466][ T9180] RBP: 00007fafdac658b0 R08: 00000000311d6b9a R09: 0000000000000000 [ 554.830480][ T9180] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 554.830494][ T9180] R13: 00007fafdae56038 R14: 00007fafdae55fa0 R15: 00007ffc368338e8 [ 554.830535][ T9180] [ 556.425661][ T36] audit: type=1326 audit(1792037824.251:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9187 comm="syz.3.812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdabce559 code=0x0 [ 556.572914][ T9176] CIFS: VFS: cifs_mount failed w/return code = -112 [ 557.174527][ T6468] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 557.336305][ T6468] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 557.341660][ T6468] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 557.341678][ T6468] usb 2-1: config 1 has no interface number 0 [ 557.381841][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.381860][ T6468] usb 2-1: Product: syz [ 557.381868][ T6468] usb 2-1: Manufacturer: syz [ 557.381876][ T6468] usb 2-1: SerialNumber: syz [ 557.433728][ T6468] usb 2-1: 3:0 : does not exist [ 557.433747][ T6468] usb 2-1: 3:0 : does not exist [ 558.647660][ T6468] usb 2-1: USB disconnect, device number 19 [ 561.522590][ T36] audit: type=1326 audit(1792037829.581:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9210 comm="syz.4.816" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f507869e559 code=0x0 [ 561.822591][ T9197] udevd[9197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.044173][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 562.936604][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.936677][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.934970][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.825'. [ 568.738583][ T9275] CIFS: Attempting to mount //127.0.0.1/share [ 570.399549][ T9275] CIFS: VFS: cifs_mount failed w/return code = -512 [ 570.835439][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 574.507398][ T9318] FAULT_INJECTION: forcing a failure. [ 574.507398][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 574.507438][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.2.844 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.507464][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.507477][ T9318] Call Trace: [ 574.507486][ T9318] [ 574.507497][ T9318] dump_stack_lvl+0xe8/0x150 [ 574.507538][ T9318] should_fail_ex+0x46b/0x600 [ 574.507586][ T9318] should_failslab+0xa8/0x100 [ 574.507614][ T9318] __kmalloc_cache_noprof+0xa1/0x680 [ 574.507649][ T9318] ? mpi_alloc+0x52/0x140 [ 574.507669][ T9318] ? mpi_alloc+0x52/0x140 [ 574.507698][ T9318] mpi_alloc+0x52/0x140 [ 574.507733][ T9318] mpi_read_raw_from_sgl+0x2b5/0x610 [ 574.507775][ T9318] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 574.507814][ T9318] ? mpi_alloc+0x52/0x140 [ 574.507839][ T9318] ? __asan_memset+0x22/0x50 [ 574.507875][ T9318] rsa_enc+0x165/0x480 [ 574.507907][ T9318] ? __virt_addr_valid+0x137/0x390 [ 574.507971][ T9318] ? __pfx_rsa_enc+0x10/0x10 [ 574.507998][ T9318] ? __virt_addr_valid+0x137/0x390 [ 574.508026][ T9318] ? __virt_addr_valid+0x2e8/0x390 [ 574.508060][ T9318] ? sg_init_one+0xf5/0x1c0 [ 574.508091][ T9318] rsassa_pkcs1_verify+0x52b/0xbb0 [ 574.508127][ T9318] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 574.508165][ T9318] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 574.508192][ T9318] ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0 [ 574.508218][ T9318] public_key_verify_signature+0x79b/0x9e0 [ 574.508257][ T9318] ? __pfx_public_key_verify_signature+0x10/0x10 [ 574.508298][ T9318] ? asymmetric_key_generate_id+0x60/0x170 [ 574.508319][ T9318] ? asymmetric_key_id_same+0x67/0xe0 [ 574.508348][ T9318] x509_check_for_self_signed+0x326/0x430 [ 574.508381][ T9318] x509_cert_parse+0x622/0x7a0 [ 574.508411][ T9318] x509_key_preparse+0x64/0x6d0 [ 574.508440][ T9318] ? __pfx_smack_key_permission+0x10/0x10 [ 574.508467][ T9318] asymmetric_key_preparse+0xb9/0x1b0 [ 574.508532][ T9318] __key_create_or_update+0x354/0xa70 [ 574.508570][ T9318] ? __pfx___key_create_or_update+0x10/0x10 [ 574.508601][ T9318] ? lookup_user_key+0xb68/0x1150 [ 574.508637][ T9318] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 574.508661][ T9318] ? __pfx_keyring_search_iterator+0x10/0x10 [ 574.508692][ T9318] key_create_or_update+0x42/0x60 [ 574.508729][ T9318] __se_sys_add_key+0x349/0x420 [ 574.508763][ T9318] ? __pfx___se_sys_add_key+0x10/0x10 [ 574.508803][ T9318] ? __x64_sys_add_key+0x20/0xc0 [ 574.508836][ T9318] do_syscall_64+0x166/0x520 [ 574.508865][ T9318] ? trace_irq_disable+0x3b/0x140 [ 574.508895][ T9318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.508917][ T9318] ? clear_bhb_loop+0x70/0xc0 [ 574.508943][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.508965][ T9318] RIP: 0033:0x7f2034cbe559 [ 574.508986][ T9318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.509015][ T9318] RSP: 002b:00007f2032f16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 574.509041][ T9318] RAX: ffffffffffffffda RBX: 00007f2034f45fa0 RCX: 00007f2034cbe559 [ 574.509058][ T9318] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 574.509073][ T9318] RBP: 00007f2034d558b0 R08: 0000000039361d45 R09: 0000000000000000 [ 574.509089][ T9318] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 574.509103][ T9318] R13: 00007f2034f46038 R14: 00007f2034f45fa0 R15: 00007ffe1c1a0e48 [ 574.509140][ T9318] [ 578.801024][ T9342] program syz.0.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.561880][ T9361] syzkaller0: entered promiscuous mode [ 582.561908][ T9361] syzkaller0: entered allmulticast mode [ 582.610033][ T9361] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 582.610059][ T9361] netlink: 'syz.2.856': attribute type 2 has an invalid length. [ 583.095778][ T9369] mtrr: base(0x20000020000) is not aligned on a size(0x0000) boundary [ 583.139152][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 585.095547][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 585.220325][ T9396] loop0: detected capacity change from 0 to 4096 [ 585.245858][ T31] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 585.248725][ T31] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 585.248753][ T31] usb 4-1: Product: syz [ 585.248767][ T31] usb 4-1: SerialNumber: syz [ 585.252541][ T31] usb 4-1: config 0 descriptor?? [ 585.301408][ T9396] loop0: [ 585.628682][ T31] hso 4-1:0.0: Failed to find BULK eps [ 585.837681][ T5743] usb 4-1: USB disconnect, device number 25 [ 587.577766][ T36] audit: type=1326 audit(1792037855.041:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9401 comm="syz.0.867" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 588.089756][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 589.952084][ T9431] loop0: detected capacity change from 0 to 4096 [ 590.155011][ T9431] loop0: [ 591.192336][ T9448] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 591.192361][ T9448] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 591.247366][ T9447] syzkaller0: entered promiscuous mode [ 591.247405][ T9447] syzkaller0: entered allmulticast mode [ 591.584176][ T6468] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 591.734978][ T6468] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 591.743382][ T6468] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 591.743419][ T6468] usb 3-1: Product: syz [ 591.743434][ T6468] usb 3-1: SerialNumber: syz [ 591.796201][ T6468] usb 3-1: config 0 descriptor?? [ 592.011905][ T6468] hso 3-1:0.0: Failed to find BULK eps [ 592.202736][ T9471] loop0: detected capacity change from 0 to 4096 [ 592.230062][ T6468] usb 3-1: USB disconnect, device number 21 [ 592.233025][ T9472] FAULT_INJECTION: forcing a failure. [ 592.233025][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 592.233061][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.4.887 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 592.233085][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.233097][ T9472] Call Trace: [ 592.233107][ T9472] [ 592.233116][ T9472] dump_stack_lvl+0xe8/0x150 [ 592.233154][ T9472] should_fail_ex+0x46b/0x600 [ 592.233199][ T9472] should_failslab+0xa8/0x100 [ 592.233224][ T9472] __kmalloc_noprof+0xfb/0x790 [ 592.233254][ T9472] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 592.233277][ T9472] ? mpi_alloc+0x77/0x140 [ 592.233295][ T9472] ? mpi_alloc+0x77/0x140 [ 592.233322][ T9472] mpi_alloc+0x77/0x140 [ 592.233345][ T9472] mpi_read_raw_data+0x139/0x970 [ 592.233384][ T9472] rsa_set_pub_key+0x30a/0x5b0 [ 592.233428][ T9472] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 592.233489][ T9472] ? __kmalloc_noprof+0x43e/0x790 [ 592.233519][ T9472] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 592.233547][ T9472] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 592.233574][ T9472] public_key_verify_signature+0x57a/0x9e0 [ 592.233613][ T9472] ? __pfx_public_key_verify_signature+0x10/0x10 [ 592.233654][ T9472] ? asymmetric_key_generate_id+0x60/0x170 [ 592.233675][ T9472] ? asymmetric_key_id_same+0x67/0xe0 [ 592.233704][ T9472] x509_check_for_self_signed+0x326/0x430 [ 592.233736][ T9472] x509_cert_parse+0x622/0x7a0 [ 592.233766][ T9472] x509_key_preparse+0x64/0x6d0 [ 592.233801][ T9472] ? __pfx_smack_key_permission+0x10/0x10 [ 592.233828][ T9472] asymmetric_key_preparse+0xb9/0x1b0 [ 592.233853][ T9472] __key_create_or_update+0x354/0xa70 [ 592.233884][ T9472] ? __pfx___key_create_or_update+0x10/0x10 [ 592.233914][ T9472] ? lookup_user_key+0xb68/0x1150 [ 592.233950][ T9472] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 592.233973][ T9472] ? __pfx_keyring_search_iterator+0x10/0x10 [ 592.234002][ T9472] key_create_or_update+0x42/0x60 [ 592.234029][ T9472] __se_sys_add_key+0x349/0x420 [ 592.234059][ T9472] ? __pfx___se_sys_add_key+0x10/0x10 [ 592.234095][ T9472] ? __x64_sys_add_key+0x20/0xc0 [ 592.234127][ T9472] do_syscall_64+0x166/0x520 [ 592.234157][ T9472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.234179][ T9472] ? clear_bhb_loop+0x70/0xc0 [ 592.234206][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.234227][ T9472] RIP: 0033:0x7f507869e559 [ 592.234247][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.234266][ T9472] RSP: 002b:00007f50768f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 592.234289][ T9472] RAX: ffffffffffffffda RBX: 00007f5078925fa0 RCX: 00007f507869e559 [ 592.234306][ T9472] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 592.234330][ T9472] RBP: 00007f50787358b0 R08: 0000000008fcdec1 R09: 0000000000000000 [ 592.234345][ T9472] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 592.234358][ T9472] R13: 00007f5078926038 R14: 00007f5078925fa0 R15: 00007ffda3de4298 [ 592.234394][ T9472] [ 592.284536][ T31] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 592.453654][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 592.455135][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 592.455184][ T31] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 592.461952][ T31] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 592.461979][ T31] usb 2-1: config 0 has no interface number 0 [ 592.462011][ T31] usb 2-1: config 0 interface 15 has no altsetting 0 [ 592.485094][ T31] usb 2-1: string descriptor 0 read error: -22 [ 592.485235][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.664581][ T31] usb 2-1: config 0 descriptor?? [ 592.800719][ T9471] loop0: [ 593.043602][ T61] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 596.182118][ T36] audit: type=1326 audit(1792037863.641:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.2.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2034cbe559 code=0x0 [ 596.386509][ T9508] CIFS mount error: No usable UNC path provided in device string! [ 596.386509][ T9508] [ 596.386660][ T9508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 596.423383][ T201] usb 2-1: USB disconnect, device number 20 [ 597.024120][ T5743] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 597.084944][ T9520] FAULT_INJECTION: forcing a failure. [ 597.084944][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 597.084984][ T9520] CPU: 0 UID: 0 PID: 9520 Comm: syz.0.900 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 597.085011][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.085024][ T9520] Call Trace: [ 597.085031][ T9520] [ 597.085041][ T9520] dump_stack_lvl+0xe8/0x150 [ 597.085079][ T9520] should_fail_ex+0x46b/0x600 [ 597.085121][ T9520] should_failslab+0xa8/0x100 [ 597.085147][ T9520] __kvmalloc_node_noprof+0x176/0x890 [ 597.085172][ T9520] ? sbitmap_init_node+0x2bc/0x630 [ 597.085197][ T9520] ? sbitmap_init_node+0x2bc/0x630 [ 597.085232][ T9520] sbitmap_init_node+0x2bc/0x630 [ 597.085265][ T9520] sbitmap_queue_init_node+0x3e/0x4d0 [ 597.085298][ T9520] kyber_alloc_sched_data+0x303/0x540 [ 597.085358][ T9520] blk_mq_alloc_sched_res+0x103/0x360 [ 597.085390][ T9520] elevator_change+0x122/0x480 [ 597.085414][ T9520] ? down_write_trylock+0x1ec/0x280 [ 597.085437][ T9520] ? elv_iosched_store+0x498/0x630 [ 597.085463][ T9520] elv_iosched_store+0x504/0x630 [ 597.085501][ T9520] ? __pfx_elv_iosched_store+0x10/0x10 [ 597.085526][ T9520] ? register_lock_class+0x31/0x2e0 [ 597.085575][ T9520] queue_attr_store+0x207/0x2b0 [ 597.085610][ T9520] ? __pfx_queue_attr_store+0x10/0x10 [ 597.085639][ T9520] ? lock_acquire+0x115/0x350 [ 597.085664][ T9520] ? sysfs_file_kobj+0x1a/0x230 [ 597.085699][ T9520] ? sysfs_file_kobj+0x1a/0x230 [ 597.085725][ T9520] ? sysfs_file_kobj+0x1a/0x230 [ 597.085748][ T9520] ? sysfs_file_kobj+0x1a/0x230 [ 597.085773][ T9520] ? sysfs_file_kobj+0x1e4/0x230 [ 597.085799][ T9520] ? sysfs_kf_write+0x166/0x260 [ 597.085828][ T9520] ? __pfx_sysfs_kf_write+0x10/0x10 [ 597.085852][ T9520] kernfs_fop_write_iter+0x3a5/0x540 [ 597.085883][ T9520] vfs_write+0x61e/0xbb0 [ 597.085923][ T9520] ? __pfx_vfs_write+0x10/0x10 [ 597.085953][ T9520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.085988][ T9520] ? mutex_lock_nested+0x152/0x1d0 [ 597.086009][ T9520] ? fdget_pos+0x252/0x320 [ 597.086065][ T9520] ksys_write+0x156/0x270 [ 597.086098][ T9520] ? __pfx_ksys_write+0x10/0x10 [ 597.086136][ T9520] do_syscall_64+0x166/0x520 [ 597.086161][ T9520] ? trace_irq_disable+0x3b/0x140 [ 597.086186][ T9520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.086206][ T9520] ? clear_bhb_loop+0x70/0xc0 [ 597.086231][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.086252][ T9520] RIP: 0033:0x7f662d3de559 [ 597.086274][ T9520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.086292][ T9520] RSP: 002b:00007f662b636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.086314][ T9520] RAX: ffffffffffffffda RBX: 00007f662d665fa0 RCX: 00007f662d3de559 [ 597.086331][ T9520] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 597.086345][ T9520] RBP: 00007f662d4758b0 R08: 0000000000000000 R09: 0000000000000000 [ 597.086360][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.086373][ T9520] R13: 00007f662d666038 R14: 00007f662d665fa0 R15: 00007ffd44f2d448 [ 597.086410][ T9520] [ 597.311290][ T5743] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 597.408168][ T5743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.408226][ T5743] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 597.455302][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.455332][ T5743] usb 2-1: Product: syz [ 597.455346][ T5743] usb 2-1: Manufacturer: syz [ 597.455360][ T5743] usb 2-1: SerialNumber: syz [ 597.719088][ T5743] usb 2-1: USB disconnect, device number 21 [ 597.759616][ T9535] loop0: detected capacity change from 0 to 4096 [ 597.852402][ T61] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 598.452198][ T9535] loop0: [ 601.262445][ T36] audit: type=1326 audit(1792037868.721:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9551 comm="syz.0.906" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f662d3de559 code=0x0 [ 602.799592][ T9562] program syz.1.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.997852][ T61] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 604.387408][ T5609] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 604.489813][ T6012] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 604.634914][ T6012] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 604.636540][ T6012] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.636594][ T6012] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.636618][ T6012] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 604.636642][ T6012] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.643282][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.643310][ T6012] usb 4-1: Product: syz [ 604.643326][ T6012] usb 4-1: Manufacturer: syz [ 604.643341][ T6012] usb 4-1: SerialNumber: syz [ 605.027703][ T6468] usb 4-1: USB disconnect, device number 26 [ 606.562696][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 606.565782][ T36] audit: type=1326 audit(1792037874.011:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9585 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2034cbe559 code=0x0 [ 606.678397][ T9594] loop0: detected capacity change from 0 to 4096 [ 606.727014][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 606.764521][ T9594] loop0: [ 606.821896][ T9596] syzkaller0: entered promiscuous mode [ 606.821923][ T9596] syzkaller0: entered allmulticast mode [ 606.901435][ T9596] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 606.901460][ T9596] netlink: 'syz.0.924': attribute type 2 has an invalid length. [ 608.607762][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 608.834187][ T201] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 609.009206][ T201] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 609.024097][ T201] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 609.024125][ T201] usb 3-1: config 1 has no interface number 0 [ 609.028251][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.028278][ T201] usb 3-1: Product: syz [ 609.028292][ T201] usb 3-1: Manufacturer: syz [ 609.028307][ T201] usb 3-1: SerialNumber: syz [ 609.060149][ T201] usb 3-1: 3:0 : does not exist [ 609.060173][ T201] usb 3-1: 3:0 : does not exist [ 610.756043][ T36] audit: type=1326 audit(1792037878.261:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.1.935" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85591e559 code=0x0 [ 610.786333][ T9623] syzkaller0: entered promiscuous mode [ 610.786362][ T9623] syzkaller0: entered allmulticast mode [ 610.954382][ T201] usb 3-1: USB disconnect, device number 22 [ 611.050226][ T9623] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 611.050253][ T9623] netlink: 'syz.4.932': attribute type 2 has an invalid length. [ 611.129000][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 611.201276][ T9474] udevd[9474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.934295][ T9653] netlink: 72 bytes leftover after parsing attributes in process `syz.1.941'. [ 615.341319][ T36] audit: type=1326 audit(1792037882.811:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9671 comm="syz.3.946" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdabce559 code=0x0 [ 615.596571][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 615.627887][ T9681] FAULT_INJECTION: forcing a failure. [ 615.627887][ T9681] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 615.627927][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.1.952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 615.627954][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 615.627967][ T9681] Call Trace: [ 615.627976][ T9681] [ 615.627986][ T9681] dump_stack_lvl+0xe8/0x150 [ 615.628025][ T9681] should_fail_ex+0x46b/0x600 [ 615.628064][ T9681] strncpy_from_user+0x36/0x2c0 [ 615.628099][ T9681] __se_sys_add_key+0xdb/0x420 [ 615.628144][ T9681] ? __pfx___se_sys_add_key+0x10/0x10 [ 615.628183][ T9681] ? __x64_sys_add_key+0x20/0xc0 [ 615.628214][ T9681] do_syscall_64+0x166/0x520 [ 615.628244][ T9681] ? trace_irq_disable+0x3b/0x140 [ 615.628272][ T9681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.628294][ T9681] ? clear_bhb_loop+0x70/0xc0 [ 615.628320][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.628341][ T9681] RIP: 0033:0x7fe85591e559 [ 615.628360][ T9681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.628379][ T9681] RSP: 002b:00007fe853b76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 615.628403][ T9681] RAX: ffffffffffffffda RBX: 00007fe855ba5fa0 RCX: 00007fe85591e559 [ 615.628419][ T9681] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000200000000200 [ 615.628434][ T9681] RBP: 00007fe8559b58b0 R08: fffffffffffffffe R09: 0000000000000000 [ 615.628449][ T9681] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 615.628463][ T9681] R13: 00007fe855ba6038 R14: 00007fe855ba5fa0 R15: 00007ffeea3defe8 [ 615.628497][ T9681] [ 618.389607][ T9701] netlink: 72 bytes leftover after parsing attributes in process `syz.1.957'. [ 618.874215][ T5756] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 619.030581][ T5756] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 619.045641][ T5756] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 619.045670][ T5756] usb 4-1: config 1 has no interface number 0 [ 619.070459][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.070488][ T5756] usb 4-1: Product: syz [ 619.070504][ T5756] usb 4-1: Manufacturer: syz [ 619.070519][ T5756] usb 4-1: SerialNumber: syz [ 619.153228][ T5756] usb 4-1: 3:0 : does not exist [ 619.153256][ T5756] usb 4-1: 3:0 : does not exist [ 619.364626][ T5756] usb 4-1: USB disconnect, device number 27 [ 619.442836][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 619.469387][ T9474] udevd[9474]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.190288][ T36] audit: type=1326 audit(1792037888.631:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9728 comm="syz.4.961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f507869e559 code=0x0 [ 621.274099][ T5743] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 621.427996][ T5743] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 621.431764][ T5743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.431881][ T5743] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.466198][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.466228][ T5743] usb 2-1: Product: syz [ 621.466243][ T5743] usb 2-1: Manufacturer: syz [ 621.466262][ T5743] usb 2-1: SerialNumber: syz [ 621.640129][ T61] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 621.804113][ T37] INFO: task kworker/1:1:49 blocked for more than 144 seconds. [ 621.804137][ T37] Not tainted syzkaller #0 [ 621.804146][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.804156][ T37] task:kworker/1:1 state:D stack:21096 pid:49 tgid:49 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 621.804203][ T37] Workqueue: usb_hub_wq hub_event [ 621.804387][ T37] Call Trace: [ 621.804395][ T37] [ 621.804409][ T37] __schedule+0x16d9/0x5700 [ 621.804463][ T37] ? __pfx___schedule+0x10/0x10 [ 621.804497][ T37] ? schedule+0x90/0x2b0 [ 621.804524][ T37] schedule+0x164/0x2b0 [ 621.804552][ T37] schedule_timeout+0xc0/0x2c0 [ 621.804577][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 621.804602][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.804638][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.804665][ T37] ? wait_for_completion+0x272/0x5e0 [ 621.804692][ T37] wait_for_completion+0x2ca/0x5e0 [ 621.804731][ T37] ? __pfx_wait_for_completion+0x10/0x10 [ 621.804764][ T37] ? __flush_work+0x101/0xd70 [ 621.804811][ T37] __flush_work+0x9c2/0xd70 [ 621.804838][ T37] ? __flush_work+0x101/0xd70 [ 621.804872][ T37] ? __pfx___flush_work+0x10/0x10 [ 621.804903][ T37] ? __pfx_wq_barrier_func+0x10/0x10 [ 621.804955][ T37] ? __cancel_work_sync+0x5c/0x110 [ 621.804977][ T37] __cancel_work_sync+0xbf/0x110 [ 621.804998][ T37] mmc_stop_host+0xd9/0x460 [ 621.805092][ T37] mmc_remove_host+0x15/0x60 [ 621.805142][ T37] vub300_disconnect+0x154/0x2f0 [ 621.805227][ T37] usb_unbind_interface+0x295/0x9f0 [ 621.805290][ T37] ? kernfs_remove_by_name_ns+0x101/0x140 [ 621.805314][ T37] ? __pfx_usb_unbind_interface+0x10/0x10 [ 621.805338][ T37] device_release_driver_internal+0x4f5/0x880 [ 621.805424][ T37] bus_remove_device+0x449/0x560 [ 621.805485][ T37] ? __pfx_bus_remove_device+0x10/0x10 [ 621.805995][ T37] ? up_read+0x34/0x180 [ 621.806021][ T37] ? kernfs_remove_by_name_ns+0x101/0x140 [ 621.806044][ T37] device_del+0x528/0x8f0 [ 621.806085][ T37] ? __pfx_device_del+0x10/0x10 [ 621.806108][ T37] ? kobject_put+0x516/0x550 [ 621.806177][ T37] usb_disable_device+0x3d4/0x8d0 [ 621.806212][ T37] usb_disconnect+0x32d/0x990 [ 621.806243][ T37] hub_event+0x1bb7/0x4cf0 [ 621.806275][ T37] ? __lock_acquire+0x747/0x2de0 [ 621.806306][ T37] ? register_lock_class+0x31/0x2e0 [ 621.806363][ T37] ? __pfx_hub_event+0x10/0x10 [ 621.806395][ T37] ? rcu_is_watching+0x16/0xb0 [ 621.806417][ T37] ? process_scheduled_works+0x97a/0x1630 [ 621.806444][ T37] process_scheduled_works+0xc3d/0x1630 [ 621.806503][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.806537][ T37] ? assign_work+0x3cf/0x5d0 [ 621.806568][ T37] worker_thread+0xa47/0xfb0 [ 621.806623][ T37] kthread+0x38b/0x470 [ 621.806644][ T37] ? __pfx_worker_thread+0x10/0x10 [ 621.806669][ T37] ? __pfx_kthread+0x10/0x10 [ 621.806692][ T37] ret_from_fork+0x514/0xb70 [ 621.806716][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 621.806737][ T37] ? __switch_to+0xc89/0x1420 [ 621.806770][ T37] ? __pfx_kthread+0x10/0x10 [ 621.806793][ T37] ret_from_fork_asm+0x1a/0x30 [ 621.806828][ T37] [ 621.806990][ T37] INFO: task kworker/1:3:5610 blocked for more than 144 seconds. [ 621.807008][ T37] Not tainted syzkaller #0 [ 621.807018][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.807028][ T37] task:kworker/1:3 state:D stack:21704 pid:5610 tgid:5610 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 621.807085][ T37] Workqueue: events_freezable mmc_rescan [ 621.807116][ T37] Call Trace: [ 621.807123][ T37] [ 621.807135][ T37] __schedule+0x16d9/0x5700 [ 621.807191][ T37] ? __pfx___schedule+0x10/0x10 [ 621.807227][ T37] ? schedule+0x90/0x2b0 [ 621.807255][ T37] schedule+0x164/0x2b0 [ 621.807283][ T37] schedule_timeout+0xc0/0x2c0 [ 621.807307][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 621.807333][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.807368][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.807395][ T37] ? wait_for_completion+0x272/0x5e0 [ 621.809265][ T37] wait_for_completion+0x2ca/0x5e0 [ 621.809315][ T37] ? __pfx_wait_for_completion+0x10/0x10 [ 621.809343][ T37] ? vub300_mmc_request+0x1000/0x1910 [ 621.809377][ T37] ? trace_mmc_request_start+0x81/0x1e0 [ 621.809406][ T37] mmc_wait_for_req_done+0x37/0x490 [ 621.809436][ T37] ? mmc_start_request+0x202/0x2d0 [ 621.809463][ T37] ? mmc_wait_for_req+0x1b5/0x240 [ 621.809492][ T37] mmc_wait_for_cmd+0x183/0x2a0 [ 621.809516][ T37] ? debug_object_free+0x29c/0x340 [ 621.809541][ T37] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 621.809586][ T37] ? __pfx_mmc_wait_done+0x10/0x10 [ 621.809612][ T37] ? ktime_get+0x1f5/0x220 [ 621.809660][ T37] ? usleep_range_state+0x95/0x180 [ 621.809695][ T37] mmc_go_idle+0x12c/0x2a0 [ 621.809727][ T37] ? __pfx_mmc_go_idle+0x10/0x10 [ 621.809765][ T37] ? mmc_power_up+0x5d/0x650 [ 621.809790][ T37] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 621.809817][ T37] mmc_rescan+0x701/0x1040 [ 621.809861][ T37] ? process_scheduled_works+0x97a/0x1630 [ 621.809888][ T37] process_scheduled_works+0xc3d/0x1630 [ 621.809948][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.809983][ T37] ? assign_work+0x3cf/0x5d0 [ 621.810014][ T37] worker_thread+0xa47/0xfb0 [ 621.810074][ T37] kthread+0x38b/0x470 [ 621.810097][ T37] ? __pfx_worker_thread+0x10/0x10 [ 621.810122][ T37] ? __pfx_kthread+0x10/0x10 [ 621.810145][ T37] ret_from_fork+0x514/0xb70 [ 621.810169][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 621.810191][ T37] ? __switch_to+0xc89/0x1420 [ 621.810222][ T37] ? __pfx_kthread+0x10/0x10 [ 621.810245][ T37] ret_from_fork_asm+0x1a/0x30 [ 621.810283][ T37] [ 621.810347][ T37] [ 621.810347][ T37] Showing all locks held in the system: [ 621.810360][ T37] locks held by khungtaskd/37: 1, last CPU#1: [ 621.810375][ T37] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 621.810433][ T37] locks held by kworker/1:1/49: 5, on CPU#1: [ 621.810447][ T37] #0: ffff88801b738d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.810503][ T37] #1: ffffc90000bb7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.810554][ T37] #2: ffff88802ae8c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 621.810604][ T37] #3: ffff888039dfa210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 621.810652][ T37] #4: ffff8880315bc1d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 621.812579][ T37] locks held by getty/5358: 2, on CPU#1: [ 621.812594][ T37] #0: ffff888036bf20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.812760][ T37] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 621.812820][ T37] locks held by syz-executor/5603: 2, last CPU#0: [ 621.812835][ T37] #0: ffff88802c910510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 621.812893][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 621.812942][ T37] locks held by kworker/1:3/5610: 2, on CPU#1: [ 621.812957][ T37] #0: ffff88813ff2a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.813013][ T37] #1: ffffc90005047c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.813087][ T37] locks held by syz.2.958/9711: 2, last CPU#0: [ 621.813101][ T37] #0: ffff88805e3190b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 621.813158][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: mutex_lock_nested+0xe3/0x1d0 [ 621.813206][ T37] locks held by syz.0.963/9738: 1, on CPU#0: [ 621.813221][ T37] #0: ffff88803b9dc0e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x67/0xa0 [ 621.813279][ T37] locks held by dhcpcd-run-hook/9746: 2, last CPU#1: [ 621.813294][ T37] #0: ffff88802c96ebb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 621.813351][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 621.813405][ T37] [ 621.813411][ T37] ============================================= [ 621.813411][ T37] [ 621.813425][ T37] NMI backtrace for cpu 1 [ 621.813440][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.813462][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.813474][ T37] Call Trace: [ 621.813482][ T37] [ 621.813491][ T37] dump_stack_lvl+0xe8/0x150 [ 621.813521][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 621.813581][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 621.813604][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 621.813629][ T37] sys_info+0x135/0x170 [ 621.813649][ T37] watchdog+0xfd7/0x1030 [ 621.813688][ T37] ? watchdog+0x1c7/0x1030 [ 621.813721][ T37] kthread+0x38b/0x470 [ 621.813742][ T37] ? __pfx_watchdog+0x10/0x10 [ 621.813765][ T37] ? __pfx_kthread+0x10/0x10 [ 621.813787][ T37] ret_from_fork+0x514/0xb70 [ 621.813811][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 621.813831][ T37] ? __switch_to+0xc89/0x1420 [ 621.813862][ T37] ? __pfx_kthread+0x10/0x10 [ 621.813884][ T37] ret_from_fork_asm+0x1a/0x30 [ 621.813918][ T37] [ 621.813953][ T37] Sending NMI from CPU 1 to CPUs 0: [ 621.814027][ C0] NMI backtrace for cpu 0 [ 621.814041][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.814061][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.814072][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x52/0xb0 [ 621.814098][ C0] Code: 44 23 81 fc 0b 00 00 45 09 c1 74 1e 45 85 c0 74 67 81 fa ff ff ff 0f 77 5f 81 e2 00 00 00 0f 75 57 83 b9 2c 17 00 00 00 74 4e <8b> 91 00 17 00 00 83 fa 03 75 43 48 8b 91 08 17 00 00 44 8b 89 04 [ 621.814114][ C0] RSP: 0018:ffffc90000197a08 EFLAGS: 00000046 [ 621.814130][ C0] RAX: ffffffff81b38b7c RBX: 0000000000000086 RCX: ffff88801daf0000 [ 621.814144][ C0] RDX: 8000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.814156][ C0] RBP: ffff8880b84287e8 R08: 0000000000000000 R09: 0000000000000000 [ 621.814167][ C0] R10: dffffc0000000000 R11: fffff52000032f44 R12: ffff8880b84287e8 [ 621.814181][ C0] R13: ffff8880b8428768 R14: ffffffff81b40cad R15: 0000000000000000 [ 621.814194][ C0] FS: 0000000000000000(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 621.814209][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.814221][ C0] CR2: 00002000001f9030 CR3: 000000003f452000 CR4: 00000000003526f0 [ 621.814238][ C0] Call Trace: [ 621.814244][ C0] [ 621.814251][ C0] seqcount_lockdep_reader_access+0xbc/0x100 [ 621.814278][ C0] ktime_get_update_offsets_now+0x5d/0x3e0 [ 621.814310][ C0] __hrtimer_rearm_deferred+0x180/0x4d0 [ 621.814332][ C0] finish_task_switch+0x3df/0xc60 [ 621.814358][ C0] __schedule+0x16e1/0x5700 [ 621.814395][ C0] ? __pfx___schedule+0x10/0x10 [ 621.814422][ C0] ? schedule+0x90/0x2b0 [ 621.814445][ C0] schedule+0x164/0x2b0 [ 621.814468][ C0] smpboot_thread_fn+0x5e2/0xa70 [ 621.814513][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 621.814543][ C0] kthread+0x38b/0x470 [ 621.814566][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 621.814591][ C0] ? __pfx_kthread+0x10/0x10 [ 621.814610][ C0] ret_from_fork+0x514/0xb70 [ 621.814630][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 621.814648][ C0] ? __switch_to+0xc89/0x1420 [ 621.814674][ C0] ? __pfx_kthread+0x10/0x10 [ 621.814692][ C0] ret_from_fork_asm+0x1a/0x30 [ 621.814717][ C0] [ 621.978930][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 622.946551][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 622.956177][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 622.966234][ T37] Call Trace: [ 622.969682][ T37] [ 622.972606][ T37] vpanic+0x56d/0xa60 [ 622.976588][ T37] ? __pfx___schedule+0x10/0x10 [ 622.981442][ T37] ? __pfx_vpanic+0x10/0x10 [ 622.985945][ T37] panic+0xc5/0xd0 [ 622.989677][ T37] ? __pfx_panic+0x10/0x10 [ 622.994191][ T37] ? preempt_schedule_common+0x7f/0xd0 [ 622.999651][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 623.005017][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 623.011179][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 623.017330][ T37] watchdog+0x1030/0x1030 [ 623.021664][ T37] ? watchdog+0x1c7/0x1030 [ 623.026081][ T37] kthread+0x38b/0x470 [ 623.030163][ T37] ? __pfx_watchdog+0x10/0x10 [ 623.034835][ T37] ? __pfx_kthread+0x10/0x10 [ 623.039418][ T37] ret_from_fork+0x514/0xb70 [ 623.044003][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 623.049104][ T37] ? __switch_to+0xc89/0x1420 [ 623.053780][ T37] ? __pfx_kthread+0x10/0x10 [ 623.058446][ T37] ret_from_fork_asm+0x1a/0x30 [ 623.063210][ T37] [ 623.066665][ T37] Kernel Offset: disabled [ 623.070995][ T37] Rebooting in 86400 seconds..